[ { "id": 162160, "urlhaus_id": "3950981", "url": "http://119.189.142.79:50009/i", "host": "119.189.142.79", "host_ip": "119.189.142.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 18:45:14 UTC", "discovered_at": "2026-10-16T18:45:14.000Z" }, { "id": 162161, "urlhaus_id": "3950980", "url": "http://27.215.125.232:60228/bin.sh", "host": "27.215.125.232", "host_ip": "27.215.125.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 18:39:14 UTC", "discovered_at": "2026-10-16T18:39:14.000Z" }, { "id": 162162, "urlhaus_id": "3950979", "url": "http://221.15.174.1:48113/bin.sh", "host": "221.15.174.1", "host_ip": "221.15.174.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 17:46:15 UTC", "discovered_at": "2026-10-16T17:46:15.000Z" }, { "id": 162163, "urlhaus_id": "3950978", "url": "http://119.189.142.79:50009/bin.sh", "host": "119.189.142.79", "host_ip": "119.189.142.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 17:39:36 UTC", "discovered_at": "2026-10-16T17:39:36.000Z" }, { "id": 162164, "urlhaus_id": "3950977", "url": "http://112.236.99.190:33940/i", "host": "112.236.99.190", "host_ip": "112.236.99.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-16 17:36:40 UTC", "discovered_at": "2026-10-16T17:36:40.000Z" }, { "id": 162166, "urlhaus_id": "3950976", "url": "http://222.138.137.53:40846/i", "host": "222.138.137.53", "host_ip": "222.138.137.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 17:32:07 UTC", "discovered_at": "2026-10-16T17:32:07.000Z" }, { "id": 162165, "urlhaus_id": "3950975", "url": "http://222.137.142.48:45402/i", "host": "222.137.142.48", "host_ip": "222.137.142.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 17:32:07 UTC", "discovered_at": "2026-10-16T17:32:07.000Z" }, { "id": 162167, "urlhaus_id": "3950974", "url": "http://59.97.252.217:53607/i", "host": "59.97.252.217", "host_ip": "59.97.252.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 17:17:09 UTC", "discovered_at": "2026-10-16T17:17:09.000Z" }, { "id": 162168, "urlhaus_id": "3950973", "url": "http://222.140.182.244:54878/i", "host": "222.140.182.244", "host_ip": "222.140.182.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 17:17:07 UTC", "discovered_at": "2026-10-16T17:17:07.000Z" }, { "id": 162169, "urlhaus_id": "3950972", "url": "http://222.141.101.135:40830/bin.sh", "host": "222.141.101.135", "host_ip": "222.141.101.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 17:17:06 UTC", "discovered_at": "2026-10-16T17:17:06.000Z" }, { "id": 162170, "urlhaus_id": "3950971", "url": "http://123.13.118.252:41167/i", "host": "123.13.118.252", "host_ip": "123.13.118.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 17:10:18 UTC", "discovered_at": "2026-10-16T17:10:18.000Z" }, { "id": 162171, "urlhaus_id": "3950970", "url": "http://42.58.89.0:51202/bin.sh", "host": "42.58.89.0", "host_ip": "42.58.89.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:47:09 UTC", "discovered_at": "2026-10-16T16:47:09.000Z" }, { "id": 162173, "urlhaus_id": "3950969", "url": "http://115.57.180.72:37087/i", "host": "115.57.180.72", "host_ip": "115.57.180.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:47:07 UTC", "discovered_at": "2026-10-16T16:47:07.000Z" }, { "id": 162172, "urlhaus_id": "3950968", "url": "http://105.225.46.164:41859/i", "host": "105.225.46.164", "host_ip": "105.225.46.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:47:07 UTC", "discovered_at": "2026-10-16T16:47:07.000Z" }, { "id": 162175, "urlhaus_id": "3950967", "url": "http://115.58.124.116:48872/bin.sh", "host": "115.58.124.116", "host_ip": "115.58.124.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:47:06 UTC", "discovered_at": "2026-10-16T16:47:06.000Z" }, { "id": 162174, "urlhaus_id": "3950966", "url": "http://115.56.103.148:47507/i", "host": "115.56.103.148", "host_ip": "115.56.103.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:47:06 UTC", "discovered_at": "2026-10-16T16:47:06.000Z" }, { "id": 162176, "urlhaus_id": "3950965", "url": "http://124.92.174.228:48261/i", "host": "124.92.174.228", "host_ip": "124.92.174.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:32:09 UTC", "discovered_at": "2026-10-16T16:32:09.000Z" }, { "id": 162177, "urlhaus_id": "3950964", "url": "http://125.44.18.57:42027/i", "host": "125.44.18.57", "host_ip": "125.44.18.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:32:07 UTC", "discovered_at": "2026-10-16T16:32:07.000Z" }, { "id": 162178, "urlhaus_id": "3950963", "url": "http://222.241.232.126:50704/i", "host": "222.241.232.126", "host_ip": "222.241.232.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 16:25:20 UTC", "discovered_at": "2026-10-16T16:25:20.000Z" }, { "id": 162179, "urlhaus_id": "3950962", "url": "http://103.87.194.109:43848/i", "host": "103.87.194.109", "host_ip": "103.87.194.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:17:07 UTC", "discovered_at": "2026-10-16T16:17:07.000Z" }, { "id": 162180, "urlhaus_id": "3950961", "url": "http://103.172.186.194:56184/i", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 16:02:06 UTC", "discovered_at": "2026-10-16T16:02:06.000Z" }, { "id": 162181, "urlhaus_id": "3950960", "url": "http://171.104.126.3:51926/i", "host": "171.104.126.3", "host_ip": "171.104.126.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:32:08 UTC", "discovered_at": "2026-10-16T15:32:08.000Z" }, { "id": 162182, "urlhaus_id": "3950959", "url": "http://42.224.66.179:60764/i", "host": "42.224.66.179", "host_ip": "42.224.66.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:32:07 UTC", "discovered_at": "2026-10-16T15:32:07.000Z" }, { "id": 162183, "urlhaus_id": "3950958", "url": "https://kst.omsules.life/DvnX.zip", "host": "kst.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-16 15:27:20 UTC", "discovered_at": "2026-10-16T15:27:20.000Z" }, { "id": 162184, "urlhaus_id": "3950957", "url": "https://cdn.discordapp.com/attachments/1560033976452784208/1560656548278177812/bundle.zip?ex=6ad3822c&is=6ad230ac&hm=53dfa7848e3a1fa67f3690161a896479b127d0186f6d8535dd8756065f9dddfb&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 15:27:19 UTC", "discovered_at": "2026-10-16T15:27:19.000Z" }, { "id": 162186, "urlhaus_id": "3950956", "url": "https://cdn.discordapp.com/attachments/1559625975262617600/1560662897582153798/bundle_1.zip?ex=6ad38816&is=6ad23696&hm=8b766e9e7dcbf6c140d7c942abfaddb52356c0668b1b4610d20c665ac47443ae&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 15:27:16 UTC", "discovered_at": "2026-10-16T15:27:16.000Z" }, { "id": 162185, "urlhaus_id": "3950955", "url": "https://download2285.mediafire.com/60uankbt9fbgdacCZEFgAL6YykiqvvqcZM4ew4SBaQm_7yp4fTehOjy7mcM5Y7QtjUUZ4wHIi4ja6ebpmqihU5bJnBAeOueI-UEz3AJgoy32nGHN4t5oA7pmmQwYQExcsAXqGIWVG4HIVgZUMf8QN5_JJJrWXp2DN3IUVMo-ga8/lab6d0dpgben23e/Xeno.zip", "host": "download2285.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-7896934791, stealer", "last_online": null, "first_seen": "2026-10-16 15:27:16 UTC", "discovered_at": "2026-10-16T15:27:16.000Z" }, { "id": 162188, "urlhaus_id": "3950954", "url": "https://download2337.mediafire.com/ebtnfxnpb8jgtgRI0XvNnpnd-cFL9gNhLZWMh9JzanGhaxWnXmgFawTVKfNtuWfA_C6a0iPbxCXAkf9nH25orm2J138Qmqs7j2DqxCPnJbX2ZP1rf1f628OBFYf47G1Gjhq_3jOVmtCxtKgE02Eod1ho4OUyOsLKDFG5r2Lkx0g/ji9z4ydmt3te4e1/KiddonsM%D0%BEdMenu.zip", "host": "download2337.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-kiddonsmodmenu, stealer", "last_online": null, "first_seen": "2026-10-16 15:26:32 UTC", "discovered_at": "2026-10-16T15:26:32.000Z" }, { "id": 162187, "urlhaus_id": "3950953", "url": "http://163.142.93.136:55570/bin.sh", "host": "163.142.93.136", "host_ip": "163.142.93.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 15:26:32 UTC", "discovered_at": "2026-10-16T15:26:32.000Z" }, { "id": 162189, "urlhaus_id": "3950952", "url": "https://cdn.discordapp.com/attachments/1560335003827830834/1560638070355918919/bundle.zip?ex=6ad370f7&is=6ad21f77&hm=066736990e6ab8ce348db0cd69cc3fe19daa6208c4f0d140d88e4cc0b075ef11&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 15:26:19 UTC", "discovered_at": "2026-10-16T15:26:19.000Z" }, { "id": 162190, "urlhaus_id": "3950951", "url": "https://exec-roblox.info/uploads/B%D0%BE%D0%BEts%D0%B5%D1%85%D0%B5%D1%8164.zip", "host": "exec-roblox.info", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-exec, stealer", "last_online": null, "first_seen": "2026-10-16 15:26:18 UTC", "discovered_at": "2026-10-16T15:26:18.000Z" }, { "id": 162191, "urlhaus_id": "3950950", "url": "https://epstexsecutor.com/uploads/download.zip", "host": "epstexsecutor.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-123, stealer", "last_online": null, "first_seen": "2026-10-16 15:26:17 UTC", "discovered_at": "2026-10-16T15:26:17.000Z" }, { "id": 162193, "urlhaus_id": "3950949", "url": "http://167.148.201.191/80959", "host": "167.148.201.191", "host_ip": "167.148.201.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:26:11 UTC", "discovered_at": "2026-10-16T15:26:11.000Z" }, { "id": 162192, "urlhaus_id": "3950948", "url": "https://dreambot.info/DreamBot.jar", "host": "dreambot.info", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Loader, runelure, stealer", "last_online": null, "first_seen": "2026-10-16 15:26:11 UTC", "discovered_at": "2026-10-16T15:26:11.000Z" }, { "id": 162195, "urlhaus_id": "3950947", "url": "http://42.56.135.154:45244/i", "host": "42.56.135.154", "host_ip": "42.56.135.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:17:07 UTC", "discovered_at": "2026-10-16T15:17:07.000Z" }, { "id": 162194, "urlhaus_id": "3950946", "url": "http://42.52.203.102:35206/i", "host": "42.52.203.102", "host_ip": "42.52.203.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:17:07 UTC", "discovered_at": "2026-10-16T15:17:07.000Z" }, { "id": 162196, "urlhaus_id": "3950945", "url": "http://42.52.203.102:35206/bin.sh", "host": "42.52.203.102", "host_ip": "42.52.203.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 15:17:06 UTC", "discovered_at": "2026-10-16T15:17:06.000Z" }, { "id": 162197, "urlhaus_id": "3950944", "url": "http://163.142.93.136:55570/i", "host": "163.142.93.136", "host_ip": "163.142.93.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 14:50:31 UTC", "discovered_at": "2026-10-16T14:50:31.000Z" }, { "id": 162198, "urlhaus_id": "3950943", "url": "http://182.119.12.51:40031/i", "host": "182.119.12.51", "host_ip": "182.119.12.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:47:05 UTC", "discovered_at": "2026-10-16T14:47:05.000Z" }, { "id": 162200, "urlhaus_id": "3950942", "url": "http://42.238.71.29:57701/i", "host": "42.238.71.29", "host_ip": "42.238.71.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:32:11 UTC", "discovered_at": "2026-10-16T14:32:11.000Z" }, { "id": 162199, "urlhaus_id": "3950941", "url": "http://42.55.12.122:57818/bin.sh", "host": "42.55.12.122", "host_ip": "42.55.12.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:32:11 UTC", "discovered_at": "2026-10-16T14:32:11.000Z" }, { "id": 162201, "urlhaus_id": "3950940", "url": "http://45.170.224.217:54091/i", "host": "45.170.224.217", "host_ip": "45.170.224.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 14:27:17 UTC", "discovered_at": "2026-10-16T14:27:17.000Z" }, { "id": 162202, "urlhaus_id": "3950939", "url": "http://216.126.86.205:47333/i", "host": "216.126.86.205", "host_ip": "216.126.86.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:17:18 UTC", "discovered_at": "2026-10-16T14:17:18.000Z" }, { "id": 162203, "urlhaus_id": "3950938", "url": "http://47.236.161.8:8281/linux", "host": "47.236.161.8", "host_ip": "47.236.161.8", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:09:24 UTC", "discovered_at": "2026-10-16T14:09:24.000Z" }, { "id": 162204, "urlhaus_id": "3950937", "url": "https://filebin.net/archive/6vak0cg8n6khu9xd/zip", "host": "filebin.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 14:01:06 UTC", "discovered_at": "2026-10-16T14:01:06.000Z" }, { "id": 162205, "urlhaus_id": "3950936", "url": "http://45.170.224.217:54091/bin.sh", "host": "45.170.224.217", "host_ip": "45.170.224.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 13:59:18 UTC", "discovered_at": "2026-10-16T13:59:18.000Z" }, { "id": 162206, "urlhaus_id": "3950935", "url": "http://219.155.202.252:42983/i", "host": "219.155.202.252", "host_ip": "219.155.202.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 13:47:06 UTC", "discovered_at": "2026-10-16T13:47:06.000Z" }, { "id": 162207, "urlhaus_id": "3950934", "url": "http://103.19.49.134:37431/bin.sh", "host": "103.19.49.134", "host_ip": "103.19.49.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 13:02:07 UTC", "discovered_at": "2026-10-16T13:02:07.000Z" }, { "id": 162208, "urlhaus_id": "3950933", "url": "http://42.235.91.212:50078/bin.sh", "host": "42.235.91.212", "host_ip": "42.235.91.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 12:47:11 UTC", "discovered_at": "2026-10-16T12:47:11.000Z" }, { "id": 162209, "urlhaus_id": "3950932", "url": "http://42.237.44.123:57470/i", "host": "42.237.44.123", "host_ip": "42.237.44.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:47:07 UTC", "discovered_at": "2026-10-16T12:47:07.000Z" }, { "id": 162211, "urlhaus_id": "3950931", "url": "http://60.214.241.229:46912/i", "host": "60.214.241.229", "host_ip": "60.214.241.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:32:08 UTC", "discovered_at": "2026-10-16T12:32:08.000Z" }, { "id": 162210, "urlhaus_id": "3950930", "url": "http://60.23.179.155:39285/i", "host": "60.23.179.155", "host_ip": "60.23.179.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:32:08 UTC", "discovered_at": "2026-10-16T12:32:08.000Z" }, { "id": 162212, "urlhaus_id": "3950929", "url": "http://123.8.57.120:59734/i", "host": "123.8.57.120", "host_ip": "123.8.57.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-16 12:21:13 UTC", "discovered_at": "2026-10-16T12:21:13.000Z" }, { "id": 162213, "urlhaus_id": "3950928", "url": "http://59.97.250.175:52934/i", "host": "59.97.250.175", "host_ip": "59.97.250.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:18:08 UTC", "discovered_at": "2026-10-16T12:18:08.000Z" }, { "id": 162214, "urlhaus_id": "3950927", "url": "http://59.96.142.200:50954/i", "host": "59.96.142.200", "host_ip": "59.96.142.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:17:08 UTC", "discovered_at": "2026-10-16T12:17:08.000Z" }, { "id": 162215, "urlhaus_id": "3950926", "url": "http://175.146.210.83:59201/i", "host": "175.146.210.83", "host_ip": "175.146.210.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 12:12:18 UTC", "discovered_at": "2026-10-16T12:12:18.000Z" }, { "id": 162216, "urlhaus_id": "3950925", "url": "http://115.62.184.49:34880/bin.sh", "host": "115.62.184.49", "host_ip": "115.62.184.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 12:04:32 UTC", "discovered_at": "2026-10-16T12:04:32.000Z" }, { "id": 162217, "urlhaus_id": "3950924", "url": "http://79.40.9.54:46856/i", "host": "79.40.9.54", "host_ip": "79.40.9.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:02:38 UTC", "discovered_at": "2026-10-16T12:02:38.000Z" }, { "id": 162218, "urlhaus_id": "3950923", "url": "http://182.116.15.211:52271/bin.sh", "host": "182.116.15.211", "host_ip": "182.116.15.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 12:02:08 UTC", "discovered_at": "2026-10-16T12:02:08.000Z" }, { "id": 162219, "urlhaus_id": "3950922", "url": "http://82.114.178.6:58035/bin.sh", "host": "82.114.178.6", "host_ip": "82.114.178.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 12:01:16 UTC", "discovered_at": "2026-10-16T12:01:16.000Z" }, { "id": 162220, "urlhaus_id": "3950921", "url": "https://cdn.discordapp.com/attachments/1519428468599951424/1560609388643749898/bundle_2.zip?ex=6ad35640&is=6ad204c0&hm=cb9fbf17c2878b6412f8eefc3829665eefecdf4b00da43aea25530480fc6c64e&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 11:50:33 UTC", "discovered_at": "2026-10-16T11:50:33.000Z" }, { "id": 162221, "urlhaus_id": "3950920", "url": "http://117.40.68.183:34273/bin.sh", "host": "117.40.68.183", "host_ip": "117.40.68.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 11:50:30 UTC", "discovered_at": "2026-10-16T11:50:30.000Z" }, { "id": 162222, "urlhaus_id": "3950919", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/FPsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:50:07 UTC", "discovered_at": "2026-10-16T11:50:07.000Z" }, { "id": 162224, "urlhaus_id": "3950918", "url": "http://178.141.18.236:33626/i", "host": "178.141.18.236", "host_ip": "178.141.18.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:47:07 UTC", "discovered_at": "2026-10-16T11:47:07.000Z" }, { "id": 162223, "urlhaus_id": "3950917", "url": "http://83.228.109.209:33648/i", "host": "83.228.109.209", "host_ip": "83.228.109.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:47:07 UTC", "discovered_at": "2026-10-16T11:47:07.000Z" }, { "id": 162225, "urlhaus_id": "3950916", "url": "http://58.208.136.102:3588/i", "host": "58.208.136.102", "host_ip": "58.208.136.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 11:27:19 UTC", "discovered_at": "2026-10-16T11:27:19.000Z" }, { "id": 162226, "urlhaus_id": "3950915", "url": "http://175.173.80.97:50719/i", "host": "175.173.80.97", "host_ip": "175.173.80.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 11:17:30 UTC", "discovered_at": "2026-10-16T11:17:30.000Z" }, { "id": 162227, "urlhaus_id": "3950914", "url": "http://105.225.64.106:51643/bin.sh", "host": "105.225.64.106", "host_ip": "105.225.64.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:17:06 UTC", "discovered_at": "2026-10-16T11:17:06.000Z" }, { "id": 162228, "urlhaus_id": "3950913", "url": "http://103.19.49.134:37431/i", "host": "103.19.49.134", "host_ip": "103.19.49.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:03:07 UTC", "discovered_at": "2026-10-16T11:03:07.000Z" }, { "id": 162229, "urlhaus_id": "3950912", "url": "http://180.149.219.213:38645/i", "host": "180.149.219.213", "host_ip": "180.149.219.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 11:02:07 UTC", "discovered_at": "2026-10-16T11:02:07.000Z" }, { "id": 162230, "urlhaus_id": "3950911", "url": "https://cdn.discordapp.com/attachments/1547710119960252437/1560338083763986483/bundle.zip?ex=6ad25994&is=6ad10814&hm=f4a36d7a4f14fb8800499fa9fffeb8b082cf2127db775c601dec42b49a573474&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:52 UTC", "discovered_at": "2026-10-16T10:50:52.000Z" }, { "id": 162231, "urlhaus_id": "3950910", "url": "https://cdn.discordapp.com/attachments/1559223274288713738/1560457391433060432/bundle.zip?ex=6ad2c8b2&is=6ad17732&hm=8ff43d5336ebb70a80c7f9de77aa39606c42d7955178679b375d3b4fca33ad06&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:40 UTC", "discovered_at": "2026-10-16T10:50:40.000Z" }, { "id": 162232, "urlhaus_id": "3950909", "url": "https://cdn.discordapp.com/attachments/1558584819267412038/1560294290767478965/bundle.zip?ex=6ad230cb&is=6ad0df4b&hm=1bb32a99846de97b638781c36dafa178727d543eeb9f1d5185b834464f480fd4&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:26 UTC", "discovered_at": "2026-10-16T10:50:26.000Z" }, { "id": 162233, "urlhaus_id": "3950908", "url": "https://cdn.discordapp.com/attachments/1557740644179517531/1560598231719743639/bundle.zip?ex=6ad34bdc&is=6ad1fa5c&hm=ba7473688cdaf3172f3046c5a553fdfdf74a4c0e8ad527f9d95f1a2d0fbbad87&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:25 UTC", "discovered_at": "2026-10-16T10:50:25.000Z" }, { "id": 162236, "urlhaus_id": "3950907", "url": "http://23.160.56.223/new.sh", "host": "23.160.56.223", "host_ip": "23.160.56.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 10:50:09 UTC", "discovered_at": "2026-10-16T10:50:09.000Z" }, { "id": 162235, "urlhaus_id": "3950906", "url": "http://220.191.125.250:48161/bin.sh", "host": "220.191.125.250", "host_ip": "220.191.125.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-16 10:50:09 UTC", "discovered_at": "2026-10-16T10:50:09.000Z" }, { "id": 162234, "urlhaus_id": "3950905", "url": "http://37.34.181.111:53143/bin.sh", "host": "37.34.181.111", "host_ip": "37.34.181.111", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-16 10:50:09 UTC", "discovered_at": "2026-10-16T10:50:09.000Z" }, { "id": 162237, "urlhaus_id": "3950904", "url": "https://tribot.co.uk/Mina.jar", "host": "tribot.co.uk", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, runelure, xmrig", "last_online": null, "first_seen": "2026-10-16 10:50:08 UTC", "discovered_at": "2026-10-16T10:50:08.000Z" }, { "id": 162239, "urlhaus_id": "3950903", "url": "https://cdn.discordapp.com/attachments/1560044170599731202/1560044268515491890/bundle.zip?ex=6ad147f1&is=6acff671&hm=dceaa64eba1ccfcbd97e3e682461449d930a26201aa03260eadb5a8a056ef723&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:07 UTC", "discovered_at": "2026-10-16T10:50:07.000Z" }, { "id": 162238, "urlhaus_id": "3950902", "url": "https://cdn.discordapp.com/attachments/1559625975262617600/1559629592422125628/bundle.zip?ex=6acfc5bf&is=6ace743f&hm=3de5df75df58da3c7fd212f355d7a4b8ab4ad7db064e94d6598c9c4d7a4f395c&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:07 UTC", "discovered_at": "2026-10-16T10:50:07.000Z" }, { "id": 162240, "urlhaus_id": "3950901", "url": "https://cdn.discordapp.com/attachments/1558076945571512441/1560112093611434094/bundle.zip?ex=6ad1871c&is=6ad0359c&hm=926575998512a186d00f9c706381a93fe81a4480f66aeecd6b3e98d7f10b9221&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 10:50:06 UTC", "discovered_at": "2026-10-16T10:50:06.000Z" }, { "id": 162241, "urlhaus_id": "3950900", "url": "http://62.60.226.140/files/8614381788/Ju5y7TH.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-16 10:49:07 UTC", "discovered_at": "2026-10-16T10:49:07.000Z" }, { "id": 162242, "urlhaus_id": "3950899", "url": "http://42.238.139.12:50347/bin.sh", "host": "42.238.139.12", "host_ip": "42.238.139.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:48:08 UTC", "discovered_at": "2026-10-16T10:48:08.000Z" }, { "id": 162243, "urlhaus_id": "3950898", "url": "http://42.237.44.123:57470/bin.sh", "host": "42.237.44.123", "host_ip": "42.237.44.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:47:07 UTC", "discovered_at": "2026-10-16T10:47:07.000Z" }, { "id": 162244, "urlhaus_id": "3950897", "url": "http://41.248.22.74:58977/i", "host": "41.248.22.74", "host_ip": "41.248.22.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 10:32:24 UTC", "discovered_at": "2026-10-16T10:32:24.000Z" }, { "id": 162245, "urlhaus_id": "3950896", "url": "http://103.126.201.130:59221/i", "host": "103.126.201.130", "host_ip": "103.126.201.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:17:06 UTC", "discovered_at": "2026-10-16T10:17:06.000Z" }, { "id": 162247, "urlhaus_id": "3950895", "url": "http://221.14.17.75:51621/i", "host": "221.14.17.75", "host_ip": "221.14.17.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:02:08 UTC", "discovered_at": "2026-10-16T10:02:08.000Z" }, { "id": 162246, "urlhaus_id": "3950894", "url": "http://222.141.74.123:44870/i", "host": "222.141.74.123", "host_ip": "222.141.74.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:02:08 UTC", "discovered_at": "2026-10-16T10:02:08.000Z" }, { "id": 162250, "urlhaus_id": "3950893", "url": "http://105.184.76.124:56995/i", "host": "105.184.76.124", "host_ip": "105.184.76.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:02:07 UTC", "discovered_at": "2026-10-16T10:02:07.000Z" }, { "id": 162249, "urlhaus_id": "3950892", "url": "http://222.127.60.98:59083/i", "host": "222.127.60.98", "host_ip": "222.127.60.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:02:07 UTC", "discovered_at": "2026-10-16T10:02:07.000Z" }, { "id": 162248, "urlhaus_id": "3950891", "url": "http://222.142.221.213:36728/bin.sh", "host": "222.142.221.213", "host_ip": "222.142.221.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 10:02:07 UTC", "discovered_at": "2026-10-16T10:02:07.000Z" }, { "id": 162252, "urlhaus_id": "3950890", "url": "http://115.61.115.242:58374/bin.sh", "host": "115.61.115.242", "host_ip": "115.61.115.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:47:06 UTC", "discovered_at": "2026-10-16T09:47:06.000Z" }, { "id": 162251, "urlhaus_id": "3950889", "url": "http://218.61.29.103:58879/i", "host": "218.61.29.103", "host_ip": "218.61.29.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:47:06 UTC", "discovered_at": "2026-10-16T09:47:06.000Z" }, { "id": 162253, "urlhaus_id": "3950888", "url": "http://182.117.119.237:60350/bin.sh", "host": "182.117.119.237", "host_ip": "182.117.119.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:33:07 UTC", "discovered_at": "2026-10-16T09:33:07.000Z" }, { "id": 162254, "urlhaus_id": "3950887", "url": "http://218.61.29.103:58879/bin.sh", "host": "218.61.29.103", "host_ip": "218.61.29.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:32:07 UTC", "discovered_at": "2026-10-16T09:32:07.000Z" }, { "id": 162255, "urlhaus_id": "3950886", "url": "http://182.127.111.173:40844/bin.sh", "host": "182.127.111.173", "host_ip": "182.127.111.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:32:06 UTC", "discovered_at": "2026-10-16T09:32:06.000Z" }, { "id": 162256, "urlhaus_id": "3950885", "url": "http://105.225.25.212:47629/bin.sh", "host": "105.225.25.212", "host_ip": "105.225.25.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:17:07 UTC", "discovered_at": "2026-10-16T09:17:07.000Z" }, { "id": 162257, "urlhaus_id": "3950884", "url": "http://219.155.202.252:42983/bin.sh", "host": "219.155.202.252", "host_ip": "219.155.202.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 09:02:06 UTC", "discovered_at": "2026-10-16T09:02:06.000Z" }, { "id": 162258, "urlhaus_id": "3950883", "url": "https://haven-post.com/f/zh2s2xptaamrnzpdyiq0ng/vj1ury4s", "host": "haven-post.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Amos, ClickFix, Foxveil, Mach-O, macOS, ua-curl", "last_online": null, "first_seen": "2026-10-16 08:49:18 UTC", "discovered_at": "2026-10-16T08:49:18.000Z" }, { "id": 162259, "urlhaus_id": "3950882", "url": "https://haven-post.com/curl/3evg00amsb/jx4r0tn568o5n8sm58.json", "host": "haven-post.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Amos, ClickFix, Foxveil, macOS, ua-curl, zsh", "last_online": null, "first_seen": "2026-10-16 08:49:13 UTC", "discovered_at": "2026-10-16T08:49:13.000Z" }, { "id": 162260, "urlhaus_id": "3950881", "url": "http://105.225.64.106:51643/i", "host": "105.225.64.106", "host_ip": "105.225.64.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 08:47:13 UTC", "discovered_at": "2026-10-16T08:47:13.000Z" }, { "id": 162264, "urlhaus_id": "3950880", "url": "http://45.135.193.209/i586", "host": "45.135.193.209", "host_ip": "45.135.193.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 08:32:24 UTC", "discovered_at": "2026-10-16T08:32:24.000Z" }, { "id": 162263, "urlhaus_id": "3950879", "url": "http://45.135.193.209/i486", "host": "45.135.193.209", "host_ip": "45.135.193.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 08:32:24 UTC", "discovered_at": "2026-10-16T08:32:24.000Z" }, { "id": 162262, "urlhaus_id": "3950878", "url": "http://45.135.193.209/arm7", "host": "45.135.193.209", "host_ip": "45.135.193.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 08:32:24 UTC", "discovered_at": "2026-10-16T08:32:24.000Z" }, { "id": 162261, "urlhaus_id": "3950877", "url": "http://45.135.193.209/arm5", "host": "45.135.193.209", "host_ip": "45.135.193.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 08:32:24 UTC", "discovered_at": "2026-10-16T08:32:24.000Z" }, { "id": 162265, "urlhaus_id": "3950876", "url": "http://45.135.193.209/x86", "host": "45.135.193.209", "host_ip": "45.135.193.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 08:32:20 UTC", "discovered_at": "2026-10-16T08:32:20.000Z" }, { "id": 162266, "urlhaus_id": "3950875", "url": "http://105.184.168.190:52387/i", "host": "105.184.168.190", "host_ip": "105.184.168.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 08:17:09 UTC", "discovered_at": "2026-10-16T08:17:09.000Z" }, { "id": 162268, "urlhaus_id": "3950874", "url": "http://42.239.231.145:50944/i", "host": "42.239.231.145", "host_ip": "42.239.231.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 08:02:07 UTC", "discovered_at": "2026-10-16T08:02:07.000Z" }, { "id": 162267, "urlhaus_id": "3950873", "url": "http://42.238.139.238:54491/bin.sh", "host": "42.238.139.238", "host_ip": "42.238.139.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 08:02:07 UTC", "discovered_at": "2026-10-16T08:02:07.000Z" }, { "id": 162269, "urlhaus_id": "3950872", "url": "http://42.227.203.38:54878/bin.sh", "host": "42.227.203.38", "host_ip": "42.227.203.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips", "last_online": null, "first_seen": "2026-10-16 07:58:18 UTC", "discovered_at": "2026-10-16T07:58:18.000Z" }, { "id": 162270, "urlhaus_id": "3950871", "url": "http://119.184.8.229:39267/i", "host": "119.184.8.229", "host_ip": "119.184.8.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 07:53:35 UTC", "discovered_at": "2026-10-16T07:53:35.000Z" }, { "id": 162273, "urlhaus_id": "3950870", "url": "http://42.224.10.16:32822/i", "host": "42.224.10.16", "host_ip": "42.224.10.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:47:09 UTC", "discovered_at": "2026-10-16T07:47:09.000Z" }, { "id": 162272, "urlhaus_id": "3950869", "url": "http://125.41.2.138:58809/bin.sh", "host": "125.41.2.138", "host_ip": "125.41.2.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:47:09 UTC", "discovered_at": "2026-10-16T07:47:09.000Z" }, { "id": 162271, "urlhaus_id": "3950868", "url": "http://105.224.29.86:35259/i", "host": "105.224.29.86", "host_ip": "105.224.29.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:47:09 UTC", "discovered_at": "2026-10-16T07:47:09.000Z" }, { "id": 162274, "urlhaus_id": "3950867", "url": "http://115.51.92.255:49190/i", "host": "115.51.92.255", "host_ip": "115.51.92.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:47:08 UTC", "discovered_at": "2026-10-16T07:47:08.000Z" }, { "id": 162275, "urlhaus_id": "3950866", "url": "http://105.184.120.172:43511/i", "host": "105.184.120.172", "host_ip": "105.184.120.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:32:13 UTC", "discovered_at": "2026-10-16T07:32:13.000Z" }, { "id": 162276, "urlhaus_id": "3950865", "url": "http://138.204.196.244:57205/i", "host": "138.204.196.244", "host_ip": "138.204.196.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:32:12 UTC", "discovered_at": "2026-10-16T07:32:12.000Z" }, { "id": 162277, "urlhaus_id": "3950864", "url": "http://42.234.167.165:42616/bin.sh", "host": "42.234.167.165", "host_ip": "42.234.167.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 07:27:41 UTC", "discovered_at": "2026-10-16T07:27:41.000Z" }, { "id": 162278, "urlhaus_id": "3950863", "url": "http://171.213.198.0:41971/i", "host": "171.213.198.0", "host_ip": "171.213.198.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 07:22:34 UTC", "discovered_at": "2026-10-16T07:22:34.000Z" }, { "id": 162281, "urlhaus_id": "3950862", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/UGTsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:05:14 UTC", "discovered_at": "2026-10-16T07:05:14.000Z" }, { "id": 162280, "urlhaus_id": "3950861", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/DEsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:05:14 UTC", "discovered_at": "2026-10-16T07:05:14.000Z" }, { "id": 162279, "urlhaus_id": "3950860", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/1313secured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:05:14 UTC", "discovered_at": "2026-10-16T07:05:14.000Z" }, { "id": 162283, "urlhaus_id": "3950859", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/DTsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:05:12 UTC", "discovered_at": "2026-10-16T07:05:12.000Z" }, { "id": 162282, "urlhaus_id": "3950858", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/KPsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:05:12 UTC", "discovered_at": "2026-10-16T07:05:12.000Z" }, { "id": 162285, "urlhaus_id": "3950857", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/secured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:04:09 UTC", "discovered_at": "2026-10-16T07:04:09.000Z" }, { "id": 162284, "urlhaus_id": "3950856", "url": "https://vtivision-fi.com/suzxwgr/afwugem/aimxfrz/ojsecured_stub.ps1", "host": "vtivision-fi.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-16 07:04:09 UTC", "discovered_at": "2026-10-16T07:04:09.000Z" }, { "id": 162286, "urlhaus_id": "3950855", "url": "https://drive.google.com/uc?export=download&id=1zejSPyWGejAr5gTQViaOKk7CxyIA7XWY", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-16 07:03:12 UTC", "discovered_at": "2026-10-16T07:03:12.000Z" }, { "id": 162287, "urlhaus_id": "3950854", "url": "https://drive.google.com/uc?export=download&id=10ICemtxdkr_yOgc4NZiDkbkzOwJddq22", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-16 07:03:10 UTC", "discovered_at": "2026-10-16T07:03:10.000Z" }, { "id": 162288, "urlhaus_id": "3950853", "url": "http://175.165.82.203:59615/i", "host": "175.165.82.203", "host_ip": "175.165.82.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:02:23 UTC", "discovered_at": "2026-10-16T07:02:23.000Z" }, { "id": 162289, "urlhaus_id": "3950852", "url": "http://175.149.85.227:46495/i", "host": "175.149.85.227", "host_ip": "175.149.85.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 07:02:22 UTC", "discovered_at": "2026-10-16T07:02:22.000Z" }, { "id": 162290, "urlhaus_id": "3950851", "url": "http://42.228.247.58:49878/bin.sh", "host": "42.228.247.58", "host_ip": "42.228.247.58", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 06:59:34 UTC", "discovered_at": "2026-10-16T06:59:34.000Z" }, { "id": 162294, "urlhaus_id": "3950850", "url": "http://5.83.136.39:8080/s390x", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:21 UTC", "discovered_at": "2026-10-16T06:36:21.000Z" }, { "id": 162293, "urlhaus_id": "3950849", "url": "http://5.83.136.39:8080/mipsle", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:21 UTC", "discovered_at": "2026-10-16T06:36:21.000Z" }, { "id": 162292, "urlhaus_id": "3950848", "url": "http://5.83.136.39:8080/ppc64le", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:21 UTC", "discovered_at": "2026-10-16T06:36:21.000Z" }, { "id": 162291, "urlhaus_id": "3950847", "url": "http://5.83.136.39:8080/riscv64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:21 UTC", "discovered_at": "2026-10-16T06:36:21.000Z" }, { "id": 162301, "urlhaus_id": "3950846", "url": "http://5.83.136.39:8080/mipsel", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162300, "urlhaus_id": "3950845", "url": "http://5.83.136.39:8080/armv7", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162299, "urlhaus_id": "3950844", "url": "http://5.83.136.39:8080/mips64el", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162298, "urlhaus_id": "3950843", "url": "http://5.83.136.39:8080/arm64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162297, "urlhaus_id": "3950842", "url": "http://5.83.136.39:8080/armhf", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162296, "urlhaus_id": "3950841", "url": "http://5.83.136.39:8080/amd64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162295, "urlhaus_id": "3950840", "url": "http://5.83.136.39:8080/armv6", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:20 UTC", "discovered_at": "2026-10-16T06:36:20.000Z" }, { "id": 162303, "urlhaus_id": "3950839", "url": "http://5.83.136.39:8080/x86_64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:18 UTC", "discovered_at": "2026-10-16T06:36:18.000Z" }, { "id": 162302, "urlhaus_id": "3950838", "url": "http://5.83.136.39:8080/arm", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:18 UTC", "discovered_at": "2026-10-16T06:36:18.000Z" }, { "id": 162304, "urlhaus_id": "3950837", "url": "http://5.83.136.39:8080/aarch64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:17 UTC", "discovered_at": "2026-10-16T06:36:17.000Z" }, { "id": 162305, "urlhaus_id": "3950836", "url": "http://5.83.136.39:8080/mips", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:16 UTC", "discovered_at": "2026-10-16T06:36:16.000Z" }, { "id": 162309, "urlhaus_id": "3950835", "url": "http://5.83.136.39:8080/mips64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:14 UTC", "discovered_at": "2026-10-16T06:36:14.000Z" }, { "id": 162308, "urlhaus_id": "3950834", "url": "http://5.83.136.39:8080/ppc64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:14 UTC", "discovered_at": "2026-10-16T06:36:14.000Z" }, { "id": 162307, "urlhaus_id": "3950833", "url": "http://5.83.136.39:8080/mips64le", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:14 UTC", "discovered_at": "2026-10-16T06:36:14.000Z" }, { "id": 162306, "urlhaus_id": "3950832", "url": "http://5.83.136.39:8080/i386", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:14 UTC", "discovered_at": "2026-10-16T06:36:14.000Z" }, { "id": 162310, "urlhaus_id": "3950831", "url": "http://5.83.136.39:8080/x86", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:12 UTC", "discovered_at": "2026-10-16T06:36:12.000Z" }, { "id": 162313, "urlhaus_id": "3950830", "url": "http://132.243.165.98/m68k", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:05 UTC", "discovered_at": "2026-10-16T06:36:05.000Z" }, { "id": 162312, "urlhaus_id": "3950829", "url": "http://132.243.165.98/powerpc", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:05 UTC", "discovered_at": "2026-10-16T06:36:05.000Z" }, { "id": 162311, "urlhaus_id": "3950828", "url": "http://132.243.165.98/armv5l", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:05 UTC", "discovered_at": "2026-10-16T06:36:05.000Z" }, { "id": 162318, "urlhaus_id": "3950827", "url": "http://132.243.165.98/sparc", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:04 UTC", "discovered_at": "2026-10-16T06:36:04.000Z" }, { "id": 162317, "urlhaus_id": "3950826", "url": "http://132.243.165.98/i686", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:04 UTC", "discovered_at": "2026-10-16T06:36:04.000Z" }, { "id": 162316, "urlhaus_id": "3950825", "url": "http://132.243.165.98/armv6l", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:04 UTC", "discovered_at": "2026-10-16T06:36:04.000Z" }, { "id": 162315, "urlhaus_id": "3950824", "url": "http://132.243.165.98/i586", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:04 UTC", "discovered_at": "2026-10-16T06:36:04.000Z" }, { "id": 162314, "urlhaus_id": "3950823", "url": "http://132.243.165.98/armv4l", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-16 06:36:04 UTC", "discovered_at": "2026-10-16T06:36:04.000Z" }, { "id": 162319, "urlhaus_id": "3950822", "url": "http://154.6.145.213:9000/l/p711087", "host": "154.6.145.213", "host_ip": "154.6.145.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-16 06:35:07 UTC", "discovered_at": "2026-10-16T06:35:07.000Z" }, { "id": 162321, "urlhaus_id": "3950821", "url": "http://8.166.135.58:9220/linux", "host": "8.166.135.58", "host_ip": "8.166.135.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": "honeypot, shardlure", "last_online": null, "first_seen": "2026-10-16 06:29:16 UTC", "discovered_at": "2026-10-16T06:29:16.000Z" }, { "id": 162320, "urlhaus_id": "3950820", "url": "http://219.156.116.253:37129/i", "host": "219.156.116.253", "host_ip": "219.156.116.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 06:29:16 UTC", "discovered_at": "2026-10-16T06:29:16.000Z" }, { "id": 162322, "urlhaus_id": "3950819", "url": "https://gitlab.com/trackspeed/temp-spoofer-lifetime/-/raw/HEAD/Temp-Spoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:29:13 UTC", "discovered_at": "2026-10-16T06:29:13.000Z" }, { "id": 162323, "urlhaus_id": "3950818", "url": "http://115.55.61.246:34455/bin.sh", "host": "115.55.61.246", "host_ip": "115.55.61.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 06:29:07 UTC", "discovered_at": "2026-10-16T06:29:07.000Z" }, { "id": 162327, "urlhaus_id": "3950817", "url": "https://gitlab.com/PureMatch/genshin-impact-private-cheat-with-spoofer/-/raw/HEAD/AkebiGC.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-16 06:13:28 UTC", "discovered_at": "2026-10-16T06:13:28.000Z" }, { "id": 162326, "urlhaus_id": "3950816", "url": "https://gitlab.com/RickyChainz/redengine-fivem/-/raw/HEAD/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-16 06:13:28 UTC", "discovered_at": "2026-10-16T06:13:28.000Z" }, { "id": 162325, "urlhaus_id": "3950815", "url": "https://github.com/ohebert1998/TRX-Drainer-Tool/releases/download/TRX-Drainer-Tool/TRX-Drainer-Tool.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, Stealc, zip", "last_online": null, "first_seen": "2026-10-16 06:13:28 UTC", "discovered_at": "2026-10-16T06:13:28.000Z" }, { "id": 162324, "urlhaus_id": "3950814", "url": "https://gitlab.com/YoungBro/fivem-external-cheat/-/raw/HEAD/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-16 06:13:28 UTC", "discovered_at": "2026-10-16T06:13:28.000Z" }, { "id": 162331, "urlhaus_id": "3950813", "url": "https://gitlab.com/ShawtyCash/quantv-sp-fivem-ragemp-altv/-/raw/HEAD/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:13:27 UTC", "discovered_at": "2026-10-16T06:13:27.000Z" }, { "id": 162330, "urlhaus_id": "3950812", "url": "http://175.165.74.103:41360/bin.sh", "host": "175.165.74.103", "host_ip": "175.165.74.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-16 06:13:27 UTC", "discovered_at": "2026-10-16T06:13:27.000Z" }, { "id": 162329, "urlhaus_id": "3950811", "url": "https://github.com/tpatberg14/Solana-Drainer-Tool/releases/download/Solana-Drainer-Tool/Solana-Drainer-Tool.zip", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "github, Stealc, zip", "last_online": null, "first_seen": "2026-10-16 06:13:27 UTC", "discovered_at": "2026-10-16T06:13:27.000Z" }, { "id": 162328, "urlhaus_id": "3950810", "url": "https://github.com/savagemint7/Tonkeeper-Fake-Balance/releases/download/Tonkeeper-Fake-Balance/Tonkeeper-Fake-Balance.rar", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "github, rar, Stealc", "last_online": null, "first_seen": "2026-10-16 06:13:27 UTC", "discovered_at": "2026-10-16T06:13:27.000Z" }, { "id": 162333, "urlhaus_id": "3950809", "url": "https://gitlab.com/LifeChange/monotone-hwid-spoofer/-/raw/HEAD/Monotone-HWID-Spoofer-master.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:13:26 UTC", "discovered_at": "2026-10-16T06:13:26.000Z" }, { "id": 162332, "urlhaus_id": "3950808", "url": "https://gitlab.com/HangWheels/fluxus-executor/-/raw/HEAD/FluxusExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:13:26 UTC", "discovered_at": "2026-10-16T06:13:26.000Z" }, { "id": 162334, "urlhaus_id": "3950807", "url": "http://219.155.221.103:33940/bin.sh", "host": "219.155.221.103", "host_ip": "219.155.221.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 06:13:23 UTC", "discovered_at": "2026-10-16T06:13:23.000Z" }, { "id": 162335, "urlhaus_id": "3950806", "url": "http://45.87.174.8/k.php?a=x86_64,U918P20909NFP14TH", "host": "45.87.174.8", "host_ip": "45.87.174.8", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-87-174-8, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:19 UTC", "discovered_at": "2026-10-16T06:13:19.000Z" }, { "id": 162336, "urlhaus_id": "3950805", "url": "http://216.9.225.228:8765/hpclone_x86_64", "host": "216.9.225.228", "host_ip": "216.9.225.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 06:13:18 UTC", "discovered_at": "2026-10-16T06:13:18.000Z" }, { "id": 162341, "urlhaus_id": "3950804", "url": "https://github.com/ankitapham1993/Electrum-Fake-Balance/releases/download/Electrum-Fake-Balance/Electrum-Fake-Balance.rar", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "github, rar, Stealc", "last_online": null, "first_seen": "2026-10-16 06:13:15 UTC", "discovered_at": "2026-10-16T06:13:15.000Z" }, { "id": 162340, "urlhaus_id": "3950803", "url": "https://github.com/guenter22/Flash-USDT-Tool/releases/download/Flash-USDT-Tool/Flash-USDT-Tool.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, Stealc, zip", "last_online": null, "first_seen": "2026-10-16 06:13:15 UTC", "discovered_at": "2026-10-16T06:13:15.000Z" }, { "id": 162339, "urlhaus_id": "3950802", "url": "https://github.com/RomanZhukov9/Crypto-Recovery-Tool/releases/download/Crypto-Recovery-Tool/Crypto-Recovery-Tool.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, Stealc, zip", "last_online": null, "first_seen": "2026-10-16 06:13:15 UTC", "discovered_at": "2026-10-16T06:13:15.000Z" }, { "id": 162338, "urlhaus_id": "3950801", "url": "https://github.com/pverhoeven74/Crypto-Clipper/releases/download/Crypto-Clipper/Crypto-Clipper.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, Stealc, zip", "last_online": null, "first_seen": "2026-10-16 06:13:15 UTC", "discovered_at": "2026-10-16T06:13:15.000Z" }, { "id": 162337, "urlhaus_id": "3950800", "url": "http://105.225.99.51:58007/bin.sh", "host": "105.225.99.51", "host_ip": "105.225.99.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 06:13:15 UTC", "discovered_at": "2026-10-16T06:13:15.000Z" }, { "id": 162342, "urlhaus_id": "3950799", "url": "https://gitlab.com/TwoBitss/solaraexecutor/-/raw/HEAD/SolaraExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:13:13 UTC", "discovered_at": "2026-10-16T06:13:13.000Z" }, { "id": 162348, "urlhaus_id": "3950798", "url": "https://raw.githubusercontent.com/arekillesy/Pubg-DESYNC-Menu/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162347, "urlhaus_id": "3950797", "url": "https://raw.githubusercontent.com/criellims/Swift-Executor/HEAD/Swift.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162346, "urlhaus_id": "3950796", "url": "https://raw.githubusercontent.com/contimaxxes/Xeno-Executor/HEAD/Xeno.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162345, "urlhaus_id": "3950795", "url": "https://raw.githubusercontent.com/errinysh/FortniteSpoofer/HEAD/TempSpoofer.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162344, "urlhaus_id": "3950794", "url": "https://raw.githubusercontent.com/contimillsy/WarZone-Dominator/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162343, "urlhaus_id": "3950793", "url": "https://mc-modhub.vercel.app/mods/LarpClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:13:09 UTC", "discovered_at": "2026-10-16T06:13:09.000Z" }, { "id": 162350, "urlhaus_id": "3950792", "url": "https://raw.githubusercontent.com/hamm1lts/SkriptGG/HEAD/SkriptGG.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:08 UTC", "discovered_at": "2026-10-16T06:13:08.000Z" }, { "id": 162349, "urlhaus_id": "3950791", "url": "https://raw.githubusercontent.com/filegoodls/ValorantExternalCheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-16 06:13:08 UTC", "discovered_at": "2026-10-16T06:13:08.000Z" }, { "id": 162351, "urlhaus_id": "3950790", "url": "https://cmp4.top/camera/device", "host": "cmp4.top", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:07 UTC", "discovered_at": "2026-10-16T06:13:07.000Z" }, { "id": 162356, "urlhaus_id": "3950789", "url": "http://132.243.165.98/eskgbins.sh", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:06 UTC", "discovered_at": "2026-10-16T06:13:06.000Z" }, { "id": 162355, "urlhaus_id": "3950788", "url": "http://132.243.165.98/mipsel", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:06 UTC", "discovered_at": "2026-10-16T06:13:06.000Z" }, { "id": 162354, "urlhaus_id": "3950787", "url": "http://132.243.165.98/sh4", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:06 UTC", "discovered_at": "2026-10-16T06:13:06.000Z" }, { "id": 162353, "urlhaus_id": "3950786", "url": "http://132.243.165.98/x86", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:06 UTC", "discovered_at": "2026-10-16T06:13:06.000Z" }, { "id": 162352, "urlhaus_id": "3950785", "url": "http://132.243.165.98/mips", "host": "132.243.165.98", "host_ip": "132.243.165.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-16 06:13:06 UTC", "discovered_at": "2026-10-16T06:13:06.000Z" }, { "id": 162357, "urlhaus_id": "3950784", "url": "https://mc-modhub.vercel.app/mods/GoobaaClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:34 UTC", "discovered_at": "2026-10-16T06:12:34.000Z" }, { "id": 162359, "urlhaus_id": "3950783", "url": "https://gitlab.com/AceLucky/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/HEAD/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-16 06:12:23 UTC", "discovered_at": "2026-10-16T06:12:23.000Z" }, { "id": 162358, "urlhaus_id": "3950782", "url": "https://cdn.discordapp.com/attachments/1559223274288713738/1560413897264078999/bundle.zip?ex=6ad2a030&is=6ad14eb0&hm=c192b9c1098852aa281c9cc458951c571334a88dcd20020edccbb502fc13bc07&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-16 06:12:23 UTC", "discovered_at": "2026-10-16T06:12:23.000Z" }, { "id": 162361, "urlhaus_id": "3950781", "url": "https://mc-modhub.vercel.app/mods/KrispyClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:22 UTC", "discovered_at": "2026-10-16T06:12:22.000Z" }, { "id": 162360, "urlhaus_id": "3950780", "url": "https://mc-modhub.vercel.app/mods/OrchardClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:22 UTC", "discovered_at": "2026-10-16T06:12:22.000Z" }, { "id": 162362, "urlhaus_id": "3950779", "url": "https://mc-modhub.vercel.app/mods/GrimClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:21 UTC", "discovered_at": "2026-10-16T06:12:21.000Z" }, { "id": 162363, "urlhaus_id": "3950778", "url": "http://115.49.69.231:44643/bin.sh", "host": "115.49.69.231", "host_ip": "115.49.69.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 06:12:14 UTC", "discovered_at": "2026-10-16T06:12:14.000Z" }, { "id": 162364, "urlhaus_id": "3950777", "url": "https://runelite.cc/2026scrill/client.jar", "host": "runelite.cc", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "runelure, stealer", "last_online": null, "first_seen": "2026-10-16 06:12:13 UTC", "discovered_at": "2026-10-16T06:12:13.000Z" }, { "id": 162368, "urlhaus_id": "3950776", "url": "https://mc-modhub.vercel.app/mods/4eClient-1.21.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:12 UTC", "discovered_at": "2026-10-16T06:12:12.000Z" }, { "id": 162367, "urlhaus_id": "3950775", "url": "https://mc-modhub.vercel.app/mods/ClarityClient-26.1.2.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:12 UTC", "discovered_at": "2026-10-16T06:12:12.000Z" }, { "id": 162366, "urlhaus_id": "3950774", "url": "https://mc-modhub.vercel.app/mods/67client-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:12 UTC", "discovered_at": "2026-10-16T06:12:12.000Z" }, { "id": 162365, "urlhaus_id": "3950773", "url": "https://mc-modhub.vercel.app/mods/DqrkisClient-1.21.11.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-16 06:12:12 UTC", "discovered_at": "2026-10-16T06:12:12.000Z" }, { "id": 162369, "urlhaus_id": "3950772", "url": "http://80.78.27.100:8889/opx9", "host": "80.78.27.100", "host_ip": "80.78.27.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 06:12:06 UTC", "discovered_at": "2026-10-16T06:12:06.000Z" }, { "id": 162370, "urlhaus_id": "3950771", "url": "http://219.156.116.253:37129/bin.sh", "host": "219.156.116.253", "host_ip": "219.156.116.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 05:59:10 UTC", "discovered_at": "2026-10-16T05:59:10.000Z" }, { "id": 162371, "urlhaus_id": "3950770", "url": "http://182.113.209.143:49963/bin.sh", "host": "182.113.209.143", "host_ip": "182.113.209.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 05:47:07 UTC", "discovered_at": "2026-10-16T05:47:07.000Z" }, { "id": 162372, "urlhaus_id": "3950769", "url": "http://115.56.103.148:47507/bin.sh", "host": "115.56.103.148", "host_ip": "115.56.103.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 05:44:18 UTC", "discovered_at": "2026-10-16T05:44:18.000Z" }, { "id": 162373, "urlhaus_id": "3950768", "url": "http://116.140.142.13:37833/i", "host": "116.140.142.13", "host_ip": "116.140.142.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 05:40:30 UTC", "discovered_at": "2026-10-16T05:40:30.000Z" }, { "id": 162374, "urlhaus_id": "3950767", "url": "http://210.208.110.20:41398/bin.sh", "host": "210.208.110.20", "host_ip": "210.208.110.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 05:34:20 UTC", "discovered_at": "2026-10-16T05:34:20.000Z" }, { "id": 162375, "urlhaus_id": "3950766", "url": "http://115.58.124.116:48872/i", "host": "115.58.124.116", "host_ip": "115.58.124.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 05:32:07 UTC", "discovered_at": "2026-10-16T05:32:07.000Z" }, { "id": 162376, "urlhaus_id": "3950765", "url": "http://180.131.167.125:2859/i", "host": "180.131.167.125", "host_ip": "180.131.167.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 05:17:09 UTC", "discovered_at": "2026-10-16T05:17:09.000Z" }, { "id": 162377, "urlhaus_id": "3950764", "url": "http://93.113.167.49:43624/i", "host": "93.113.167.49", "host_ip": "93.113.167.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 05:02:10 UTC", "discovered_at": "2026-10-16T05:02:10.000Z" }, { "id": 162378, "urlhaus_id": "3950763", "url": "http://37.28.177.69:39085/i", "host": "37.28.177.69", "host_ip": "37.28.177.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 05:02:09 UTC", "discovered_at": "2026-10-16T05:02:09.000Z" }, { "id": 162379, "urlhaus_id": "3950762", "url": "http://182.113.209.143:49963/i", "host": "182.113.209.143", "host_ip": "182.113.209.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 04:47:09 UTC", "discovered_at": "2026-10-16T04:47:09.000Z" }, { "id": 162380, "urlhaus_id": "3950761", "url": "http://219.155.221.103:33940/i", "host": "219.155.221.103", "host_ip": "219.155.221.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-16 04:42:15 UTC", "discovered_at": "2026-10-16T04:42:15.000Z" }, { "id": 162381, "urlhaus_id": "3950760", "url": "http://42.227.206.252:46000/i", "host": "42.227.206.252", "host_ip": "42.227.206.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 04:32:07 UTC", "discovered_at": "2026-10-16T04:32:07.000Z" }, { "id": 162382, "urlhaus_id": "3950759", "url": "http://42.235.91.212:50078/i", "host": "42.235.91.212", "host_ip": "42.235.91.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 04:02:16 UTC", "discovered_at": "2026-10-16T04:02:16.000Z" }, { "id": 162383, "urlhaus_id": "3950758", "url": "http://203.160.9.182:60611/i", "host": "203.160.9.182", "host_ip": "203.160.9.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 03:56:10 UTC", "discovered_at": "2026-10-16T03:56:10.000Z" }, { "id": 162384, "urlhaus_id": "3950757", "url": "http://191.243.174.35:36287/i", "host": "191.243.174.35", "host_ip": "191.243.174.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:47:08 UTC", "discovered_at": "2026-10-16T03:47:08.000Z" }, { "id": 162385, "urlhaus_id": "3950756", "url": "http://61.53.84.98:48194/bin.sh", "host": "61.53.84.98", "host_ip": "61.53.84.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 03:38:33 UTC", "discovered_at": "2026-10-16T03:38:33.000Z" }, { "id": 162386, "urlhaus_id": "3950755", "url": "http://183.151.200.30:41095/i", "host": "183.151.200.30", "host_ip": "183.151.200.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:32:11 UTC", "discovered_at": "2026-10-16T03:32:11.000Z" }, { "id": 162390, "urlhaus_id": "3950754", "url": "http://59.97.250.116:41377/i", "host": "59.97.250.116", "host_ip": "59.97.250.116", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:17:09 UTC", "discovered_at": "2026-10-16T03:17:09.000Z" }, { "id": 162389, "urlhaus_id": "3950753", "url": "http://105.225.95.127:36479/i", "host": "105.225.95.127", "host_ip": "105.225.95.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:17:09 UTC", "discovered_at": "2026-10-16T03:17:09.000Z" }, { "id": 162388, "urlhaus_id": "3950752", "url": "http://45.165.172.92:60966/i", "host": "45.165.172.92", "host_ip": "45.165.172.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:17:09 UTC", "discovered_at": "2026-10-16T03:17:09.000Z" }, { "id": 162387, "urlhaus_id": "3950751", "url": "http://59.97.250.29:37302/i", "host": "59.97.250.29", "host_ip": "59.97.250.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:17:09 UTC", "discovered_at": "2026-10-16T03:17:09.000Z" }, { "id": 162391, "urlhaus_id": "3950750", "url": "http://210.208.110.51:44372/bin.sh", "host": "210.208.110.51", "host_ip": "210.208.110.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 03:07:14 UTC", "discovered_at": "2026-10-16T03:07:14.000Z" }, { "id": 162392, "urlhaus_id": "3950749", "url": "http://220.168.238.209:60522/i", "host": "220.168.238.209", "host_ip": "220.168.238.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:02:17 UTC", "discovered_at": "2026-10-16T03:02:17.000Z" }, { "id": 162393, "urlhaus_id": "3950748", "url": "http://222.137.141.44:47658/i", "host": "222.137.141.44", "host_ip": "222.137.141.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 03:02:08 UTC", "discovered_at": "2026-10-16T03:02:08.000Z" }, { "id": 162394, "urlhaus_id": "3950747", "url": "http://182.119.34.156:33099/i", "host": "182.119.34.156", "host_ip": "182.119.34.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 02:59:20 UTC", "discovered_at": "2026-10-16T02:59:20.000Z" }, { "id": 162395, "urlhaus_id": "3950746", "url": "http://182.119.34.156:33099/bin.sh", "host": "182.119.34.156", "host_ip": "182.119.34.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 02:30:29 UTC", "discovered_at": "2026-10-16T02:30:29.000Z" }, { "id": 162396, "urlhaus_id": "3950745", "url": "http://196.190.69.149:36947/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 02:21:18 UTC", "discovered_at": "2026-10-16T02:21:18.000Z" }, { "id": 162398, "urlhaus_id": "3950744", "url": "http://221.202.234.23:52511/bin.sh", "host": "221.202.234.23", "host_ip": "221.202.234.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 02:17:07 UTC", "discovered_at": "2026-10-16T02:17:07.000Z" }, { "id": 162397, "urlhaus_id": "3950743", "url": "http://221.202.234.23:52511/i", "host": "221.202.234.23", "host_ip": "221.202.234.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 02:17:07 UTC", "discovered_at": "2026-10-16T02:17:07.000Z" }, { "id": 162399, "urlhaus_id": "3950742", "url": "http://182.113.205.239:50784/bin.sh", "host": "182.113.205.239", "host_ip": "182.113.205.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 02:02:06 UTC", "discovered_at": "2026-10-16T02:02:06.000Z" }, { "id": 162400, "urlhaus_id": "3950741", "url": "http://38.43.93.61/hiddenbin/Space.arm5", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:24 UTC", "discovered_at": "2026-10-16T01:52:24.000Z" }, { "id": 162404, "urlhaus_id": "3950740", "url": "http://38.43.93.61/hiddenbin/Space.x86_64", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:20 UTC", "discovered_at": "2026-10-16T01:52:20.000Z" }, { "id": 162403, "urlhaus_id": "3950739", "url": "http://38.43.93.61/hiddenbin/Space.mips", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:20 UTC", "discovered_at": "2026-10-16T01:52:20.000Z" }, { "id": 162402, "urlhaus_id": "3950738", "url": "http://38.43.93.61/hiddenbin/Space.x86", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:20 UTC", "discovered_at": "2026-10-16T01:52:20.000Z" }, { "id": 162401, "urlhaus_id": "3950737", "url": "http://91.92.43.221/hiddenbin/Space.spc", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:20 UTC", "discovered_at": "2026-10-16T01:52:20.000Z" }, { "id": 162409, "urlhaus_id": "3950736", "url": "http://38.43.93.61/hiddenbin/Space.m68k", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:18 UTC", "discovered_at": "2026-10-16T01:52:18.000Z" }, { "id": 162408, "urlhaus_id": "3950735", "url": "http://38.43.93.61/hiddenbin/Space.sh4", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:18 UTC", "discovered_at": "2026-10-16T01:52:18.000Z" }, { "id": 162407, "urlhaus_id": "3950734", "url": "http://38.43.93.61/hiddenbin/Space.mpsl", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:18 UTC", "discovered_at": "2026-10-16T01:52:18.000Z" }, { "id": 162406, "urlhaus_id": "3950733", "url": "http://38.43.93.61/hiddenbin/Space.arm7", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:18 UTC", "discovered_at": "2026-10-16T01:52:18.000Z" }, { "id": 162405, "urlhaus_id": "3950732", "url": "http://38.43.93.61/hiddenbin/Space.ppc", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-16 01:52:18 UTC", "discovered_at": "2026-10-16T01:52:18.000Z" }, { "id": 162410, "urlhaus_id": "3950731", "url": "http://42.230.54.62:58470/i", "host": "42.230.54.62", "host_ip": "42.230.54.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:47:08 UTC", "discovered_at": "2026-10-16T01:47:08.000Z" }, { "id": 162411, "urlhaus_id": "3950730", "url": "http://42.55.37.135:45921/i", "host": "42.55.37.135", "host_ip": "42.55.37.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:32:11 UTC", "discovered_at": "2026-10-16T01:32:11.000Z" }, { "id": 162412, "urlhaus_id": "3950729", "url": "http://221.15.189.37:44951/i", "host": "221.15.189.37", "host_ip": "221.15.189.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:17:10 UTC", "discovered_at": "2026-10-16T01:17:10.000Z" }, { "id": 162413, "urlhaus_id": "3950728", "url": "http://180.190.200.74:38298/i", "host": "180.190.200.74", "host_ip": "180.190.200.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:02:07 UTC", "discovered_at": "2026-10-16T01:02:07.000Z" }, { "id": 162415, "urlhaus_id": "3950727", "url": "http://178.207.243.137:45243/i", "host": "178.207.243.137", "host_ip": "178.207.243.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:02:06 UTC", "discovered_at": "2026-10-16T01:02:06.000Z" }, { "id": 162414, "urlhaus_id": "3950726", "url": "http://175.174.13.217:36599/bin.sh", "host": "175.174.13.217", "host_ip": "175.174.13.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 01:02:06 UTC", "discovered_at": "2026-10-16T01:02:06.000Z" }, { "id": 162416, "urlhaus_id": "3950725", "url": "http://222.140.182.253:36775/i", "host": "222.140.182.253", "host_ip": "222.140.182.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 00:50:18 UTC", "discovered_at": "2026-10-16T00:50:18.000Z" }, { "id": 162418, "urlhaus_id": "3950724", "url": "http://182.113.205.239:50784/i", "host": "182.113.205.239", "host_ip": "182.113.205.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:47:08 UTC", "discovered_at": "2026-10-16T00:47:08.000Z" }, { "id": 162417, "urlhaus_id": "3950723", "url": "http://180.244.225.170:37008/i", "host": "180.244.225.170", "host_ip": "180.244.225.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:47:08 UTC", "discovered_at": "2026-10-16T00:47:08.000Z" }, { "id": 162419, "urlhaus_id": "3950722", "url": "http://222.127.50.108:41701/bin.sh", "host": "222.127.50.108", "host_ip": "222.127.50.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-16 00:46:14 UTC", "discovered_at": "2026-10-16T00:46:14.000Z" }, { "id": 162422, "urlhaus_id": "3950721", "url": "http://182.113.0.7:39005/i", "host": "182.113.0.7", "host_ip": "182.113.0.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:32:07 UTC", "discovered_at": "2026-10-16T00:32:07.000Z" }, { "id": 162421, "urlhaus_id": "3950720", "url": "http://182.113.34.105:54101/i", "host": "182.113.34.105", "host_ip": "182.113.34.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:32:07 UTC", "discovered_at": "2026-10-16T00:32:07.000Z" }, { "id": 162420, "urlhaus_id": "3950719", "url": "http://182.121.213.133:34850/bin.sh", "host": "182.121.213.133", "host_ip": "182.121.213.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:32:07 UTC", "discovered_at": "2026-10-16T00:32:07.000Z" }, { "id": 162423, "urlhaus_id": "3950718", "url": "http://222.140.182.253:36775/bin.sh", "host": "222.140.182.253", "host_ip": "222.140.182.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 00:24:18 UTC", "discovered_at": "2026-10-16T00:24:18.000Z" }, { "id": 162424, "urlhaus_id": "3950717", "url": "https://ggi.dietondemand.com/download/versions/5.3.1/2keyfactory.exe", "host": "ggi.dietondemand.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "2KeyFactory, exe, msstore, WailsLoader, XP8LWPQS0M4JV6", "last_online": null, "first_seen": "2026-10-16 00:22:14 UTC", "discovered_at": "2026-10-16T00:22:14.000Z" }, { "id": 162425, "urlhaus_id": "3950716", "url": "http://42.227.202.119:47620/i", "host": "42.227.202.119", "host_ip": "42.227.202.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-16 00:21:20 UTC", "discovered_at": "2026-10-16T00:21:20.000Z" }, { "id": 162426, "urlhaus_id": "3950715", "url": "http://42.231.249.63:33849/bin.sh", "host": "42.231.249.63", "host_ip": "42.231.249.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:17:14 UTC", "discovered_at": "2026-10-16T00:17:14.000Z" }, { "id": 162427, "urlhaus_id": "3950714", "url": "http://42.239.231.217:56903/i", "host": "42.239.231.217", "host_ip": "42.239.231.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:17:07 UTC", "discovered_at": "2026-10-16T00:17:07.000Z" }, { "id": 162428, "urlhaus_id": "3950713", "url": "http://125.42.225.92:38465/bin.sh", "host": "125.42.225.92", "host_ip": "125.42.225.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-16 00:16:21 UTC", "discovered_at": "2026-10-16T00:16:21.000Z" }, { "id": 162430, "urlhaus_id": "3950712", "url": "https://sep.dailytechinsight.com/download/ver/12.1.2/plclean_master.exe", "host": "sep.dailytechinsight.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, msstore, WailsLoader, XP8C9MQ5GXGV8S", "last_online": null, "first_seen": "2026-10-16 00:11:20 UTC", "discovered_at": "2026-10-16T00:11:20.000Z" }, { "id": 162429, "urlhaus_id": "3950711", "url": "https://dir.sonikjp.org/microsoft_store/download/version/93.11.1/2fa_code_engine.exe", "host": "dir.sonikjp.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, msstore, WailsLoader, XP8C94NJ9JQ6B9", "last_online": null, "first_seen": "2026-10-16 00:11:20 UTC", "discovered_at": "2026-10-16T00:11:20.000Z" }, { "id": 162432, "urlhaus_id": "3950710", "url": "https://ww.menara5d.net/download/version/15.12.16/qr2auth.exe", "host": "ww.menara5d.net", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, msstore, WailsLoader, xp9m1jz5pf49kc", "last_online": null, "first_seen": "2026-10-16 00:11:13 UTC", "discovered_at": "2026-10-16T00:11:13.000Z" }, { "id": 162431, "urlhaus_id": "3950709", "url": "https://db.foodbook.pk/download/21.0.2/rdp_officex_manager.exe", "host": "db.foodbook.pk", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, msstore, WailsLoader, XPFCZWR9RK8XL4", "last_online": null, "first_seen": "2026-10-16 00:11:13 UTC", "discovered_at": "2026-10-16T00:11:13.000Z" }, { "id": 162433, "urlhaus_id": "3950706", "url": "http://42.239.231.217:56903/bin.sh", "host": "42.239.231.217", "host_ip": "42.239.231.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-16 00:02:07 UTC", "discovered_at": "2026-10-16T00:02:07.000Z" }, { "id": 162434, "urlhaus_id": "3950705", "url": "http://115.50.89.97:56156/i", "host": "115.50.89.97", "host_ip": "115.50.89.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:57:16 UTC", "discovered_at": "2026-10-15T23:57:16.000Z" }, { "id": 162435, "urlhaus_id": "3950704", "url": "http://115.61.118.122:60549/i", "host": "115.61.118.122", "host_ip": "115.61.118.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:51:25 UTC", "discovered_at": "2026-10-15T23:51:25.000Z" }, { "id": 162436, "urlhaus_id": "3950703", "url": "http://42.227.207.135:59885/bin.sh", "host": "42.227.207.135", "host_ip": "42.227.207.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:50:23 UTC", "discovered_at": "2026-10-15T23:50:23.000Z" }, { "id": 162437, "urlhaus_id": "3950702", "url": "http://221.15.178.114:40031/i", "host": "221.15.178.114", "host_ip": "221.15.178.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:47:20 UTC", "discovered_at": "2026-10-15T23:47:20.000Z" }, { "id": 162438, "urlhaus_id": "3950701", "url": "http://124.92.76.80:36313/bin.sh", "host": "124.92.76.80", "host_ip": "124.92.76.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:43:19 UTC", "discovered_at": "2026-10-15T23:43:19.000Z" }, { "id": 162439, "urlhaus_id": "3950700", "url": "http://42.234.233.113:55975/i", "host": "42.234.233.113", "host_ip": "42.234.233.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 23:32:20 UTC", "discovered_at": "2026-10-15T23:32:20.000Z" }, { "id": 162440, "urlhaus_id": "3950699", "url": "http://42.238.139.238:54491/i", "host": "42.238.139.238", "host_ip": "42.238.139.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 23:32:07 UTC", "discovered_at": "2026-10-15T23:32:07.000Z" }, { "id": 162441, "urlhaus_id": "3950698", "url": "http://115.50.89.97:56156/bin.sh", "host": "115.50.89.97", "host_ip": "115.50.89.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:31:18 UTC", "discovered_at": "2026-10-15T23:31:18.000Z" }, { "id": 162442, "urlhaus_id": "3950697", "url": "http://115.62.117.230:52274/bin.sh", "host": "115.62.117.230", "host_ip": "115.62.117.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 23:17:06 UTC", "discovered_at": "2026-10-15T23:17:06.000Z" }, { "id": 162443, "urlhaus_id": "3950696", "url": "https://brotherspizzapeoria.com/download/version/15.12.16/qr2auth.exe", "host": "brotherspizzapeoria.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "msstore, qr2auth, signed, WailsLoader, xp9m1jz5pf49kc", "last_online": null, "first_seen": "2026-10-15 23:14:05 UTC", "discovered_at": "2026-10-15T23:14:05.000Z" }, { "id": 162444, "urlhaus_id": "3950695", "url": "http://115.55.53.145:45755/bin.sh", "host": "115.55.53.145", "host_ip": "115.55.53.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 23:02:10 UTC", "discovered_at": "2026-10-15T23:02:10.000Z" }, { "id": 162445, "urlhaus_id": "3950694", "url": "http://221.15.173.51:41661/i", "host": "221.15.173.51", "host_ip": "221.15.173.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 23:02:07 UTC", "discovered_at": "2026-10-15T23:02:07.000Z" }, { "id": 162446, "urlhaus_id": "3950693", "url": "http://115.49.24.236:46806/bin.sh", "host": "115.49.24.236", "host_ip": "115.49.24.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 22:57:09 UTC", "discovered_at": "2026-10-15T22:57:09.000Z" }, { "id": 162447, "urlhaus_id": "3950692", "url": "http://105.225.99.51:58007/i", "host": "105.225.99.51", "host_ip": "105.225.99.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-15 22:40:10 UTC", "discovered_at": "2026-10-15T22:40:10.000Z" }, { "id": 162448, "urlhaus_id": "3950691", "url": "http://61.133.30.139:43947/i", "host": "61.133.30.139", "host_ip": "61.133.30.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 22:32:07 UTC", "discovered_at": "2026-10-15T22:32:07.000Z" }, { "id": 162449, "urlhaus_id": "3950690", "url": "http://42.177.21.160:39514/i", "host": "42.177.21.160", "host_ip": "42.177.21.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 22:32:06 UTC", "discovered_at": "2026-10-15T22:32:06.000Z" }, { "id": 162450, "urlhaus_id": "3950689", "url": "http://115.49.69.231:44643/i", "host": "115.49.69.231", "host_ip": "115.49.69.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 22:21:18 UTC", "discovered_at": "2026-10-15T22:21:18.000Z" }, { "id": 162451, "urlhaus_id": "3950688", "url": "https://anthonyspizzeriainc.com/microsoft_store/download/version/93.11.1/2fa_code_engine.exe", "host": "anthonyspizzeriainc.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, msstore, signed, WailsLoader", "last_online": null, "first_seen": "2026-10-15 21:54:07 UTC", "discovered_at": "2026-10-15T21:54:07.000Z" }, { "id": 162453, "urlhaus_id": "3950687", "url": "http://123.13.52.10:47498/i", "host": "123.13.52.10", "host_ip": "123.13.52.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 21:47:07 UTC", "discovered_at": "2026-10-15T21:47:07.000Z" }, { "id": 162452, "urlhaus_id": "3950686", "url": "http://123.13.52.10:47498/bin.sh", "host": "123.13.52.10", "host_ip": "123.13.52.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 21:47:07 UTC", "discovered_at": "2026-10-15T21:47:07.000Z" }, { "id": 162454, "urlhaus_id": "3950685", "url": "http://36.32.176.115:57093/bin.sh", "host": "36.32.176.115", "host_ip": "36.32.176.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 21:45:21 UTC", "discovered_at": "2026-10-15T21:45:21.000Z" }, { "id": 162455, "urlhaus_id": "3950684", "url": "http://219.157.186.140:47861/i", "host": "219.157.186.140", "host_ip": "219.157.186.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 21:34:18 UTC", "discovered_at": "2026-10-15T21:34:18.000Z" }, { "id": 162456, "urlhaus_id": "3950683", "url": "http://113.236.92.29:52754/bin.sh", "host": "113.236.92.29", "host_ip": "113.236.92.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 21:26:39 UTC", "discovered_at": "2026-10-15T21:26:39.000Z" }, { "id": 162457, "urlhaus_id": "3950682", "url": "http://182.127.111.173:40844/i", "host": "182.127.111.173", "host_ip": "182.127.111.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 21:14:24 UTC", "discovered_at": "2026-10-15T21:14:24.000Z" }, { "id": 162458, "urlhaus_id": "3950681", "url": "http://114.228.131.9:41693/i", "host": "114.228.131.9", "host_ip": "114.228.131.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 21:08:20 UTC", "discovered_at": "2026-10-15T21:08:20.000Z" }, { "id": 162459, "urlhaus_id": "3950680", "url": "http://219.157.186.140:47861/bin.sh", "host": "219.157.186.140", "host_ip": "219.157.186.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 21:08:19 UTC", "discovered_at": "2026-10-15T21:08:19.000Z" }, { "id": 162460, "urlhaus_id": "3950679", "url": "http://42.230.42.54:53636/i", "host": "42.230.42.54", "host_ip": "42.230.42.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 20:56:21 UTC", "discovered_at": "2026-10-15T20:56:21.000Z" }, { "id": 162461, "urlhaus_id": "3950678", "url": "http://125.42.32.7:39513/i", "host": "125.42.32.7", "host_ip": "125.42.32.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:47:19 UTC", "discovered_at": "2026-10-15T20:47:19.000Z" }, { "id": 162462, "urlhaus_id": "3950677", "url": "http://124.94.170.244:51983/i", "host": "124.94.170.244", "host_ip": "124.94.170.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:47:07 UTC", "discovered_at": "2026-10-15T20:47:07.000Z" }, { "id": 162463, "urlhaus_id": "3950676", "url": "http://59.97.248.127:54669/i", "host": "59.97.248.127", "host_ip": "59.97.248.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:47:06 UTC", "discovered_at": "2026-10-15T20:47:06.000Z" }, { "id": 162464, "urlhaus_id": "3950675", "url": "http://45.166.188.48:51478/i", "host": "45.166.188.48", "host_ip": "45.166.188.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:32:10 UTC", "discovered_at": "2026-10-15T20:32:10.000Z" }, { "id": 162465, "urlhaus_id": "3950674", "url": "http://42.230.42.54:53636/bin.sh", "host": "42.230.42.54", "host_ip": "42.230.42.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 20:30:19 UTC", "discovered_at": "2026-10-15T20:30:19.000Z" }, { "id": 162466, "urlhaus_id": "3950673", "url": "http://117.131.92.150:57383/bin.sh", "host": "117.131.92.150", "host_ip": "117.131.92.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 20:24:10 UTC", "discovered_at": "2026-10-15T20:24:10.000Z" }, { "id": 162467, "urlhaus_id": "3950672", "url": "http://106.58.126.200:60807/i", "host": "106.58.126.200", "host_ip": "106.58.126.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:17:27 UTC", "discovered_at": "2026-10-15T20:17:27.000Z" }, { "id": 162468, "urlhaus_id": "3950671", "url": "http://220.191.125.250:48161/i", "host": "220.191.125.250", "host_ip": "220.191.125.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:17:09 UTC", "discovered_at": "2026-10-15T20:17:09.000Z" }, { "id": 162469, "urlhaus_id": "3950670", "url": "http://221.15.185.193:48623/i", "host": "221.15.185.193", "host_ip": "221.15.185.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:17:07 UTC", "discovered_at": "2026-10-15T20:17:07.000Z" }, { "id": 162470, "urlhaus_id": "3950669", "url": "http://221.214.181.197:39806/i", "host": "221.214.181.197", "host_ip": "221.214.181.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 20:04:21 UTC", "discovered_at": "2026-10-15T20:04:21.000Z" }, { "id": 162471, "urlhaus_id": "3950668", "url": "http://115.61.118.122:60549/bin.sh", "host": "115.61.118.122", "host_ip": "115.61.118.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:21 UTC", "discovered_at": "2026-10-15T20:02:21.000Z" }, { "id": 162472, "urlhaus_id": "3950667", "url": "http://182.121.213.133:34850/i", "host": "182.121.213.133", "host_ip": "182.121.213.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:11 UTC", "discovered_at": "2026-10-15T20:02:11.000Z" }, { "id": 162473, "urlhaus_id": "3950666", "url": "http://101.109.199.229:46550/i", "host": "101.109.199.229", "host_ip": "101.109.199.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:10 UTC", "discovered_at": "2026-10-15T20:02:10.000Z" }, { "id": 162479, "urlhaus_id": "3950665", "url": "http://115.57.180.160:35655/bin.sh", "host": "115.57.180.160", "host_ip": "115.57.180.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162478, "urlhaus_id": "3950664", "url": "http://105.225.25.212:47629/i", "host": "105.225.25.212", "host_ip": "105.225.25.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162477, "urlhaus_id": "3950663", "url": "http://115.57.180.160:35655/i", "host": "115.57.180.160", "host_ip": "115.57.180.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162476, "urlhaus_id": "3950662", "url": "http://182.122.233.48:46273/i", "host": "182.122.233.48", "host_ip": "182.122.233.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162475, "urlhaus_id": "3950661", "url": "http://182.121.85.243:40929/i", "host": "182.121.85.243", "host_ip": "182.121.85.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162474, "urlhaus_id": "3950660", "url": "http://182.113.34.105:54101/bin.sh", "host": "182.113.34.105", "host_ip": "182.113.34.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 20:02:09 UTC", "discovered_at": "2026-10-15T20:02:09.000Z" }, { "id": 162480, "urlhaus_id": "3950659", "url": "http://115.55.192.158:52755/i", "host": "115.55.192.158", "host_ip": "115.55.192.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 20:01:17 UTC", "discovered_at": "2026-10-15T20:01:17.000Z" }, { "id": 162481, "urlhaus_id": "3950658", "url": "http://223.151.72.37:40635/i", "host": "223.151.72.37", "host_ip": "223.151.72.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 20:00:09 UTC", "discovered_at": "2026-10-15T20:00:09.000Z" }, { "id": 162482, "urlhaus_id": "3950657", "url": "http://196.221.145.214:34136/i", "host": "196.221.145.214", "host_ip": "196.221.145.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:53:17 UTC", "discovered_at": "2026-10-15T19:53:17.000Z" }, { "id": 162483, "urlhaus_id": "3950656", "url": "http://115.55.192.158:52755/bin.sh", "host": "115.55.192.158", "host_ip": "115.55.192.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:31:20 UTC", "discovered_at": "2026-10-15T19:31:20.000Z" }, { "id": 162484, "urlhaus_id": "3950655", "url": "http://196.221.145.214:34136/bin.sh", "host": "196.221.145.214", "host_ip": "196.221.145.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:26:22 UTC", "discovered_at": "2026-10-15T19:26:22.000Z" }, { "id": 162485, "urlhaus_id": "3950654", "url": "http://116.139.137.227:46446/i", "host": "116.139.137.227", "host_ip": "116.139.137.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:25:14 UTC", "discovered_at": "2026-10-15T19:25:14.000Z" }, { "id": 162487, "urlhaus_id": "3950653", "url": "http://120.28.194.92:34423/i", "host": "120.28.194.92", "host_ip": "120.28.194.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 19:17:07 UTC", "discovered_at": "2026-10-15T19:17:07.000Z" }, { "id": 162486, "urlhaus_id": "3950652", "url": "http://123.12.234.123:53789/i", "host": "123.12.234.123", "host_ip": "123.12.234.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 19:17:07 UTC", "discovered_at": "2026-10-15T19:17:07.000Z" }, { "id": 162488, "urlhaus_id": "3950651", "url": "http://182.116.112.212:43421/bin.sh", "host": "182.116.112.212", "host_ip": "182.116.112.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:07:31 UTC", "discovered_at": "2026-10-15T19:07:31.000Z" }, { "id": 162489, "urlhaus_id": "3950650", "url": "http://melonandworld.top/hiddenbin/Space.arm", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 19:07:22 UTC", "discovered_at": "2026-10-15T19:07:22.000Z" }, { "id": 162490, "urlhaus_id": "3950649", "url": "http://111.179.145.25:56237/i", "host": "111.179.145.25", "host_ip": "111.179.145.25", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 19:07:21 UTC", "discovered_at": "2026-10-15T19:07:21.000Z" }, { "id": 162491, "urlhaus_id": "3950648", "url": "http://melonandworld.top/1.sh", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, sh, ua-wget", "last_online": null, "first_seen": "2026-10-15 19:07:20 UTC", "discovered_at": "2026-10-15T19:07:20.000Z" }, { "id": 162493, "urlhaus_id": "3950647", "url": "http://113.21.43.36:38425/i", "host": "113.21.43.36", "host_ip": "113.21.43.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 19:07:19 UTC", "discovered_at": "2026-10-15T19:07:19.000Z" }, { "id": 162492, "urlhaus_id": "3950646", "url": "http://scribblebubblebibi.top/1.sh", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, sh, ua-wget", "last_online": null, "first_seen": "2026-10-15 19:07:19 UTC", "discovered_at": "2026-10-15T19:07:19.000Z" }, { "id": 162494, "urlhaus_id": "3950645", "url": "http://steelstanleystaystrong.top/1.sh", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, sh, ua-wget", "last_online": null, "first_seen": "2026-10-15 19:07:12 UTC", "discovered_at": "2026-10-15T19:07:12.000Z" }, { "id": 162495, "urlhaus_id": "3950644", "url": "http://griffcar.com.br/Jordfyldens.toc", "host": "griffcar.com.br", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "contract, hungarian, hungary, payload", "last_online": null, "first_seen": "2026-10-15 19:07:11 UTC", "discovered_at": "2026-10-15T19:07:11.000Z" }, { "id": 162497, "urlhaus_id": "3950643", "url": "http://plochcarsportsball.top/1.sh", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, sh, ua-wget", "last_online": null, "first_seen": "2026-10-15 19:07:10 UTC", "discovered_at": "2026-10-15T19:07:10.000Z" }, { "id": 162496, "urlhaus_id": "3950642", "url": "http://182.234.145.4:47714/Mozi.a", "host": "182.234.145.4", "host_ip": "182.234.145.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 19:07:10 UTC", "discovered_at": "2026-10-15T19:07:10.000Z" }, { "id": 162498, "urlhaus_id": "3950641", "url": "http://110.138.8.251:48912/i", "host": "110.138.8.251", "host_ip": "110.138.8.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 19:07:07 UTC", "discovered_at": "2026-10-15T19:07:07.000Z" }, { "id": 161327, "urlhaus_id": "3950640", "url": "http://melonandworld.top/hiddenbin/Space.x86", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:39 UTC", "discovered_at": "2026-10-15T18:52:39.000Z" }, { "id": 161328, "urlhaus_id": "3950639", "url": "http://plochcarsportsball.top/hiddenbin/Space.arm7", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:36 UTC", "discovered_at": "2026-10-15T18:52:36.000Z" }, { "id": 161329, "urlhaus_id": "3950638", "url": "http://plochcarsportsball.top/hiddenbin/Space.arm5", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:35 UTC", "discovered_at": "2026-10-15T18:52:35.000Z" }, { "id": 161330, "urlhaus_id": "3950637", "url": "http://plochcarsportsball.top/hiddenbin/Space.x86", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:34 UTC", "discovered_at": "2026-10-15T18:52:34.000Z" }, { "id": 161334, "urlhaus_id": "3950636", "url": "http://scribblebubblebibi.top/hiddenbin/Space.sh4", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:33 UTC", "discovered_at": "2026-10-15T18:52:33.000Z" }, { "id": 161333, "urlhaus_id": "3950635", "url": "http://melonandworld.top/hiddenbin/Space.i686", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:33 UTC", "discovered_at": "2026-10-15T18:52:33.000Z" }, { "id": 161332, "urlhaus_id": "3950634", "url": "http://scribblebubblebibi.top/hiddenbin/Space.arm", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:33 UTC", "discovered_at": "2026-10-15T18:52:33.000Z" }, { "id": 161331, "urlhaus_id": "3950633", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.x86", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:33 UTC", "discovered_at": "2026-10-15T18:52:33.000Z" }, { "id": 161338, "urlhaus_id": "3950632", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.arc", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:30 UTC", "discovered_at": "2026-10-15T18:52:30.000Z" }, { "id": 161337, "urlhaus_id": "3950631", "url": "http://plochcarsportsball.top/hiddenbin/Space.arm6", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:30 UTC", "discovered_at": "2026-10-15T18:52:30.000Z" }, { "id": 161336, "urlhaus_id": "3950630", "url": "http://plochcarsportsball.top/hiddenbin/Space.sh4", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:30 UTC", "discovered_at": "2026-10-15T18:52:30.000Z" }, { "id": 161335, "urlhaus_id": "3950629", "url": "http://plochcarsportsball.top/hiddenbin/Space.ppc", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:30 UTC", "discovered_at": "2026-10-15T18:52:30.000Z" }, { "id": 161340, "urlhaus_id": "3950628", "url": "http://scribblebubblebibi.top/hiddenbin/Space.x86_64", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:26 UTC", "discovered_at": "2026-10-15T18:52:26.000Z" }, { "id": 161339, "urlhaus_id": "3950627", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.i686", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:26 UTC", "discovered_at": "2026-10-15T18:52:26.000Z" }, { "id": 161349, "urlhaus_id": "3950626", "url": "http://melonandworld.top/hiddenbin/Space.arm6", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161348, "urlhaus_id": "3950625", "url": "http://melonandworld.top/hiddenbin/Space.arc", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161347, "urlhaus_id": "3950624", "url": "http://scribblebubblebibi.top/hiddenbin/Space.mpsl", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161346, "urlhaus_id": "3950623", "url": "http://plochcarsportsball.top/hiddenbin/Space.arm", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161345, "urlhaus_id": "3950622", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.arm6", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161344, "urlhaus_id": "3950621", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.mpsl", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161343, "urlhaus_id": "3950620", "url": "http://melonandworld.top/hiddenbin/Space.arm7", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161342, "urlhaus_id": "3950619", "url": "http://melonandworld.top/hiddenbin/Space.ppc", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161341, "urlhaus_id": "3950618", "url": "http://melonandworld.top/hiddenbin/Space.mips", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:25 UTC", "discovered_at": "2026-10-15T18:52:25.000Z" }, { "id": 161361, "urlhaus_id": "3950617", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.ppc", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161360, "urlhaus_id": "3950616", "url": "http://melonandworld.top/hiddenbin/Space.sh4", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161359, "urlhaus_id": "3950615", "url": "http://scribblebubblebibi.top/hiddenbin/Space.arm5", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161358, "urlhaus_id": "3950614", "url": "http://plochcarsportsball.top/hiddenbin/Space.arc", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161357, "urlhaus_id": "3950613", "url": "http://melonandworld.top/hiddenbin/Space.x86_64", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161356, "urlhaus_id": "3950612", "url": "http://melonandworld.top/hiddenbin/Space.m68k", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161355, "urlhaus_id": "3950611", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.sh4", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161354, "urlhaus_id": "3950610", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.arm5", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161353, "urlhaus_id": "3950609", "url": "http://plochcarsportsball.top/hiddenbin/Space.mips", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161352, "urlhaus_id": "3950608", "url": "http://scribblebubblebibi.top/hiddenbin/Space.arm7", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161351, "urlhaus_id": "3950607", "url": "http://plochcarsportsball.top/hiddenbin/Space.mpsl", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161350, "urlhaus_id": "3950606", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.mips", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:24 UTC", "discovered_at": "2026-10-15T18:52:24.000Z" }, { "id": 161363, "urlhaus_id": "3950605", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.x86_64", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:23 UTC", "discovered_at": "2026-10-15T18:52:23.000Z" }, { "id": 161362, "urlhaus_id": "3950604", "url": "http://scribblebubblebibi.top/hiddenbin/Space.x86", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:23 UTC", "discovered_at": "2026-10-15T18:52:23.000Z" }, { "id": 161364, "urlhaus_id": "3950603", "url": "http://plochcarsportsball.top/hiddenbin/Space.x86_64", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:22 UTC", "discovered_at": "2026-10-15T18:52:22.000Z" }, { "id": 161365, "urlhaus_id": "3950602", "url": "http://plochcarsportsball.top/hiddenbin/Space.m68k", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:21 UTC", "discovered_at": "2026-10-15T18:52:21.000Z" }, { "id": 161376, "urlhaus_id": "3950601", "url": "http://plochcarsportsball.top/hiddenbin/Space.i686", "host": "plochcarsportsball.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161375, "urlhaus_id": "3950600", "url": "http://melonandworld.top/hiddenbin/Space.arm5", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161374, "urlhaus_id": "3950599", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.arm", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161373, "urlhaus_id": "3950598", "url": "http://scribblebubblebibi.top/hiddenbin/Space.mips", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161372, "urlhaus_id": "3950597", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.m68k", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161371, "urlhaus_id": "3950596", "url": "http://scribblebubblebibi.top/hiddenbin/Space.ppc", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161370, "urlhaus_id": "3950595", "url": "http://scribblebubblebibi.top/hiddenbin/Space.i686", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161369, "urlhaus_id": "3950594", "url": "http://melonandworld.top/hiddenbin/Space.mpsl", "host": "melonandworld.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161368, "urlhaus_id": "3950593", "url": "http://steelstanleystaystrong.top/hiddenbin/Space.arm7", "host": "steelstanleystaystrong.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161367, "urlhaus_id": "3950592", "url": "http://scribblebubblebibi.top/hiddenbin/Space.arm6", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161366, "urlhaus_id": "3950591", "url": "http://scribblebubblebibi.top/hiddenbin/Space.arc", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:17 UTC", "discovered_at": "2026-10-15T18:52:17.000Z" }, { "id": 161377, "urlhaus_id": "3950590", "url": "http://scribblebubblebibi.top/hiddenbin/Space.m68k", "host": "scribblebubblebibi.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 18:52:11 UTC", "discovered_at": "2026-10-15T18:52:11.000Z" }, { "id": 161378, "urlhaus_id": "3950589", "url": "http://112.248.245.25:56104/i", "host": "112.248.245.25", "host_ip": "112.248.245.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 18:42:36 UTC", "discovered_at": "2026-10-15T18:42:36.000Z" }, { "id": 161379, "urlhaus_id": "3950588", "url": "http://109.238.87.75/g84kfS5n/Uploads/inject-test.exe_Melted.exe", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 18:41:42 UTC", "discovered_at": "2026-10-15T18:41:42.000Z" }, { "id": 161380, "urlhaus_id": "3950587", "url": "https://cdn.discordapp.com/attachments/1559223274288713738/1560345233772904488/bundle.zip?ex=6ad2603d&is=6ad10ebd&hm=49c0bd69cb1ca8cd85c0689bd14ddb748734e4975b02953df8e0211a8995d347&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 18:40:04 UTC", "discovered_at": "2026-10-15T18:40:04.000Z" }, { "id": 161381, "urlhaus_id": "3950586", "url": "https://cdw.omsules.life/DvnX.zip", "host": "cdw.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-15 18:40:02 UTC", "discovered_at": "2026-10-15T18:40:02.000Z" }, { "id": 161382, "urlhaus_id": "3950585", "url": "http://139.227.137.155:39361/bin.sh", "host": "139.227.137.155", "host_ip": "139.227.137.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-15 18:39:26 UTC", "discovered_at": "2026-10-15T18:39:26.000Z" }, { "id": 161383, "urlhaus_id": "3950584", "url": "https://cdt.omsules.life/DvnX.zip", "host": "cdt.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-15 18:39:20 UTC", "discovered_at": "2026-10-15T18:39:20.000Z" }, { "id": 161384, "urlhaus_id": "3950583", "url": "http://42.227.196.224:53694/bin.sh", "host": "42.227.196.224", "host_ip": "42.227.196.224", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 18:39:17 UTC", "discovered_at": "2026-10-15T18:39:17.000Z" }, { "id": 161389, "urlhaus_id": "3950582", "url": "http://151.240.157.27:443/wallet", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 18:39:11 UTC", "discovered_at": "2026-10-15T18:39:11.000Z" }, { "id": 161388, "urlhaus_id": "3950581", "url": "http://151.240.157.27:443/6bqpetbeacon", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 18:39:11 UTC", "discovered_at": "2026-10-15T18:39:11.000Z" }, { "id": 161387, "urlhaus_id": "3950580", "url": "http://151.240.157.27:443/xmrig", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 18:39:11 UTC", "discovered_at": "2026-10-15T18:39:11.000Z" }, { "id": 161386, "urlhaus_id": "3950579", "url": "http://151.240.157.27:443/miner", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-15 18:39:11 UTC", "discovered_at": "2026-10-15T18:39:11.000Z" }, { "id": 161385, "urlhaus_id": "3950578", "url": "http://151.240.157.27:443/hunter", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-15 18:39:11 UTC", "discovered_at": "2026-10-15T18:39:11.000Z" }, { "id": 161406, "urlhaus_id": "3950577", "url": "https://donutsmputilitys.netlify.app/downloads/tweaks.jar", "host": "donutsmputilitys.netlify.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161405, "urlhaus_id": "3950576", "url": "http://91.92.43.221/hiddenbin/Space.mips", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161404, "urlhaus_id": "3950575", "url": "http://64.235.41.52/ip2", "host": "64.235.41.52", "host_ip": "64.235.41.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, malware", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161403, "urlhaus_id": "3950574", "url": "http://91.92.43.221/hiddenbin/Space.x86_64", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161402, "urlhaus_id": "3950573", "url": "http://91.92.43.221/hiddenbin/Space.ppc", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161401, "urlhaus_id": "3950572", "url": "http://91.92.43.221/1.sh", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161400, "urlhaus_id": "3950571", "url": "http://91.92.43.221/hiddenbin/Space.arm", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161399, "urlhaus_id": "3950570", "url": "http://91.92.43.221/hiddenbin/Space.m68k", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161398, "urlhaus_id": "3950569", "url": "https://dklak.cam/Y7YX0XZ1", "host": "dklak.cam", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161397, "urlhaus_id": "3950568", "url": "http://91.92.43.221/hiddenbin/Space.x86", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161396, "urlhaus_id": "3950567", "url": "http://91.92.43.221/hiddenbin/Space.arm5", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161395, "urlhaus_id": "3950566", "url": "http://91.92.43.221/hiddenbin/Space.sh4", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161394, "urlhaus_id": "3950565", "url": "http://91.92.43.221/hiddenbin/Space.mpsl", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161393, "urlhaus_id": "3950564", "url": "http://91.92.43.221/hiddenbin/Space.arm7", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161392, "urlhaus_id": "3950563", "url": "http://91.92.43.221/hiddenbin/Space.arm6", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161391, "urlhaus_id": "3950562", "url": "http://91.92.43.221/hiddenbin/Space.i686", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161390, "urlhaus_id": "3950561", "url": "http://91.92.43.221/hiddenbin/Space.arc", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:10 UTC", "discovered_at": "2026-10-15T18:39:10.000Z" }, { "id": 161408, "urlhaus_id": "3950560", "url": "http://151.240.157.27:9000/hunter", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-15 18:39:09 UTC", "discovered_at": "2026-10-15T18:39:09.000Z" }, { "id": 161407, "urlhaus_id": "3950559", "url": "https://internetmissouri.com/curl/42403afd2906a8f3062e3ddb19b28572d88db9ae74b147319383bd280c6bec0a", "host": "internetmissouri.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, macOS, MacSync, zsh", "last_online": null, "first_seen": "2026-10-15 18:39:09 UTC", "discovered_at": "2026-10-15T18:39:09.000Z" }, { "id": 161412, "urlhaus_id": "3950558", "url": "http://91.92.43.221/hiddenbin/Space.mips64", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:07 UTC", "discovered_at": "2026-10-15T18:39:07.000Z" }, { "id": 161411, "urlhaus_id": "3950557", "url": "http://91.92.43.221/hiddenbin/Space.sparc", "host": "91.92.43.221", "host_ip": "91.92.43.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-15 18:39:07 UTC", "discovered_at": "2026-10-15T18:39:07.000Z" }, { "id": 161410, "urlhaus_id": "3950556", "url": "http://209.54.102.168/30/wemadebestthingsforme.hta?imafeination.pics", "host": "209.54.102.168", "host_ip": "209.54.102.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 18:39:07 UTC", "discovered_at": "2026-10-15T18:39:07.000Z" }, { "id": 161409, "urlhaus_id": "3950555", "url": "https://64.235.41.52/ip", "host": "64.235.41.52", "host_ip": "64.235.41.52", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware", "last_online": null, "first_seen": "2026-10-15 18:39:07 UTC", "discovered_at": "2026-10-15T18:39:07.000Z" }, { "id": 161413, "urlhaus_id": "3950554", "url": "http://112.248.245.25:56104/bin.sh", "host": "112.248.245.25", "host_ip": "112.248.245.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 18:17:23 UTC", "discovered_at": "2026-10-15T18:17:23.000Z" }, { "id": 161415, "urlhaus_id": "3950553", "url": "http://222.134.167.0:42213/i", "host": "222.134.167.0", "host_ip": "222.134.167.0", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 18:17:08 UTC", "discovered_at": "2026-10-15T18:17:08.000Z" }, { "id": 161414, "urlhaus_id": "3950552", "url": "http://222.134.167.0:42213/bin.sh", "host": "222.134.167.0", "host_ip": "222.134.167.0", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 18:17:08 UTC", "discovered_at": "2026-10-15T18:17:08.000Z" }, { "id": 161416, "urlhaus_id": "3950551", "url": "http://123.10.70.119:36801/bin.sh", "host": "123.10.70.119", "host_ip": "123.10.70.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 18:16:13 UTC", "discovered_at": "2026-10-15T18:16:13.000Z" }, { "id": 161417, "urlhaus_id": "3950550", "url": "http://125.44.190.24:59007/i", "host": "125.44.190.24", "host_ip": "125.44.190.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 17:52:18 UTC", "discovered_at": "2026-10-15T17:52:18.000Z" }, { "id": 161419, "urlhaus_id": "3950549", "url": "http://59.96.140.65:40755/bin.sh", "host": "59.96.140.65", "host_ip": "59.96.140.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:32:08 UTC", "discovered_at": "2026-10-15T17:32:08.000Z" }, { "id": 161418, "urlhaus_id": "3950548", "url": "http://59.96.140.65:40755/i", "host": "59.96.140.65", "host_ip": "59.96.140.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:32:08 UTC", "discovered_at": "2026-10-15T17:32:08.000Z" }, { "id": 161420, "urlhaus_id": "3950547", "url": "http://59.97.254.36:33859/i", "host": "59.97.254.36", "host_ip": "59.97.254.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:32:07 UTC", "discovered_at": "2026-10-15T17:32:07.000Z" }, { "id": 161422, "urlhaus_id": "3950546", "url": "http://222.141.135.181:50577/i", "host": "222.141.135.181", "host_ip": "222.141.135.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:17:06 UTC", "discovered_at": "2026-10-15T17:17:06.000Z" }, { "id": 161421, "urlhaus_id": "3950545", "url": "http://222.137.37.123:33987/bin.sh", "host": "222.137.37.123", "host_ip": "222.137.37.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:17:06 UTC", "discovered_at": "2026-10-15T17:17:06.000Z" }, { "id": 161423, "urlhaus_id": "3950544", "url": "http://130.12.182.175:8080/gdtrupoqncyropd22.exe", "host": "130.12.182.175", "host_ip": "130.12.182.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-15 17:13:09 UTC", "discovered_at": "2026-10-15T17:13:09.000Z" }, { "id": 161424, "urlhaus_id": "3950543", "url": "http://113.228.106.96:50311/i", "host": "113.228.106.96", "host_ip": "113.228.106.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 17:07:33 UTC", "discovered_at": "2026-10-15T17:07:33.000Z" }, { "id": 161425, "urlhaus_id": "3950542", "url": "http://113.228.106.96:50311/bin.sh", "host": "113.228.106.96", "host_ip": "113.228.106.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 17:06:21 UTC", "discovered_at": "2026-10-15T17:06:21.000Z" }, { "id": 161426, "urlhaus_id": "3950541", "url": "http://59.97.255.15:49804/i", "host": "59.97.255.15", "host_ip": "59.97.255.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 17:02:08 UTC", "discovered_at": "2026-10-15T17:02:08.000Z" }, { "id": 161427, "urlhaus_id": "3950540", "url": "http://61.52.222.63:41021/i", "host": "61.52.222.63", "host_ip": "61.52.222.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 16:57:14 UTC", "discovered_at": "2026-10-15T16:57:14.000Z" }, { "id": 161428, "urlhaus_id": "3950539", "url": "http://175.175.254.97:47852/i", "host": "175.175.254.97", "host_ip": "175.175.254.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 16:47:15 UTC", "discovered_at": "2026-10-15T16:47:15.000Z" }, { "id": 161429, "urlhaus_id": "3950538", "url": "http://124.6.167.113:41339/i", "host": "124.6.167.113", "host_ip": "124.6.167.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 16:47:07 UTC", "discovered_at": "2026-10-15T16:47:07.000Z" }, { "id": 161430, "urlhaus_id": "3950537", "url": "http://175.175.254.97:47852/bin.sh", "host": "175.175.254.97", "host_ip": "175.175.254.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 16:34:21 UTC", "discovered_at": "2026-10-15T16:34:21.000Z" }, { "id": 161431, "urlhaus_id": "3950536", "url": "http://123.148.142.77:43201/bin.sh", "host": "123.148.142.77", "host_ip": "123.148.142.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 16:32:25 UTC", "discovered_at": "2026-10-15T16:32:25.000Z" }, { "id": 161432, "urlhaus_id": "3950535", "url": "http://124.6.169.54:35063/bin.sh", "host": "124.6.169.54", "host_ip": "124.6.169.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 16:18:10 UTC", "discovered_at": "2026-10-15T16:18:10.000Z" }, { "id": 161433, "urlhaus_id": "3950534", "url": "http://d-j-d.com/g84kfS5n/Uploads/inject-test.exe_Melted.exe", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropped-by-amadey, f4d9f4", "last_online": null, "first_seen": "2026-10-15 16:12:08 UTC", "discovered_at": "2026-10-15T16:12:08.000Z" }, { "id": 161435, "urlhaus_id": "3950533", "url": "http://61.137.159.194:34929/i", "host": "61.137.159.194", "host_ip": "61.137.159.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 16:02:06 UTC", "discovered_at": "2026-10-15T16:02:06.000Z" }, { "id": 161434, "urlhaus_id": "3950532", "url": "http://61.52.185.167:57511/bin.sh", "host": "61.52.185.167", "host_ip": "61.52.185.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 16:02:06 UTC", "discovered_at": "2026-10-15T16:02:06.000Z" }, { "id": 161436, "urlhaus_id": "3950531", "url": "http://61.52.222.63:41021/bin.sh", "host": "61.52.222.63", "host_ip": "61.52.222.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 15:58:10 UTC", "discovered_at": "2026-10-15T15:58:10.000Z" }, { "id": 161437, "urlhaus_id": "3950530", "url": "http://101.59.79.119:45459/bin.sh", "host": "101.59.79.119", "host_ip": "101.59.79.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 15:55:11 UTC", "discovered_at": "2026-10-15T15:55:11.000Z" }, { "id": 161438, "urlhaus_id": "3950529", "url": "http://125.42.225.92:38465/i", "host": "125.42.225.92", "host_ip": "125.42.225.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 15:48:15 UTC", "discovered_at": "2026-10-15T15:48:15.000Z" }, { "id": 161439, "urlhaus_id": "3950528", "url": "http://119.189.172.143:50999/i", "host": "119.189.172.143", "host_ip": "119.189.172.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 15:47:27 UTC", "discovered_at": "2026-10-15T15:47:27.000Z" }, { "id": 161440, "urlhaus_id": "3950527", "url": "http://123.12.230.43:56724/i", "host": "123.12.230.43", "host_ip": "123.12.230.43", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 15:47:09 UTC", "discovered_at": "2026-10-15T15:47:09.000Z" }, { "id": 161442, "urlhaus_id": "3950526", "url": "http://d-j-d.com/g84kfS5n/Plugins/clip.dll", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:38:08 UTC", "discovered_at": "2026-10-15T15:38:08.000Z" }, { "id": 161441, "urlhaus_id": "3950525", "url": "http://v-w-v.com/g84kfS5n/Plugins/clip64.dll", "host": "v-w-v.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:38:08 UTC", "discovered_at": "2026-10-15T15:38:08.000Z" }, { "id": 161443, "urlhaus_id": "3950524", "url": "http://v-w-v.com/g84kfS5n/Uploads/build_amd.exe_Melted.exe", "host": "v-w-v.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 15:37:17 UTC", "discovered_at": "2026-10-15T15:37:17.000Z" }, { "id": 161444, "urlhaus_id": "3950523", "url": "http://c-f-u.com/g84kfS5n/Uploads/build_amd.exe_Melted.exe", "host": "c-f-u.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 15:37:16 UTC", "discovered_at": "2026-10-15T15:37:16.000Z" }, { "id": 161449, "urlhaus_id": "3950522", "url": "http://v-w-v.com/g84kfS5n/Plugins/cred64.dll", "host": "v-w-v.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:13 UTC", "discovered_at": "2026-10-15T15:37:13.000Z" }, { "id": 161448, "urlhaus_id": "3950521", "url": "http://c-f-u.com/g84kfS5n/Plugins/cred64.dll", "host": "c-f-u.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:13 UTC", "discovered_at": "2026-10-15T15:37:13.000Z" }, { "id": 161447, "urlhaus_id": "3950520", "url": "http://v-w-v.com/g84kfS5n/Plugins/cred.dll", "host": "v-w-v.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:13 UTC", "discovered_at": "2026-10-15T15:37:13.000Z" }, { "id": 161446, "urlhaus_id": "3950519", "url": "http://c-f-u.com/g84kfS5n/Plugins/cred.dll", "host": "c-f-u.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:13 UTC", "discovered_at": "2026-10-15T15:37:13.000Z" }, { "id": 161445, "urlhaus_id": "3950518", "url": "http://d-j-d.com/g84kfS5n/Plugins/cred.dll", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:13 UTC", "discovered_at": "2026-10-15T15:37:13.000Z" }, { "id": 161454, "urlhaus_id": "3950517", "url": "http://c-f-u.com/g84kfS5n/Plugins/clip.dll", "host": "c-f-u.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:12 UTC", "discovered_at": "2026-10-15T15:37:12.000Z" }, { "id": 161453, "urlhaus_id": "3950516", "url": "http://d-j-d.com/g84kfS5n/Plugins/clip64.dll", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:12 UTC", "discovered_at": "2026-10-15T15:37:12.000Z" }, { "id": 161452, "urlhaus_id": "3950515", "url": "http://d-j-d.com/g84kfS5n/Plugins/cred64.dll", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:12 UTC", "discovered_at": "2026-10-15T15:37:12.000Z" }, { "id": 161451, "urlhaus_id": "3950514", "url": "http://v-w-v.com/g84kfS5n/Plugins/clip.dll", "host": "v-w-v.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:12 UTC", "discovered_at": "2026-10-15T15:37:12.000Z" }, { "id": 161450, "urlhaus_id": "3950513", "url": "http://c-f-u.com/g84kfS5n/Plugins/clip64.dll", "host": "c-f-u.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:12 UTC", "discovered_at": "2026-10-15T15:37:12.000Z" }, { "id": 161459, "urlhaus_id": "3950512", "url": "http://ld-cf.com/g84kfS5n/Uploads/build_amd.exe_Melted.exe", "host": "ld-cf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 15:37:08 UTC", "discovered_at": "2026-10-15T15:37:08.000Z" }, { "id": 161458, "urlhaus_id": "3950511", "url": "http://ld-cf.com/g84kfS5n/Plugins/cred.dll", "host": "ld-cf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:08 UTC", "discovered_at": "2026-10-15T15:37:08.000Z" }, { "id": 161457, "urlhaus_id": "3950510", "url": "http://ld-cf.com/g84kfS5n/Plugins/cred64.dll", "host": "ld-cf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:08 UTC", "discovered_at": "2026-10-15T15:37:08.000Z" }, { "id": 161456, "urlhaus_id": "3950509", "url": "http://ld-cf.com/g84kfS5n/Plugins/clip64.dll", "host": "ld-cf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:08 UTC", "discovered_at": "2026-10-15T15:37:08.000Z" }, { "id": 161455, "urlhaus_id": "3950508", "url": "http://ld-cf.com/g84kfS5n/Plugins/clip.dll", "host": "ld-cf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dll", "last_online": null, "first_seen": "2026-10-15 15:37:08 UTC", "discovered_at": "2026-10-15T15:37:08.000Z" }, { "id": 161460, "urlhaus_id": "3950507", "url": "http://109.238.87.75/g84kfS5n/Uploads/build_amd.exe_Melted.exe", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 15:18:08 UTC", "discovered_at": "2026-10-15T15:18:08.000Z" }, { "id": 161461, "urlhaus_id": "3950506", "url": "http://123.9.68.39:48605/i", "host": "123.9.68.39", "host_ip": "123.9.68.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 15:03:19 UTC", "discovered_at": "2026-10-15T15:03:19.000Z" }, { "id": 161462, "urlhaus_id": "3950505", "url": "http://60.18.99.133:55111/bin.sh", "host": "60.18.99.133", "host_ip": "60.18.99.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 15:02:07 UTC", "discovered_at": "2026-10-15T15:02:07.000Z" }, { "id": 161463, "urlhaus_id": "3950504", "url": "http://109.238.87.75/g84kfS5n/Plugins/cred64.dll", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "317106, cred64.dll, dropped-by-amadey, plugin", "last_online": null, "first_seen": "2026-10-15 14:59:08 UTC", "discovered_at": "2026-10-15T14:59:08.000Z" }, { "id": 161465, "urlhaus_id": "3950503", "url": "http://109.238.87.75/g84kfS5n/Plugins/clip64.dll", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "317106, clip64.dll, dropped-by-amadey, plugin", "last_online": null, "first_seen": "2026-10-15 14:59:06 UTC", "discovered_at": "2026-10-15T14:59:06.000Z" }, { "id": 161464, "urlhaus_id": "3950502", "url": "http://109.238.87.75/g84kfS5n/Plugins/clip.dll", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "317106, clip.dll, dropped-by-amadey, plugin", "last_online": null, "first_seen": "2026-10-15 14:59:06 UTC", "discovered_at": "2026-10-15T14:59:06.000Z" }, { "id": 161466, "urlhaus_id": "3950501", "url": "http://d-j-d.com/g84kfS5n/Uploads/build_amd.exe_Melted.exe", "host": "d-j-d.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "317106, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-15 14:58:12 UTC", "discovered_at": "2026-10-15T14:58:12.000Z" }, { "id": 161467, "urlhaus_id": "3950500", "url": "http://109.238.87.75/g84kfS5n/Plugins/cred.dll", "host": "109.238.87.75", "host_ip": "109.238.87.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "317106, cred.dll, dropped-by-amadey, plugin", "last_online": null, "first_seen": "2026-10-15 14:58:07 UTC", "discovered_at": "2026-10-15T14:58:07.000Z" }, { "id": 161468, "urlhaus_id": "3950499", "url": "http://113.53.69.165:46289/i", "host": "113.53.69.165", "host_ip": "113.53.69.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 14:37:14 UTC", "discovered_at": "2026-10-15T14:37:14.000Z" }, { "id": 161469, "urlhaus_id": "3950498", "url": "http://115.52.22.187:43380/bin.sh", "host": "115.52.22.187", "host_ip": "115.52.22.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 14:36:17 UTC", "discovered_at": "2026-10-15T14:36:17.000Z" }, { "id": 161470, "urlhaus_id": "3950497", "url": "http://39.77.250.226:59814/i", "host": "39.77.250.226", "host_ip": "39.77.250.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 14:33:10 UTC", "discovered_at": "2026-10-15T14:33:10.000Z" }, { "id": 161472, "urlhaus_id": "3950496", "url": "http://115.49.24.236:46806/i", "host": "115.49.24.236", "host_ip": "115.49.24.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:32:07 UTC", "discovered_at": "2026-10-15T14:32:07.000Z" }, { "id": 161471, "urlhaus_id": "3950495", "url": "http://219.157.39.145:59352/i", "host": "219.157.39.145", "host_ip": "219.157.39.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:32:07 UTC", "discovered_at": "2026-10-15T14:32:07.000Z" }, { "id": 161474, "urlhaus_id": "3950494", "url": "http://45.166.188.48:51478/bin.sh", "host": "45.166.188.48", "host_ip": "45.166.188.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:32:06 UTC", "discovered_at": "2026-10-15T14:32:06.000Z" }, { "id": 161473, "urlhaus_id": "3950493", "url": "http://45.172.218.85:42114/i", "host": "45.172.218.85", "host_ip": "45.172.218.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:32:06 UTC", "discovered_at": "2026-10-15T14:32:06.000Z" }, { "id": 161475, "urlhaus_id": "3950492", "url": "http://221.15.10.194:38855/i", "host": "221.15.10.194", "host_ip": "221.15.10.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:17:07 UTC", "discovered_at": "2026-10-15T14:17:07.000Z" }, { "id": 161476, "urlhaus_id": "3950491", "url": "http://113.53.69.165:46289/bin.sh", "host": "113.53.69.165", "host_ip": "113.53.69.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 14:11:18 UTC", "discovered_at": "2026-10-15T14:11:18.000Z" }, { "id": 161477, "urlhaus_id": "3950490", "url": "http://60.214.231.246:46912/bin.sh", "host": "60.214.231.246", "host_ip": "60.214.231.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 14:06:11 UTC", "discovered_at": "2026-10-15T14:06:11.000Z" }, { "id": 161478, "urlhaus_id": "3950489", "url": "http://61.53.140.82:52817/i", "host": "61.53.140.82", "host_ip": "61.53.140.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 14:02:07 UTC", "discovered_at": "2026-10-15T14:02:07.000Z" }, { "id": 161479, "urlhaus_id": "3950488", "url": "http://66.205.236.190:47116/i", "host": "66.205.236.190", "host_ip": "66.205.236.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 13:45:14 UTC", "discovered_at": "2026-10-15T13:45:14.000Z" }, { "id": 161480, "urlhaus_id": "3950487", "url": "http://115.52.22.187:43380/i", "host": "115.52.22.187", "host_ip": "115.52.22.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 13:32:07 UTC", "discovered_at": "2026-10-15T13:32:07.000Z" }, { "id": 161481, "urlhaus_id": "3950486", "url": "http://222.134.163.77:55046/bin.sh", "host": "222.134.163.77", "host_ip": "222.134.163.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 13:32:06 UTC", "discovered_at": "2026-10-15T13:32:06.000Z" }, { "id": 161483, "urlhaus_id": "3950485", "url": "http://27.216.33.36:46164/i", "host": "27.216.33.36", "host_ip": "27.216.33.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 13:17:07 UTC", "discovered_at": "2026-10-15T13:17:07.000Z" }, { "id": 161482, "urlhaus_id": "3950484", "url": "http://27.215.124.78:60459/i", "host": "27.215.124.78", "host_ip": "27.215.124.78", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 13:17:07 UTC", "discovered_at": "2026-10-15T13:17:07.000Z" }, { "id": 161484, "urlhaus_id": "3950483", "url": "http://115.55.130.202:34606/i", "host": "115.55.130.202", "host_ip": "115.55.130.202", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 13:17:06 UTC", "discovered_at": "2026-10-15T13:17:06.000Z" }, { "id": 161485, "urlhaus_id": "3950482", "url": "http://182.127.64.151:40844/bin.sh", "host": "182.127.64.151", "host_ip": "182.127.64.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 12:52:11 UTC", "discovered_at": "2026-10-15T12:52:11.000Z" }, { "id": 161488, "urlhaus_id": "3950481", "url": "http://115.55.130.202:34606/bin.sh", "host": "115.55.130.202", "host_ip": "115.55.130.202", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:09 UTC", "discovered_at": "2026-10-15T12:17:09.000Z" }, { "id": 161487, "urlhaus_id": "3950480", "url": "http://27.45.183.118:52733/i", "host": "27.45.183.118", "host_ip": "27.45.183.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:09 UTC", "discovered_at": "2026-10-15T12:17:09.000Z" }, { "id": 161486, "urlhaus_id": "3950479", "url": "http://61.52.182.76:44809/i", "host": "61.52.182.76", "host_ip": "61.52.182.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:09 UTC", "discovered_at": "2026-10-15T12:17:09.000Z" }, { "id": 161491, "urlhaus_id": "3950478", "url": "http://60.23.236.153:49355/i", "host": "60.23.236.153", "host_ip": "60.23.236.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:08 UTC", "discovered_at": "2026-10-15T12:17:08.000Z" }, { "id": 161490, "urlhaus_id": "3950477", "url": "http://37.34.181.111:53143/i", "host": "37.34.181.111", "host_ip": "37.34.181.111", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:08 UTC", "discovered_at": "2026-10-15T12:17:08.000Z" }, { "id": 161489, "urlhaus_id": "3950476", "url": "http://61.243.141.19:41846/bin.sh", "host": "61.243.141.19", "host_ip": "61.243.141.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:17:08 UTC", "discovered_at": "2026-10-15T12:17:08.000Z" }, { "id": 161493, "urlhaus_id": "3950475", "url": "http://61.52.185.167:57511/i", "host": "61.52.185.167", "host_ip": "61.52.185.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:02:08 UTC", "discovered_at": "2026-10-15T12:02:08.000Z" }, { "id": 161492, "urlhaus_id": "3950474", "url": "http://61.53.84.98:48194/i", "host": "61.53.84.98", "host_ip": "61.53.84.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 12:02:08 UTC", "discovered_at": "2026-10-15T12:02:08.000Z" }, { "id": 161494, "urlhaus_id": "3950473", "url": "http://182.117.119.237:60350/i", "host": "182.117.119.237", "host_ip": "182.117.119.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:20 UTC", "discovered_at": "2026-10-15T11:47:20.000Z" }, { "id": 161495, "urlhaus_id": "3950472", "url": "http://175.174.13.217:36599/i", "host": "175.174.13.217", "host_ip": "175.174.13.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:11 UTC", "discovered_at": "2026-10-15T11:47:11.000Z" }, { "id": 161499, "urlhaus_id": "3950471", "url": "http://182.119.11.178:35763/i", "host": "182.119.11.178", "host_ip": "182.119.11.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:08 UTC", "discovered_at": "2026-10-15T11:47:08.000Z" }, { "id": 161498, "urlhaus_id": "3950470", "url": "http://182.113.206.163:36350/i", "host": "182.113.206.163", "host_ip": "182.113.206.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:08 UTC", "discovered_at": "2026-10-15T11:47:08.000Z" }, { "id": 161497, "urlhaus_id": "3950469", "url": "http://175.165.199.119:58677/i", "host": "175.165.199.119", "host_ip": "175.165.199.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:08 UTC", "discovered_at": "2026-10-15T11:47:08.000Z" }, { "id": 161496, "urlhaus_id": "3950468", "url": "http://175.151.87.39:48434/i", "host": "175.151.87.39", "host_ip": "175.151.87.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:08 UTC", "discovered_at": "2026-10-15T11:47:08.000Z" }, { "id": 161501, "urlhaus_id": "3950467", "url": "http://182.116.81.29:59993/i", "host": "182.116.81.29", "host_ip": "182.116.81.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:07 UTC", "discovered_at": "2026-10-15T11:47:07.000Z" }, { "id": 161500, "urlhaus_id": "3950466", "url": "http://59.180.153.189:48667/i", "host": "59.180.153.189", "host_ip": "59.180.153.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:07 UTC", "discovered_at": "2026-10-15T11:47:07.000Z" }, { "id": 161502, "urlhaus_id": "3950465", "url": "http://182.116.120.14:34596/i", "host": "182.116.120.14", "host_ip": "182.116.120.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:47:06 UTC", "discovered_at": "2026-10-15T11:47:06.000Z" }, { "id": 161503, "urlhaus_id": "3950464", "url": "http://112.198.194.175:55553/Mozi.m+-O+-", "host": "112.198.194.175", "host_ip": "112.198.194.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "112-198-194-175, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-15 11:39:19 UTC", "discovered_at": "2026-10-15T11:39:19.000Z" }, { "id": 161505, "urlhaus_id": "3950463", "url": "http://123.12.232.231:57060/bin.sh", "host": "123.12.232.231", "host_ip": "123.12.232.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:32:08 UTC", "discovered_at": "2026-10-15T11:32:08.000Z" }, { "id": 161504, "urlhaus_id": "3950462", "url": "http://163.142.77.44:36474/i", "host": "163.142.77.44", "host_ip": "163.142.77.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:32:08 UTC", "discovered_at": "2026-10-15T11:32:08.000Z" }, { "id": 161506, "urlhaus_id": "3950461", "url": "http://139.227.137.155:39361/i", "host": "139.227.137.155", "host_ip": "139.227.137.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:16:16 UTC", "discovered_at": "2026-10-15T11:16:16.000Z" }, { "id": 161507, "urlhaus_id": "3950460", "url": "http://123.12.232.231:57060/i", "host": "123.12.232.231", "host_ip": "123.12.232.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:16:07 UTC", "discovered_at": "2026-10-15T11:16:07.000Z" }, { "id": 161508, "urlhaus_id": "3950459", "url": "http://216.126.86.128:34013/i", "host": "216.126.86.128", "host_ip": "216.126.86.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:02:20 UTC", "discovered_at": "2026-10-15T11:02:20.000Z" }, { "id": 161509, "urlhaus_id": "3950458", "url": "http://196.206.115.18:40753/i", "host": "196.206.115.18", "host_ip": "196.206.115.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:02:11 UTC", "discovered_at": "2026-10-15T11:02:11.000Z" }, { "id": 161510, "urlhaus_id": "3950457", "url": "http://201.110.21.150:38216/i", "host": "201.110.21.150", "host_ip": "201.110.21.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:02:08 UTC", "discovered_at": "2026-10-15T11:02:08.000Z" }, { "id": 161511, "urlhaus_id": "3950456", "url": "http://201.110.21.150:38216/bin.sh", "host": "201.110.21.150", "host_ip": "201.110.21.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 11:02:07 UTC", "discovered_at": "2026-10-15T11:02:07.000Z" }, { "id": 161512, "urlhaus_id": "3950455", "url": "http://221.1.227.111:52522/bin.sh", "host": "221.1.227.111", "host_ip": "221.1.227.111", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:10 UTC", "discovered_at": "2026-10-15T10:47:10.000Z" }, { "id": 161514, "urlhaus_id": "3950454", "url": "http://120.84.214.210:44069/i", "host": "120.84.214.210", "host_ip": "120.84.214.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:08 UTC", "discovered_at": "2026-10-15T10:47:08.000Z" }, { "id": 161513, "urlhaus_id": "3950453", "url": "http://123.11.8.153:34303/bin.sh", "host": "123.11.8.153", "host_ip": "123.11.8.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:08 UTC", "discovered_at": "2026-10-15T10:47:08.000Z" }, { "id": 161516, "urlhaus_id": "3950452", "url": "http://220.198.112.236:48147/bin.sh", "host": "220.198.112.236", "host_ip": "220.198.112.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:07 UTC", "discovered_at": "2026-10-15T10:47:07.000Z" }, { "id": 161515, "urlhaus_id": "3950451", "url": "http://123.11.8.153:34303/i", "host": "123.11.8.153", "host_ip": "123.11.8.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:07 UTC", "discovered_at": "2026-10-15T10:47:07.000Z" }, { "id": 161517, "urlhaus_id": "3950450", "url": "http://219.157.20.98:42224/bin.sh", "host": "219.157.20.98", "host_ip": "219.157.20.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:47:06 UTC", "discovered_at": "2026-10-15T10:47:06.000Z" }, { "id": 161518, "urlhaus_id": "3950449", "url": "http://60.19.211.40:54211/bin.sh", "host": "60.19.211.40", "host_ip": "60.19.211.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:32:11 UTC", "discovered_at": "2026-10-15T10:32:11.000Z" }, { "id": 161519, "urlhaus_id": "3950448", "url": "http://60.19.213.66:43806/i", "host": "60.19.213.66", "host_ip": "60.19.213.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:32:08 UTC", "discovered_at": "2026-10-15T10:32:08.000Z" }, { "id": 161520, "urlhaus_id": "3950447", "url": "http://180.191.49.27:56901/i", "host": "180.191.49.27", "host_ip": "180.191.49.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 10:02:25 UTC", "discovered_at": "2026-10-15T10:02:25.000Z" }, { "id": 161521, "urlhaus_id": "3950446", "url": "http://36.255.97.170/bins.sh", "host": "36.255.97.170", "host_ip": "36.255.97.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 10:01:05 UTC", "discovered_at": "2026-10-15T10:01:05.000Z" }, { "id": 161522, "urlhaus_id": "3950445", "url": "https://up.sb/J2FMm/1.tar.gz", "host": "up.sb", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker", "last_online": null, "first_seen": "2026-10-15 09:57:22 UTC", "discovered_at": "2026-10-15T09:57:22.000Z" }, { "id": 161526, "urlhaus_id": "3950444", "url": "http://151.240.157.27:8080/beacon?id=chain_01d0c0c1a3c5", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-15 09:57:14 UTC", "discovered_at": "2026-10-15T09:57:14.000Z" }, { "id": 161525, "urlhaus_id": "3950443", "url": "http://151.240.157.27:8080/miner", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-15 09:57:14 UTC", "discovered_at": "2026-10-15T09:57:14.000Z" }, { "id": 161524, "urlhaus_id": "3950442", "url": "http://151.240.157.27:8080/xmrig", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 09:57:14 UTC", "discovered_at": "2026-10-15T09:57:14.000Z" }, { "id": 161523, "urlhaus_id": "3950441", "url": "http://151.240.157.27:8080/hunter", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-15 09:57:14 UTC", "discovered_at": "2026-10-15T09:57:14.000Z" }, { "id": 161527, "urlhaus_id": "3950440", "url": "http://205.185.117.117:9443/sysd.bin", "host": "205.185.117.117", "host_ip": "205.185.117.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-15 09:56:17 UTC", "discovered_at": "2026-10-15T09:56:17.000Z" }, { "id": 161528, "urlhaus_id": "3950439", "url": "http://205.185.117.117:9443/g.sh", "host": "205.185.117.117", "host_ip": "205.185.117.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-15 09:56:14 UTC", "discovered_at": "2026-10-15T09:56:14.000Z" }, { "id": 161531, "urlhaus_id": "3950438", "url": "http://151.240.157.27:8080/wallet", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 09:56:13 UTC", "discovered_at": "2026-10-15T09:56:13.000Z" }, { "id": 161530, "urlhaus_id": "3950437", "url": "http://151.240.157.27:8080/r5g6y6beacon", "host": "151.240.157.27", "host_ip": "151.240.157.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 09:56:13 UTC", "discovered_at": "2026-10-15T09:56:13.000Z" }, { "id": 161529, "urlhaus_id": "3950436", "url": "http://5.83.136.39:8080/bins.sh", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "adb, sh", "last_online": null, "first_seen": "2026-10-15 09:56:13 UTC", "discovered_at": "2026-10-15T09:56:13.000Z" }, { "id": 161532, "urlhaus_id": "3950435", "url": "http://42.6.101.155:34345/bin.sh", "host": "42.6.101.155", "host_ip": "42.6.101.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 09:49:16 UTC", "discovered_at": "2026-10-15T09:49:16.000Z" }, { "id": 161533, "urlhaus_id": "3950434", "url": "http://123.10.70.119:36801/i", "host": "123.10.70.119", "host_ip": "123.10.70.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:33:08 UTC", "discovered_at": "2026-10-15T09:33:08.000Z" }, { "id": 161534, "urlhaus_id": "3950433", "url": "http://121.202.142.137:42284/i", "host": "121.202.142.137", "host_ip": "121.202.142.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:32:07 UTC", "discovered_at": "2026-10-15T09:32:07.000Z" }, { "id": 161536, "urlhaus_id": "3950432", "url": "http://27.215.140.2:54550/i", "host": "27.215.140.2", "host_ip": "27.215.140.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:17:07 UTC", "discovered_at": "2026-10-15T09:17:07.000Z" }, { "id": 161535, "urlhaus_id": "3950431", "url": "http://123.14.235.37:59244/i", "host": "123.14.235.37", "host_ip": "123.14.235.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:17:07 UTC", "discovered_at": "2026-10-15T09:17:07.000Z" }, { "id": 161537, "urlhaus_id": "3950430", "url": "http://119.179.250.149:40209/i", "host": "119.179.250.149", "host_ip": "119.179.250.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:03:07 UTC", "discovered_at": "2026-10-15T09:03:07.000Z" }, { "id": 161538, "urlhaus_id": "3950429", "url": "http://115.55.129.26:59481/i", "host": "115.55.129.26", "host_ip": "115.55.129.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 09:02:30 UTC", "discovered_at": "2026-10-15T09:02:30.000Z" }, { "id": 161541, "urlhaus_id": "3950428", "url": "http://121.231.77.24:4367/i", "host": "121.231.77.24", "host_ip": "121.231.77.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:02:07 UTC", "discovered_at": "2026-10-15T09:02:07.000Z" }, { "id": 161540, "urlhaus_id": "3950427", "url": "http://123.4.18.86:53996/i", "host": "123.4.18.86", "host_ip": "123.4.18.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:02:07 UTC", "discovered_at": "2026-10-15T09:02:07.000Z" }, { "id": 161539, "urlhaus_id": "3950426", "url": "http://115.63.245.203:46795/i", "host": "115.63.245.203", "host_ip": "115.63.245.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:02:07 UTC", "discovered_at": "2026-10-15T09:02:07.000Z" }, { "id": 161542, "urlhaus_id": "3950425", "url": "http://119.166.84.226:52492/bin.sh", "host": "119.166.84.226", "host_ip": "119.166.84.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 09:02:05 UTC", "discovered_at": "2026-10-15T09:02:05.000Z" }, { "id": 161543, "urlhaus_id": "3950424", "url": "http://115.55.206.233:48121/i", "host": "115.55.206.233", "host_ip": "115.55.206.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 08:49:17 UTC", "discovered_at": "2026-10-15T08:49:17.000Z" }, { "id": 161544, "urlhaus_id": "3950423", "url": "http://45.183.184.74:38533/bin.sh", "host": "45.183.184.74", "host_ip": "45.183.184.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 08:48:17 UTC", "discovered_at": "2026-10-15T08:48:17.000Z" }, { "id": 161545, "urlhaus_id": "3950422", "url": "http://105.184.177.151:35937/i", "host": "105.184.177.151", "host_ip": "105.184.177.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:47:07 UTC", "discovered_at": "2026-10-15T08:47:07.000Z" }, { "id": 161546, "urlhaus_id": "3950421", "url": "http://115.55.129.26:59481/bin.sh", "host": "115.55.129.26", "host_ip": "115.55.129.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 08:46:28 UTC", "discovered_at": "2026-10-15T08:46:28.000Z" }, { "id": 161547, "urlhaus_id": "3950420", "url": "https://cdn.discordapp.com/attachments/1557740644179517531/1560206841797939210/bundle_3.zip?ex=6ad1df5a&is=6ad08dda&hm=94d7059bfa407e04fa9e30edd05d792a68272c07e2bd3ab74e919b8647f857ae&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 08:35:40 UTC", "discovered_at": "2026-10-15T08:35:40.000Z" }, { "id": 161548, "urlhaus_id": "3950419", "url": "http://202.83.167.117:47317/i", "host": "202.83.167.117", "host_ip": "202.83.167.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:32:10 UTC", "discovered_at": "2026-10-15T08:32:10.000Z" }, { "id": 161549, "urlhaus_id": "3950418", "url": "http://115.55.203.30:32869/bin.sh", "host": "115.55.203.30", "host_ip": "115.55.203.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:32:07 UTC", "discovered_at": "2026-10-15T08:32:07.000Z" }, { "id": 161551, "urlhaus_id": "3950417", "url": "http://115.55.206.233:48121/bin.sh", "host": "115.55.206.233", "host_ip": "115.55.206.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:17:07 UTC", "discovered_at": "2026-10-15T08:17:07.000Z" }, { "id": 161550, "urlhaus_id": "3950416", "url": "http://115.55.238.219:32771/i", "host": "115.55.238.219", "host_ip": "115.55.238.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:17:07 UTC", "discovered_at": "2026-10-15T08:17:07.000Z" }, { "id": 161552, "urlhaus_id": "3950415", "url": "http://103.66.176.192:33647/i", "host": "103.66.176.192", "host_ip": "103.66.176.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 08:02:07 UTC", "discovered_at": "2026-10-15T08:02:07.000Z" }, { "id": 161553, "urlhaus_id": "3950414", "url": "http://59.96.138.155:42226/i", "host": "59.96.138.155", "host_ip": "59.96.138.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 07:57:19 UTC", "discovered_at": "2026-10-15T07:57:19.000Z" }, { "id": 161554, "urlhaus_id": "3950413", "url": "http://59.96.138.155:42226/bin.sh", "host": "59.96.138.155", "host_ip": "59.96.138.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 07:53:20 UTC", "discovered_at": "2026-10-15T07:53:20.000Z" }, { "id": 161555, "urlhaus_id": "3950412", "url": "http://42.227.196.224:53694/i", "host": "42.227.196.224", "host_ip": "42.227.196.224", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:10 UTC", "discovered_at": "2026-10-15T07:47:10.000Z" }, { "id": 161558, "urlhaus_id": "3950411", "url": "http://115.62.152.23:52843/i", "host": "115.62.152.23", "host_ip": "115.62.152.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:08 UTC", "discovered_at": "2026-10-15T07:47:08.000Z" }, { "id": 161557, "urlhaus_id": "3950410", "url": "http://115.62.152.23:52843/bin.sh", "host": "115.62.152.23", "host_ip": "115.62.152.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:08 UTC", "discovered_at": "2026-10-15T07:47:08.000Z" }, { "id": 161556, "urlhaus_id": "3950409", "url": "http://42.226.236.209:36563/i", "host": "42.226.236.209", "host_ip": "42.226.236.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:08 UTC", "discovered_at": "2026-10-15T07:47:08.000Z" }, { "id": 161560, "urlhaus_id": "3950408", "url": "http://42.226.236.209:36563/bin.sh", "host": "42.226.236.209", "host_ip": "42.226.236.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:07 UTC", "discovered_at": "2026-10-15T07:47:07.000Z" }, { "id": 161559, "urlhaus_id": "3950407", "url": "http://42.230.35.117:53220/i", "host": "42.230.35.117", "host_ip": "42.230.35.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:47:07 UTC", "discovered_at": "2026-10-15T07:47:07.000Z" }, { "id": 161562, "urlhaus_id": "3950406", "url": "http://115.55.61.246:34455/i", "host": "115.55.61.246", "host_ip": "115.55.61.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:32:08 UTC", "discovered_at": "2026-10-15T07:32:08.000Z" }, { "id": 161561, "urlhaus_id": "3950405", "url": "http://103.66.176.192:33647/bin.sh", "host": "103.66.176.192", "host_ip": "103.66.176.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:32:08 UTC", "discovered_at": "2026-10-15T07:32:08.000Z" }, { "id": 161563, "urlhaus_id": "3950404", "url": "http://60.186.138.183:45320/i", "host": "60.186.138.183", "host_ip": "60.186.138.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 07:21:17 UTC", "discovered_at": "2026-10-15T07:21:17.000Z" }, { "id": 161564, "urlhaus_id": "3950403", "url": "http://210.208.106.68:50663/bin.sh", "host": "210.208.106.68", "host_ip": "210.208.106.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 07:17:07 UTC", "discovered_at": "2026-10-15T07:17:07.000Z" }, { "id": 161565, "urlhaus_id": "3950402", "url": "http://105.184.182.218:55557/bin.sh", "host": "105.184.182.218", "host_ip": "105.184.182.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-15 07:10:30 UTC", "discovered_at": "2026-10-15T07:10:30.000Z" }, { "id": 161566, "urlhaus_id": "3950401", "url": "http://175.107.215.35:39492/Mozi.a", "host": "175.107.215.35", "host_ip": "175.107.215.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-15 07:10:23 UTC", "discovered_at": "2026-10-15T07:10:23.000Z" }, { "id": 161567, "urlhaus_id": "3950400", "url": "http://119.30.117.179:38895/Mozi.m", "host": "119.30.117.179", "host_ip": "119.30.117.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-15 07:10:20 UTC", "discovered_at": "2026-10-15T07:10:20.000Z" }, { "id": 161568, "urlhaus_id": "3950399", "url": "http://95.9.35.137:35818/bin.sh", "host": "95.9.35.137", "host_ip": "95.9.35.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-15 07:10:19 UTC", "discovered_at": "2026-10-15T07:10:19.000Z" }, { "id": 161570, "urlhaus_id": "3950398", "url": "http://115.50.104.42:48635/bin.sh", "host": "115.50.104.42", "host_ip": "115.50.104.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 07:10:18 UTC", "discovered_at": "2026-10-15T07:10:18.000Z" }, { "id": 161569, "urlhaus_id": "3950397", "url": "http://42.225.199.101:33025/bin.sh", "host": "42.225.199.101", "host_ip": "42.225.199.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 07:10:18 UTC", "discovered_at": "2026-10-15T07:10:18.000Z" }, { "id": 161571, "urlhaus_id": "3950396", "url": "https://download1593.mediafire.com/65fjj9yhlxlgyAmDvohLNPZOz6PDQSXZh38lLkt6VQoL0SihRWoxP0RRbfp5J49NZC3t1IBDJf-K9lsq0p30jcAuNcleWlwfo63HP_IQvgJWjiIXxOtz8pV13Q9dgvUaJCfpjkg88otD8xea9CxgFtsOtiXAF_pld4OyGzEVRIV_Yg/f5or9v58g1hmf84/MalwareRAT.rar", "host": "download1593.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, botnet, c2, gate, payload", "last_online": null, "first_seen": "2026-10-15 07:10:13 UTC", "discovered_at": "2026-10-15T07:10:13.000Z" }, { "id": 161572, "urlhaus_id": "3950395", "url": "http://115.61.111.244:57147/bin.sh", "host": "115.61.111.244", "host_ip": "115.61.111.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-15 07:10:11 UTC", "discovered_at": "2026-10-15T07:10:11.000Z" }, { "id": 161573, "urlhaus_id": "3950394", "url": "http://105.184.125.244:54343/i", "host": "105.184.125.244", "host_ip": "105.184.125.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 06:47:07 UTC", "discovered_at": "2026-10-15T06:47:07.000Z" }, { "id": 161574, "urlhaus_id": "3950393", "url": "http://216.126.86.64:38919/i", "host": "216.126.86.64", "host_ip": "216.126.86.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 06:47:06 UTC", "discovered_at": "2026-10-15T06:47:06.000Z" }, { "id": 161575, "urlhaus_id": "3950392", "url": "http://115.55.61.217:35633/i", "host": "115.55.61.217", "host_ip": "115.55.61.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 06:32:07 UTC", "discovered_at": "2026-10-15T06:32:07.000Z" }, { "id": 161576, "urlhaus_id": "3950391", "url": "http://115.55.203.30:32869/i", "host": "115.55.203.30", "host_ip": "115.55.203.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 06:32:06 UTC", "discovered_at": "2026-10-15T06:32:06.000Z" }, { "id": 161577, "urlhaus_id": "3950390", "url": "http://121.202.142.137:42284/bin.sh", "host": "121.202.142.137", "host_ip": "121.202.142.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 06:18:19 UTC", "discovered_at": "2026-10-15T06:18:19.000Z" }, { "id": 161578, "urlhaus_id": "3950389", "url": "http://196.190.69.149:45971/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 06:17:07 UTC", "discovered_at": "2026-10-15T06:17:07.000Z" }, { "id": 161579, "urlhaus_id": "3950388", "url": "http://115.62.117.230:52274/i", "host": "115.62.117.230", "host_ip": "115.62.117.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 06:07:21 UTC", "discovered_at": "2026-10-15T06:07:21.000Z" }, { "id": 161580, "urlhaus_id": "3950387", "url": "http://95.9.35.137:35818/i", "host": "95.9.35.137", "host_ip": "95.9.35.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-15 05:54:18 UTC", "discovered_at": "2026-10-15T05:54:18.000Z" }, { "id": 161581, "urlhaus_id": "3950386", "url": "http://202.166.165.60:58074/i", "host": "202.166.165.60", "host_ip": "202.166.165.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 05:47:08 UTC", "discovered_at": "2026-10-15T05:47:08.000Z" }, { "id": 161582, "urlhaus_id": "3950385", "url": "http://82.22.23.132/bins/mpsl", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-15 05:16:21 UTC", "discovered_at": "2026-10-15T05:16:21.000Z" }, { "id": 161583, "urlhaus_id": "3950384", "url": "http://46.236.65.27:49459/i", "host": "46.236.65.27", "host_ip": "46.236.65.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 05:02:09 UTC", "discovered_at": "2026-10-15T05:02:09.000Z" }, { "id": 161584, "urlhaus_id": "3950383", "url": "http://42.85.124.15:53135/bin.sh", "host": "42.85.124.15", "host_ip": "42.85.124.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 05:02:06 UTC", "discovered_at": "2026-10-15T05:02:06.000Z" }, { "id": 161585, "urlhaus_id": "3950382", "url": "http://113.53.69.133:35662/i", "host": "113.53.69.133", "host_ip": "113.53.69.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 04:51:19 UTC", "discovered_at": "2026-10-15T04:51:19.000Z" }, { "id": 161586, "urlhaus_id": "3950381", "url": "http://59.180.134.170:41296/i", "host": "59.180.134.170", "host_ip": "59.180.134.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:49:45 UTC", "discovered_at": "2026-10-15T04:49:45.000Z" }, { "id": 161588, "urlhaus_id": "3950380", "url": "http://59.90.191.229:57627/bin.sh", "host": "59.90.191.229", "host_ip": "59.90.191.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:47:08 UTC", "discovered_at": "2026-10-15T04:47:08.000Z" }, { "id": 161587, "urlhaus_id": "3950379", "url": "http://59.90.191.229:57627/i", "host": "59.90.191.229", "host_ip": "59.90.191.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:47:08 UTC", "discovered_at": "2026-10-15T04:47:08.000Z" }, { "id": 161590, "urlhaus_id": "3950378", "url": "http://222.127.186.27:42601/i", "host": "222.127.186.27", "host_ip": "222.127.186.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:32:08 UTC", "discovered_at": "2026-10-15T04:32:08.000Z" }, { "id": 161589, "urlhaus_id": "3950377", "url": "http://221.15.178.114:40031/bin.sh", "host": "221.15.178.114", "host_ip": "221.15.178.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:32:08 UTC", "discovered_at": "2026-10-15T04:32:08.000Z" }, { "id": 161591, "urlhaus_id": "3950376", "url": "http://113.53.69.133:35662/bin.sh", "host": "113.53.69.133", "host_ip": "113.53.69.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 04:23:17 UTC", "discovered_at": "2026-10-15T04:23:17.000Z" }, { "id": 161592, "urlhaus_id": "3950375", "url": "http://123.12.226.4:57201/bin.sh", "host": "123.12.226.4", "host_ip": "123.12.226.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:17:06 UTC", "discovered_at": "2026-10-15T04:17:06.000Z" }, { "id": 161593, "urlhaus_id": "3950374", "url": "http://203.204.246.77:54733/i", "host": "203.204.246.77", "host_ip": "203.204.246.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 04:15:20 UTC", "discovered_at": "2026-10-15T04:15:20.000Z" }, { "id": 161594, "urlhaus_id": "3950373", "url": "http://120.28.194.30:34491/i", "host": "120.28.194.30", "host_ip": "120.28.194.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 04:02:07 UTC", "discovered_at": "2026-10-15T04:02:07.000Z" }, { "id": 161595, "urlhaus_id": "3950372", "url": "http://123.129.152.49:42069/i", "host": "123.129.152.49", "host_ip": "123.129.152.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 03:18:06 UTC", "discovered_at": "2026-10-15T03:18:06.000Z" }, { "id": 161596, "urlhaus_id": "3950371", "url": "http://222.141.36.15:51354/i", "host": "222.141.36.15", "host_ip": "222.141.36.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 03:17:06 UTC", "discovered_at": "2026-10-15T03:17:06.000Z" }, { "id": 161597, "urlhaus_id": "3950370", "url": "http://60.214.231.246:46912/i", "host": "60.214.231.246", "host_ip": "60.214.231.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 03:02:07 UTC", "discovered_at": "2026-10-15T03:02:07.000Z" }, { "id": 161598, "urlhaus_id": "3950369", "url": "http://116.10.132.105:48435/bin.sh", "host": "116.10.132.105", "host_ip": "116.10.132.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 02:59:11 UTC", "discovered_at": "2026-10-15T02:59:11.000Z" }, { "id": 161599, "urlhaus_id": "3950368", "url": "http://188.225.2.32:46748/bin.sh", "host": "188.225.2.32", "host_ip": "188.225.2.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 02:48:19 UTC", "discovered_at": "2026-10-15T02:48:19.000Z" }, { "id": 161600, "urlhaus_id": "3950367", "url": "http://115.50.104.42:48635/i", "host": "115.50.104.42", "host_ip": "115.50.104.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 02:36:15 UTC", "discovered_at": "2026-10-15T02:36:15.000Z" }, { "id": 161601, "urlhaus_id": "3950366", "url": "http://219.157.61.33:46146/bin.sh", "host": "219.157.61.33", "host_ip": "219.157.61.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 02:34:17 UTC", "discovered_at": "2026-10-15T02:34:17.000Z" }, { "id": 161603, "urlhaus_id": "3950365", "url": "http://123.14.176.37:37998/bin.sh", "host": "123.14.176.37", "host_ip": "123.14.176.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 02:32:07 UTC", "discovered_at": "2026-10-15T02:32:07.000Z" }, { "id": 161602, "urlhaus_id": "3950364", "url": "http://123.12.226.4:57201/i", "host": "123.12.226.4", "host_ip": "123.12.226.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 02:32:07 UTC", "discovered_at": "2026-10-15T02:32:07.000Z" }, { "id": 161604, "urlhaus_id": "3950363", "url": "http://116.138.107.83:57675/i", "host": "116.138.107.83", "host_ip": "116.138.107.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-15 02:28:14 UTC", "discovered_at": "2026-10-15T02:28:14.000Z" }, { "id": 161605, "urlhaus_id": "3950362", "url": "http://188.225.2.32:46748/i", "host": "188.225.2.32", "host_ip": "188.225.2.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 02:18:22 UTC", "discovered_at": "2026-10-15T02:18:22.000Z" }, { "id": 161606, "urlhaus_id": "3950361", "url": "http://46.236.65.9:41630/bin.sh", "host": "46.236.65.9", "host_ip": "46.236.65.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 02:17:06 UTC", "discovered_at": "2026-10-15T02:17:06.000Z" }, { "id": 161608, "urlhaus_id": "3950360", "url": "http://14.177.78.121:62685/i", "host": "14.177.78.121", "host_ip": "14.177.78.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 02:02:07 UTC", "discovered_at": "2026-10-15T02:02:07.000Z" }, { "id": 161607, "urlhaus_id": "3950359", "url": "http://125.41.4.218:38474/i", "host": "125.41.4.218", "host_ip": "125.41.4.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 02:02:07 UTC", "discovered_at": "2026-10-15T02:02:07.000Z" }, { "id": 161609, "urlhaus_id": "3950358", "url": "http://105.184.182.218:55557/i", "host": "105.184.182.218", "host_ip": "105.184.182.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:47:07 UTC", "discovered_at": "2026-10-15T01:47:07.000Z" }, { "id": 161610, "urlhaus_id": "3950357", "url": "http://61.53.238.49:58418/i", "host": "61.53.238.49", "host_ip": "61.53.238.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 01:41:19 UTC", "discovered_at": "2026-10-15T01:41:19.000Z" }, { "id": 161611, "urlhaus_id": "3950356", "url": "http://42.53.0.213:44215/i", "host": "42.53.0.213", "host_ip": "42.53.0.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:32:07 UTC", "discovered_at": "2026-10-15T01:32:07.000Z" }, { "id": 161612, "urlhaus_id": "3950355", "url": "http://119.166.84.226:52492/i", "host": "119.166.84.226", "host_ip": "119.166.84.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:22 UTC", "discovered_at": "2026-10-15T01:17:22.000Z" }, { "id": 161613, "urlhaus_id": "3950354", "url": "http://182.126.90.240:58809/bin.sh", "host": "182.126.90.240", "host_ip": "182.126.90.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:21 UTC", "discovered_at": "2026-10-15T01:17:21.000Z" }, { "id": 161614, "urlhaus_id": "3950353", "url": "http://117.223.140.39:53607/i", "host": "117.223.140.39", "host_ip": "117.223.140.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:13 UTC", "discovered_at": "2026-10-15T01:17:13.000Z" }, { "id": 161615, "urlhaus_id": "3950352", "url": "http://117.223.140.12:58562/i", "host": "117.223.140.12", "host_ip": "117.223.140.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:12 UTC", "discovered_at": "2026-10-15T01:17:12.000Z" }, { "id": 161616, "urlhaus_id": "3950351", "url": "http://117.223.140.12:58562/bin.sh", "host": "117.223.140.12", "host_ip": "117.223.140.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:11 UTC", "discovered_at": "2026-10-15T01:17:11.000Z" }, { "id": 161617, "urlhaus_id": "3950350", "url": "http://38.46.31.127:45662/i", "host": "38.46.31.127", "host_ip": "38.46.31.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:17:07 UTC", "discovered_at": "2026-10-15T01:17:07.000Z" }, { "id": 161618, "urlhaus_id": "3950349", "url": "http://61.53.238.49:58418/bin.sh", "host": "61.53.238.49", "host_ip": "61.53.238.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 01:15:21 UTC", "discovered_at": "2026-10-15T01:15:21.000Z" }, { "id": 161619, "urlhaus_id": "3950348", "url": "http://27.215.50.126:60465/i", "host": "27.215.50.126", "host_ip": "27.215.50.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 01:05:32 UTC", "discovered_at": "2026-10-15T01:05:32.000Z" }, { "id": 161620, "urlhaus_id": "3950347", "url": "http://182.120.96.206:47417/i", "host": "182.120.96.206", "host_ip": "182.120.96.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:02:08 UTC", "discovered_at": "2026-10-15T01:02:08.000Z" }, { "id": 161624, "urlhaus_id": "3950346", "url": "http://182.114.32.149:43016/i", "host": "182.114.32.149", "host_ip": "182.114.32.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:02:07 UTC", "discovered_at": "2026-10-15T01:02:07.000Z" }, { "id": 161623, "urlhaus_id": "3950345", "url": "http://222.141.36.15:51354/bin.sh", "host": "222.141.36.15", "host_ip": "222.141.36.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:02:07 UTC", "discovered_at": "2026-10-15T01:02:07.000Z" }, { "id": 161622, "urlhaus_id": "3950344", "url": "http://115.55.58.189:59109/i", "host": "115.55.58.189", "host_ip": "115.55.58.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:02:07 UTC", "discovered_at": "2026-10-15T01:02:07.000Z" }, { "id": 161621, "urlhaus_id": "3950343", "url": "http://115.55.53.145:45755/i", "host": "115.55.53.145", "host_ip": "115.55.53.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 01:02:07 UTC", "discovered_at": "2026-10-15T01:02:07.000Z" }, { "id": 161625, "urlhaus_id": "3950342", "url": "http://175.165.84.140:60779/bin.sh", "host": "175.165.84.140", "host_ip": "175.165.84.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-15 00:55:54 UTC", "discovered_at": "2026-10-15T00:55:54.000Z" }, { "id": 161627, "urlhaus_id": "3950341", "url": "http://103.170.217.170/mipsle", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 00:55:50 UTC", "discovered_at": "2026-10-15T00:55:50.000Z" }, { "id": 161626, "urlhaus_id": "3950340", "url": "http://103.170.217.170/mips64", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-15 00:55:50 UTC", "discovered_at": "2026-10-15T00:55:50.000Z" }, { "id": 161630, "urlhaus_id": "3950339", "url": "http://39.34.171.37:56012/Mozi.m", "host": "39.34.171.37", "host_ip": "39.34.171.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-15 00:55:49 UTC", "discovered_at": "2026-10-15T00:55:49.000Z" }, { "id": 161629, "urlhaus_id": "3950338", "url": "http://103.99.196.0:49309/Mozi.m", "host": "103.99.196.0", "host_ip": "103.99.196.0", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-15 00:55:49 UTC", "discovered_at": "2026-10-15T00:55:49.000Z" }, { "id": 161628, "urlhaus_id": "3950337", "url": "http://58.37.101.152:39822/Mozi.m", "host": "58.37.101.152", "host_ip": "58.37.101.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:55:49 UTC", "discovered_at": "2026-10-15T00:55:49.000Z" }, { "id": 161631, "urlhaus_id": "3950336", "url": "http://103.172.186.194:38095/bin.sh", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-15 00:55:47 UTC", "discovered_at": "2026-10-15T00:55:47.000Z" }, { "id": 161632, "urlhaus_id": "3950335", "url": "http://182.121.148.252:56262/Mozi.m", "host": "182.121.148.252", "host_ip": "182.121.148.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:55:36 UTC", "discovered_at": "2026-10-15T00:55:36.000Z" }, { "id": 161633, "urlhaus_id": "3950334", "url": "http://64.235.41.67/bin.exe", "host": "64.235.41.67", "host_ip": "64.235.41.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-15 00:55:35 UTC", "discovered_at": "2026-10-15T00:55:35.000Z" }, { "id": 161634, "urlhaus_id": "3950333", "url": "https://cdn.discordapp.com/attachments/1543991927924457544/1560030195078004736/bundle_6.zip?ex=6ad13ad6&is=6acfe956&hm=1c381935c200ef9ef1be05e1725c24f3b1bdfa933a7506d5e1b6f757083c882a&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:55:29 UTC", "discovered_at": "2026-10-15T00:55:29.000Z" }, { "id": 161635, "urlhaus_id": "3950332", "url": "https://cdn.discordapp.com/attachments/1557944891575762984/1560056425315573770/bundle_3.zip?ex=6ad15344&is=6ad001c4&hm=74002fd9d022845b0e5d1098907aa6016c8626602788827fee2119bcd63104fe&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:55:26 UTC", "discovered_at": "2026-10-15T00:55:26.000Z" }, { "id": 161636, "urlhaus_id": "3950331", "url": "https://cdn.discordapp.com/attachments/1519428468599951424/1560042068284284979/bundle.zip?ex=6ad145e5&is=6acff465&hm=cce26801b9dc586711f9f78e02d3014b2ffc36d8c9cbeca777cbd9ec91ab1ae4&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:55:08 UTC", "discovered_at": "2026-10-15T00:55:08.000Z" }, { "id": 161638, "urlhaus_id": "3950330", "url": "https://cdn.discordapp.com/attachments/1556411753053683722/1560030733433573437/bundle.zip?ex=6ad13b56&is=6acfe9d6&hm=d4dc7f01e45495509c3d85b6fb1010b0bcc244b733195270d95b1d3722cfb131&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:55:03 UTC", "discovered_at": "2026-10-15T00:55:03.000Z" }, { "id": 161637, "urlhaus_id": "3950329", "url": "https://totemstudios.xyz/mc-mod/dw", "host": "totemstudios.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zip", "last_online": null, "first_seen": "2026-10-15 00:55:03 UTC", "discovered_at": "2026-10-15T00:55:03.000Z" }, { "id": 161640, "urlhaus_id": "3950328", "url": "https://cdn.discordapp.com/attachments/1559687529396051989/1560085193094733916/bundle.zip?ex=6ad16e0f&is=6ad01c8f&hm=691b723e4cf3bdf17c0dc60a6dc724529734d5bff8fd737b7d6b336aecdef529&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:54:28 UTC", "discovered_at": "2026-10-15T00:54:28.000Z" }, { "id": 161639, "urlhaus_id": "3950327", "url": "https://cdn.discordapp.com/attachments/1556290935443431436/1560008090047225866/bundle.zip?ex=6ad12640&is=6acfd4c0&hm=5543546bcd7f0a4dc410e82129bd646b2a8af4e0d4c13414cf22ba0a9917eab1&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:54:28 UTC", "discovered_at": "2026-10-15T00:54:28.000Z" }, { "id": 161645, "urlhaus_id": "3950326", "url": "https://cdn.discordapp.com/attachments/1552663510213861469/1560028889374396476/bundle_2.zip?ex=6ad1399f&is=6acfe81f&hm=992f9e873193843fa8656ba1f0ae7857ad079473b2420ee9d6df8fa4398f2a82&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-15 00:54:27 UTC", "discovered_at": "2026-10-15T00:54:27.000Z" }, { "id": 161644, "urlhaus_id": "3950325", "url": "http://222.127.170.84:44966/Mozi.a", "host": "222.127.170.84", "host_ip": "222.127.170.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:27 UTC", "discovered_at": "2026-10-15T00:54:27.000Z" }, { "id": 161643, "urlhaus_id": "3950324", "url": "https://csgroup.host/f/qWYVS376", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:54:27 UTC", "discovered_at": "2026-10-15T00:54:27.000Z" }, { "id": 161642, "urlhaus_id": "3950323", "url": "https://csgroup.host/d/DrkJmzRN", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:54:27 UTC", "discovered_at": "2026-10-15T00:54:27.000Z" }, { "id": 161641, "urlhaus_id": "3950322", "url": "https://csgroup.host/d/qWYVS376", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:54:27 UTC", "discovered_at": "2026-10-15T00:54:27.000Z" }, { "id": 161646, "urlhaus_id": "3950321", "url": "https://csgroup.host/f/DrkJmzRN", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:54:26 UTC", "discovered_at": "2026-10-15T00:54:26.000Z" }, { "id": 161650, "urlhaus_id": "3950320", "url": "https://github.com/blankgrabberrt/synapseX-cracked-by-xexify/raw/refs/heads/main/synapse_x_cracked.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:11 UTC", "discovered_at": "2026-10-15T00:54:11.000Z" }, { "id": 161649, "urlhaus_id": "3950319", "url": "http://196.210.57.231:52367/bin.sh", "host": "196.210.57.231", "host_ip": "196.210.57.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-15 00:54:11 UTC", "discovered_at": "2026-10-15T00:54:11.000Z" }, { "id": 161648, "urlhaus_id": "3950318", "url": "https://github.com/blankgrabberrt/blankgrabberV3.04/raw/refs/heads/main/build%20grabber.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:11 UTC", "discovered_at": "2026-10-15T00:54:11.000Z" }, { "id": 161647, "urlhaus_id": "3950317", "url": "https://github.com/blankgrabberrt/blank-grabber/raw/refs/heads/main/Blank-Grabber-main/builder.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "BlankGrabber", "last_online": null, "first_seen": "2026-10-15 00:54:11 UTC", "discovered_at": "2026-10-15T00:54:11.000Z" }, { "id": 161651, "urlhaus_id": "3950316", "url": "http://64.235.41.67/i.exe", "host": "64.235.41.67", "host_ip": "64.235.41.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, malware", "last_online": null, "first_seen": "2026-10-15 00:54:10 UTC", "discovered_at": "2026-10-15T00:54:10.000Z" }, { "id": 161652, "urlhaus_id": "3950315", "url": "https://download2287.mediafire.com/9ejbtod7vpfglEMoUzzuJixckOOg4jIxznQ9hAh2HE6fxN3V4J65SQ1GSyD_v4gMm-4asWxtkXjlg8t1ksMr82-lkWQvycWsO4ptdZ1d5VAnRcevxmQuGwD-PqPH83s6TUaZ3GQtT0JEgiGR0VOG6zvcQKcPQcX-WP3A5tiU3oWWCZqV/7qqt260e0r7iiel/Silver+Bullet+Pro+v1.0.0+by+blackwolf.rar", "host": "download2287.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat", "last_online": null, "first_seen": "2026-10-15 00:54:08 UTC", "discovered_at": "2026-10-15T00:54:08.000Z" }, { "id": 161662, "urlhaus_id": "3950314", "url": "https://donutsmpclientts.lovable.app/api/public/download/xenon.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161661, "urlhaus_id": "3950313", "url": "https://donutsmpclientts.lovable.app/api/public/download/frost.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161660, "urlhaus_id": "3950312", "url": "https://donutsmpclientts.lovable.app/api/public/download/fakepay.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161659, "urlhaus_id": "3950311", "url": "https://donutsmpclientts.lovable.app/api/public/download/zyron.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161658, "urlhaus_id": "3950310", "url": "https://donutsmpclientts.lovable.app/api/public/download/dqrkis.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161657, "urlhaus_id": "3950309", "url": "https://donutsmpclientts.lovable.app/api/public/download/gooba.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161656, "urlhaus_id": "3950308", "url": "https://donutsmpclientts.lovable.app/api/public/download/corz.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161655, "urlhaus_id": "3950307", "url": "https://donutsmpclientts.lovable.app/api/public/download/krypton.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161654, "urlhaus_id": "3950306", "url": "https://donutsmpclientts.lovable.app/api/public/download/radium.jar", "host": "donutsmpclientts.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zero stealer", "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161653, "urlhaus_id": "3950305", "url": "https://csgroup.host/f/6fneq9D6", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:07 UTC", "discovered_at": "2026-10-15T00:54:07.000Z" }, { "id": 161671, "urlhaus_id": "3950304", "url": "https://therapygeorgia.com/curl/6bab7f3072580dd7a8fc3bf0ca52c98d3136ed0839e61c7e7794494b3b8c03ac", "host": "therapygeorgia.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, macOS, MacSync, zsh", "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161670, "urlhaus_id": "3950303", "url": "https://csgroup.host/d/6fneq9D6", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161669, "urlhaus_id": "3950302", "url": "http://tangible-drink.surge.sh/configx.txt", "host": "tangible-drink.surge.sh", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "honeypot, php, webshell", "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161668, "urlhaus_id": "3950301", "url": "https://csgroup.host/f/vQbdtAeK", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161667, "urlhaus_id": "3950300", "url": "http://167.148.201.191/944", "host": "167.148.201.191", "host_ip": "167.148.201.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161666, "urlhaus_id": "3950299", "url": "https://csgroup.host/d/ZvUyHX8H", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161665, "urlhaus_id": "3950298", "url": "https://csgroup.host/d/vQbdtAeK", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161664, "urlhaus_id": "3950297", "url": "https://csgroup.host/f/ZvUyHX8H", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161663, "urlhaus_id": "3950296", "url": "https://new.omsules.life/DvnX.zip", "host": "new.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-15 00:54:06 UTC", "discovered_at": "2026-10-15T00:54:06.000Z" }, { "id": 161672, "urlhaus_id": "3950295", "url": "http://112.198.195.68:52416/i", "host": "112.198.195.68", "host_ip": "112.198.195.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-15 00:40:19 UTC", "discovered_at": "2026-10-15T00:40:19.000Z" }, { "id": 161673, "urlhaus_id": "3950294", "url": "http://59.180.142.10:56474/i", "host": "59.180.142.10", "host_ip": "59.180.142.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:36:36 UTC", "discovered_at": "2026-10-15T00:36:36.000Z" }, { "id": 161674, "urlhaus_id": "3950293", "url": "http://188.129.251.7:45277/i", "host": "188.129.251.7", "host_ip": "188.129.251.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:33:07 UTC", "discovered_at": "2026-10-15T00:33:07.000Z" }, { "id": 161675, "urlhaus_id": "3950292", "url": "http://196.190.69.149:45971/bin.sh", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:32:07 UTC", "discovered_at": "2026-10-15T00:32:07.000Z" }, { "id": 161676, "urlhaus_id": "3950291", "url": "http://175.147.204.98:48168/bin.sh", "host": "175.147.204.98", "host_ip": "175.147.204.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:31:31 UTC", "discovered_at": "2026-10-15T00:31:31.000Z" }, { "id": 161677, "urlhaus_id": "3950290", "url": "http://27.215.50.126:60465/bin.sh", "host": "27.215.50.126", "host_ip": "27.215.50.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:24:20 UTC", "discovered_at": "2026-10-15T00:24:20.000Z" }, { "id": 161678, "urlhaus_id": "3950289", "url": "http://182.127.68.131:38141/i", "host": "182.127.68.131", "host_ip": "182.127.68.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:21:18 UTC", "discovered_at": "2026-10-15T00:21:18.000Z" }, { "id": 161679, "urlhaus_id": "3950288", "url": "http://105.184.224.107:46477/i", "host": "105.184.224.107", "host_ip": "105.184.224.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:17:08 UTC", "discovered_at": "2026-10-15T00:17:08.000Z" }, { "id": 161680, "urlhaus_id": "3950287", "url": "http://42.225.242.219:34293/i", "host": "42.225.242.219", "host_ip": "42.225.242.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:17:07 UTC", "discovered_at": "2026-10-15T00:17:07.000Z" }, { "id": 161681, "urlhaus_id": "3950286", "url": "http://42.225.199.101:33025/i", "host": "42.225.199.101", "host_ip": "42.225.199.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:17:06 UTC", "discovered_at": "2026-10-15T00:17:06.000Z" }, { "id": 161684, "urlhaus_id": "3950285", "url": "http://182.126.87.235:58067/i", "host": "182.126.87.235", "host_ip": "182.126.87.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:06:12 UTC", "discovered_at": "2026-10-15T00:06:12.000Z" }, { "id": 161683, "urlhaus_id": "3950284", "url": "http://182.126.87.235:58067/bin.sh", "host": "182.126.87.235", "host_ip": "182.126.87.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:06:12 UTC", "discovered_at": "2026-10-15T00:06:12.000Z" }, { "id": 161682, "urlhaus_id": "3950283", "url": "http://61.54.43.105:55256/bin.sh", "host": "61.54.43.105", "host_ip": "61.54.43.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:06:12 UTC", "discovered_at": "2026-10-15T00:06:12.000Z" }, { "id": 161685, "urlhaus_id": "3950282", "url": "http://182.113.43.146:37036/i", "host": "182.113.43.146", "host_ip": "182.113.43.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:05:19 UTC", "discovered_at": "2026-10-15T00:05:19.000Z" }, { "id": 161686, "urlhaus_id": "3950281", "url": "http://219.157.177.213:59079/i", "host": "219.157.177.213", "host_ip": "219.157.177.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-15 00:04:14 UTC", "discovered_at": "2026-10-15T00:04:14.000Z" }, { "id": 161687, "urlhaus_id": "3950280", "url": "http://103.140.87.105:55635/i", "host": "103.140.87.105", "host_ip": "103.140.87.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-15 00:02:07 UTC", "discovered_at": "2026-10-15T00:02:07.000Z" }, { "id": 161688, "urlhaus_id": "3950279", "url": "http://182.127.68.131:38141/bin.sh", "host": "182.127.68.131", "host_ip": "182.127.68.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 23:51:22 UTC", "discovered_at": "2026-10-14T23:51:22.000Z" }, { "id": 161689, "urlhaus_id": "3950278", "url": "http://42.227.131.223:54082/bin.sh", "host": "42.227.131.223", "host_ip": "42.227.131.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:47:13 UTC", "discovered_at": "2026-10-14T23:47:13.000Z" }, { "id": 161692, "urlhaus_id": "3950277", "url": "http://42.227.131.223:54082/i", "host": "42.227.131.223", "host_ip": "42.227.131.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:47:08 UTC", "discovered_at": "2026-10-14T23:47:08.000Z" }, { "id": 161691, "urlhaus_id": "3950276", "url": "http://42.229.216.163:55970/i", "host": "42.229.216.163", "host_ip": "42.229.216.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:47:08 UTC", "discovered_at": "2026-10-14T23:47:08.000Z" }, { "id": 161690, "urlhaus_id": "3950275", "url": "http://42.228.247.58:49878/i", "host": "42.228.247.58", "host_ip": "42.228.247.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:47:08 UTC", "discovered_at": "2026-10-14T23:47:08.000Z" }, { "id": 161693, "urlhaus_id": "3950274", "url": "http://196.189.98.110:42652/i", "host": "196.189.98.110", "host_ip": "196.189.98.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:47:07 UTC", "discovered_at": "2026-10-14T23:47:07.000Z" }, { "id": 161694, "urlhaus_id": "3950273", "url": "http://219.157.177.213:59079/bin.sh", "host": "219.157.177.213", "host_ip": "219.157.177.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 23:37:21 UTC", "discovered_at": "2026-10-14T23:37:21.000Z" }, { "id": 161695, "urlhaus_id": "3950272", "url": "http://119.179.215.124:50774/bin.sh", "host": "119.179.215.124", "host_ip": "119.179.215.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:18:20 UTC", "discovered_at": "2026-10-14T23:18:20.000Z" }, { "id": 161696, "urlhaus_id": "3950271", "url": "http://42.234.118.212:48674/i", "host": "42.234.118.212", "host_ip": "42.234.118.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:17:08 UTC", "discovered_at": "2026-10-14T23:17:08.000Z" }, { "id": 161697, "urlhaus_id": "3950270", "url": "http://83.233.56.26:51027/bin.sh", "host": "83.233.56.26", "host_ip": "83.233.56.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 23:12:17 UTC", "discovered_at": "2026-10-14T23:12:17.000Z" }, { "id": 161698, "urlhaus_id": "3950269", "url": "http://125.25.107.235:46550/i", "host": "125.25.107.235", "host_ip": "125.25.107.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:02:06 UTC", "discovered_at": "2026-10-14T23:02:06.000Z" }, { "id": 161699, "urlhaus_id": "3950268", "url": "http://46.252.33.253:51086/i", "host": "46.252.33.253", "host_ip": "46.252.33.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 23:02:05 UTC", "discovered_at": "2026-10-14T23:02:05.000Z" }, { "id": 161700, "urlhaus_id": "3950267", "url": "http://95.237.154.159:51303/bin.sh", "host": "95.237.154.159", "host_ip": "95.237.154.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 23:00:21 UTC", "discovered_at": "2026-10-14T23:00:21.000Z" }, { "id": 161701, "urlhaus_id": "3950266", "url": "http://113.238.161.206:43364/bin.sh", "host": "113.238.161.206", "host_ip": "113.238.161.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 22:58:28 UTC", "discovered_at": "2026-10-14T22:58:28.000Z" }, { "id": 161702, "urlhaus_id": "3950265", "url": "http://182.121.154.159:50078/bin.sh", "host": "182.121.154.159", "host_ip": "182.121.154.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 22:57:20 UTC", "discovered_at": "2026-10-14T22:57:20.000Z" }, { "id": 161703, "urlhaus_id": "3950264", "url": "http://123.15.75.224:58227/bin.sh", "host": "123.15.75.224", "host_ip": "123.15.75.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:47:07 UTC", "discovered_at": "2026-10-14T22:47:07.000Z" }, { "id": 161707, "urlhaus_id": "3950263", "url": "http://222.138.213.220:38715/i", "host": "222.138.213.220", "host_ip": "222.138.213.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:32:08 UTC", "discovered_at": "2026-10-14T22:32:08.000Z" }, { "id": 161706, "urlhaus_id": "3950262", "url": "http://222.141.101.135:40830/i", "host": "222.141.101.135", "host_ip": "222.141.101.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:32:08 UTC", "discovered_at": "2026-10-14T22:32:08.000Z" }, { "id": 161705, "urlhaus_id": "3950261", "url": "http://221.227.105.162:42522/i", "host": "221.227.105.162", "host_ip": "221.227.105.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:32:08 UTC", "discovered_at": "2026-10-14T22:32:08.000Z" }, { "id": 161704, "urlhaus_id": "3950260", "url": "http://222.138.213.220:38715/bin.sh", "host": "222.138.213.220", "host_ip": "222.138.213.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:32:08 UTC", "discovered_at": "2026-10-14T22:32:08.000Z" }, { "id": 161708, "urlhaus_id": "3950259", "url": "http://218.60.183.2:54353/i", "host": "218.60.183.2", "host_ip": "218.60.183.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 22:14:19 UTC", "discovered_at": "2026-10-14T22:14:19.000Z" }, { "id": 161709, "urlhaus_id": "3950258", "url": "http://119.180.14.117:36530/bin.sh", "host": "119.180.14.117", "host_ip": "119.180.14.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 22:10:34 UTC", "discovered_at": "2026-10-14T22:10:34.000Z" }, { "id": 161711, "urlhaus_id": "3950257", "url": "http://2.56.175.143/fghe3tj.mpsl", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:09:17 UTC", "discovered_at": "2026-10-14T22:09:17.000Z" }, { "id": 161710, "urlhaus_id": "3950256", "url": "http://2.56.175.143/010100110101010/fghe3tj.x86", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:09:17 UTC", "discovered_at": "2026-10-14T22:09:17.000Z" }, { "id": 161712, "urlhaus_id": "3950255", "url": "http://2.56.175.143/010100110101010/fghe3tj.arm7", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:25 UTC", "discovered_at": "2026-10-14T22:08:25.000Z" }, { "id": 161714, "urlhaus_id": "3950254", "url": "http://45.61.164.81/pftp", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:23 UTC", "discovered_at": "2026-10-14T22:08:23.000Z" }, { "id": 161713, "urlhaus_id": "3950253", "url": "http://45.61.164.81/telnetd", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:23 UTC", "discovered_at": "2026-10-14T22:08:23.000Z" }, { "id": 161725, "urlhaus_id": "3950252", "url": "http://45.61.164.81/apache2", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161724, "urlhaus_id": "3950251", "url": "http://45.61.164.81/cron", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161723, "urlhaus_id": "3950250", "url": "http://45.61.164.81/ntpd", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161722, "urlhaus_id": "3950249", "url": "http://45.61.164.81/ftp", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161721, "urlhaus_id": "3950248", "url": "http://45.61.164.81/wget", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161720, "urlhaus_id": "3950247", "url": "http://2.56.175.143/010100110101010/fghe3tj.sh4", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161719, "urlhaus_id": "3950246", "url": "http://82.22.23.132/bins/i686", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161718, "urlhaus_id": "3950245", "url": "http://2.56.175.143/fghe3tj.ppc", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161717, "urlhaus_id": "3950244", "url": "http://2.56.175.143/dwrioej/neon.mips", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161716, "urlhaus_id": "3950243", "url": "http://82.22.23.132/bins/arm5", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161715, "urlhaus_id": "3950242", "url": "http://2.56.175.143/010100110101010/fghe3tj.arm6", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:22 UTC", "discovered_at": "2026-10-14T22:08:22.000Z" }, { "id": 161731, "urlhaus_id": "3950241", "url": "http://2.56.175.143/fghe3tj.mips", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161730, "urlhaus_id": "3950240", "url": "http://45.61.164.81/tftp", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161729, "urlhaus_id": "3950239", "url": "http://45.61.164.81/bash", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161728, "urlhaus_id": "3950238", "url": "http://2.56.175.143/010100110101010/fghe3tj.arm", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161727, "urlhaus_id": "3950237", "url": "http://2.56.175.143/010100110101010/fghe3tj.mips", "host": "2.56.175.143", "host_ip": "2.56.175.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161726, "urlhaus_id": "3950236", "url": "http://45.61.164.81/openssh", "host": "45.61.164.81", "host_ip": "45.61.164.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 22:08:21 UTC", "discovered_at": "2026-10-14T22:08:21.000Z" }, { "id": 161732, "urlhaus_id": "3950235", "url": "http://123.133.217.85:57616/bin.sh", "host": "123.133.217.85", "host_ip": "123.133.217.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:02:20 UTC", "discovered_at": "2026-10-14T22:02:20.000Z" }, { "id": 161733, "urlhaus_id": "3950234", "url": "http://112.93.137.160:38478/i", "host": "112.93.137.160", "host_ip": "112.93.137.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:02:08 UTC", "discovered_at": "2026-10-14T22:02:08.000Z" }, { "id": 161734, "urlhaus_id": "3950233", "url": "http://221.14.39.83:47965/i", "host": "221.14.39.83", "host_ip": "221.14.39.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:02:07 UTC", "discovered_at": "2026-10-14T22:02:07.000Z" }, { "id": 161735, "urlhaus_id": "3950232", "url": "http://123.11.10.206:38595/bin.sh", "host": "123.11.10.206", "host_ip": "123.11.10.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 22:02:06 UTC", "discovered_at": "2026-10-14T22:02:06.000Z" }, { "id": 161736, "urlhaus_id": "3950231", "url": "http://218.60.183.2:54353/bin.sh", "host": "218.60.183.2", "host_ip": "218.60.183.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 21:49:30 UTC", "discovered_at": "2026-10-14T21:49:30.000Z" }, { "id": 161737, "urlhaus_id": "3950230", "url": "http://123.14.91.223:58456/bin.sh", "host": "123.14.91.223", "host_ip": "123.14.91.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:47:06 UTC", "discovered_at": "2026-10-14T21:47:06.000Z" }, { "id": 161738, "urlhaus_id": "3950229", "url": "http://61.54.43.105:55256/i", "host": "61.54.43.105", "host_ip": "61.54.43.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 21:39:10 UTC", "discovered_at": "2026-10-14T21:39:10.000Z" }, { "id": 161739, "urlhaus_id": "3950228", "url": "http://175.165.84.140:60779/i", "host": "175.165.84.140", "host_ip": "175.165.84.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-14 21:34:16 UTC", "discovered_at": "2026-10-14T21:34:16.000Z" }, { "id": 161740, "urlhaus_id": "3950227", "url": "http://62.60.226.140/files/7299809293/dfXHgmX.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-14 21:33:04 UTC", "discovered_at": "2026-10-14T21:33:04.000Z" }, { "id": 161741, "urlhaus_id": "3950226", "url": "http://221.15.88.109:47140/i", "host": "221.15.88.109", "host_ip": "221.15.88.109", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:32:10 UTC", "discovered_at": "2026-10-14T21:32:10.000Z" }, { "id": 161742, "urlhaus_id": "3950225", "url": "http://123.14.176.37:37998/i", "host": "123.14.176.37", "host_ip": "123.14.176.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:32:07 UTC", "discovered_at": "2026-10-14T21:32:07.000Z" }, { "id": 161744, "urlhaus_id": "3950224", "url": "http://123.11.10.206:38595/i", "host": "123.11.10.206", "host_ip": "123.11.10.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:32:06 UTC", "discovered_at": "2026-10-14T21:32:06.000Z" }, { "id": 161743, "urlhaus_id": "3950223", "url": "http://46.236.65.27:49459/bin.sh", "host": "46.236.65.27", "host_ip": "46.236.65.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:32:06 UTC", "discovered_at": "2026-10-14T21:32:06.000Z" }, { "id": 161745, "urlhaus_id": "3950222", "url": "http://119.116.38.46:52538/i", "host": "119.116.38.46", "host_ip": "119.116.38.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 21:26:12 UTC", "discovered_at": "2026-10-14T21:26:12.000Z" }, { "id": 161746, "urlhaus_id": "3950221", "url": "http://123.15.75.224:58227/i", "host": "123.15.75.224", "host_ip": "123.15.75.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:17:07 UTC", "discovered_at": "2026-10-14T21:17:07.000Z" }, { "id": 161747, "urlhaus_id": "3950220", "url": "http://219.157.61.33:46146/i", "host": "219.157.61.33", "host_ip": "219.157.61.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:17:06 UTC", "discovered_at": "2026-10-14T21:17:06.000Z" }, { "id": 161748, "urlhaus_id": "3950219", "url": "http://222.137.37.123:33987/i", "host": "222.137.37.123", "host_ip": "222.137.37.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 21:02:06 UTC", "discovered_at": "2026-10-14T21:02:06.000Z" }, { "id": 161749, "urlhaus_id": "3950218", "url": "http://123.4.197.98:51753/i", "host": "123.4.197.98", "host_ip": "123.4.197.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 20:47:07 UTC", "discovered_at": "2026-10-14T20:47:07.000Z" }, { "id": 161750, "urlhaus_id": "3950217", "url": "http://123.4.197.98:51753/bin.sh", "host": "123.4.197.98", "host_ip": "123.4.197.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 20:47:06 UTC", "discovered_at": "2026-10-14T20:47:06.000Z" }, { "id": 161751, "urlhaus_id": "3950216", "url": "http://120.84.212.113:55570/bin.sh", "host": "120.84.212.113", "host_ip": "120.84.212.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 20:20:12 UTC", "discovered_at": "2026-10-14T20:20:12.000Z" }, { "id": 161752, "urlhaus_id": "3950215", "url": "http://222.220.145.47:43434/i", "host": "222.220.145.47", "host_ip": "222.220.145.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 20:17:11 UTC", "discovered_at": "2026-10-14T20:17:11.000Z" }, { "id": 161753, "urlhaus_id": "3950214", "url": "http://105.184.247.90:37017/i", "host": "105.184.247.90", "host_ip": "105.184.247.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 20:02:08 UTC", "discovered_at": "2026-10-14T20:02:08.000Z" }, { "id": 161754, "urlhaus_id": "3950213", "url": "http://219.155.208.94:37290/i", "host": "219.155.208.94", "host_ip": "219.155.208.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 19:55:13 UTC", "discovered_at": "2026-10-14T19:55:13.000Z" }, { "id": 161755, "urlhaus_id": "3950212", "url": "http://219.157.18.209:57018/bin.sh", "host": "219.157.18.209", "host_ip": "219.157.18.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 19:54:16 UTC", "discovered_at": "2026-10-14T19:54:16.000Z" }, { "id": 161756, "urlhaus_id": "3950211", "url": "http://60.23.232.97:34316/i", "host": "60.23.232.97", "host_ip": "60.23.232.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 19:47:07 UTC", "discovered_at": "2026-10-14T19:47:07.000Z" }, { "id": 161757, "urlhaus_id": "3950210", "url": "http://182.113.207.181:34455/i", "host": "182.113.207.181", "host_ip": "182.113.207.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 19:45:15 UTC", "discovered_at": "2026-10-14T19:45:15.000Z" }, { "id": 161758, "urlhaus_id": "3950209", "url": "http://61.243.141.19:41846/i", "host": "61.243.141.19", "host_ip": "61.243.141.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 19:42:18 UTC", "discovered_at": "2026-10-14T19:42:18.000Z" }, { "id": 161759, "urlhaus_id": "3950208", "url": "http://60.23.239.98:43956/i", "host": "60.23.239.98", "host_ip": "60.23.239.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 19:32:09 UTC", "discovered_at": "2026-10-14T19:32:09.000Z" }, { "id": 161760, "urlhaus_id": "3950207", "url": "http://60.23.232.97:34316/bin.sh", "host": "60.23.232.97", "host_ip": "60.23.232.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 19:32:07 UTC", "discovered_at": "2026-10-14T19:32:07.000Z" }, { "id": 161761, "urlhaus_id": "3950206", "url": "http://196.210.57.231:52367/i", "host": "196.210.57.231", "host_ip": "196.210.57.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 19:08:17 UTC", "discovered_at": "2026-10-14T19:08:17.000Z" }, { "id": 160377, "urlhaus_id": "3950205", "url": "http://61.53.86.56:36762/i", "host": "61.53.86.56", "host_ip": "61.53.86.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:47:06 UTC", "discovered_at": "2026-10-14T18:47:06.000Z" }, { "id": 160378, "urlhaus_id": "3950204", "url": "http://115.61.9.19:42935/i", "host": "115.61.9.19", "host_ip": "115.61.9.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 18:45:16 UTC", "discovered_at": "2026-10-14T18:45:16.000Z" }, { "id": 160380, "urlhaus_id": "3950203", "url": "http://5.83.136.39:5001/android_arm", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:15 UTC", "discovered_at": "2026-10-14T18:34:15.000Z" }, { "id": 160379, "urlhaus_id": "3950202", "url": "http://5.83.136.39:5001/arm", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:15 UTC", "discovered_at": "2026-10-14T18:34:15.000Z" }, { "id": 160381, "urlhaus_id": "3950201", "url": "http://5.83.136.39:5001/i386", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:14 UTC", "discovered_at": "2026-10-14T18:34:14.000Z" }, { "id": 160384, "urlhaus_id": "3950200", "url": "http://5.83.136.39:5001/arm6", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:13 UTC", "discovered_at": "2026-10-14T18:34:13.000Z" }, { "id": 160383, "urlhaus_id": "3950199", "url": "http://5.83.136.39:5001/x86", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:13 UTC", "discovered_at": "2026-10-14T18:34:13.000Z" }, { "id": 160382, "urlhaus_id": "3950198", "url": "http://5.83.136.39:5001/bot.exe", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:13 UTC", "discovered_at": "2026-10-14T18:34:13.000Z" }, { "id": 160386, "urlhaus_id": "3950197", "url": "http://5.83.136.39:5001/android_arm64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:12 UTC", "discovered_at": "2026-10-14T18:34:12.000Z" }, { "id": 160385, "urlhaus_id": "3950196", "url": "http://5.83.136.39:5001/arm64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:12 UTC", "discovered_at": "2026-10-14T18:34:12.000Z" }, { "id": 160387, "urlhaus_id": "3950195", "url": "http://5.83.136.39:5001/armv7l", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:11 UTC", "discovered_at": "2026-10-14T18:34:11.000Z" }, { "id": 160391, "urlhaus_id": "3950194", "url": "http://5.83.136.39:5001/mips", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:10 UTC", "discovered_at": "2026-10-14T18:34:10.000Z" }, { "id": 160390, "urlhaus_id": "3950193", "url": "http://5.83.136.39:5001/arm5", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:10 UTC", "discovered_at": "2026-10-14T18:34:10.000Z" }, { "id": 160389, "urlhaus_id": "3950192", "url": "http://5.83.136.39:5001/mipsle", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:10 UTC", "discovered_at": "2026-10-14T18:34:10.000Z" }, { "id": 160388, "urlhaus_id": "3950191", "url": "http://5.83.136.39:5001/amd64", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-14 18:34:10 UTC", "discovered_at": "2026-10-14T18:34:10.000Z" }, { "id": 160393, "urlhaus_id": "3950190", "url": "http://123.133.217.85:57616/i", "host": "123.133.217.85", "host_ip": "123.133.217.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:32:08 UTC", "discovered_at": "2026-10-14T18:32:08.000Z" }, { "id": 160392, "urlhaus_id": "3950189", "url": "http://221.15.174.1:48113/i", "host": "221.15.174.1", "host_ip": "221.15.174.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:32:08 UTC", "discovered_at": "2026-10-14T18:32:08.000Z" }, { "id": 160394, "urlhaus_id": "3950188", "url": "http://5.83.136.39:5001/bins.sh", "host": "5.83.136.39", "host_ip": "5.83.136.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-14 18:24:15 UTC", "discovered_at": "2026-10-14T18:24:15.000Z" }, { "id": 160395, "urlhaus_id": "3950187", "url": "http://59.180.147.206:48667/i", "host": "59.180.147.206", "host_ip": "59.180.147.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:17:07 UTC", "discovered_at": "2026-10-14T18:17:07.000Z" }, { "id": 160396, "urlhaus_id": "3950186", "url": "http://123.5.132.134:43333/i", "host": "123.5.132.134", "host_ip": "123.5.132.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:17:06 UTC", "discovered_at": "2026-10-14T18:17:06.000Z" }, { "id": 160397, "urlhaus_id": "3950185", "url": "http://88.235.97.150:53953/Mozi.m", "host": "88.235.97.150", "host_ip": "88.235.97.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 18:04:08 UTC", "discovered_at": "2026-10-14T18:04:08.000Z" }, { "id": 160398, "urlhaus_id": "3950184", "url": "http://oper.atlas101.us.kg/dl.sh", "host": "oper.atlas101.us.kg", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot, nsvps-soc", "last_online": null, "first_seen": "2026-10-14 18:04:06 UTC", "discovered_at": "2026-10-14T18:04:06.000Z" }, { "id": 160399, "urlhaus_id": "3950183", "url": "http://115.61.9.19:42935/bin.sh", "host": "115.61.9.19", "host_ip": "115.61.9.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 18:03:15 UTC", "discovered_at": "2026-10-14T18:03:15.000Z" }, { "id": 160400, "urlhaus_id": "3950182", "url": "https://download1350.mediafire.com/88vifno3wcxgekd8GlE1LL0MEu2Yn7aeGf33KLq5lixlyTdyXoHFudWr6yVsAAhnoLgOisctqtV5UVcYFW2E5GgCTpXnUhA0Z9Ryts3I05K8HduQwJ3NDG2bsJ5EmN_TEeuNchJ__sWpMhZWxnoUu0qCSwa8RhGPFcfMSv0pcuE/q5yumpkgi1cyncb/Modded-games.7z", "host": "download1350.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-modded, stealer", "last_online": null, "first_seen": "2026-10-14 17:43:09 UTC", "discovered_at": "2026-10-14T17:43:09.000Z" }, { "id": 160401, "urlhaus_id": "3950181", "url": "https://download2274.mediafire.com/8yy4pribgk9g15PcCHemPyg5tRifV3DZv8vfOcF7-FjnJghV91kP738BrfpropPy1S_-QgyW8zub-iuQVgVwNuvW-JFy7cFHdq7FcrD1aty7CpdbwUTcW_pmAAhVK9U9hvtHS2dvsCEYjA8Pz2QoaEc_6Zc0KEsBztfP9OcCZZc/175gactmti3k2a7/cs2-client-v1.3.rar", "host": "download2274.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-2026, stealer", "last_online": null, "first_seen": "2026-10-14 17:42:47 UTC", "discovered_at": "2026-10-14T17:42:47.000Z" }, { "id": 160402, "urlhaus_id": "3950180", "url": "https://download2280.mediafire.com/juekf51m92ng7eLvzYSCjBPvma-g_a2Jj14bOCZ-DtG68v8Zta5ud1y6z5xn7wIHWk8AtYv9lKmJ8XSTJw2srkG06MEUkncFw1kbZmerJuJiwDyGFZfS9JtORwir22a2HPlyIZeEI1Np5i3LRI2DR41CExj-ES_pgemcoFPAD7s/l7ztshhv95yv06l/LunarV2.zip", "host": "download2280.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-LunarV2, stealer", "last_online": null, "first_seen": "2026-10-14 17:42:43 UTC", "discovered_at": "2026-10-14T17:42:43.000Z" }, { "id": 160403, "urlhaus_id": "3950179", "url": "https://www.mediafire.com/file_premium/qnngzdupk09hymq/aStarterepcX.rar/file", "host": "www.mediafire.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-4545, stealer", "last_online": null, "first_seen": "2026-10-14 17:42:24 UTC", "discovered_at": "2026-10-14T17:42:24.000Z" }, { "id": 160404, "urlhaus_id": "3950178", "url": "http://222.184.195.150:43819/bin.sh", "host": "222.184.195.150", "host_ip": "222.184.195.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 17:42:21 UTC", "discovered_at": "2026-10-14T17:42:21.000Z" }, { "id": 160405, "urlhaus_id": "3950177", "url": "https://javb.omsules.life/DvnX.zip", "host": "javb.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-14 17:42:15 UTC", "discovered_at": "2026-10-14T17:42:15.000Z" }, { "id": 160406, "urlhaus_id": "3950176", "url": "https://uc1fb1e965c6d803f97040b2d495.dl.dropboxusercontent.com/cd/0/get/DJ8Ioc0vV_a51yKkHI6YlEeMqMH7a3SS5_c4S8TjmYGuuhx1dXmwltxcUIlV-HWu1vrJTL7uvzDckDQfvymy007ZmaCqtxGydjsrEVPFCxKpBt90UgtWUchNp4sP-1JfT1e1RdL1Ga8Np46ckrfqvJTw/file?dl=1#", "host": "uc1fb1e965c6d803f97040b2d495.dl.dropboxusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-Nexus, stealer", "last_online": null, "first_seen": "2026-10-14 17:42:06 UTC", "discovered_at": "2026-10-14T17:42:06.000Z" }, { "id": 160407, "urlhaus_id": "3950175", "url": "http://170.84.134.172:48133/bin.sh", "host": "170.84.134.172", "host_ip": "170.84.134.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 17:19:12 UTC", "discovered_at": "2026-10-14T17:19:12.000Z" }, { "id": 160408, "urlhaus_id": "3950174", "url": "http://42.180.33.60:50144/i", "host": "42.180.33.60", "host_ip": "42.180.33.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 17:08:11 UTC", "discovered_at": "2026-10-14T17:08:11.000Z" }, { "id": 160409, "urlhaus_id": "3950173", "url": "http://222.184.195.150:43819/i", "host": "222.184.195.150", "host_ip": "222.184.195.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 17:04:12 UTC", "discovered_at": "2026-10-14T17:04:12.000Z" }, { "id": 160410, "urlhaus_id": "3950172", "url": "http://125.47.205.188:50102/bin.sh", "host": "125.47.205.188", "host_ip": "125.47.205.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 17:02:07 UTC", "discovered_at": "2026-10-14T17:02:07.000Z" }, { "id": 160411, "urlhaus_id": "3950171", "url": "http://125.41.8.69:46770/i", "host": "125.41.8.69", "host_ip": "125.41.8.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 17:02:06 UTC", "discovered_at": "2026-10-14T17:02:06.000Z" }, { "id": 160412, "urlhaus_id": "3950170", "url": "http://27.207.91.154:57699/i", "host": "27.207.91.154", "host_ip": "27.207.91.154", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 17:00:15 UTC", "discovered_at": "2026-10-14T17:00:15.000Z" }, { "id": 160413, "urlhaus_id": "3950169", "url": "http://115.49.106.15:53314/i", "host": "115.49.106.15", "host_ip": "115.49.106.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:57:15 UTC", "discovered_at": "2026-10-14T16:57:15.000Z" }, { "id": 160414, "urlhaus_id": "3950168", "url": "http://182.124.19.237:56398/bin.sh", "host": "182.124.19.237", "host_ip": "182.124.19.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:54:11 UTC", "discovered_at": "2026-10-14T16:54:11.000Z" }, { "id": 160415, "urlhaus_id": "3950167", "url": "http://105.224.34.253:38139/i", "host": "105.224.34.253", "host_ip": "105.224.34.253", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:48:06 UTC", "discovered_at": "2026-10-14T16:48:06.000Z" }, { "id": 160416, "urlhaus_id": "3950166", "url": "http://125.41.4.218:38474/bin.sh", "host": "125.41.4.218", "host_ip": "125.41.4.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:47:06 UTC", "discovered_at": "2026-10-14T16:47:06.000Z" }, { "id": 160417, "urlhaus_id": "3950165", "url": "http://42.224.147.47:49878/i", "host": "42.224.147.47", "host_ip": "42.224.147.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:42:15 UTC", "discovered_at": "2026-10-14T16:42:15.000Z" }, { "id": 160418, "urlhaus_id": "3950164", "url": "http://42.180.33.60:50144/bin.sh", "host": "42.180.33.60", "host_ip": "42.180.33.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:41:13 UTC", "discovered_at": "2026-10-14T16:41:13.000Z" }, { "id": 160419, "urlhaus_id": "3950163", "url": "http://115.49.106.15:53314/bin.sh", "host": "115.49.106.15", "host_ip": "115.49.106.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:38:16 UTC", "discovered_at": "2026-10-14T16:38:16.000Z" }, { "id": 160420, "urlhaus_id": "3950162", "url": "http://182.121.148.252:56262/bin.sh", "host": "182.121.148.252", "host_ip": "182.121.148.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:37:07 UTC", "discovered_at": "2026-10-14T16:37:07.000Z" }, { "id": 160421, "urlhaus_id": "3950161", "url": "http://222.241.235.143:50704/i", "host": "222.241.235.143", "host_ip": "222.241.235.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:32:12 UTC", "discovered_at": "2026-10-14T16:32:12.000Z" }, { "id": 160423, "urlhaus_id": "3950160", "url": "http://125.41.8.69:46770/bin.sh", "host": "125.41.8.69", "host_ip": "125.41.8.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:32:07 UTC", "discovered_at": "2026-10-14T16:32:07.000Z" }, { "id": 160422, "urlhaus_id": "3950159", "url": "http://105.224.34.253:38139/bin.sh", "host": "105.224.34.253", "host_ip": "105.224.34.253", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:32:07 UTC", "discovered_at": "2026-10-14T16:32:07.000Z" }, { "id": 160425, "urlhaus_id": "3950158", "url": "http://42.224.174.209:57818/i", "host": "42.224.174.209", "host_ip": "42.224.174.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:17:09 UTC", "discovered_at": "2026-10-14T16:17:09.000Z" }, { "id": 160424, "urlhaus_id": "3950157", "url": "http://42.224.217.178:43943/i", "host": "42.224.217.178", "host_ip": "42.224.217.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:17:09 UTC", "discovered_at": "2026-10-14T16:17:09.000Z" }, { "id": 160426, "urlhaus_id": "3950156", "url": "https://java.omsules.life/DvnX.zip", "host": "java.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-14 16:13:25 UTC", "discovered_at": "2026-10-14T16:13:25.000Z" }, { "id": 160427, "urlhaus_id": "3950155", "url": "http://202.71.14.31/x/x.exe", "host": "202.71.14.31", "host_ip": "202.71.14.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "stealer, SteamStealer", "last_online": null, "first_seen": "2026-10-14 16:13:08 UTC", "discovered_at": "2026-10-14T16:13:08.000Z" }, { "id": 160428, "urlhaus_id": "3950154", "url": "http://42.238.248.174:40554/bin.sh", "host": "42.238.248.174", "host_ip": "42.238.248.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 16:10:12 UTC", "discovered_at": "2026-10-14T16:10:12.000Z" }, { "id": 160429, "urlhaus_id": "3950153", "url": "http://175.148.155.205:59473/i", "host": "175.148.155.205", "host_ip": "175.148.155.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 16:02:21 UTC", "discovered_at": "2026-10-14T16:02:21.000Z" }, { "id": 160430, "urlhaus_id": "3950152", "url": "http://27.207.91.154:57699/bin.sh", "host": "27.207.91.154", "host_ip": "27.207.91.154", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 15:52:15 UTC", "discovered_at": "2026-10-14T15:52:15.000Z" }, { "id": 160431, "urlhaus_id": "3950151", "url": "http://115.56.154.91:52817/i", "host": "115.56.154.91", "host_ip": "115.56.154.91", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 15:50:13 UTC", "discovered_at": "2026-10-14T15:50:13.000Z" }, { "id": 160432, "urlhaus_id": "3950150", "url": "http://42.52.30.36:49690/i", "host": "42.52.30.36", "host_ip": "42.52.30.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:47:08 UTC", "discovered_at": "2026-10-14T15:47:08.000Z" }, { "id": 160433, "urlhaus_id": "3950149", "url": "https://clientsorgnet.netlify.app/assets/gooba-client-1.21.11.jar", "host": "clientsorgnet.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-14 15:40:10 UTC", "discovered_at": "2026-10-14T15:40:10.000Z" }, { "id": 160434, "urlhaus_id": "3950148", "url": "https://spaceware.cc/SpaceWare.zip", "host": "spaceware.cc", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-spaceware, stealer", "last_online": null, "first_seen": "2026-10-14 15:39:33 UTC", "discovered_at": "2026-10-14T15:39:33.000Z" }, { "id": 160435, "urlhaus_id": "3950147", "url": "https://cdn.discordapp.com/attachments/1533604985240162314/1559952255380230165/bundle.zip?ex=6ad0f240&is=6acfa0c0&hm=fa472db7594eb563aecfa05c3542013bba0c78a157098c684e7f56d71a61e1c0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-14 15:39:21 UTC", "discovered_at": "2026-10-14T15:39:21.000Z" }, { "id": 160437, "urlhaus_id": "3950146", "url": "https://cde.omsules.life/DvnX.zip", "host": "cde.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-14 15:39:18 UTC", "discovered_at": "2026-10-14T15:39:18.000Z" }, { "id": 160436, "urlhaus_id": "3950145", "url": "https://clientsorgnet.netlify.app/assets/kr-client-1.21.11.jar", "host": "clientsorgnet.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-14 15:39:18 UTC", "discovered_at": "2026-10-14T15:39:18.000Z" }, { "id": 160439, "urlhaus_id": "3950144", "url": "https://clientsorgnet.netlify.app/assets/voids-fake-bal.jar", "host": "clientsorgnet.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-14 15:39:13 UTC", "discovered_at": "2026-10-14T15:39:13.000Z" }, { "id": 160438, "urlhaus_id": "3950143", "url": "https://clientsorgnet.netlify.app/assets/anubis-client-1.21.11.jar", "host": "clientsorgnet.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-14 15:39:13 UTC", "discovered_at": "2026-10-14T15:39:13.000Z" }, { "id": 160440, "urlhaus_id": "3950140", "url": "https://mfschools.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&t=tunde", "host": "mfschools.screenconnect.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:37:12 UTC", "discovered_at": "2026-10-14T15:37:12.000Z" }, { "id": 160442, "urlhaus_id": "3950139", "url": "http://42.227.207.135:59885/i", "host": "42.227.207.135", "host_ip": "42.227.207.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:32:07 UTC", "discovered_at": "2026-10-14T15:32:07.000Z" }, { "id": 160441, "urlhaus_id": "3950138", "url": "http://180.149.219.213:56306/bin.sh", "host": "180.149.219.213", "host_ip": "180.149.219.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:32:07 UTC", "discovered_at": "2026-10-14T15:32:07.000Z" }, { "id": 160443, "urlhaus_id": "3950137", "url": "http://182.114.194.42:59711/i", "host": "182.114.194.42", "host_ip": "182.114.194.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:18:06 UTC", "discovered_at": "2026-10-14T15:18:06.000Z" }, { "id": 160444, "urlhaus_id": "3950136", "url": "http://175.148.147.248:46092/i", "host": "175.148.147.248", "host_ip": "175.148.147.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:17:09 UTC", "discovered_at": "2026-10-14T15:17:09.000Z" }, { "id": 160445, "urlhaus_id": "3950135", "url": "http://180.149.219.213:56306/i", "host": "180.149.219.213", "host_ip": "180.149.219.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:17:07 UTC", "discovered_at": "2026-10-14T15:17:07.000Z" }, { "id": 160446, "urlhaus_id": "3950134", "url": "http://175.149.80.109:35787/bin.sh", "host": "175.149.80.109", "host_ip": "175.149.80.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:17:06 UTC", "discovered_at": "2026-10-14T15:17:06.000Z" }, { "id": 160447, "urlhaus_id": "3950133", "url": "http://82.22.23.132/bins/x86_64", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:12:15 UTC", "discovered_at": "2026-10-14T15:12:15.000Z" }, { "id": 160453, "urlhaus_id": "3950132", "url": "http://82.22.23.132/bins/arm", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160452, "urlhaus_id": "3950131", "url": "http://82.22.23.132/bins/spc", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160451, "urlhaus_id": "3950130", "url": "http://38.43.93.61/main_arm", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160450, "urlhaus_id": "3950129", "url": "http://38.43.93.61/main_sh4", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160449, "urlhaus_id": "3950128", "url": "http://38.43.93.61/main_mips", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160448, "urlhaus_id": "3950127", "url": "http://38.43.93.61/main_mpsl", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:11:13 UTC", "discovered_at": "2026-10-14T15:11:13.000Z" }, { "id": 160462, "urlhaus_id": "3950126", "url": "http://38.43.93.61/main_x86", "host": "38.43.93.61", "host_ip": "38.43.93.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160461, "urlhaus_id": "3950125", "url": "http://153.56.180.69/main_arm7", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160460, "urlhaus_id": "3950124", "url": "http://82.22.23.132/bins/arm7", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160459, "urlhaus_id": "3950123", "url": "http://82.22.23.132/bins/arm6", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160458, "urlhaus_id": "3950122", "url": "http://82.22.23.132/bins/sh4", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160457, "urlhaus_id": "3950121", "url": "http://82.22.23.132/bins/mips", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160456, "urlhaus_id": "3950120", "url": "http://82.22.23.132/bins/m68k", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160455, "urlhaus_id": "3950119", "url": "http://82.22.23.132/bins/ppc", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160454, "urlhaus_id": "3950118", "url": "http://82.22.23.132/bins/x86", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 15:10:14 UTC", "discovered_at": "2026-10-14T15:10:14.000Z" }, { "id": 160463, "urlhaus_id": "3950117", "url": "http://105.225.151.155:44655/i", "host": "105.225.151.155", "host_ip": "105.225.151.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 15:05:14 UTC", "discovered_at": "2026-10-14T15:05:14.000Z" }, { "id": 160464, "urlhaus_id": "3950116", "url": "http://125.43.100.169:55589/i", "host": "125.43.100.169", "host_ip": "125.43.100.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 15:02:10 UTC", "discovered_at": "2026-10-14T15:02:10.000Z" }, { "id": 160465, "urlhaus_id": "3950115", "url": "http://42.4.97.14:55031/bin.sh", "host": "42.4.97.14", "host_ip": "42.4.97.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 14:58:16 UTC", "discovered_at": "2026-10-14T14:58:16.000Z" }, { "id": 160466, "urlhaus_id": "3950114", "url": "http://27.44.144.146:45931/i", "host": "27.44.144.146", "host_ip": "27.44.144.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 14:56:14 UTC", "discovered_at": "2026-10-14T14:56:14.000Z" }, { "id": 160469, "urlhaus_id": "3950113", "url": "http://27.44.146.181:44234/i", "host": "27.44.146.181", "host_ip": "27.44.146.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:47:11 UTC", "discovered_at": "2026-10-14T14:47:11.000Z" }, { "id": 160468, "urlhaus_id": "3950112", "url": "http://61.53.116.96:39682/i", "host": "61.53.116.96", "host_ip": "61.53.116.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:47:11 UTC", "discovered_at": "2026-10-14T14:47:11.000Z" }, { "id": 160467, "urlhaus_id": "3950111", "url": "http://60.23.235.232:59242/i", "host": "60.23.235.232", "host_ip": "60.23.235.232", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:47:11 UTC", "discovered_at": "2026-10-14T14:47:11.000Z" }, { "id": 160470, "urlhaus_id": "3950110", "url": "http://115.51.153.198:50321/i", "host": "115.51.153.198", "host_ip": "115.51.153.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 14:40:14 UTC", "discovered_at": "2026-10-14T14:40:14.000Z" }, { "id": 160471, "urlhaus_id": "3950109", "url": "http://105.225.151.155:44655/bin.sh", "host": "105.225.151.155", "host_ip": "105.225.151.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 14:36:14 UTC", "discovered_at": "2026-10-14T14:36:14.000Z" }, { "id": 160475, "urlhaus_id": "3950108", "url": "http://61.137.135.106:33915/i", "host": "61.137.135.106", "host_ip": "61.137.135.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:32:12 UTC", "discovered_at": "2026-10-14T14:32:12.000Z" }, { "id": 160474, "urlhaus_id": "3950107", "url": "http://60.23.235.232:59242/bin.sh", "host": "60.23.235.232", "host_ip": "60.23.235.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:32:12 UTC", "discovered_at": "2026-10-14T14:32:12.000Z" }, { "id": 160473, "urlhaus_id": "3950106", "url": "http://61.52.110.184:34988/bin.sh", "host": "61.52.110.184", "host_ip": "61.52.110.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:32:12 UTC", "discovered_at": "2026-10-14T14:32:12.000Z" }, { "id": 160472, "urlhaus_id": "3950105", "url": "http://61.54.43.231:41092/bin.sh", "host": "61.54.43.231", "host_ip": "61.54.43.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:32:12 UTC", "discovered_at": "2026-10-14T14:32:12.000Z" }, { "id": 160476, "urlhaus_id": "3950104", "url": "http://115.48.119.213:59405/i", "host": "115.48.119.213", "host_ip": "115.48.119.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-14 14:26:17 UTC", "discovered_at": "2026-10-14T14:26:17.000Z" }, { "id": 160477, "urlhaus_id": "3950103", "url": "http://182.124.19.237:56398/i", "host": "182.124.19.237", "host_ip": "182.124.19.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 14:25:16 UTC", "discovered_at": "2026-10-14T14:25:16.000Z" }, { "id": 160478, "urlhaus_id": "3950102", "url": "http://196.191.233.24:47336/bin.sh", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 14:10:16 UTC", "discovered_at": "2026-10-14T14:10:16.000Z" }, { "id": 160479, "urlhaus_id": "3950101", "url": "http://212.54.86.171:51213/Mozi.a", "host": "212.54.86.171", "host_ip": "212.54.86.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:05:07 UTC", "discovered_at": "2026-10-14T14:05:07.000Z" }, { "id": 160481, "urlhaus_id": "3950100", "url": "http://123.12.225.135:44550/bin.sh", "host": "123.12.225.135", "host_ip": "123.12.225.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:02:09 UTC", "discovered_at": "2026-10-14T14:02:09.000Z" }, { "id": 160480, "urlhaus_id": "3950099", "url": "http://60.18.111.216:40714/bin.sh", "host": "60.18.111.216", "host_ip": "60.18.111.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 14:02:09 UTC", "discovered_at": "2026-10-14T14:02:09.000Z" }, { "id": 160482, "urlhaus_id": "3950098", "url": "http://36.32.176.115:57093/i", "host": "36.32.176.115", "host_ip": "36.32.176.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:47:15 UTC", "discovered_at": "2026-10-14T13:47:15.000Z" }, { "id": 160484, "urlhaus_id": "3950097", "url": "http://36.251.156.38:34933/i", "host": "36.251.156.38", "host_ip": "36.251.156.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:47:08 UTC", "discovered_at": "2026-10-14T13:47:08.000Z" }, { "id": 160483, "urlhaus_id": "3950096", "url": "http://105.186.99.181:46611/bin.sh", "host": "105.186.99.181", "host_ip": "105.186.99.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:47:08 UTC", "discovered_at": "2026-10-14T13:47:08.000Z" }, { "id": 160485, "urlhaus_id": "3950095", "url": "http://113.239.221.244:57134/i", "host": "113.239.221.244", "host_ip": "113.239.221.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 13:43:16 UTC", "discovered_at": "2026-10-14T13:43:16.000Z" }, { "id": 160486, "urlhaus_id": "3950094", "url": "http://123.5.132.134:43333/bin.sh", "host": "123.5.132.134", "host_ip": "123.5.132.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:32:08 UTC", "discovered_at": "2026-10-14T13:32:08.000Z" }, { "id": 160487, "urlhaus_id": "3950093", "url": "http://222.140.181.122:38855/bin.sh", "host": "222.140.181.122", "host_ip": "222.140.181.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:32:06 UTC", "discovered_at": "2026-10-14T13:32:06.000Z" }, { "id": 160488, "urlhaus_id": "3950092", "url": "http://175.146.1.197:37163/i", "host": "175.146.1.197", "host_ip": "175.146.1.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 13:27:24 UTC", "discovered_at": "2026-10-14T13:27:24.000Z" }, { "id": 160489, "urlhaus_id": "3950091", "url": "http://105.225.189.31:40545/i", "host": "105.225.189.31", "host_ip": "105.225.189.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:17:06 UTC", "discovered_at": "2026-10-14T13:17:06.000Z" }, { "id": 160490, "urlhaus_id": "3950090", "url": "http://45.198.224.60/abuse-antirobot/pentagon", "host": "45.198.224.60", "host_ip": "45.198.224.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-bit, elf, x86-64", "last_online": null, "first_seen": "2026-10-14 13:13:16 UTC", "discovered_at": "2026-10-14T13:13:16.000Z" }, { "id": 160491, "urlhaus_id": "3950089", "url": "http://151.242.30.142/NebulaC2-main.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:10:09 UTC", "discovered_at": "2026-10-14T13:10:09.000Z" }, { "id": 160492, "urlhaus_id": "3950088", "url": "http://151.242.30.142/bBOTNET.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:09:07 UTC", "discovered_at": "2026-10-14T13:09:07.000Z" }, { "id": 160493, "urlhaus_id": "3950087", "url": "http://151.242.30.142/darkstresser.tk.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:48 UTC", "discovered_at": "2026-10-14T13:08:48.000Z" }, { "id": 160494, "urlhaus_id": "3950086", "url": "http://151.242.30.142/bot%20ddos%203.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2", "last_online": null, "first_seen": "2026-10-14 13:08:30 UTC", "discovered_at": "2026-10-14T13:08:30.000Z" }, { "id": 160497, "urlhaus_id": "3950085", "url": "http://151.242.30.142/Fathir--C2.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:29 UTC", "discovered_at": "2026-10-14T13:08:29.000Z" }, { "id": 160496, "urlhaus_id": "3950084", "url": "http://151.242.30.142/quick-booter.xyz.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:29 UTC", "discovered_at": "2026-10-14T13:08:29.000Z" }, { "id": 160495, "urlhaus_id": "3950083", "url": "http://207.244.234.243:8000/xmrig-arm64", "host": "207.244.234.243", "host_ip": "207.244.234.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm64, elf, xmrig", "last_online": null, "first_seen": "2026-10-14 13:08:29 UTC", "discovered_at": "2026-10-14T13:08:29.000Z" }, { "id": 160498, "urlhaus_id": "3950082", "url": "http://207.244.234.243:8000/xmrig-arm64-musl", "host": "207.244.234.243", "host_ip": "207.244.234.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm64, elf, xmrig", "last_online": null, "first_seen": "2026-10-14 13:08:28 UTC", "discovered_at": "2026-10-14T13:08:28.000Z" }, { "id": 160500, "urlhaus_id": "3950081", "url": "http://151.242.30.142/DDOS.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:27 UTC", "discovered_at": "2026-10-14T13:08:27.000Z" }, { "id": 160499, "urlhaus_id": "3950080", "url": "http://151.242.30.142/Botnet.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:27 UTC", "discovered_at": "2026-10-14T13:08:27.000Z" }, { "id": 160504, "urlhaus_id": "3950079", "url": "http://15.204.85.94:9999/xmrig", "host": "15.204.85.94", "host_ip": "15.204.85.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner", "last_online": null, "first_seen": "2026-10-14 13:08:23 UTC", "discovered_at": "2026-10-14T13:08:23.000Z" }, { "id": 160503, "urlhaus_id": "3950078", "url": "http://66.29.151.122/mipsel", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:23 UTC", "discovered_at": "2026-10-14T13:08:23.000Z" }, { "id": 160502, "urlhaus_id": "3950077", "url": "http://66.29.151.122/x86", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:23 UTC", "discovered_at": "2026-10-14T13:08:23.000Z" }, { "id": 160501, "urlhaus_id": "3950076", "url": "http://66.29.151.122/i686", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:23 UTC", "discovered_at": "2026-10-14T13:08:23.000Z" }, { "id": 160506, "urlhaus_id": "3950075", "url": "http://207.244.234.243:8000/xmrig", "host": "207.244.234.243", "host_ip": "207.244.234.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:22 UTC", "discovered_at": "2026-10-14T13:08:22.000Z" }, { "id": 160505, "urlhaus_id": "3950074", "url": "http://66.29.151.122/x86_64", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:22 UTC", "discovered_at": "2026-10-14T13:08:22.000Z" }, { "id": 160508, "urlhaus_id": "3950073", "url": "http://177.3.213.149/eclipse.arm", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:21 UTC", "discovered_at": "2026-10-14T13:08:21.000Z" }, { "id": 160507, "urlhaus_id": "3950072", "url": "http://151.242.30.142/ExpShell.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exploit", "last_online": null, "first_seen": "2026-10-14 13:08:21 UTC", "discovered_at": "2026-10-14T13:08:21.000Z" }, { "id": 160509, "urlhaus_id": "3950071", "url": "http://177.3.213.149/eclipse.m68k", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:20 UTC", "discovered_at": "2026-10-14T13:08:20.000Z" }, { "id": 160513, "urlhaus_id": "3950070", "url": "http://15.204.85.94:9999/xmrig-patched", "host": "15.204.85.94", "host_ip": "15.204.85.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner", "last_online": null, "first_seen": "2026-10-14 13:08:19 UTC", "discovered_at": "2026-10-14T13:08:19.000Z" }, { "id": 160512, "urlhaus_id": "3950069", "url": "http://129.159.135.190/cf_bypass.x86_64", "host": "129.159.135.190", "host_ip": "129.159.135.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:19 UTC", "discovered_at": "2026-10-14T13:08:19.000Z" }, { "id": 160511, "urlhaus_id": "3950068", "url": "http://66.29.151.122/mips", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:19 UTC", "discovered_at": "2026-10-14T13:08:19.000Z" }, { "id": 160510, "urlhaus_id": "3950067", "url": "http://15.204.85.94:9999/libsyslog-arm64.so", "host": "15.204.85.94", "host_ip": "15.204.85.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, rootkit", "last_online": null, "first_seen": "2026-10-14 13:08:19 UTC", "discovered_at": "2026-10-14T13:08:19.000Z" }, { "id": 160514, "urlhaus_id": "3950066", "url": "http://151.242.30.142/exploit.js", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exploit", "last_online": null, "first_seen": "2026-10-14 13:08:16 UTC", "discovered_at": "2026-10-14T13:08:16.000Z" }, { "id": 160515, "urlhaus_id": "3950065", "url": "http://129.159.135.190/ssh_killer.x86_64", "host": "129.159.135.190", "host_ip": "129.159.135.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:13 UTC", "discovered_at": "2026-10-14T13:08:13.000Z" }, { "id": 160516, "urlhaus_id": "3950064", "url": "http://151.242.30.142/MoonC2.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:12 UTC", "discovered_at": "2026-10-14T13:08:12.000Z" }, { "id": 160519, "urlhaus_id": "3950063", "url": "http://129.159.135.190/ovh_specter.x86_64", "host": "129.159.135.190", "host_ip": "129.159.135.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:11 UTC", "discovered_at": "2026-10-14T13:08:11.000Z" }, { "id": 160518, "urlhaus_id": "3950062", "url": "https://nebula-client.com/downloads/NebulaClient-2.0.1.jar", "host": "nebula-client.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:11 UTC", "discovered_at": "2026-10-14T13:08:11.000Z" }, { "id": 160517, "urlhaus_id": "3950061", "url": "http://134.255.218.65:8081/mips", "host": "134.255.218.65", "host_ip": "134.255.218.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:11 UTC", "discovered_at": "2026-10-14T13:08:11.000Z" }, { "id": 160528, "urlhaus_id": "3950060", "url": "http://151.242.30.142/dos.py", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160527, "urlhaus_id": "3950059", "url": "http://151.242.30.142/TeleXBotNet.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160526, "urlhaus_id": "3950058", "url": "http://151.242.30.142/layer4.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160525, "urlhaus_id": "3950057", "url": "http://151.242.30.142/botnets.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160524, "urlhaus_id": "3950056", "url": "http://96.62.71.5:8091/bots/mb.mipsle", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160523, "urlhaus_id": "3950055", "url": "http://177.3.213.149/eclipse.arm5", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160522, "urlhaus_id": "3950054", "url": "http://151.242.30.142/DDOSxKILLPING.zip", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160521, "urlhaus_id": "3950053", "url": "http://177.3.213.149/eclipse.mpsl", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160520, "urlhaus_id": "3950052", "url": "http://151.242.30.142/botseo.js", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2", "last_online": null, "first_seen": "2026-10-14 13:08:10 UTC", "discovered_at": "2026-10-14T13:08:10.000Z" }, { "id": 160532, "urlhaus_id": "3950051", "url": "http://151.242.30.142/cfbypasser.py", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:08 UTC", "discovered_at": "2026-10-14T13:08:08.000Z" }, { "id": 160531, "urlhaus_id": "3950050", "url": "http://177.3.213.149/eclipse.ppc", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:08 UTC", "discovered_at": "2026-10-14T13:08:08.000Z" }, { "id": 160530, "urlhaus_id": "3950049", "url": "http://177.3.213.149/eclipse.mips", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:08 UTC", "discovered_at": "2026-10-14T13:08:08.000Z" }, { "id": 160529, "urlhaus_id": "3950048", "url": "http://151.242.30.142/flood_quantum.py", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:08 UTC", "discovered_at": "2026-10-14T13:08:08.000Z" }, { "id": 160533, "urlhaus_id": "3950047", "url": "http://151.242.30.142/tcp.py", "host": "151.242.30.142", "host_ip": "151.242.30.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ddos", "last_online": null, "first_seen": "2026-10-14 13:08:07 UTC", "discovered_at": "2026-10-14T13:08:07.000Z" }, { "id": 160535, "urlhaus_id": "3950046", "url": "http://177.3.213.149/eclipse.i686", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:06 UTC", "discovered_at": "2026-10-14T13:08:06.000Z" }, { "id": 160534, "urlhaus_id": "3950045", "url": "http://177.3.213.149/eclipse.sh4", "host": "177.3.213.149", "host_ip": "177.3.213.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet", "last_online": null, "first_seen": "2026-10-14 13:08:06 UTC", "discovered_at": "2026-10-14T13:08:06.000Z" }, { "id": 160536, "urlhaus_id": "3950044", "url": "http://218.74.111.34:34305/i", "host": "218.74.111.34", "host_ip": "218.74.111.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 13:05:24 UTC", "discovered_at": "2026-10-14T13:05:24.000Z" }, { "id": 160537, "urlhaus_id": "3950043", "url": "http://124.130.8.34:47963/bin.sh", "host": "124.130.8.34", "host_ip": "124.130.8.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 13:00:19 UTC", "discovered_at": "2026-10-14T13:00:19.000Z" }, { "id": 160538, "urlhaus_id": "3950042", "url": "http://120.84.214.181:47414/i", "host": "120.84.214.181", "host_ip": "120.84.214.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:47:14 UTC", "discovered_at": "2026-10-14T12:47:14.000Z" }, { "id": 160539, "urlhaus_id": "3950041", "url": "http://120.84.231.69:42721/bin.sh", "host": "120.84.231.69", "host_ip": "120.84.231.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:47:08 UTC", "discovered_at": "2026-10-14T12:47:08.000Z" }, { "id": 160540, "urlhaus_id": "3950040", "url": "http://120.84.231.69:42721/i", "host": "120.84.231.69", "host_ip": "120.84.231.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:47:07 UTC", "discovered_at": "2026-10-14T12:47:07.000Z" }, { "id": 160542, "urlhaus_id": "3950039", "url": "http://103.172.186.163:40942/i", "host": "103.172.186.163", "host_ip": "103.172.186.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:47:06 UTC", "discovered_at": "2026-10-14T12:47:06.000Z" }, { "id": 160541, "urlhaus_id": "3950038", "url": "http://221.14.174.24:40978/bin.sh", "host": "221.14.174.24", "host_ip": "221.14.174.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:47:06 UTC", "discovered_at": "2026-10-14T12:47:06.000Z" }, { "id": 160543, "urlhaus_id": "3950037", "url": "http://196.189.68.239:54705/bin.sh", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 12:44:08 UTC", "discovered_at": "2026-10-14T12:44:08.000Z" }, { "id": 160544, "urlhaus_id": "3950036", "url": "http://218.74.111.34:34305/bin.sh", "host": "218.74.111.34", "host_ip": "218.74.111.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 12:37:10 UTC", "discovered_at": "2026-10-14T12:37:10.000Z" }, { "id": 160545, "urlhaus_id": "3950035", "url": "http://115.52.81.24:41167/i", "host": "115.52.81.24", "host_ip": "115.52.81.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 12:30:15 UTC", "discovered_at": "2026-10-14T12:30:15.000Z" }, { "id": 160546, "urlhaus_id": "3950034", "url": "http://42.231.174.164:60965/bin.sh", "host": "42.231.174.164", "host_ip": "42.231.174.164", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 12:28:16 UTC", "discovered_at": "2026-10-14T12:28:16.000Z" }, { "id": 160547, "urlhaus_id": "3950033", "url": "http://115.58.176.160:40854/i", "host": "115.58.176.160", "host_ip": "115.58.176.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:17:09 UTC", "discovered_at": "2026-10-14T12:17:09.000Z" }, { "id": 160550, "urlhaus_id": "3950032", "url": "http://119.180.53.149:39351/i", "host": "119.180.53.149", "host_ip": "119.180.53.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:17:08 UTC", "discovered_at": "2026-10-14T12:17:08.000Z" }, { "id": 160549, "urlhaus_id": "3950031", "url": "http://113.160.0.30:49088/i", "host": "113.160.0.30", "host_ip": "113.160.0.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:17:08 UTC", "discovered_at": "2026-10-14T12:17:08.000Z" }, { "id": 160548, "urlhaus_id": "3950030", "url": "http://103.172.186.163:40942/bin.sh", "host": "103.172.186.163", "host_ip": "103.172.186.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:17:08 UTC", "discovered_at": "2026-10-14T12:17:08.000Z" }, { "id": 160551, "urlhaus_id": "3950029", "url": "http://219.157.238.6:35642/bin.sh", "host": "219.157.238.6", "host_ip": "219.157.238.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 12:17:07 UTC", "discovered_at": "2026-10-14T12:17:07.000Z" }, { "id": 160552, "urlhaus_id": "3950028", "url": "http://115.48.119.213:59405/bin.sh", "host": "115.48.119.213", "host_ip": "115.48.119.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 12:06:17 UTC", "discovered_at": "2026-10-14T12:06:17.000Z" }, { "id": 160553, "urlhaus_id": "3950027", "url": "http://113.160.0.30:49088/bin.sh", "host": "113.160.0.30", "host_ip": "113.160.0.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 11:46:06 UTC", "discovered_at": "2026-10-14T11:46:06.000Z" }, { "id": 160554, "urlhaus_id": "3950026", "url": "https://ghost-new-live.ink/driverpack/HP_driverpack.rar", "host": "ghost-new-live.ink", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "APT, LibrarianGhouls, pass:limpid29033, RareWerewolf", "last_online": null, "first_seen": "2026-10-14 11:38:09 UTC", "discovered_at": "2026-10-14T11:38:09.000Z" }, { "id": 160555, "urlhaus_id": "3950024", "url": "https://cdd.omsules.life/DvnX.zip", "host": "cdd.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-14 11:37:50 UTC", "discovered_at": "2026-10-14T11:37:50.000Z" }, { "id": 160556, "urlhaus_id": "3950023", "url": "https://yimmenu.live/Files/CheraxLoader.rar", "host": "yimmenu.live", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-YIMMENULIVE, stealer", "last_online": null, "first_seen": "2026-10-14 11:37:39 UTC", "discovered_at": "2026-10-14T11:37:39.000Z" }, { "id": 160557, "urlhaus_id": "3950022", "url": "https://www.elitecheatsx.live/EliteFiles/EliteCheatsX-2.0.zip", "host": "www.elitecheatsx.live", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-EliteCheatsX_v2026, stealer", "last_online": null, "first_seen": "2026-10-14 11:37:27 UTC", "discovered_at": "2026-10-14T11:37:27.000Z" }, { "id": 160558, "urlhaus_id": "3950021", "url": "http://113.254.36.153:50445/bin.sh", "host": "113.254.36.153", "host_ip": "113.254.36.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips", "last_online": null, "first_seen": "2026-10-14 11:37:11 UTC", "discovered_at": "2026-10-14T11:37:11.000Z" }, { "id": 160559, "urlhaus_id": "3950020", "url": "https://fairsexsecutor.xyz/uploads/download.zip", "host": "fairsexsecutor.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-123, stealer", "last_online": null, "first_seen": "2026-10-14 11:37:08 UTC", "discovered_at": "2026-10-14T11:37:08.000Z" }, { "id": 160560, "urlhaus_id": "3950019", "url": "https://forge-ridge.com/curl/qvien3y4pg/96ia76zt2cqcr1u6htij1l.dat", "host": "forge-ridge.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, zsh", "last_online": null, "first_seen": "2026-10-14 11:37:06 UTC", "discovered_at": "2026-10-14T11:37:06.000Z" }, { "id": 160561, "urlhaus_id": "3950018", "url": "http://31.40.204.4/24/goodthingswithme.hta?JPEG", "host": "31.40.204.4", "host_ip": "31.40.204.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 11:37:05 UTC", "discovered_at": "2026-10-14T11:37:05.000Z" }, { "id": 160562, "urlhaus_id": "3950017", "url": "http://123.156.249.210:60708/i", "host": "123.156.249.210", "host_ip": "123.156.249.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 11:32:22 UTC", "discovered_at": "2026-10-14T11:32:22.000Z" }, { "id": 160563, "urlhaus_id": "3950016", "url": "http://219.155.210.193:37290/i", "host": "219.155.210.193", "host_ip": "219.155.210.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 11:20:14 UTC", "discovered_at": "2026-10-14T11:20:14.000Z" }, { "id": 160565, "urlhaus_id": "3950015", "url": "http://36.104.222.80:55499/bin.sh", "host": "36.104.222.80", "host_ip": "36.104.222.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 10:53:17 UTC", "discovered_at": "2026-10-14T10:53:17.000Z" }, { "id": 160564, "urlhaus_id": "3950014", "url": "http://115.57.229.125:44809/bin.sh", "host": "115.57.229.125", "host_ip": "115.57.229.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 10:53:17 UTC", "discovered_at": "2026-10-14T10:53:17.000Z" }, { "id": 160566, "urlhaus_id": "3950013", "url": "http://60.214.62.213:43037/i", "host": "60.214.62.213", "host_ip": "60.214.62.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 10:47:08 UTC", "discovered_at": "2026-10-14T10:47:08.000Z" }, { "id": 160567, "urlhaus_id": "3950012", "url": "http://196.188.141.17:44881/bin.sh", "host": "196.188.141.17", "host_ip": "196.188.141.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 10:36:09 UTC", "discovered_at": "2026-10-14T10:36:09.000Z" }, { "id": 160568, "urlhaus_id": "3950011", "url": "http://42.230.187.105:54997/i", "host": "42.230.187.105", "host_ip": "42.230.187.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 10:27:09 UTC", "discovered_at": "2026-10-14T10:27:09.000Z" }, { "id": 160569, "urlhaus_id": "3950010", "url": "http://182.121.14.83:36965/i", "host": "182.121.14.83", "host_ip": "182.121.14.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 10:19:19 UTC", "discovered_at": "2026-10-14T10:19:19.000Z" }, { "id": 160570, "urlhaus_id": "3950009", "url": "http://196.191.233.24:47336/i", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 10:17:19 UTC", "discovered_at": "2026-10-14T10:17:19.000Z" }, { "id": 160571, "urlhaus_id": "3950008", "url": "http://111.73.29.53:50797/i", "host": "111.73.29.53", "host_ip": "111.73.29.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 10:17:06 UTC", "discovered_at": "2026-10-14T10:17:06.000Z" }, { "id": 160572, "urlhaus_id": "3950007", "url": "http://42.230.187.105:54997/bin.sh", "host": "42.230.187.105", "host_ip": "42.230.187.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 10:16:12 UTC", "discovered_at": "2026-10-14T10:16:12.000Z" }, { "id": 160574, "urlhaus_id": "3950006", "url": "http://103.172.186.194:38095/i", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 10:02:07 UTC", "discovered_at": "2026-10-14T10:02:07.000Z" }, { "id": 160573, "urlhaus_id": "3950005", "url": "http://219.157.20.98:42224/i", "host": "219.157.20.98", "host_ip": "219.157.20.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 10:02:07 UTC", "discovered_at": "2026-10-14T10:02:07.000Z" }, { "id": 160575, "urlhaus_id": "3950004", "url": "http://182.121.14.83:36965/bin.sh", "host": "182.121.14.83", "host_ip": "182.121.14.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 09:52:18 UTC", "discovered_at": "2026-10-14T09:52:18.000Z" }, { "id": 160576, "urlhaus_id": "3950003", "url": "http://60.18.111.216:40714/i", "host": "60.18.111.216", "host_ip": "60.18.111.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 09:47:07 UTC", "discovered_at": "2026-10-14T09:47:07.000Z" }, { "id": 160577, "urlhaus_id": "3950002", "url": "http://125.42.127.94:53595/bin.sh", "host": "125.42.127.94", "host_ip": "125.42.127.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 09:47:06 UTC", "discovered_at": "2026-10-14T09:47:06.000Z" }, { "id": 160578, "urlhaus_id": "3950001", "url": "http://221.14.174.24:40978/i", "host": "221.14.174.24", "host_ip": "221.14.174.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 09:33:07 UTC", "discovered_at": "2026-10-14T09:33:07.000Z" }, { "id": 160579, "urlhaus_id": "3950000", "url": "http://219.157.208.27:54359/i", "host": "219.157.208.27", "host_ip": "219.157.208.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 09:32:08 UTC", "discovered_at": "2026-10-14T09:32:08.000Z" }, { "id": 160580, "urlhaus_id": "3949999", "url": "http://120.28.144.161:49267/i", "host": "120.28.144.161", "host_ip": "120.28.144.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 09:28:17 UTC", "discovered_at": "2026-10-14T09:28:17.000Z" }, { "id": 160581, "urlhaus_id": "3949998", "url": "http://82.23.246.75/zljll.zip", "host": "82.23.246.75", "host_ip": "82.23.246.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, ValleyRAT", "last_online": null, "first_seen": "2026-10-14 09:28:15 UTC", "discovered_at": "2026-10-14T09:28:15.000Z" }, { "id": 160582, "urlhaus_id": "3949997", "url": "http://82.23.246.75/X.jpg", "host": "82.23.246.75", "host_ip": "82.23.246.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, ValleyRAT", "last_online": null, "first_seen": "2026-10-14 09:28:07 UTC", "discovered_at": "2026-10-14T09:28:07.000Z" }, { "id": 160583, "urlhaus_id": "3949996", "url": "http://120.28.144.161:49267/bin.sh", "host": "120.28.144.161", "host_ip": "120.28.144.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 09:22:16 UTC", "discovered_at": "2026-10-14T09:22:16.000Z" }, { "id": 160584, "urlhaus_id": "3949995", "url": "http://222.140.181.122:38855/i", "host": "222.140.181.122", "host_ip": "222.140.181.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 09:02:07 UTC", "discovered_at": "2026-10-14T09:02:07.000Z" }, { "id": 160585, "urlhaus_id": "3949994", "url": "http://wemqmewkqewq.work.gd/ow.sh", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ActiveMQ, sh", "last_online": null, "first_seen": "2026-10-14 08:43:21 UTC", "discovered_at": "2026-10-14T08:43:21.000Z" }, { "id": 160586, "urlhaus_id": "3949993", "url": "http://wemqmewkqewq.work.gd/amq.xml", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ActiveMQ", "last_online": null, "first_seen": "2026-10-14 08:43:05 UTC", "discovered_at": "2026-10-14T08:43:05.000Z" }, { "id": 160587, "urlhaus_id": "3949992", "url": "http://171.221.41.6:56049/i", "host": "171.221.41.6", "host_ip": "171.221.41.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 08:32:08 UTC", "discovered_at": "2026-10-14T08:32:08.000Z" }, { "id": 160588, "urlhaus_id": "3949991", "url": "https://up.sb/lyaON/1.tar.gz", "host": "up.sb", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker", "last_online": null, "first_seen": "2026-10-14 08:22:10 UTC", "discovered_at": "2026-10-14T08:22:10.000Z" }, { "id": 160589, "urlhaus_id": "3949990", "url": "https://software.security-analyze.ltd/InstallAutostart.ps1", "host": "software.security-analyze.ltd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 08:21:10 UTC", "discovered_at": "2026-10-14T08:21:10.000Z" }, { "id": 160592, "urlhaus_id": "3949989", "url": "https://software.security-analyze.ltd/game_library.dll", "host": "software.security-analyze.ltd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 08:21:08 UTC", "discovered_at": "2026-10-14T08:21:08.000Z" }, { "id": 160591, "urlhaus_id": "3949988", "url": "https://software.security-analyze.ltd/faceitAnalyze.ps1", "host": "software.security-analyze.ltd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 08:21:08 UTC", "discovered_at": "2026-10-14T08:21:08.000Z" }, { "id": 160590, "urlhaus_id": "3949987", "url": "https://cosmical2049.com/lom3/0ad7a0bdad0aa13d", "host": "cosmical2049.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-14 08:21:08 UTC", "discovered_at": "2026-10-14T08:21:08.000Z" }, { "id": 160593, "urlhaus_id": "3949986", "url": "http://175.165.86.197:60658/i", "host": "175.165.86.197", "host_ip": "175.165.86.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 08:20:31 UTC", "discovered_at": "2026-10-14T08:20:31.000Z" }, { "id": 160594, "urlhaus_id": "3949985", "url": "http://42.85.165.214:60329/bin.sh", "host": "42.85.165.214", "host_ip": "42.85.165.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 08:18:17 UTC", "discovered_at": "2026-10-14T08:18:17.000Z" }, { "id": 160595, "urlhaus_id": "3949984", "url": "http://42.87.170.153:57273/i", "host": "42.87.170.153", "host_ip": "42.87.170.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 08:17:07 UTC", "discovered_at": "2026-10-14T08:17:07.000Z" }, { "id": 160596, "urlhaus_id": "3949983", "url": "http://62.60.226.140/files/2145124153/4qNNRF8.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-14 08:16:06 UTC", "discovered_at": "2026-10-14T08:16:06.000Z" }, { "id": 160597, "urlhaus_id": "3949982", "url": "http://45.198.224.158/arm6", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 08:10:23 UTC", "discovered_at": "2026-10-14T08:10:23.000Z" }, { "id": 160598, "urlhaus_id": "3949981", "url": "http://45.198.224.158/spc", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 08:10:16 UTC", "discovered_at": "2026-10-14T08:10:16.000Z" }, { "id": 160599, "urlhaus_id": "3949980", "url": "http://175.165.86.197:60658/bin.sh", "host": "175.165.86.197", "host_ip": "175.165.86.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 07:54:30 UTC", "discovered_at": "2026-10-14T07:54:30.000Z" }, { "id": 160600, "urlhaus_id": "3949979", "url": "http://125.44.32.214:49579/i", "host": "125.44.32.214", "host_ip": "125.44.32.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-14 07:53:07 UTC", "discovered_at": "2026-10-14T07:53:07.000Z" }, { "id": 160601, "urlhaus_id": "3949978", "url": "https://software.security-analyze.ltd/dsound.dll", "host": "software.security-analyze.ltd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:46:14 UTC", "discovered_at": "2026-10-14T07:46:14.000Z" }, { "id": 160603, "urlhaus_id": "3949977", "url": "http://185.113.10.26:8080/grid-bot", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:39:22 UTC", "discovered_at": "2026-10-14T07:39:22.000Z" }, { "id": 160602, "urlhaus_id": "3949976", "url": "http://185.113.10.26:8080/grid-master", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:39:22 UTC", "discovered_at": "2026-10-14T07:39:22.000Z" }, { "id": 160608, "urlhaus_id": "3949975", "url": "http://185.113.10.26:8080/bot-mipsle", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:32 UTC", "discovered_at": "2026-10-14T07:38:32.000Z" }, { "id": 160607, "urlhaus_id": "3949974", "url": "http://185.113.10.26:8080/bot-armv7", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:32 UTC", "discovered_at": "2026-10-14T07:38:32.000Z" }, { "id": 160606, "urlhaus_id": "3949973", "url": "http://185.113.10.26:8080/bot-mips", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:32 UTC", "discovered_at": "2026-10-14T07:38:32.000Z" }, { "id": 160605, "urlhaus_id": "3949972", "url": "http://185.113.10.26:8080/bot-armv5", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:32 UTC", "discovered_at": "2026-10-14T07:38:32.000Z" }, { "id": 160604, "urlhaus_id": "3949971", "url": "http://185.113.10.26:8080/bot", "host": "185.113.10.26", "host_ip": "185.113.10.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, elf, gafgyt, grid, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:32 UTC", "discovered_at": "2026-10-14T07:38:32.000Z" }, { "id": 160609, "urlhaus_id": "3949970", "url": "http://185.117.91.6:9999/stress_max_armv7l", "host": "185.117.91.6", "host_ip": "185.117.91.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, elf, gafgyt, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:22 UTC", "discovered_at": "2026-10-14T07:38:22.000Z" }, { "id": 160612, "urlhaus_id": "3949969", "url": "http://185.117.91.6:9999/armv7", "host": "185.117.91.6", "host_ip": "185.117.91.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, elf, gafgyt, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:21 UTC", "discovered_at": "2026-10-14T07:38:21.000Z" }, { "id": 160611, "urlhaus_id": "3949968", "url": "http://185.117.91.6:9999/bot_client_armv7l", "host": "185.117.91.6", "host_ip": "185.117.91.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, elf, gafgyt, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:21 UTC", "discovered_at": "2026-10-14T07:38:21.000Z" }, { "id": 160610, "urlhaus_id": "3949967", "url": "http://185.117.91.6:9999/c2_server", "host": "185.117.91.6", "host_ip": "185.117.91.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, elf, gafgyt, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:21 UTC", "discovered_at": "2026-10-14T07:38:21.000Z" }, { "id": 160613, "urlhaus_id": "3949966", "url": "http://185.117.91.6:9999/bot.arm7", "host": "185.117.91.6", "host_ip": "185.117.91.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, elf, gafgyt, mirai", "last_online": null, "first_seen": "2026-10-14 07:38:17 UTC", "discovered_at": "2026-10-14T07:38:17.000Z" }, { "id": 160614, "urlhaus_id": "3949965", "url": "http://47.92.205.158:8102/linux", "host": "47.92.205.158", "host_ip": "47.92.205.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnet, cowrie", "last_online": null, "first_seen": "2026-10-14 07:38:10 UTC", "discovered_at": "2026-10-14T07:38:10.000Z" }, { "id": 160615, "urlhaus_id": "3949964", "url": "http://41.142.182.30:52596/i", "host": "41.142.182.30", "host_ip": "41.142.182.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 07:32:40 UTC", "discovered_at": "2026-10-14T07:32:40.000Z" }, { "id": 160616, "urlhaus_id": "3949963", "url": "http://175.165.81.114:40034/i", "host": "175.165.81.114", "host_ip": "175.165.81.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:32:20 UTC", "discovered_at": "2026-10-14T07:32:20.000Z" }, { "id": 160618, "urlhaus_id": "3949962", "url": "http://175.148.153.185:39282/bin.sh", "host": "175.148.153.185", "host_ip": "175.148.153.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:32:08 UTC", "discovered_at": "2026-10-14T07:32:08.000Z" }, { "id": 160617, "urlhaus_id": "3949961", "url": "http://175.165.86.143:35226/i", "host": "175.165.86.143", "host_ip": "175.165.86.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:32:08 UTC", "discovered_at": "2026-10-14T07:32:08.000Z" }, { "id": 160619, "urlhaus_id": "3949960", "url": "http://175.165.82.252:48576/i", "host": "175.165.82.252", "host_ip": "175.165.82.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:32:07 UTC", "discovered_at": "2026-10-14T07:32:07.000Z" }, { "id": 160620, "urlhaus_id": "3949959", "url": "http://221.15.14.153:57455/i", "host": "221.15.14.153", "host_ip": "221.15.14.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-14 07:28:06 UTC", "discovered_at": "2026-10-14T07:28:06.000Z" }, { "id": 160621, "urlhaus_id": "3949958", "url": "http://163.142.95.175:32896/i", "host": "163.142.95.175", "host_ip": "163.142.95.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:17:13 UTC", "discovered_at": "2026-10-14T07:17:13.000Z" }, { "id": 160624, "urlhaus_id": "3949957", "url": "http://170.84.133.235:54512/i", "host": "170.84.133.235", "host_ip": "170.84.133.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:17:08 UTC", "discovered_at": "2026-10-14T07:17:08.000Z" }, { "id": 160623, "urlhaus_id": "3949956", "url": "http://124.92.76.80:36313/i", "host": "124.92.76.80", "host_ip": "124.92.76.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:17:08 UTC", "discovered_at": "2026-10-14T07:17:08.000Z" }, { "id": 160622, "urlhaus_id": "3949955", "url": "http://42.228.219.239:46579/i", "host": "42.228.219.239", "host_ip": "42.228.219.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:17:08 UTC", "discovered_at": "2026-10-14T07:17:08.000Z" }, { "id": 160625, "urlhaus_id": "3949954", "url": "http://125.42.127.94:53595/i", "host": "125.42.127.94", "host_ip": "125.42.127.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:17:07 UTC", "discovered_at": "2026-10-14T07:17:07.000Z" }, { "id": 160626, "urlhaus_id": "3949953", "url": "http://88.235.97.150:53953/i", "host": "88.235.97.150", "host_ip": "88.235.97.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:02:08 UTC", "discovered_at": "2026-10-14T07:02:08.000Z" }, { "id": 160628, "urlhaus_id": "3949952", "url": "http://105.226.5.175:41359/i", "host": "105.226.5.175", "host_ip": "105.226.5.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:02:07 UTC", "discovered_at": "2026-10-14T07:02:07.000Z" }, { "id": 160627, "urlhaus_id": "3949951", "url": "http://105.226.5.175:41359/bin.sh", "host": "105.226.5.175", "host_ip": "105.226.5.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:02:07 UTC", "discovered_at": "2026-10-14T07:02:07.000Z" }, { "id": 160630, "urlhaus_id": "3949950", "url": "http://123.14.120.85:48414/bin.sh", "host": "123.14.120.85", "host_ip": "123.14.120.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:02:06 UTC", "discovered_at": "2026-10-14T07:02:06.000Z" }, { "id": 160629, "urlhaus_id": "3949949", "url": "http://123.14.120.85:48414/i", "host": "123.14.120.85", "host_ip": "123.14.120.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 07:02:06 UTC", "discovered_at": "2026-10-14T07:02:06.000Z" }, { "id": 160633, "urlhaus_id": "3949948", "url": "http://27.202.122.212:50982/bin.sh", "host": "27.202.122.212", "host_ip": "27.202.122.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:47:07 UTC", "discovered_at": "2026-10-14T06:47:07.000Z" }, { "id": 160632, "urlhaus_id": "3949947", "url": "http://27.202.122.212:50982/i", "host": "27.202.122.212", "host_ip": "27.202.122.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:47:07 UTC", "discovered_at": "2026-10-14T06:47:07.000Z" }, { "id": 160631, "urlhaus_id": "3949946", "url": "http://123.14.216.41:42072/i", "host": "123.14.216.41", "host_ip": "123.14.216.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:47:07 UTC", "discovered_at": "2026-10-14T06:47:07.000Z" }, { "id": 160634, "urlhaus_id": "3949945", "url": "http://60.19.210.176:36451/i", "host": "60.19.210.176", "host_ip": "60.19.210.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:32:14 UTC", "discovered_at": "2026-10-14T06:32:14.000Z" }, { "id": 160635, "urlhaus_id": "3949944", "url": "http://115.63.15.26:58637/i", "host": "115.63.15.26", "host_ip": "115.63.15.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-14 06:16:08 UTC", "discovered_at": "2026-10-14T06:16:08.000Z" }, { "id": 160636, "urlhaus_id": "3949943", "url": "http://103.44.136.115:46239/i", "host": "103.44.136.115", "host_ip": "103.44.136.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:02:32 UTC", "discovered_at": "2026-10-14T06:02:32.000Z" }, { "id": 160637, "urlhaus_id": "3949942", "url": "http://123.14.216.41:42072/bin.sh", "host": "123.14.216.41", "host_ip": "123.14.216.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 06:02:07 UTC", "discovered_at": "2026-10-14T06:02:07.000Z" }, { "id": 160638, "urlhaus_id": "3949941", "url": "http://154.223.128.222:55576/bin.sh", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 05:59:13 UTC", "discovered_at": "2026-10-14T05:59:13.000Z" }, { "id": 160639, "urlhaus_id": "3949940", "url": "https://drive.google.com/uc?export=download&id=1YmxkS5XzpkQ_1ucb2NKDNUswwgh18OiR", "host": "drive.google.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-14 05:47:10 UTC", "discovered_at": "2026-10-14T05:47:10.000Z" }, { "id": 160640, "urlhaus_id": "3949939", "url": "http://115.49.27.218:43869/bin.sh", "host": "115.49.27.218", "host_ip": "115.49.27.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips", "last_online": null, "first_seen": "2026-10-14 05:40:30 UTC", "discovered_at": "2026-10-14T05:40:30.000Z" }, { "id": 160641, "urlhaus_id": "3949938", "url": "http://175.107.208.199:44126/Mozi.a", "host": "175.107.208.199", "host_ip": "175.107.208.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-14 05:40:22 UTC", "discovered_at": "2026-10-14T05:40:22.000Z" }, { "id": 160642, "urlhaus_id": "3949937", "url": "http://42.230.34.249:45500/bin.sh", "host": "42.230.34.249", "host_ip": "42.230.34.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:40:19 UTC", "discovered_at": "2026-10-14T05:40:19.000Z" }, { "id": 160644, "urlhaus_id": "3949936", "url": "http://183.12.167.180:44417/bin.sh", "host": "183.12.167.180", "host_ip": "183.12.167.180", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 05:40:18 UTC", "discovered_at": "2026-10-14T05:40:18.000Z" }, { "id": 160643, "urlhaus_id": "3949935", "url": "http://42.238.241.44:59565/bin.sh", "host": "42.238.241.44", "host_ip": "42.238.241.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:40:18 UTC", "discovered_at": "2026-10-14T05:40:18.000Z" }, { "id": 160645, "urlhaus_id": "3949934", "url": "http://api.9hits.com/test", "host": "api.9hits.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-14 05:40:11 UTC", "discovered_at": "2026-10-14T05:40:11.000Z" }, { "id": 160647, "urlhaus_id": "3949933", "url": "http://47.215.224.64:35091/Mozi.m", "host": "47.215.224.64", "host_ip": "47.215.224.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:40:07 UTC", "discovered_at": "2026-10-14T05:40:07.000Z" }, { "id": 160646, "urlhaus_id": "3949932", "url": "https://chantcompass9.com/f/yhzuuxkyytoc-pr6sqaaqa/lvitjpau", "host": "chantcompass9.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, ua-curl, zsh", "last_online": null, "first_seen": "2026-10-14 05:40:07 UTC", "discovered_at": "2026-10-14T05:40:07.000Z" }, { "id": 160649, "urlhaus_id": "3949931", "url": "https://cda.omsules.life/DvnX.zip", "host": "cda.omsules.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-14 05:40:06 UTC", "discovered_at": "2026-10-14T05:40:06.000Z" }, { "id": 160648, "urlhaus_id": "3949930", "url": "https://chantcompass9.com/curl/ltlmtyrcu/3idd7eprmh6is0juh3.json", "host": "chantcompass9.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, ua-curl, zsh", "last_online": null, "first_seen": "2026-10-14 05:40:06 UTC", "discovered_at": "2026-10-14T05:40:06.000Z" }, { "id": 160650, "urlhaus_id": "3949929", "url": "http://42.239.159.114:44748/bin.sh", "host": "42.239.159.114", "host_ip": "42.239.159.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:39:32 UTC", "discovered_at": "2026-10-14T05:39:32.000Z" }, { "id": 160651, "urlhaus_id": "3949928", "url": "http://120.28.167.203:41366/bin.sh", "host": "120.28.167.203", "host_ip": "120.28.167.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 05:39:26 UTC", "discovered_at": "2026-10-14T05:39:26.000Z" }, { "id": 160653, "urlhaus_id": "3949927", "url": "http://79.116.166.243:45963/Mozi.m", "host": "79.116.166.243", "host_ip": "79.116.166.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi, tarpit-http", "last_online": null, "first_seen": "2026-10-14 05:39:20 UTC", "discovered_at": "2026-10-14T05:39:20.000Z" }, { "id": 160652, "urlhaus_id": "3949926", "url": "http://27.24.87.31:36523/Mozi.m", "host": "27.24.87.31", "host_ip": "27.24.87.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:39:20 UTC", "discovered_at": "2026-10-14T05:39:20.000Z" }, { "id": 160654, "urlhaus_id": "3949925", "url": "http://103.170.217.170/mips", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-14 05:39:19 UTC", "discovered_at": "2026-10-14T05:39:19.000Z" }, { "id": 160656, "urlhaus_id": "3949924", "url": "http://115.48.150.216:43421/bin.sh", "host": "115.48.150.216", "host_ip": "115.48.150.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:39:17 UTC", "discovered_at": "2026-10-14T05:39:17.000Z" }, { "id": 160655, "urlhaus_id": "3949923", "url": "http://222.138.116.13:34606/bin.sh", "host": "222.138.116.13", "host_ip": "222.138.116.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:39:17 UTC", "discovered_at": "2026-10-14T05:39:17.000Z" }, { "id": 160658, "urlhaus_id": "3949922", "url": "http://103.170.217.170/armv5", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-14 05:39:12 UTC", "discovered_at": "2026-10-14T05:39:12.000Z" }, { "id": 160657, "urlhaus_id": "3949921", "url": "https://6sim.vip/static/c7e19b4a82d0.boot.js", "host": "6sim.vip", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "coruna, darksword", "last_online": null, "first_seen": "2026-10-14 05:39:12 UTC", "discovered_at": "2026-10-14T05:39:12.000Z" }, { "id": 160660, "urlhaus_id": "3949920", "url": "https://dasdase13.icu/pe/0cb19f768eb8cd92.js", "host": "dasdase13.icu", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "coruna, darksword", "last_online": null, "first_seen": "2026-10-14 05:39:11 UTC", "discovered_at": "2026-10-14T05:39:11.000Z" }, { "id": 160659, "urlhaus_id": "3949919", "url": "http://103.170.217.170/x64", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-14 05:39:11 UTC", "discovered_at": "2026-10-14T05:39:11.000Z" }, { "id": 160661, "urlhaus_id": "3949918", "url": "http://103.170.217.170/arm64", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-14 05:39:10 UTC", "discovered_at": "2026-10-14T05:39:10.000Z" }, { "id": 160662, "urlhaus_id": "3949917", "url": "http://23.94.252.153/68993", "host": "23.94.252.153", "host_ip": "23.94.252.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, msi", "last_online": null, "first_seen": "2026-10-14 05:39:09 UTC", "discovered_at": "2026-10-14T05:39:09.000Z" }, { "id": 160665, "urlhaus_id": "3949916", "url": "https://dasdase13.icu/gooll/gooll.html", "host": "dasdase13.icu", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "coruna, darksword", "last_online": null, "first_seen": "2026-10-14 05:39:07 UTC", "discovered_at": "2026-10-14T05:39:07.000Z" }, { "id": 160664, "urlhaus_id": "3949915", "url": "http://38.190.222.108/gooll/49554fde7424c31c.js", "host": "38.190.222.108", "host_ip": "38.190.222.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "coruna, darksword", "last_online": null, "first_seen": "2026-10-14 05:39:07 UTC", "discovered_at": "2026-10-14T05:39:07.000Z" }, { "id": 160663, "urlhaus_id": "3949914", "url": "http://38.190.222.108/gooll/gooll.html", "host": "38.190.222.108", "host_ip": "38.190.222.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "coruna, darksword", "last_online": null, "first_seen": "2026-10-14 05:39:07 UTC", "discovered_at": "2026-10-14T05:39:07.000Z" }, { "id": 160667, "urlhaus_id": "3949912", "url": "https://cdn.discordapp.com/attachments/1485275138281836705/1559651858954326197/bundle_1.zip?ex=6acfda7c&is=6ace88fc&hm=4e88eec75ac58db34a94f7bd03f514c06b3ab50fdf23ee9f33387c1e7e27d95d&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-14 05:38:50 UTC", "discovered_at": "2026-10-14T05:38:50.000Z" }, { "id": 160666, "urlhaus_id": "3949911", "url": "https://cdn.discordapp.com/attachments/1559223274288713738/1559628457460244631/bundle.zip?ex=6acfc4b0&is=6ace7330&hm=790072cad2990b489449a7c54a60807741d8dafd1ba94c01fbd2175f24e47b3f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-14 05:38:50 UTC", "discovered_at": "2026-10-14T05:38:50.000Z" }, { "id": 160668, "urlhaus_id": "3949910", "url": "https://cdn.discordapp.com/attachments/1559204489343541351/1559205050075848734/bundle.zip?ex=6acf8bdc&is=6ace3a5c&hm=17ced08c730d93caccc44403c84c2c4ff2207ebe0bf48d2aefebcadb2b1055bf&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-14 05:38:36 UTC", "discovered_at": "2026-10-14T05:38:36.000Z" }, { "id": 160669, "urlhaus_id": "3949909", "url": "https://github.com/blankgrabberrt/blankgrabberV2.03/raw/refs/heads/main/Blank-Grabber-main/Blank%20Grabber/builder.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "BlankGrabber", "last_online": null, "first_seen": "2026-10-14 05:38:10 UTC", "discovered_at": "2026-10-14T05:38:10.000Z" }, { "id": 160670, "urlhaus_id": "3949908", "url": "https://ucb795b953262a1f75be02669385.dl.dropboxusercontent.com/cd/0/get/DJ8FA_3LsobuKv1fm1YmmeySuVdqF2yNedH4g-4GIkO0NhXoGoWtDmAZ05MmVbmfG8Ig_F_s_CC2NhpZtqp6kqnZYU7JlK7amIxlpSuJi6ySFGmX-U7TZFajh7VRWSTD1Bj5MGc9xR6lL-GTscuW11s7/file?dl=1#", "host": "ucb795b953262a1f75be02669385.dl.dropboxusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-1515, stealer", "last_online": null, "first_seen": "2026-10-14 05:38:07 UTC", "discovered_at": "2026-10-14T05:38:07.000Z" }, { "id": 160672, "urlhaus_id": "3949907", "url": "https://download2290.mediafire.com/tr3rt76k8jlgBaiNgPfORv1ZRModoTtEj05deFiuZWw7cd2Hx4vBu0Xla5QxEh2Vlq_ziRzJhOwW30cwAN99oUDgXfIL60bvq5Il9VrWkcK4nfQNSL3TvYWm_cHqdiTb7mVUbgkkJmKXf39A1H66192ViFHzH_kMbNqx6MBr-JM/mmpdx5huea04hlf/r6-cheat-v1.3.rar", "host": "download2290.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-2026, stealer", "last_online": null, "first_seen": "2026-10-14 05:38:06 UTC", "discovered_at": "2026-10-14T05:38:06.000Z" }, { "id": 160671, "urlhaus_id": "3949906", "url": "https://download2289.mediafire.com/pgtqejbexxngCQ21rU4o0_PEIIYZj0JeZeuw2c-KIjidRGUMp6KgsGQz6wFRwnScIQqyzfH8G3Mneub42ZFmfzv8ABJvhlecwqdABDX28kw8ptPra5nsbox3Xbl7RWRgIcgmTLO1nHgT9eo_7bqot0HOFKEXFdBr5BZuaV-PUmw/h4y2tw5rhm9cdsr/Term%5Bi%5D-Boot_p1.zip", "host": "download2289.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-kingsmenu, stealer", "last_online": null, "first_seen": "2026-10-14 05:38:06 UTC", "discovered_at": "2026-10-14T05:38:06.000Z" }, { "id": 160673, "urlhaus_id": "3949905", "url": "http://103.44.136.115:46239/bin.sh", "host": "103.44.136.115", "host_ip": "103.44.136.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:32:31 UTC", "discovered_at": "2026-10-14T05:32:31.000Z" }, { "id": 160674, "urlhaus_id": "3949904", "url": "http://216.126.86.64:38919/bin.sh", "host": "216.126.86.64", "host_ip": "216.126.86.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:32:15 UTC", "discovered_at": "2026-10-14T05:32:15.000Z" }, { "id": 160675, "urlhaus_id": "3949903", "url": "http://123.11.204.176:35205/i", "host": "123.11.204.176", "host_ip": "123.11.204.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 05:27:23 UTC", "discovered_at": "2026-10-14T05:27:23.000Z" }, { "id": 160676, "urlhaus_id": "3949902", "url": "http://27.156.139.134:46074/bin.sh", "host": "27.156.139.134", "host_ip": "27.156.139.134", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 05:22:12 UTC", "discovered_at": "2026-10-14T05:22:12.000Z" }, { "id": 160678, "urlhaus_id": "3949901", "url": "http://5.165.233.43:61310/i", "host": "5.165.233.43", "host_ip": "5.165.233.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:17:11 UTC", "discovered_at": "2026-10-14T05:17:11.000Z" }, { "id": 160677, "urlhaus_id": "3949900", "url": "http://5.165.233.43:61310/bin.sh", "host": "5.165.233.43", "host_ip": "5.165.233.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:17:11 UTC", "discovered_at": "2026-10-14T05:17:11.000Z" }, { "id": 160679, "urlhaus_id": "3949899", "url": "http://46.236.65.9:41630/i", "host": "46.236.65.9", "host_ip": "46.236.65.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:17:07 UTC", "discovered_at": "2026-10-14T05:17:07.000Z" }, { "id": 160680, "urlhaus_id": "3949898", "url": "http://116.10.132.105:48435/i", "host": "116.10.132.105", "host_ip": "116.10.132.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:17 UTC", "discovered_at": "2026-10-14T05:02:17.000Z" }, { "id": 160681, "urlhaus_id": "3949897", "url": "http://115.53.200.62:46273/i", "host": "115.53.200.62", "host_ip": "115.53.200.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:10 UTC", "discovered_at": "2026-10-14T05:02:10.000Z" }, { "id": 160682, "urlhaus_id": "3949896", "url": "http://42.231.215.119:55978/i", "host": "42.231.215.119", "host_ip": "42.231.215.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:09 UTC", "discovered_at": "2026-10-14T05:02:09.000Z" }, { "id": 160685, "urlhaus_id": "3949895", "url": "http://115.53.240.35:39765/i", "host": "115.53.240.35", "host_ip": "115.53.240.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:07 UTC", "discovered_at": "2026-10-14T05:02:07.000Z" }, { "id": 160684, "urlhaus_id": "3949894", "url": "http://105.224.11.179:40617/i", "host": "105.224.11.179", "host_ip": "105.224.11.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:07 UTC", "discovered_at": "2026-10-14T05:02:07.000Z" }, { "id": 160683, "urlhaus_id": "3949893", "url": "http://105.184.198.135:45633/bin.sh", "host": "105.184.198.135", "host_ip": "105.184.198.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:07 UTC", "discovered_at": "2026-10-14T05:02:07.000Z" }, { "id": 160686, "urlhaus_id": "3949892", "url": "http://115.55.128.110:59481/i", "host": "115.55.128.110", "host_ip": "115.55.128.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 05:02:06 UTC", "discovered_at": "2026-10-14T05:02:06.000Z" }, { "id": 160687, "urlhaus_id": "3949891", "url": "http://115.49.27.218:43869/i", "host": "115.49.27.218", "host_ip": "115.49.27.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips", "last_online": null, "first_seen": "2026-10-14 04:58:18 UTC", "discovered_at": "2026-10-14T04:58:18.000Z" }, { "id": 160688, "urlhaus_id": "3949890", "url": "http://123.11.204.176:35205/bin.sh", "host": "123.11.204.176", "host_ip": "123.11.204.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 04:53:18 UTC", "discovered_at": "2026-10-14T04:53:18.000Z" }, { "id": 160689, "urlhaus_id": "3949889", "url": "http://61.166.61.44:39284/bin.sh", "host": "61.166.61.44", "host_ip": "61.166.61.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 04:52:10 UTC", "discovered_at": "2026-10-14T04:52:10.000Z" }, { "id": 160690, "urlhaus_id": "3949888", "url": "http://103.179.240.227:37620/i", "host": "103.179.240.227", "host_ip": "103.179.240.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:47:07 UTC", "discovered_at": "2026-10-14T04:47:07.000Z" }, { "id": 160691, "urlhaus_id": "3949887", "url": "http://182.126.207.149:44946/i", "host": "182.126.207.149", "host_ip": "182.126.207.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 04:45:15 UTC", "discovered_at": "2026-10-14T04:45:15.000Z" }, { "id": 160692, "urlhaus_id": "3949886", "url": "http://175.166.11.6:50487/bin.sh", "host": "175.166.11.6", "host_ip": "175.166.11.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 04:43:07 UTC", "discovered_at": "2026-10-14T04:43:07.000Z" }, { "id": 160693, "urlhaus_id": "3949885", "url": "http://27.204.195.222:57287/i", "host": "27.204.195.222", "host_ip": "27.204.195.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 04:40:18 UTC", "discovered_at": "2026-10-14T04:40:18.000Z" }, { "id": 160694, "urlhaus_id": "3949884", "url": "http://123.11.15.92:59026/i", "host": "123.11.15.92", "host_ip": "123.11.15.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:32:08 UTC", "discovered_at": "2026-10-14T04:32:08.000Z" }, { "id": 160696, "urlhaus_id": "3949883", "url": "http://105.224.11.179:40617/bin.sh", "host": "105.224.11.179", "host_ip": "105.224.11.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:32:07 UTC", "discovered_at": "2026-10-14T04:32:07.000Z" }, { "id": 160695, "urlhaus_id": "3949882", "url": "http://119.179.215.124:50774/i", "host": "119.179.215.124", "host_ip": "119.179.215.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:32:07 UTC", "discovered_at": "2026-10-14T04:32:07.000Z" }, { "id": 160697, "urlhaus_id": "3949881", "url": "https://rxb.immortales.fun/DivX.zip", "host": "rxb.immortales.fun", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:24:42 UTC", "discovered_at": "2026-10-14T04:24:42.000Z" }, { "id": 160701, "urlhaus_id": "3949880", "url": "http://112.238.27.166:55227/i", "host": "112.238.27.166", "host_ip": "112.238.27.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:17:07 UTC", "discovered_at": "2026-10-14T04:17:07.000Z" }, { "id": 160700, "urlhaus_id": "3949879", "url": "http://42.235.72.7:51347/i", "host": "42.235.72.7", "host_ip": "42.235.72.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:17:07 UTC", "discovered_at": "2026-10-14T04:17:07.000Z" }, { "id": 160699, "urlhaus_id": "3949878", "url": "http://105.184.198.135:45633/i", "host": "105.184.198.135", "host_ip": "105.184.198.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:17:07 UTC", "discovered_at": "2026-10-14T04:17:07.000Z" }, { "id": 160698, "urlhaus_id": "3949877", "url": "http://42.235.55.70:41810/i", "host": "42.235.55.70", "host_ip": "42.235.55.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:17:07 UTC", "discovered_at": "2026-10-14T04:17:07.000Z" }, { "id": 160702, "urlhaus_id": "3949876", "url": "http://27.204.195.222:57287/bin.sh", "host": "27.204.195.222", "host_ip": "27.204.195.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 04:13:09 UTC", "discovered_at": "2026-10-14T04:13:09.000Z" }, { "id": 160703, "urlhaus_id": "3949875", "url": "http://112.238.27.166:55227/bin.sh", "host": "112.238.27.166", "host_ip": "112.238.27.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:02:07 UTC", "discovered_at": "2026-10-14T04:02:07.000Z" }, { "id": 160704, "urlhaus_id": "3949874", "url": "http://112.248.252.138:46325/bin.sh", "host": "112.248.252.138", "host_ip": "112.248.252.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 04:02:06 UTC", "discovered_at": "2026-10-14T04:02:06.000Z" }, { "id": 160705, "urlhaus_id": "3949873", "url": "http://59.180.155.41:56474/i", "host": "59.180.155.41", "host_ip": "59.180.155.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 03:52:31 UTC", "discovered_at": "2026-10-14T03:52:31.000Z" }, { "id": 160706, "urlhaus_id": "3949872", "url": "http://120.84.213.141:33792/i", "host": "120.84.213.141", "host_ip": "120.84.213.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 03:47:06 UTC", "discovered_at": "2026-10-14T03:47:06.000Z" }, { "id": 160707, "urlhaus_id": "3949871", "url": "http://221.203.120.142:55906/i", "host": "221.203.120.142", "host_ip": "221.203.120.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 03:17:08 UTC", "discovered_at": "2026-10-14T03:17:08.000Z" }, { "id": 160708, "urlhaus_id": "3949870", "url": "http://222.127.251.169:52866/i", "host": "222.127.251.169", "host_ip": "222.127.251.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 03:17:06 UTC", "discovered_at": "2026-10-14T03:17:06.000Z" }, { "id": 160709, "urlhaus_id": "3949869", "url": "http://115.55.207.120:45354/bin.sh", "host": "115.55.207.120", "host_ip": "115.55.207.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 03:04:13 UTC", "discovered_at": "2026-10-14T03:04:13.000Z" }, { "id": 160710, "urlhaus_id": "3949868", "url": "http://123.161.90.221:44391/i", "host": "123.161.90.221", "host_ip": "123.161.90.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 03:02:12 UTC", "discovered_at": "2026-10-14T03:02:12.000Z" }, { "id": 160711, "urlhaus_id": "3949867", "url": "http://123.129.129.255:53044/i", "host": "123.129.129.255", "host_ip": "123.129.129.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 03:02:09 UTC", "discovered_at": "2026-10-14T03:02:09.000Z" }, { "id": 160712, "urlhaus_id": "3949866", "url": "http://115.55.48.84:36350/bin.sh", "host": "115.55.48.84", "host_ip": "115.55.48.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 02:55:09 UTC", "discovered_at": "2026-10-14T02:55:09.000Z" }, { "id": 160713, "urlhaus_id": "3949865", "url": "http://117.223.140.114:55857/i", "host": "117.223.140.114", "host_ip": "117.223.140.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 02:27:26 UTC", "discovered_at": "2026-10-14T02:27:26.000Z" }, { "id": 160714, "urlhaus_id": "3949864", "url": "https://onlocity.com/download.php?dl_t=5040be5331da9ad77144d7035ad44d7e&dl_e=1791728811&dl_s=6880545d8ab0d9b712a1206f40203fd50703bc111830d489f33cd79721666a8f", "host": "onlocity.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 02:24:45 UTC", "discovered_at": "2026-10-14T02:24:45.000Z" }, { "id": 160715, "urlhaus_id": "3949863", "url": "http://119.114.62.34:55058/bin.sh", "host": "119.114.62.34", "host_ip": "119.114.62.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 02:17:06 UTC", "discovered_at": "2026-10-14T02:17:06.000Z" }, { "id": 160716, "urlhaus_id": "3949862", "url": "http://123.7.220.3:57997/i", "host": "123.7.220.3", "host_ip": "123.7.220.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 02:04:17 UTC", "discovered_at": "2026-10-14T02:04:17.000Z" }, { "id": 160717, "urlhaus_id": "3949861", "url": "http://221.203.238.103:36056/i", "host": "221.203.238.103", "host_ip": "221.203.238.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 01:56:19 UTC", "discovered_at": "2026-10-14T01:56:19.000Z" }, { "id": 160718, "urlhaus_id": "3949860", "url": "http://120.28.215.36:56021/bin.sh", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-14 01:50:15 UTC", "discovered_at": "2026-10-14T01:50:15.000Z" }, { "id": 160720, "urlhaus_id": "3949859", "url": "http://117.223.140.122:44549/i", "host": "117.223.140.122", "host_ip": "117.223.140.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:12 UTC", "discovered_at": "2026-10-14T01:47:12.000Z" }, { "id": 160719, "urlhaus_id": "3949858", "url": "http://119.116.36.37:35525/i", "host": "119.116.36.37", "host_ip": "119.116.36.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:12 UTC", "discovered_at": "2026-10-14T01:47:12.000Z" }, { "id": 160721, "urlhaus_id": "3949857", "url": "http://120.84.213.141:33792/bin.sh", "host": "120.84.213.141", "host_ip": "120.84.213.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:09 UTC", "discovered_at": "2026-10-14T01:47:09.000Z" }, { "id": 160724, "urlhaus_id": "3949856", "url": "http://119.186.205.150:39464/i", "host": "119.186.205.150", "host_ip": "119.186.205.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:08 UTC", "discovered_at": "2026-10-14T01:47:08.000Z" }, { "id": 160723, "urlhaus_id": "3949855", "url": "http://119.186.205.150:39464/bin.sh", "host": "119.186.205.150", "host_ip": "119.186.205.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:08 UTC", "discovered_at": "2026-10-14T01:47:08.000Z" }, { "id": 160722, "urlhaus_id": "3949854", "url": "http://170.84.132.250:57535/i", "host": "170.84.132.250", "host_ip": "170.84.132.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:08 UTC", "discovered_at": "2026-10-14T01:47:08.000Z" }, { "id": 160726, "urlhaus_id": "3949853", "url": "http://144.48.121.51:43765/i", "host": "144.48.121.51", "host_ip": "144.48.121.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:07 UTC", "discovered_at": "2026-10-14T01:47:07.000Z" }, { "id": 160725, "urlhaus_id": "3949852", "url": "http://123.12.234.153:53789/i", "host": "123.12.234.153", "host_ip": "123.12.234.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:07 UTC", "discovered_at": "2026-10-14T01:47:07.000Z" }, { "id": 160727, "urlhaus_id": "3949851", "url": "http://130.12.209.153:53341/i", "host": "130.12.209.153", "host_ip": "130.12.209.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:47:06 UTC", "discovered_at": "2026-10-14T01:47:06.000Z" }, { "id": 160729, "urlhaus_id": "3949850", "url": "http://115.55.48.84:36350/i", "host": "115.55.48.84", "host_ip": "115.55.48.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:11 UTC", "discovered_at": "2026-10-14T01:32:11.000Z" }, { "id": 160728, "urlhaus_id": "3949849", "url": "http://115.55.28.19:33162/i", "host": "115.55.28.19", "host_ip": "115.55.28.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:11 UTC", "discovered_at": "2026-10-14T01:32:11.000Z" }, { "id": 160730, "urlhaus_id": "3949848", "url": "http://115.55.207.120:45354/i", "host": "115.55.207.120", "host_ip": "115.55.207.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:08 UTC", "discovered_at": "2026-10-14T01:32:08.000Z" }, { "id": 160732, "urlhaus_id": "3949847", "url": "http://61.52.110.184:34988/i", "host": "61.52.110.184", "host_ip": "61.52.110.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:07 UTC", "discovered_at": "2026-10-14T01:32:07.000Z" }, { "id": 160731, "urlhaus_id": "3949846", "url": "http://42.177.100.35:47417/bin.sh", "host": "42.177.100.35", "host_ip": "42.177.100.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:07 UTC", "discovered_at": "2026-10-14T01:32:07.000Z" }, { "id": 160733, "urlhaus_id": "3949845", "url": "http://78.38.19.164:43794/i", "host": "78.38.19.164", "host_ip": "78.38.19.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 01:32:06 UTC", "discovered_at": "2026-10-14T01:32:06.000Z" }, { "id": 160734, "urlhaus_id": "3949844", "url": "http://62.60.226.140/files/2145124153/d2iHiF3.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-14 01:12:05 UTC", "discovered_at": "2026-10-14T01:12:05.000Z" }, { "id": 160735, "urlhaus_id": "3949843", "url": "http://62.60.226.140/files/2145124153/twn9RC1.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-14 01:11:06 UTC", "discovered_at": "2026-10-14T01:11:06.000Z" }, { "id": 160736, "urlhaus_id": "3949842", "url": "http://183.12.167.180:44417/i", "host": "183.12.167.180", "host_ip": "183.12.167.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-14 01:06:20 UTC", "discovered_at": "2026-10-14T01:06:20.000Z" }, { "id": 160737, "urlhaus_id": "3949841", "url": "http://117.223.143.4:53607/i", "host": "117.223.143.4", "host_ip": "117.223.143.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-14 01:04:12 UTC", "discovered_at": "2026-10-14T01:04:12.000Z" }, { "id": 160738, "urlhaus_id": "3949840", "url": "http://117.146.92.46:46929/i", "host": "117.146.92.46", "host_ip": "117.146.92.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 00:59:17 UTC", "discovered_at": "2026-10-14T00:59:17.000Z" }, { "id": 160755, "urlhaus_id": "3949839", "url": "http://31.56.209.86/arm", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160754, "urlhaus_id": "3949838", "url": "http://94.154.43.127/bins/mips", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160753, "urlhaus_id": "3949837", "url": "http://94.154.43.127/bins/m68k", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160752, "urlhaus_id": "3949836", "url": "http://94.154.43.127/bins/arm", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160751, "urlhaus_id": "3949835", "url": "http://45.198.224.158/arm7", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160750, "urlhaus_id": "3949834", "url": "http://45.198.224.158/mips", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160749, "urlhaus_id": "3949833", "url": "http://45.198.224.158/arc", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160748, "urlhaus_id": "3949832", "url": "http://45.198.224.158/x86_64", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160747, "urlhaus_id": "3949831", "url": "http://94.154.43.127/bins/x86_64", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160746, "urlhaus_id": "3949830", "url": "http://45.198.224.158/m68k", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160745, "urlhaus_id": "3949829", "url": "http://94.154.43.127/bins/i686", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160744, "urlhaus_id": "3949828", "url": "http://45.198.224.158/i586", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160743, "urlhaus_id": "3949827", "url": "http://45.198.224.158/i686", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160742, "urlhaus_id": "3949826", "url": "http://45.198.224.158/mipsel", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160741, "urlhaus_id": "3949825", "url": "http://94.154.43.127/bins/spc", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160740, "urlhaus_id": "3949824", "url": "http://45.198.224.158/ppc", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160739, "urlhaus_id": "3949823", "url": "http://94.154.43.127/bins/mpsl", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:17 UTC", "discovered_at": "2026-10-14T00:58:17.000Z" }, { "id": 160759, "urlhaus_id": "3949822", "url": "http://94.154.43.127/bins/arm6", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:16 UTC", "discovered_at": "2026-10-14T00:58:16.000Z" }, { "id": 160758, "urlhaus_id": "3949821", "url": "http://94.154.43.127/bins/ppc", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:16 UTC", "discovered_at": "2026-10-14T00:58:16.000Z" }, { "id": 160757, "urlhaus_id": "3949820", "url": "http://45.198.224.158/arm", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:16 UTC", "discovered_at": "2026-10-14T00:58:16.000Z" }, { "id": 160756, "urlhaus_id": "3949819", "url": "http://45.198.224.158/sh4", "host": "45.198.224.158", "host_ip": "45.198.224.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-14 00:58:16 UTC", "discovered_at": "2026-10-14T00:58:16.000Z" }, { "id": 160760, "urlhaus_id": "3949818", "url": "http://94.154.43.127/bins/arm5", "host": "94.154.43.127", "host_ip": "94.154.43.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-14 00:58:06 UTC", "discovered_at": "2026-10-14T00:58:06.000Z" }, { "id": 160761, "urlhaus_id": "3949817", "url": "http://42.179.6.215:56749/i", "host": "42.179.6.215", "host_ip": "42.179.6.215", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 00:52:34 UTC", "discovered_at": "2026-10-14T00:52:34.000Z" }, { "id": 160762, "urlhaus_id": "3949816", "url": "http://182.124.186.9:51100/bin.sh", "host": "182.124.186.9", "host_ip": "182.124.186.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 00:35:23 UTC", "discovered_at": "2026-10-14T00:35:23.000Z" }, { "id": 160763, "urlhaus_id": "3949815", "url": "http://59.97.250.49:35037/bin.sh", "host": "59.97.250.49", "host_ip": "59.97.250.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:32:06 UTC", "discovered_at": "2026-10-14T00:32:06.000Z" }, { "id": 160764, "urlhaus_id": "3949814", "url": "http://59.97.249.167:49804/i", "host": "59.97.249.167", "host_ip": "59.97.249.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:32:05 UTC", "discovered_at": "2026-10-14T00:32:05.000Z" }, { "id": 160765, "urlhaus_id": "3949813", "url": "http://117.146.92.46:46929/bin.sh", "host": "117.146.92.46", "host_ip": "117.146.92.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-14 00:25:14 UTC", "discovered_at": "2026-10-14T00:25:14.000Z" }, { "id": 160767, "urlhaus_id": "3949812", "url": "http://117.63.242.169:57947/i", "host": "117.63.242.169", "host_ip": "117.63.242.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:17:07 UTC", "discovered_at": "2026-10-14T00:17:07.000Z" }, { "id": 160766, "urlhaus_id": "3949811", "url": "http://182.121.137.144:34518/i", "host": "182.121.137.144", "host_ip": "182.121.137.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:17:07 UTC", "discovered_at": "2026-10-14T00:17:07.000Z" }, { "id": 160769, "urlhaus_id": "3949810", "url": "http://182.121.208.153:34850/i", "host": "182.121.208.153", "host_ip": "182.121.208.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:17:06 UTC", "discovered_at": "2026-10-14T00:17:06.000Z" }, { "id": 160768, "urlhaus_id": "3949809", "url": "http://101.108.6.212:40608/i", "host": "101.108.6.212", "host_ip": "101.108.6.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:17:06 UTC", "discovered_at": "2026-10-14T00:17:06.000Z" }, { "id": 160770, "urlhaus_id": "3949808", "url": "http://221.15.9.104:39894/bin.sh", "host": "221.15.9.104", "host_ip": "221.15.9.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:02:10 UTC", "discovered_at": "2026-10-14T00:02:10.000Z" }, { "id": 160771, "urlhaus_id": "3949807", "url": "http://216.129.184.213:49611/bin.sh", "host": "216.129.184.213", "host_ip": "216.129.184.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:02:09 UTC", "discovered_at": "2026-10-14T00:02:09.000Z" }, { "id": 160773, "urlhaus_id": "3949806", "url": "http://222.137.20.110:58757/i", "host": "222.137.20.110", "host_ip": "222.137.20.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:02:08 UTC", "discovered_at": "2026-10-14T00:02:08.000Z" }, { "id": 160772, "urlhaus_id": "3949805", "url": "http://221.15.9.104:39894/i", "host": "221.15.9.104", "host_ip": "221.15.9.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:02:08 UTC", "discovered_at": "2026-10-14T00:02:08.000Z" }, { "id": 160774, "urlhaus_id": "3949804", "url": "http://216.249.4.20:32899/i", "host": "216.249.4.20", "host_ip": "216.249.4.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-14 00:02:07 UTC", "discovered_at": "2026-10-14T00:02:07.000Z" }, { "id": 160775, "urlhaus_id": "3949803", "url": "http://42.86.75.61:45923/i", "host": "42.86.75.61", "host_ip": "42.86.75.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:32:07 UTC", "discovered_at": "2026-10-13T23:32:07.000Z" }, { "id": 160776, "urlhaus_id": "3949802", "url": "http://60.177.206.221:36365/i", "host": "60.177.206.221", "host_ip": "60.177.206.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 23:17:20 UTC", "discovered_at": "2026-10-13T23:17:20.000Z" }, { "id": 160778, "urlhaus_id": "3949801", "url": "http://175.165.197.135:58677/i", "host": "175.165.197.135", "host_ip": "175.165.197.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:17:08 UTC", "discovered_at": "2026-10-13T23:17:08.000Z" }, { "id": 160777, "urlhaus_id": "3949800", "url": "http://101.108.6.212:40608/bin.sh", "host": "101.108.6.212", "host_ip": "101.108.6.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:17:08 UTC", "discovered_at": "2026-10-13T23:17:08.000Z" }, { "id": 160780, "urlhaus_id": "3949799", "url": "http://117.223.143.76:52142/i", "host": "117.223.143.76", "host_ip": "117.223.143.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:17:07 UTC", "discovered_at": "2026-10-13T23:17:07.000Z" }, { "id": 160779, "urlhaus_id": "3949798", "url": "http://116.138.106.90:54353/i", "host": "116.138.106.90", "host_ip": "116.138.106.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:17:07 UTC", "discovered_at": "2026-10-13T23:17:07.000Z" }, { "id": 160781, "urlhaus_id": "3949797", "url": "http://115.52.68.113:60095/i", "host": "115.52.68.113", "host_ip": "115.52.68.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 23:10:20 UTC", "discovered_at": "2026-10-13T23:10:20.000Z" }, { "id": 160784, "urlhaus_id": "3949796", "url": "http://175.165.87.154:56249/bin.sh", "host": "175.165.87.154", "host_ip": "175.165.87.154", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:02:06 UTC", "discovered_at": "2026-10-13T23:02:06.000Z" }, { "id": 160783, "urlhaus_id": "3949795", "url": "http://182.113.206.3:59417/bin.sh", "host": "182.113.206.3", "host_ip": "182.113.206.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:02:06 UTC", "discovered_at": "2026-10-13T23:02:06.000Z" }, { "id": 160782, "urlhaus_id": "3949794", "url": "http://175.165.44.137:38532/bin.sh", "host": "175.165.44.137", "host_ip": "175.165.44.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 23:02:06 UTC", "discovered_at": "2026-10-13T23:02:06.000Z" }, { "id": 160785, "urlhaus_id": "3949793", "url": "http://120.28.135.254:56342/i", "host": "120.28.135.254", "host_ip": "120.28.135.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 22:47:07 UTC", "discovered_at": "2026-10-13T22:47:07.000Z" }, { "id": 160787, "urlhaus_id": "3949792", "url": "http://42.224.145.69:33047/i", "host": "42.224.145.69", "host_ip": "42.224.145.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 22:47:06 UTC", "discovered_at": "2026-10-13T22:47:06.000Z" }, { "id": 160786, "urlhaus_id": "3949791", "url": "http://42.227.203.38:54878/i", "host": "42.227.203.38", "host_ip": "42.227.203.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 22:47:06 UTC", "discovered_at": "2026-10-13T22:47:06.000Z" }, { "id": 160788, "urlhaus_id": "3949790", "url": "http://124.132.130.96:50755/i", "host": "124.132.130.96", "host_ip": "124.132.130.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:41:11 UTC", "discovered_at": "2026-10-13T22:41:11.000Z" }, { "id": 160789, "urlhaus_id": "3949789", "url": "http://115.52.68.113:60095/bin.sh", "host": "115.52.68.113", "host_ip": "115.52.68.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:38:07 UTC", "discovered_at": "2026-10-13T22:38:07.000Z" }, { "id": 160790, "urlhaus_id": "3949788", "url": "http://108.170.136.155:52182/i", "host": "108.170.136.155", "host_ip": "108.170.136.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:34:12 UTC", "discovered_at": "2026-10-13T22:34:12.000Z" }, { "id": 160791, "urlhaus_id": "3949787", "url": "http://182.116.49.51:47628/i", "host": "182.116.49.51", "host_ip": "182.116.49.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 22:32:07 UTC", "discovered_at": "2026-10-13T22:32:07.000Z" }, { "id": 160792, "urlhaus_id": "3949786", "url": "http://113.231.199.231:48888/i", "host": "113.231.199.231", "host_ip": "113.231.199.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:30:17 UTC", "discovered_at": "2026-10-13T22:30:17.000Z" }, { "id": 160793, "urlhaus_id": "3949785", "url": "http://108.170.136.155:52182/bin.sh", "host": "108.170.136.155", "host_ip": "108.170.136.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:24:21 UTC", "discovered_at": "2026-10-13T22:24:21.000Z" }, { "id": 160794, "urlhaus_id": "3949784", "url": "http://42.239.159.114:44748/i", "host": "42.239.159.114", "host_ip": "42.239.159.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:23:20 UTC", "discovered_at": "2026-10-13T22:23:20.000Z" }, { "id": 160795, "urlhaus_id": "3949783", "url": "http://175.146.7.79:40951/i", "host": "175.146.7.79", "host_ip": "175.146.7.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:22:17 UTC", "discovered_at": "2026-10-13T22:22:17.000Z" }, { "id": 160796, "urlhaus_id": "3949782", "url": "http://62.60.226.140/files/7782139129/9LFJBSe.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-13 22:20:06 UTC", "discovered_at": "2026-10-13T22:20:06.000Z" }, { "id": 160797, "urlhaus_id": "3949781", "url": "http://59.180.138.228:56474/i", "host": "59.180.138.228", "host_ip": "59.180.138.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:14:40 UTC", "discovered_at": "2026-10-13T22:14:40.000Z" }, { "id": 160798, "urlhaus_id": "3949780", "url": "http://182.116.49.72:58470/bin.sh", "host": "182.116.49.72", "host_ip": "182.116.49.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:07:15 UTC", "discovered_at": "2026-10-13T22:07:15.000Z" }, { "id": 160799, "urlhaus_id": "3949779", "url": "http://175.147.248.105:46871/bin.sh", "host": "175.147.248.105", "host_ip": "175.147.248.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:04:10 UTC", "discovered_at": "2026-10-13T22:04:10.000Z" }, { "id": 160800, "urlhaus_id": "3949778", "url": "http://123.12.225.135:44550/i", "host": "123.12.225.135", "host_ip": "123.12.225.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 22:02:08 UTC", "discovered_at": "2026-10-13T22:02:08.000Z" }, { "id": 160801, "urlhaus_id": "3949777", "url": "http://113.231.199.231:48888/bin.sh", "host": "113.231.199.231", "host_ip": "113.231.199.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 22:00:21 UTC", "discovered_at": "2026-10-13T22:00:21.000Z" }, { "id": 160803, "urlhaus_id": "3949776", "url": "http://115.49.29.100:33633/i", "host": "115.49.29.100", "host_ip": "115.49.29.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:59:14 UTC", "discovered_at": "2026-10-13T21:59:14.000Z" }, { "id": 160802, "urlhaus_id": "3949775", "url": "http://115.50.217.205:60757/i", "host": "115.50.217.205", "host_ip": "115.50.217.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:59:14 UTC", "discovered_at": "2026-10-13T21:59:14.000Z" }, { "id": 160804, "urlhaus_id": "3949774", "url": "http://115.50.217.205:60757/bin.sh", "host": "115.50.217.205", "host_ip": "115.50.217.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:49:16 UTC", "discovered_at": "2026-10-13T21:49:16.000Z" }, { "id": 160805, "urlhaus_id": "3949773", "url": "http://182.121.154.159:50078/i", "host": "182.121.154.159", "host_ip": "182.121.154.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:47:08 UTC", "discovered_at": "2026-10-13T21:47:08.000Z" }, { "id": 160806, "urlhaus_id": "3949772", "url": "http://42.230.132.102:57591/i", "host": "42.230.132.102", "host_ip": "42.230.132.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:35:11 UTC", "discovered_at": "2026-10-13T21:35:11.000Z" }, { "id": 160807, "urlhaus_id": "3949771", "url": "http://42.230.132.102:57591/bin.sh", "host": "42.230.132.102", "host_ip": "42.230.132.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:34:17 UTC", "discovered_at": "2026-10-13T21:34:17.000Z" }, { "id": 160808, "urlhaus_id": "3949770", "url": "http://178.74.75.16:3344/i", "host": "178.74.75.16", "host_ip": "178.74.75.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:34:16 UTC", "discovered_at": "2026-10-13T21:34:16.000Z" }, { "id": 160809, "urlhaus_id": "3949769", "url": "http://175.146.7.79:40951/bin.sh", "host": "175.146.7.79", "host_ip": "175.146.7.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:33:21 UTC", "discovered_at": "2026-10-13T21:33:21.000Z" }, { "id": 160810, "urlhaus_id": "3949768", "url": "http://112.248.252.138:46325/i", "host": "112.248.252.138", "host_ip": "112.248.252.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:32:20 UTC", "discovered_at": "2026-10-13T21:32:20.000Z" }, { "id": 160811, "urlhaus_id": "3949767", "url": "http://170.84.134.172:48133/i", "host": "170.84.134.172", "host_ip": "170.84.134.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 21:32:16 UTC", "discovered_at": "2026-10-13T21:32:16.000Z" }, { "id": 160812, "urlhaus_id": "3949766", "url": "http://182.121.9.51:56156/i", "host": "182.121.9.51", "host_ip": "182.121.9.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:32:07 UTC", "discovered_at": "2026-10-13T21:32:07.000Z" }, { "id": 160813, "urlhaus_id": "3949765", "url": "http://222.219.74.191:50455/i", "host": "222.219.74.191", "host_ip": "222.219.74.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:17:12 UTC", "discovered_at": "2026-10-13T21:17:12.000Z" }, { "id": 160814, "urlhaus_id": "3949764", "url": "http://27.156.139.134:46074/i", "host": "27.156.139.134", "host_ip": "27.156.139.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:17:10 UTC", "discovered_at": "2026-10-13T21:17:10.000Z" }, { "id": 160815, "urlhaus_id": "3949763", "url": "http://123.12.244.201:50944/bin.sh", "host": "123.12.244.201", "host_ip": "123.12.244.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:17:06 UTC", "discovered_at": "2026-10-13T21:17:06.000Z" }, { "id": 160816, "urlhaus_id": "3949762", "url": "http://42.55.71.61:44989/i", "host": "42.55.71.61", "host_ip": "42.55.71.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:15:08 UTC", "discovered_at": "2026-10-13T21:15:08.000Z" }, { "id": 160817, "urlhaus_id": "3949761", "url": "http://175.165.84.138:58271/i", "host": "175.165.84.138", "host_ip": "175.165.84.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:07:18 UTC", "discovered_at": "2026-10-13T21:07:18.000Z" }, { "id": 160818, "urlhaus_id": "3949760", "url": "http://175.173.65.210:53409/bin.sh", "host": "175.173.65.210", "host_ip": "175.173.65.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 21:06:08 UTC", "discovered_at": "2026-10-13T21:06:08.000Z" }, { "id": 160821, "urlhaus_id": "3949759", "url": "http://183.48.166.223:40635/i", "host": "183.48.166.223", "host_ip": "183.48.166.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:02:07 UTC", "discovered_at": "2026-10-13T21:02:07.000Z" }, { "id": 160820, "urlhaus_id": "3949758", "url": "http://222.127.186.27:35948/i", "host": "222.127.186.27", "host_ip": "222.127.186.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:02:07 UTC", "discovered_at": "2026-10-13T21:02:07.000Z" }, { "id": 160819, "urlhaus_id": "3949757", "url": "http://110.186.230.140:60525/bin.sh", "host": "110.186.230.140", "host_ip": "110.186.230.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:02:07 UTC", "discovered_at": "2026-10-13T21:02:07.000Z" }, { "id": 160822, "urlhaus_id": "3949756", "url": "http://219.157.8.85:50774/i", "host": "219.157.8.85", "host_ip": "219.157.8.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 21:02:06 UTC", "discovered_at": "2026-10-13T21:02:06.000Z" }, { "id": 160823, "urlhaus_id": "3949755", "url": "http://182.112.93.63:53186/i", "host": "182.112.93.63", "host_ip": "182.112.93.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:47:10 UTC", "discovered_at": "2026-10-13T20:47:10.000Z" }, { "id": 160824, "urlhaus_id": "3949754", "url": "http://178.74.75.16:3344/bin.sh", "host": "178.74.75.16", "host_ip": "178.74.75.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:47:09 UTC", "discovered_at": "2026-10-13T20:47:09.000Z" }, { "id": 160825, "urlhaus_id": "3949753", "url": "http://182.113.39.174:50004/bin.sh", "host": "182.113.39.174", "host_ip": "182.113.39.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:47:07 UTC", "discovered_at": "2026-10-13T20:47:07.000Z" }, { "id": 160826, "urlhaus_id": "3949752", "url": "http://103.179.240.227:37620/bin.sh", "host": "103.179.240.227", "host_ip": "103.179.240.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:47:06 UTC", "discovered_at": "2026-10-13T20:47:06.000Z" }, { "id": 160827, "urlhaus_id": "3949751", "url": "http://125.46.198.146:60948/i", "host": "125.46.198.146", "host_ip": "125.46.198.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 20:40:19 UTC", "discovered_at": "2026-10-13T20:40:19.000Z" }, { "id": 160828, "urlhaus_id": "3949750", "url": "http://112.246.23.237:36775/i", "host": "112.246.23.237", "host_ip": "112.246.23.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:26 UTC", "discovered_at": "2026-10-13T20:32:26.000Z" }, { "id": 160829, "urlhaus_id": "3949749", "url": "http://154.223.128.222:55576/i", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:12 UTC", "discovered_at": "2026-10-13T20:32:12.000Z" }, { "id": 160833, "urlhaus_id": "3949748", "url": "http://115.61.111.244:57147/i", "host": "115.61.111.244", "host_ip": "115.61.111.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:08 UTC", "discovered_at": "2026-10-13T20:32:08.000Z" }, { "id": 160832, "urlhaus_id": "3949747", "url": "http://115.57.229.125:44809/i", "host": "115.57.229.125", "host_ip": "115.57.229.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:08 UTC", "discovered_at": "2026-10-13T20:32:08.000Z" }, { "id": 160831, "urlhaus_id": "3949746", "url": "http://105.225.25.165:43697/i", "host": "105.225.25.165", "host_ip": "105.225.25.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:08 UTC", "discovered_at": "2026-10-13T20:32:08.000Z" }, { "id": 160830, "urlhaus_id": "3949745", "url": "http://151.232.136.83:49192/i", "host": "151.232.136.83", "host_ip": "151.232.136.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:08 UTC", "discovered_at": "2026-10-13T20:32:08.000Z" }, { "id": 160836, "urlhaus_id": "3949744", "url": "http://116.138.106.90:54353/bin.sh", "host": "116.138.106.90", "host_ip": "116.138.106.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:07 UTC", "discovered_at": "2026-10-13T20:32:07.000Z" }, { "id": 160835, "urlhaus_id": "3949743", "url": "http://116.3.202.164:56979/i", "host": "116.3.202.164", "host_ip": "116.3.202.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:07 UTC", "discovered_at": "2026-10-13T20:32:07.000Z" }, { "id": 160834, "urlhaus_id": "3949742", "url": "http://39.86.250.41:57376/bin.sh", "host": "39.86.250.41", "host_ip": "39.86.250.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:07 UTC", "discovered_at": "2026-10-13T20:32:07.000Z" }, { "id": 160837, "urlhaus_id": "3949741", "url": "http://83.219.1.198:56307/i", "host": "83.219.1.198", "host_ip": "83.219.1.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:32:06 UTC", "discovered_at": "2026-10-13T20:32:06.000Z" }, { "id": 160838, "urlhaus_id": "3949740", "url": "http://62.60.226.140/files/7299809293/g8WrNZP.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-13 20:27:05 UTC", "discovered_at": "2026-10-13T20:27:05.000Z" }, { "id": 160839, "urlhaus_id": "3949739", "url": "http://125.46.198.146:60948/bin.sh", "host": "125.46.198.146", "host_ip": "125.46.198.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 20:22:19 UTC", "discovered_at": "2026-10-13T20:22:19.000Z" }, { "id": 160840, "urlhaus_id": "3949738", "url": "http://59.58.114.244:39073/bin.sh", "host": "59.58.114.244", "host_ip": "59.58.114.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 20:20:14 UTC", "discovered_at": "2026-10-13T20:20:14.000Z" }, { "id": 160841, "urlhaus_id": "3949737", "url": "http://218.61.29.147:42129/bin.sh", "host": "218.61.29.147", "host_ip": "218.61.29.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:02:09 UTC", "discovered_at": "2026-10-13T20:02:09.000Z" }, { "id": 160842, "urlhaus_id": "3949736", "url": "http://105.224.56.184:43207/i", "host": "105.224.56.184", "host_ip": "105.224.56.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:02:06 UTC", "discovered_at": "2026-10-13T20:02:06.000Z" }, { "id": 160843, "urlhaus_id": "3949735", "url": "http://196.188.141.17:44881/i", "host": "196.188.141.17", "host_ip": "196.188.141.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 20:02:05 UTC", "discovered_at": "2026-10-13T20:02:05.000Z" }, { "id": 160844, "urlhaus_id": "3949734", "url": "http://115.55.57.11:59109/i", "host": "115.55.57.11", "host_ip": "115.55.57.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 19:56:13 UTC", "discovered_at": "2026-10-13T19:56:13.000Z" }, { "id": 160845, "urlhaus_id": "3949733", "url": "http://222.127.71.33:60552/bin.sh", "host": "222.127.71.33", "host_ip": "222.127.71.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 19:55:21 UTC", "discovered_at": "2026-10-13T19:55:21.000Z" }, { "id": 160846, "urlhaus_id": "3949732", "url": "http://123.5.14.37:57335/i", "host": "123.5.14.37", "host_ip": "123.5.14.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:47:07 UTC", "discovered_at": "2026-10-13T19:47:07.000Z" }, { "id": 160847, "urlhaus_id": "3949731", "url": "http://42.57.202.127:52888/bin.sh", "host": "42.57.202.127", "host_ip": "42.57.202.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 19:36:22 UTC", "discovered_at": "2026-10-13T19:36:22.000Z" }, { "id": 160848, "urlhaus_id": "3949730", "url": "http://119.114.62.34:55058/i", "host": "119.114.62.34", "host_ip": "119.114.62.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:17:20 UTC", "discovered_at": "2026-10-13T19:17:20.000Z" }, { "id": 160849, "urlhaus_id": "3949729", "url": "http://119.117.173.221:38561/i", "host": "119.117.173.221", "host_ip": "119.117.173.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:17:08 UTC", "discovered_at": "2026-10-13T19:17:08.000Z" }, { "id": 160851, "urlhaus_id": "3949728", "url": "http://182.121.148.252:56262/i", "host": "182.121.148.252", "host_ip": "182.121.148.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:02:08 UTC", "discovered_at": "2026-10-13T19:02:08.000Z" }, { "id": 160850, "urlhaus_id": "3949727", "url": "http://182.122.120.82:45263/i", "host": "182.122.120.82", "host_ip": "182.122.120.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:02:08 UTC", "discovered_at": "2026-10-13T19:02:08.000Z" }, { "id": 160852, "urlhaus_id": "3949726", "url": "http://182.116.112.72:46115/i", "host": "182.116.112.72", "host_ip": "182.116.112.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 19:02:07 UTC", "discovered_at": "2026-10-13T19:02:07.000Z" }, { "id": 159377, "urlhaus_id": "3949725", "url": "http://150.251.113.186/bins/dlr.ppc", "host": "150.251.113.186", "host_ip": "150.251.113.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:12:18 UTC", "discovered_at": "2026-10-13T18:12:18.000Z" }, { "id": 159378, "urlhaus_id": "3949724", "url": "http://150.251.113.186/bins/dlr.m68k", "host": "150.251.113.186", "host_ip": "150.251.113.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:11:14 UTC", "discovered_at": "2026-10-13T18:11:14.000Z" }, { "id": 159383, "urlhaus_id": "3949723", "url": "http://150.251.113.186/bins/dlr.spc", "host": "150.251.113.186", "host_ip": "150.251.113.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:10:20 UTC", "discovered_at": "2026-10-13T18:10:20.000Z" }, { "id": 159382, "urlhaus_id": "3949722", "url": "http://150.251.113.186/bins/dlr.arm5", "host": "150.251.113.186", "host_ip": "150.251.113.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:10:20 UTC", "discovered_at": "2026-10-13T18:10:20.000Z" }, { "id": 159381, "urlhaus_id": "3949721", "url": "http://153.56.180.69/main_mips", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:10:20 UTC", "discovered_at": "2026-10-13T18:10:20.000Z" }, { "id": 159380, "urlhaus_id": "3949720", "url": "http://150.251.113.186/bins/dlr.mpsl", "host": "150.251.113.186", "host_ip": "150.251.113.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:10:20 UTC", "discovered_at": "2026-10-13T18:10:20.000Z" }, { "id": 159379, "urlhaus_id": "3949719", "url": "http://185.209.162.191/bins/arm6", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 18:10:20 UTC", "discovered_at": "2026-10-13T18:10:20.000Z" }, { "id": 159384, "urlhaus_id": "3949718", "url": "http://112.198.238.18:37154/bin.sh", "host": "112.198.238.18", "host_ip": "112.198.238.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 17:53:20 UTC", "discovered_at": "2026-10-13T17:53:20.000Z" }, { "id": 159385, "urlhaus_id": "3949717", "url": "http://123.13.30.219:37228/bin.sh", "host": "123.13.30.219", "host_ip": "123.13.30.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 17:47:06 UTC", "discovered_at": "2026-10-13T17:47:06.000Z" }, { "id": 159386, "urlhaus_id": "3949716", "url": "http://219.140.4.10:49905/bin.sh", "host": "219.140.4.10", "host_ip": "219.140.4.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 17:34:16 UTC", "discovered_at": "2026-10-13T17:34:16.000Z" }, { "id": 159387, "urlhaus_id": "3949715", "url": "http://123.14.40.123:55464/bin.sh", "host": "123.14.40.123", "host_ip": "123.14.40.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 17:32:06 UTC", "discovered_at": "2026-10-13T17:32:06.000Z" }, { "id": 159388, "urlhaus_id": "3949714", "url": "http://217.60.195.62:8000/haha.bat", "host": "217.60.195.62", "host_ip": "217.60.195.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-62-8000, bat, ua-wget", "last_online": null, "first_seen": "2026-10-13 17:06:06 UTC", "discovered_at": "2026-10-13T17:06:06.000Z" }, { "id": 159389, "urlhaus_id": "3949713", "url": "http://217.60.195.62:8000/shell.bat", "host": "217.60.195.62", "host_ip": "217.60.195.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-62-8000, bat, ua-wget", "last_online": null, "first_seen": "2026-10-13 17:05:12 UTC", "discovered_at": "2026-10-13T17:05:12.000Z" }, { "id": 159390, "urlhaus_id": "3949712", "url": "http://217.60.195.62:8000/px.dat", "host": "217.60.195.62", "host_ip": "217.60.195.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-62-8000, exe, ua-wget", "last_online": null, "first_seen": "2026-10-13 17:05:09 UTC", "discovered_at": "2026-10-13T17:05:09.000Z" }, { "id": 159391, "urlhaus_id": "3949711", "url": "http://217.60.195.62:8000/payload.vbs", "host": "217.60.195.62", "host_ip": "217.60.195.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-62-8000, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-13 17:05:07 UTC", "discovered_at": "2026-10-13T17:05:07.000Z" }, { "id": 159392, "urlhaus_id": "3949710", "url": "http://217.60.195.62:8000/silent.vbs", "host": "217.60.195.62", "host_ip": "217.60.195.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-62-8000, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-13 17:05:06 UTC", "discovered_at": "2026-10-13T17:05:06.000Z" }, { "id": 159393, "urlhaus_id": "3949709", "url": "http://221.203.143.17:58434/bin.sh", "host": "221.203.143.17", "host_ip": "221.203.143.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 17:02:07 UTC", "discovered_at": "2026-10-13T17:02:07.000Z" }, { "id": 159394, "urlhaus_id": "3949708", "url": "http://210.208.106.68:50663/i", "host": "210.208.106.68", "host_ip": "210.208.106.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:47:07 UTC", "discovered_at": "2026-10-13T16:47:07.000Z" }, { "id": 159395, "urlhaus_id": "3949707", "url": "https://willow-13.com/f/4nsri1yksbqlneewnevynq/cvfo3thd", "host": "willow-13.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, zsh", "last_online": null, "first_seen": "2026-10-13 16:36:09 UTC", "discovered_at": "2026-10-13T16:36:09.000Z" }, { "id": 159396, "urlhaus_id": "3949706", "url": "https://crackedclients.com/krypton-client.jar", "host": "crackedclients.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-13 16:36:06 UTC", "discovered_at": "2026-10-13T16:36:06.000Z" }, { "id": 159397, "urlhaus_id": "3949705", "url": "https://willow-13.com/curl/3q6bi119bmh/hta33q8o8pnbdlzpyl4v7e.dat", "host": "willow-13.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, zsh", "last_online": null, "first_seen": "2026-10-13 16:36:05 UTC", "discovered_at": "2026-10-13T16:36:05.000Z" }, { "id": 159398, "urlhaus_id": "3949704", "url": "http://188.58.194.2:13685/i", "host": "188.58.194.2", "host_ip": "188.58.194.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:32:06 UTC", "discovered_at": "2026-10-13T16:32:06.000Z" }, { "id": 159399, "urlhaus_id": "3949703", "url": "http://176.65.139.229/kla.sh", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-229, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:29:07 UTC", "discovered_at": "2026-10-13T16:29:07.000Z" }, { "id": 159400, "urlhaus_id": "3949702", "url": "http://172.86.108.117/Bin/ScreenConnect.ClientSetup.exe", "host": "172.86.108.117", "host_ip": "172.86.108.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "172-86-108-117, exe, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:28:20 UTC", "discovered_at": "2026-10-13T16:28:20.000Z" }, { "id": 159401, "urlhaus_id": "3949701", "url": "http://172.86.108.117/bin/support.client.exe", "host": "172.86.108.117", "host_ip": "172.86.108.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "172-86-108-117, exe, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:28:07 UTC", "discovered_at": "2026-10-13T16:28:07.000Z" }, { "id": 159407, "urlhaus_id": "3949700", "url": "http://74.113.234.62:5521/akzmahazcA/main_x86_64", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159406, "urlhaus_id": "3949699", "url": "http://74.113.234.62:5521/akzmahazcA/main_mips", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159405, "urlhaus_id": "3949698", "url": "http://74.113.234.62:5521/akzmahazcA/main_arm6", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159404, "urlhaus_id": "3949697", "url": "http://74.113.234.62:5521/akzmahazcA/main_ppc", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159403, "urlhaus_id": "3949696", "url": "http://74.113.234.62:5521/akzmahazcA/main_arm5", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159402, "urlhaus_id": "3949695", "url": "http://91.188.254.62/systemd", "host": "91.188.254.62", "host_ip": "91.188.254.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, redis", "last_online": null, "first_seen": "2026-10-13 16:26:20 UTC", "discovered_at": "2026-10-13T16:26:20.000Z" }, { "id": 159408, "urlhaus_id": "3949694", "url": "http://74.113.234.62:5521/akzmahazcA/kz.sh", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:19 UTC", "discovered_at": "2026-10-13T16:26:19.000Z" }, { "id": 159409, "urlhaus_id": "3949693", "url": "http://74.113.234.62:5521/akzmahazcA/kaz.sh", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:18 UTC", "discovered_at": "2026-10-13T16:26:18.000Z" }, { "id": 159416, "urlhaus_id": "3949692", "url": "http://74.113.234.62:5521/akzmahazcA/main_m68k", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159415, "urlhaus_id": "3949691", "url": "http://74.113.234.62:5521/akzmahazcA/main_arm64", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159414, "urlhaus_id": "3949690", "url": "http://74.113.234.62:5521/akzmahazcA/main_arm7", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159413, "urlhaus_id": "3949689", "url": "http://74.113.234.62:5521/akzmahazcA/main_arm", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159412, "urlhaus_id": "3949688", "url": "http://74.113.234.62:5521/akzmahazcA/main_x86", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159411, "urlhaus_id": "3949687", "url": "http://74.113.234.62:5521/akzmahazcA/main_sh4", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159410, "urlhaus_id": "3949686", "url": "http://74.113.234.62:5521/akzmahazcA/main_mpsl", "host": "74.113.234.62", "host_ip": "74.113.234.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 16:26:17 UTC", "discovered_at": "2026-10-13T16:26:17.000Z" }, { "id": 159417, "urlhaus_id": "3949685", "url": "http://104.244.76.33/b2f628/cronb.sh", "host": "104.244.76.33", "host_ip": "104.244.76.33", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-13 16:26:13 UTC", "discovered_at": "2026-10-13T16:26:13.000Z" }, { "id": 159418, "urlhaus_id": "3949684", "url": "https://aurora-cooked.netlify.app/aurora.cooked.jar", "host": "aurora-cooked.netlify.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-13 16:26:08 UTC", "discovered_at": "2026-10-13T16:26:08.000Z" }, { "id": 159419, "urlhaus_id": "3949683", "url": "http://130.12.180.212/armv5", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:25:18 UTC", "discovered_at": "2026-10-13T16:25:18.000Z" }, { "id": 159420, "urlhaus_id": "3949682", "url": "http://130.12.180.212/armv6", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:24:24 UTC", "discovered_at": "2026-10-13T16:24:24.000Z" }, { "id": 159421, "urlhaus_id": "3949681", "url": "http://31.56.209.86/mips64el", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-209-86, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:22:08 UTC", "discovered_at": "2026-10-13T16:22:08.000Z" }, { "id": 159422, "urlhaus_id": "3949680", "url": "http://31.56.209.86/x86", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-209-86, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:21:14 UTC", "discovered_at": "2026-10-13T16:21:14.000Z" }, { "id": 159426, "urlhaus_id": "3949679", "url": "http://31.56.209.86/kla.sh", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-56-209-86, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:21:13 UTC", "discovered_at": "2026-10-13T16:21:13.000Z" }, { "id": 159425, "urlhaus_id": "3949678", "url": "http://31.56.209.86/toto.sh", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-56-209-86, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:21:13 UTC", "discovered_at": "2026-10-13T16:21:13.000Z" }, { "id": 159424, "urlhaus_id": "3949677", "url": "http://31.56.209.86/cats.sh", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-56-209-86, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:21:13 UTC", "discovered_at": "2026-10-13T16:21:13.000Z" }, { "id": 159423, "urlhaus_id": "3949676", "url": "http://31.56.209.86/dev.sh", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-56-209-86, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:21:13 UTC", "discovered_at": "2026-10-13T16:21:13.000Z" }, { "id": 159427, "urlhaus_id": "3949675", "url": "http://176.65.139.76/ohshit.sh", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-76, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:17:24 UTC", "discovered_at": "2026-10-13T16:17:24.000Z" }, { "id": 159428, "urlhaus_id": "3949674", "url": "http://175.165.44.137:38532/i", "host": "175.165.44.137", "host_ip": "175.165.44.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:21 UTC", "discovered_at": "2026-10-13T16:17:21.000Z" }, { "id": 159430, "urlhaus_id": "3949673", "url": "http://175.165.80.226:38003/i", "host": "175.165.80.226", "host_ip": "175.165.80.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:10 UTC", "discovered_at": "2026-10-13T16:17:10.000Z" }, { "id": 159429, "urlhaus_id": "3949672", "url": "http://176.65.139.76/bins/mipsel", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-76, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:17:10 UTC", "discovered_at": "2026-10-13T16:17:10.000Z" }, { "id": 159431, "urlhaus_id": "3949671", "url": "http://119.116.35.92:42896/i", "host": "119.116.35.92", "host_ip": "119.116.35.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:08 UTC", "discovered_at": "2026-10-13T16:17:08.000Z" }, { "id": 159433, "urlhaus_id": "3949670", "url": "http://39.86.250.41:57376/i", "host": "39.86.250.41", "host_ip": "39.86.250.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:07 UTC", "discovered_at": "2026-10-13T16:17:07.000Z" }, { "id": 159432, "urlhaus_id": "3949669", "url": "http://182.121.221.214:42289/bin.sh", "host": "182.121.221.214", "host_ip": "182.121.221.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:07 UTC", "discovered_at": "2026-10-13T16:17:07.000Z" }, { "id": 159434, "urlhaus_id": "3949668", "url": "http://178.205.231.127:48247/bin.sh", "host": "178.205.231.127", "host_ip": "178.205.231.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:17:06 UTC", "discovered_at": "2026-10-13T16:17:06.000Z" }, { "id": 159435, "urlhaus_id": "3949667", "url": "http://176.65.139.41/skid.arm6", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:16:11 UTC", "discovered_at": "2026-10-13T16:16:11.000Z" }, { "id": 159437, "urlhaus_id": "3949666", "url": "http://176.65.139.41/skid.x86", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:10 UTC", "discovered_at": "2026-10-13T16:15:10.000Z" }, { "id": 159436, "urlhaus_id": "3949665", "url": "http://176.65.139.41/root", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:10 UTC", "discovered_at": "2026-10-13T16:15:10.000Z" }, { "id": 159444, "urlhaus_id": "3949664", "url": "http://176.65.139.41/l", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159443, "urlhaus_id": "3949663", "url": "http://176.65.139.41/toto.sh", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159442, "urlhaus_id": "3949662", "url": "http://176.65.139.41/dvr", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159441, "urlhaus_id": "3949661", "url": "http://176.65.139.41/toot", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159440, "urlhaus_id": "3949660", "url": "http://176.65.139.41/massload", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159439, "urlhaus_id": "3949659", "url": "http://176.65.139.41/giga.sh", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159438, "urlhaus_id": "3949658", "url": "http://176.65.139.41/tplink.sh", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:15:09 UTC", "discovered_at": "2026-10-13T16:15:09.000Z" }, { "id": 159446, "urlhaus_id": "3949657", "url": "http://176.65.139.135/armv7l", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-135, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:13:10 UTC", "discovered_at": "2026-10-13T16:13:10.000Z" }, { "id": 159445, "urlhaus_id": "3949656", "url": "http://176.65.139.135/titanjr.arm7", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-135, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:13:10 UTC", "discovered_at": "2026-10-13T16:13:10.000Z" }, { "id": 159447, "urlhaus_id": "3949655", "url": "http://176.65.139.135/arm72", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-135, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:13:09 UTC", "discovered_at": "2026-10-13T16:13:09.000Z" }, { "id": 159448, "urlhaus_id": "3949654", "url": "http://176.65.139.209/bins/dbg", "host": "176.65.139.209", "host_ip": "176.65.139.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-209, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:11:17 UTC", "discovered_at": "2026-10-13T16:11:17.000Z" }, { "id": 159450, "urlhaus_id": "3949653", "url": "http://42.7.100.85:50911/i", "host": "42.7.100.85", "host_ip": "42.7.100.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 16:04:14 UTC", "discovered_at": "2026-10-13T16:04:14.000Z" }, { "id": 159449, "urlhaus_id": "3949652", "url": "http://116.139.221.175:33222/bin.sh", "host": "116.139.221.175", "host_ip": "116.139.221.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 16:04:14 UTC", "discovered_at": "2026-10-13T16:04:14.000Z" }, { "id": 159451, "urlhaus_id": "3949651", "url": "http://176.65.139.169/debug", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:02:19 UTC", "discovered_at": "2026-10-13T16:02:19.000Z" }, { "id": 159453, "urlhaus_id": "3949650", "url": "http://176.65.139.169/l.sh", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:02:14 UTC", "discovered_at": "2026-10-13T16:02:14.000Z" }, { "id": 159452, "urlhaus_id": "3949649", "url": "http://123.12.244.201:50944/i", "host": "123.12.244.201", "host_ip": "123.12.244.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:02:14 UTC", "discovered_at": "2026-10-13T16:02:14.000Z" }, { "id": 159454, "urlhaus_id": "3949648", "url": "http://178.205.231.127:48247/i", "host": "178.205.231.127", "host_ip": "178.205.231.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:02:09 UTC", "discovered_at": "2026-10-13T16:02:09.000Z" }, { "id": 159455, "urlhaus_id": "3949647", "url": "http://182.126.207.149:44946/bin.sh", "host": "182.126.207.149", "host_ip": "182.126.207.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 16:02:08 UTC", "discovered_at": "2026-10-13T16:02:08.000Z" }, { "id": 159456, "urlhaus_id": "3949646", "url": "http://176.65.139.169/s.sh", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-169, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 16:01:16 UTC", "discovered_at": "2026-10-13T16:01:16.000Z" }, { "id": 159457, "urlhaus_id": "3949645", "url": "http://94.154.43.102/main.mips", "host": "94.154.43.102", "host_ip": "94.154.43.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-102, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:59:24 UTC", "discovered_at": "2026-10-13T15:59:24.000Z" }, { "id": 159461, "urlhaus_id": "3949644", "url": "http://94.154.43.102/main.armv7l", "host": "94.154.43.102", "host_ip": "94.154.43.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-102, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:58:15 UTC", "discovered_at": "2026-10-13T15:58:15.000Z" }, { "id": 159460, "urlhaus_id": "3949643", "url": "http://94.154.43.102/main.x86_64", "host": "94.154.43.102", "host_ip": "94.154.43.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-102, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:58:15 UTC", "discovered_at": "2026-10-13T15:58:15.000Z" }, { "id": 159459, "urlhaus_id": "3949642", "url": "http://94.154.43.102/main.mipsel", "host": "94.154.43.102", "host_ip": "94.154.43.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-102, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:58:15 UTC", "discovered_at": "2026-10-13T15:58:15.000Z" }, { "id": 159458, "urlhaus_id": "3949641", "url": "http://94.154.43.102/main.x86", "host": "94.154.43.102", "host_ip": "94.154.43.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-102, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:58:15 UTC", "discovered_at": "2026-10-13T15:58:15.000Z" }, { "id": 159463, "urlhaus_id": "3949640", "url": "http://176.65.139.160/arm7", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:51:18 UTC", "discovered_at": "2026-10-13T15:51:18.000Z" }, { "id": 159462, "urlhaus_id": "3949639", "url": "http://176.65.139.160/arm6", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:51:18 UTC", "discovered_at": "2026-10-13T15:51:18.000Z" }, { "id": 159464, "urlhaus_id": "3949638", "url": "http://220.168.239.21:60522/i", "host": "220.168.239.21", "host_ip": "220.168.239.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 15:47:19 UTC", "discovered_at": "2026-10-13T15:47:19.000Z" }, { "id": 159465, "urlhaus_id": "3949637", "url": "http://219.157.238.6:35642/i", "host": "219.157.238.6", "host_ip": "219.157.238.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 15:47:12 UTC", "discovered_at": "2026-10-13T15:47:12.000Z" }, { "id": 159466, "urlhaus_id": "3949636", "url": "http://60.23.236.153:50864/i", "host": "60.23.236.153", "host_ip": "60.23.236.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 15:47:08 UTC", "discovered_at": "2026-10-13T15:47:08.000Z" }, { "id": 159467, "urlhaus_id": "3949635", "url": "http://59.97.249.134:41054/bin.sh", "host": "59.97.249.134", "host_ip": "59.97.249.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 15:46:11 UTC", "discovered_at": "2026-10-13T15:46:11.000Z" }, { "id": 159468, "urlhaus_id": "3949634", "url": "http://176.65.139.151/android-arm64", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:17 UTC", "discovered_at": "2026-10-13T15:44:17.000Z" }, { "id": 159469, "urlhaus_id": "3949633", "url": "http://176.65.139.151/dl.sh", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-151, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:16 UTC", "discovered_at": "2026-10-13T15:44:16.000Z" }, { "id": 159477, "urlhaus_id": "3949632", "url": "http://176.65.139.151/android-arm", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159476, "urlhaus_id": "3949631", "url": "http://176.65.139.151/s390x", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159475, "urlhaus_id": "3949630", "url": "http://176.65.139.151/ppc64", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159474, "urlhaus_id": "3949629", "url": "http://176.65.139.151/riscv32", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159473, "urlhaus_id": "3949628", "url": "http://176.65.139.151/riscv64", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159472, "urlhaus_id": "3949627", "url": "http://176.65.139.151/arm8", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159471, "urlhaus_id": "3949626", "url": "http://176.65.139.151/x86", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159470, "urlhaus_id": "3949625", "url": "http://176.65.139.151/launch.sh", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:14 UTC", "discovered_at": "2026-10-13T15:44:14.000Z" }, { "id": 159478, "urlhaus_id": "3949624", "url": "http://176.65.139.151/or1k", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-151, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:44:06 UTC", "discovered_at": "2026-10-13T15:44:06.000Z" }, { "id": 159479, "urlhaus_id": "3949623", "url": "http://42.7.100.85:50911/bin.sh", "host": "42.7.100.85", "host_ip": "42.7.100.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 15:43:12 UTC", "discovered_at": "2026-10-13T15:43:12.000Z" }, { "id": 159482, "urlhaus_id": "3949622", "url": "http://104.194.155.238/arm6", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:22 UTC", "discovered_at": "2026-10-13T15:40:22.000Z" }, { "id": 159481, "urlhaus_id": "3949621", "url": "http://104.194.155.238/arm5", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:22 UTC", "discovered_at": "2026-10-13T15:40:22.000Z" }, { "id": 159480, "urlhaus_id": "3949620", "url": "http://104.194.155.238/arm64", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:22 UTC", "discovered_at": "2026-10-13T15:40:22.000Z" }, { "id": 159488, "urlhaus_id": "3949619", "url": "http://104.194.155.238/armv7l", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159487, "urlhaus_id": "3949618", "url": "http://104.194.155.238/mips", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159486, "urlhaus_id": "3949617", "url": "http://104.194.155.238/arm", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159485, "urlhaus_id": "3949616", "url": "http://104.194.155.238/android_arm64", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159484, "urlhaus_id": "3949615", "url": "http://104.194.155.238/mipsle", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159483, "urlhaus_id": "3949614", "url": "http://104.194.155.238/amd64", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:17 UTC", "discovered_at": "2026-10-13T15:40:17.000Z" }, { "id": 159492, "urlhaus_id": "3949613", "url": "http://104.194.155.238/x86", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:16 UTC", "discovered_at": "2026-10-13T15:40:16.000Z" }, { "id": 159491, "urlhaus_id": "3949612", "url": "http://104.194.155.238/i386", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:16 UTC", "discovered_at": "2026-10-13T15:40:16.000Z" }, { "id": 159490, "urlhaus_id": "3949611", "url": "http://104.194.155.238/bot.exe", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, exe, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:16 UTC", "discovered_at": "2026-10-13T15:40:16.000Z" }, { "id": 159489, "urlhaus_id": "3949610", "url": "http://104.194.155.238/bins.sh", "host": "104.194.155.238", "host_ip": "104.194.155.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-238, sh, ua-wget", "last_online": null, "first_seen": "2026-10-13 15:40:16 UTC", "discovered_at": "2026-10-13T15:40:16.000Z" }, { "id": 159493, "urlhaus_id": "3949609", "url": "http://60.23.238.153:34592/i", "host": "60.23.238.153", "host_ip": "60.23.238.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 15:32:09 UTC", "discovered_at": "2026-10-13T15:32:09.000Z" }, { "id": 159494, "urlhaus_id": "3949608", "url": "http://188.58.194.2:13685/bin.sh", "host": "188.58.194.2", "host_ip": "188.58.194.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 15:17:06 UTC", "discovered_at": "2026-10-13T15:17:06.000Z" }, { "id": 159495, "urlhaus_id": "3949607", "url": "http://210.208.110.20:41398/i", "host": "210.208.110.20", "host_ip": "210.208.110.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-13 15:02:23 UTC", "discovered_at": "2026-10-13T15:02:23.000Z" }, { "id": 159501, "urlhaus_id": "3949606", "url": "http://45.153.34.108/bins/sora.arm4", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159500, "urlhaus_id": "3949605", "url": "http://45.153.34.108/bins/sora.arm6", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159499, "urlhaus_id": "3949604", "url": "http://45.153.34.108/bins/sora.mpsl", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159498, "urlhaus_id": "3949603", "url": "http://45.153.34.108/bins/sora.m68k", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159497, "urlhaus_id": "3949602", "url": "http://45.153.34.108/bins/sora.sh4", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159496, "urlhaus_id": "3949601", "url": "http://45.153.34.108/bins/sora.arm7", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:32 UTC", "discovered_at": "2026-10-13T14:59:32.000Z" }, { "id": 159505, "urlhaus_id": "3949600", "url": "http://45.153.34.108/bins/sora.mips", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:31 UTC", "discovered_at": "2026-10-13T14:59:31.000Z" }, { "id": 159504, "urlhaus_id": "3949599", "url": "http://45.153.34.108/bins/sora.arm5", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:31 UTC", "discovered_at": "2026-10-13T14:59:31.000Z" }, { "id": 159503, "urlhaus_id": "3949598", "url": "http://45.153.34.108/bins/sora.x86", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:31 UTC", "discovered_at": "2026-10-13T14:59:31.000Z" }, { "id": 159502, "urlhaus_id": "3949597", "url": "http://45.153.34.108/bins/sora.ppc", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 14:59:31 UTC", "discovered_at": "2026-10-13T14:59:31.000Z" }, { "id": 159506, "urlhaus_id": "3949596", "url": "https://skyblock-qol.com/Polinex-Clinet.jar", "host": "skyblock-qol.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:55:08 UTC", "discovered_at": "2026-10-13T14:55:08.000Z" }, { "id": 159510, "urlhaus_id": "3949595", "url": "https://skyblock-qol.com/TaunahiAutoPatch-b7-fabric.jar", "host": "skyblock-qol.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:54:07 UTC", "discovered_at": "2026-10-13T14:54:07.000Z" }, { "id": 159509, "urlhaus_id": "3949594", "url": "https://skyblock-qol.com/PolarLauncher-v3.jar", "host": "skyblock-qol.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:54:07 UTC", "discovered_at": "2026-10-13T14:54:07.000Z" }, { "id": 159508, "urlhaus_id": "3949593", "url": "https://skyblock-qol.com/PizzaLoader.jar", "host": "skyblock-qol.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:54:07 UTC", "discovered_at": "2026-10-13T14:54:07.000Z" }, { "id": 159507, "urlhaus_id": "3949592", "url": "https://skyblock-qol.com/NebulaClientv3.1.7.jar", "host": "skyblock-qol.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:54:07 UTC", "discovered_at": "2026-10-13T14:54:07.000Z" }, { "id": 159511, "urlhaus_id": "3949591", "url": "http://125.40.86.124:53418/i", "host": "125.40.86.124", "host_ip": "125.40.86.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:47:09 UTC", "discovered_at": "2026-10-13T14:47:09.000Z" }, { "id": 159512, "urlhaus_id": "3949590", "url": "http://125.166.42.29:56792/i", "host": "125.166.42.29", "host_ip": "125.166.42.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:47:07 UTC", "discovered_at": "2026-10-13T14:47:07.000Z" }, { "id": 159513, "urlhaus_id": "3949589", "url": "http://27.202.112.18:43841/i", "host": "27.202.112.18", "host_ip": "27.202.112.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:32:09 UTC", "discovered_at": "2026-10-13T14:32:09.000Z" }, { "id": 159515, "urlhaus_id": "3949588", "url": "http://82.114.178.6:58035/i", "host": "82.114.178.6", "host_ip": "82.114.178.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:32:08 UTC", "discovered_at": "2026-10-13T14:32:08.000Z" }, { "id": 159514, "urlhaus_id": "3949587", "url": "http://123.7.241.249:41661/i", "host": "123.7.241.249", "host_ip": "123.7.241.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:32:08 UTC", "discovered_at": "2026-10-13T14:32:08.000Z" }, { "id": 159517, "urlhaus_id": "3949586", "url": "http://92.248.175.43:57566/i", "host": "92.248.175.43", "host_ip": "92.248.175.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:32:07 UTC", "discovered_at": "2026-10-13T14:32:07.000Z" }, { "id": 159516, "urlhaus_id": "3949585", "url": "http://92.63.181.79:34097/i", "host": "92.63.181.79", "host_ip": "92.63.181.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:32:07 UTC", "discovered_at": "2026-10-13T14:32:07.000Z" }, { "id": 159518, "urlhaus_id": "3949584", "url": "http://59.180.157.114:41296/i", "host": "59.180.157.114", "host_ip": "59.180.157.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:17:14 UTC", "discovered_at": "2026-10-13T14:17:14.000Z" }, { "id": 159519, "urlhaus_id": "3949583", "url": "http://123.14.145.195:46530/bin.sh", "host": "123.14.145.195", "host_ip": "123.14.145.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:17:07 UTC", "discovered_at": "2026-10-13T14:17:07.000Z" }, { "id": 159520, "urlhaus_id": "3949582", "url": "https://devs.kantales.life/DvnX.zip", "host": "devs.kantales.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-13 14:15:33 UTC", "discovered_at": "2026-10-13T14:15:33.000Z" }, { "id": 159521, "urlhaus_id": "3949581", "url": "https://peterson-legislation-civilization-assistance.trycloudflare.com/rat.exe", "host": "peterson-legislation-civilization-assistance.trycloudflare.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "PureHVC, rat, stealer, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:23 UTC", "discovered_at": "2026-10-13T14:15:23.000Z" }, { "id": 159522, "urlhaus_id": "3949580", "url": "http://139.99.90.3/files/win_x64.exe", "host": "139.99.90.3", "host_ip": "139.99.90.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Loader, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:21 UTC", "discovered_at": "2026-10-13T14:15:21.000Z" }, { "id": 159523, "urlhaus_id": "3949579", "url": "https://disk.360.yandex.ru/d/Wxz_b2YRJYSXJg", "host": "disk.360.yandex.ru", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "miner, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:09 UTC", "discovered_at": "2026-10-13T14:15:09.000Z" }, { "id": 159525, "urlhaus_id": "3949578", "url": "https://fex.net/ru/s/zm1clkr", "host": "fex.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "miner, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:08 UTC", "discovered_at": "2026-10-13T14:15:08.000Z" }, { "id": 159524, "urlhaus_id": "3949577", "url": "https://cheminees-philippe45.com", "host": "cheminees-philippe45.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "evasion, Loader, miner, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:08 UTC", "discovered_at": "2026-10-13T14:15:08.000Z" }, { "id": 159530, "urlhaus_id": "3949576", "url": "https://sendit.sh/R1JAO/FyfeQ.exe", "host": "sendit.sh", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Amadey, botnet, Loader, solaris, stealer", "last_online": null, "first_seen": "2026-10-13 14:15:07 UTC", "discovered_at": "2026-10-13T14:15:07.000Z" }, { "id": 159529, "urlhaus_id": "3949575", "url": "https://linktr.ee/susanbrownu640", "host": "linktr.ee", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "golang, miner, upx, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:07 UTC", "discovered_at": "2026-10-13T14:15:07.000Z" }, { "id": 159528, "urlhaus_id": "3949574", "url": "http://198.20.153.28/run2", "host": "198.20.153.28", "host_ip": "198.20.153.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnet, c0xmo, Loader, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:07 UTC", "discovered_at": "2026-10-13T14:15:07.000Z" }, { "id": 159527, "urlhaus_id": "3949573", "url": "https://limewire.com/d/Xcyvz#v1V9HK417p", "host": "limewire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "miner, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:07 UTC", "discovered_at": "2026-10-13T14:15:07.000Z" }, { "id": 159526, "urlhaus_id": "3949572", "url": "http://45.153.34.108/yarn", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-13 14:15:07 UTC", "discovered_at": "2026-10-13T14:15:07.000Z" }, { "id": 159534, "urlhaus_id": "3949571", "url": "http://139.99.90.3/files", "host": "139.99.90.3", "host_ip": "139.99.90.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Loader, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:06 UTC", "discovered_at": "2026-10-13T14:15:06.000Z" }, { "id": 159533, "urlhaus_id": "3949570", "url": "http://45.198.224.34:8081/bin.sh", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 14:15:06 UTC", "discovered_at": "2026-10-13T14:15:06.000Z" }, { "id": 159532, "urlhaus_id": "3949569", "url": "https://filezilla.cc/py23.exe", "host": "filezilla.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Loader, miner, xmrig", "last_online": null, "first_seen": "2026-10-13 14:15:06 UTC", "discovered_at": "2026-10-13T14:15:06.000Z" }, { "id": 159531, "urlhaus_id": "3949568", "url": "http://example.com/test_drop_check", "host": "example.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 14:15:06 UTC", "discovered_at": "2026-10-13T14:15:06.000Z" }, { "id": 159535, "urlhaus_id": "3949567", "url": "https://download1475.mediafire.com/yesa6smw2dbggAK_8sNJLHgEGXUMxTMHF0sBDkppADcL276sftpAzKOtElrmhWdJPS24Sz-ugaz0ynBUOdiCUz84oH8HWldyJ4vQHoKMuUYKYAYNXeUyPIhkWz-iXzvrmxIFmCL02SiFFj_xzbkp0cN4FGq49uCtSK---70Xyu8/54v6azoglpshzvq/ProgramWin.zip", "host": "download1475.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-2626, stealer", "last_online": null, "first_seen": "2026-10-13 14:14:19 UTC", "discovered_at": "2026-10-13T14:14:19.000Z" }, { "id": 159536, "urlhaus_id": "3949566", "url": "https://novagames.cc/download.php?slug=gta-v-hack", "host": "novagames.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-8625306949, stealer", "last_online": null, "first_seen": "2026-10-13 14:14:15 UTC", "discovered_at": "2026-10-13T14:14:15.000Z" }, { "id": 159537, "urlhaus_id": "3949565", "url": "http://58.47.111.79:42894/i", "host": "58.47.111.79", "host_ip": "58.47.111.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:02:09 UTC", "discovered_at": "2026-10-13T14:02:09.000Z" }, { "id": 159538, "urlhaus_id": "3949564", "url": "http://59.96.140.120:34187/i", "host": "59.96.140.120", "host_ip": "59.96.140.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 14:02:08 UTC", "discovered_at": "2026-10-13T14:02:08.000Z" }, { "id": 159539, "urlhaus_id": "3949563", "url": "http://2.187.98.47:38576/i", "host": "2.187.98.47", "host_ip": "2.187.98.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:47:23 UTC", "discovered_at": "2026-10-13T13:47:23.000Z" }, { "id": 159540, "urlhaus_id": "3949562", "url": "http://216.129.184.213:49611/i", "host": "216.129.184.213", "host_ip": "216.129.184.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:47:08 UTC", "discovered_at": "2026-10-13T13:47:08.000Z" }, { "id": 159542, "urlhaus_id": "3949561", "url": "http://210.208.111.26:47927/bin.sh", "host": "210.208.111.26", "host_ip": "210.208.111.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:47:07 UTC", "discovered_at": "2026-10-13T13:47:07.000Z" }, { "id": 159541, "urlhaus_id": "3949560", "url": "http://200.115.102.16:49172/i", "host": "200.115.102.16", "host_ip": "200.115.102.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:47:07 UTC", "discovered_at": "2026-10-13T13:47:07.000Z" }, { "id": 159543, "urlhaus_id": "3949559", "url": "http://196.190.105.170:49897/i", "host": "196.190.105.170", "host_ip": "196.190.105.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:47:06 UTC", "discovered_at": "2026-10-13T13:47:06.000Z" }, { "id": 159544, "urlhaus_id": "3949558", "url": "http://60.18.213.171:47527/i", "host": "60.18.213.171", "host_ip": "60.18.213.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 13:40:22 UTC", "discovered_at": "2026-10-13T13:40:22.000Z" }, { "id": 159545, "urlhaus_id": "3949557", "url": "http://182.116.49.72:58470/i", "host": "182.116.49.72", "host_ip": "182.116.49.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 13:36:17 UTC", "discovered_at": "2026-10-13T13:36:17.000Z" }, { "id": 159546, "urlhaus_id": "3949556", "url": "http://220.198.115.115:56922/i", "host": "220.198.115.115", "host_ip": "220.198.115.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 13:36:16 UTC", "discovered_at": "2026-10-13T13:36:16.000Z" }, { "id": 159547, "urlhaus_id": "3949555", "url": "http://115.61.17.142:58520/bin.sh", "host": "115.61.17.142", "host_ip": "115.61.17.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:17:05 UTC", "discovered_at": "2026-10-13T13:17:05.000Z" }, { "id": 159548, "urlhaus_id": "3949554", "url": "http://60.18.213.171:47527/bin.sh", "host": "60.18.213.171", "host_ip": "60.18.213.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 13:09:14 UTC", "discovered_at": "2026-10-13T13:09:14.000Z" }, { "id": 159549, "urlhaus_id": "3949553", "url": "http://91.92.242.236/files-129312398/files/file_11c8dd9e257f0d09.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-13 13:05:08 UTC", "discovered_at": "2026-10-13T13:05:08.000Z" }, { "id": 159550, "urlhaus_id": "3949552", "url": "http://60.23.193.169:37262/i", "host": "60.23.193.169", "host_ip": "60.23.193.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 13:03:21 UTC", "discovered_at": "2026-10-13T13:03:21.000Z" }, { "id": 159551, "urlhaus_id": "3949551", "url": "http://175.150.177.183:43045/i", "host": "175.150.177.183", "host_ip": "175.150.177.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 13:02:11 UTC", "discovered_at": "2026-10-13T13:02:11.000Z" }, { "id": 159552, "urlhaus_id": "3949550", "url": "http://175.173.92.197:45016/i", "host": "175.173.92.197", "host_ip": "175.173.92.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 12:56:18 UTC", "discovered_at": "2026-10-13T12:56:18.000Z" }, { "id": 159553, "urlhaus_id": "3949549", "url": "http://196.189.197.131:49548/bin.sh", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 12:50:22 UTC", "discovered_at": "2026-10-13T12:50:22.000Z" }, { "id": 159554, "urlhaus_id": "3949548", "url": "http://175.165.23.170:32996/i", "host": "175.165.23.170", "host_ip": "175.165.23.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:46:08 UTC", "discovered_at": "2026-10-13T12:46:08.000Z" }, { "id": 159556, "urlhaus_id": "3949547", "url": "http://120.84.212.9:54297/bin.sh", "host": "120.84.212.9", "host_ip": "120.84.212.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:46:06 UTC", "discovered_at": "2026-10-13T12:46:06.000Z" }, { "id": 159555, "urlhaus_id": "3949546", "url": "http://42.224.153.218:54698/bin.sh", "host": "42.224.153.218", "host_ip": "42.224.153.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:46:06 UTC", "discovered_at": "2026-10-13T12:46:06.000Z" }, { "id": 159557, "urlhaus_id": "3949545", "url": "http://60.23.193.169:37262/bin.sh", "host": "60.23.193.169", "host_ip": "60.23.193.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 12:38:22 UTC", "discovered_at": "2026-10-13T12:38:22.000Z" }, { "id": 159558, "urlhaus_id": "3949544", "url": "http://182.126.82.136:50749/i", "host": "182.126.82.136", "host_ip": "182.126.82.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:32:07 UTC", "discovered_at": "2026-10-13T12:32:07.000Z" }, { "id": 159559, "urlhaus_id": "3949543", "url": "http://175.160.112.104:58191/bin.sh", "host": "175.160.112.104", "host_ip": "175.160.112.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 12:28:15 UTC", "discovered_at": "2026-10-13T12:28:15.000Z" }, { "id": 159560, "urlhaus_id": "3949542", "url": "http://120.28.137.87:46142/i", "host": "120.28.137.87", "host_ip": "120.28.137.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 12:27:16 UTC", "discovered_at": "2026-10-13T12:27:16.000Z" }, { "id": 159561, "urlhaus_id": "3949541", "url": "http://138.124.59.179/z", "host": "138.124.59.179", "host_ip": "138.124.59.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-13 12:23:25 UTC", "discovered_at": "2026-10-13T12:23:25.000Z" }, { "id": 159562, "urlhaus_id": "3949540", "url": "http://180.178.54.122:18890/stage.sh", "host": "180.178.54.122", "host_ip": "180.178.54.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "redis, sh", "last_online": null, "first_seen": "2026-10-13 12:23:21 UTC", "discovered_at": "2026-10-13T12:23:21.000Z" }, { "id": 159563, "urlhaus_id": "3949539", "url": "http://103.170.217.170/mipsel", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-13 12:23:12 UTC", "discovered_at": "2026-10-13T12:23:12.000Z" }, { "id": 159564, "urlhaus_id": "3949538", "url": "http://103.170.217.170/armv7l", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-13 12:23:11 UTC", "discovered_at": "2026-10-13T12:23:11.000Z" }, { "id": 159566, "urlhaus_id": "3949537", "url": "http://103.170.217.170/x86", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-13 12:23:10 UTC", "discovered_at": "2026-10-13T12:23:10.000Z" }, { "id": 159565, "urlhaus_id": "3949536", "url": "http://103.170.217.170/armv5l", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-13 12:23:10 UTC", "discovered_at": "2026-10-13T12:23:10.000Z" }, { "id": 159567, "urlhaus_id": "3949535", "url": "http://85.137.53.167:24380/bins/payloads/o2.xml", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ActiveMQ", "last_online": null, "first_seen": "2026-10-13 12:23:08 UTC", "discovered_at": "2026-10-13T12:23:08.000Z" }, { "id": 159568, "urlhaus_id": "3949534", "url": "http://31.56.53.160:8787/payload.py?k=6805b2423ab6120a3c81d6b01e76fc36", "host": "31.56.53.160", "host_ip": "31.56.53.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "python, redis", "last_online": null, "first_seen": "2026-10-13 12:23:05 UTC", "discovered_at": "2026-10-13T12:23:05.000Z" }, { "id": 159569, "urlhaus_id": "3949533", "url": "http://wemqmewkqewq.work.gd/dk.sh", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-13 12:22:21 UTC", "discovered_at": "2026-10-13T12:22:21.000Z" }, { "id": 159570, "urlhaus_id": "3949532", "url": "http://42.224.120.224:40929/bin.sh", "host": "42.224.120.224", "host_ip": "42.224.120.224", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 12:22:20 UTC", "discovered_at": "2026-10-13T12:22:20.000Z" }, { "id": 159573, "urlhaus_id": "3949531", "url": "http://31.56.53.160:8787/beacon.sh?k=6805b2423ab6120a3c81d6b0", "host": "31.56.53.160", "host_ip": "31.56.53.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, web", "last_online": null, "first_seen": "2026-10-13 12:22:18 UTC", "discovered_at": "2026-10-13T12:22:18.000Z" }, { "id": 159572, "urlhaus_id": "3949530", "url": "http://31.56.53.160:8787/beacon.sh?k=6805b2423ab6120a3c81d6b01e76fc36", "host": "31.56.53.160", "host_ip": "31.56.53.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "redis, sh", "last_online": null, "first_seen": "2026-10-13 12:22:18 UTC", "discovered_at": "2026-10-13T12:22:18.000Z" }, { "id": 159571, "urlhaus_id": "3949529", "url": "http://195.178.110.29/d/432936b3a0439572/init.sh", "host": "195.178.110.29", "host_ip": "195.178.110.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CVE-2025-55182, Miner, xmrig, sh", "last_online": null, "first_seen": "2026-10-13 12:22:18 UTC", "discovered_at": "2026-10-13T12:22:18.000Z" }, { "id": 159574, "urlhaus_id": "3949528", "url": "http://ftp.vietnam852.com/look/xmrig.bin", "host": "ftp.vietnam852.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, xmrig", "last_online": null, "first_seen": "2026-10-13 12:22:11 UTC", "discovered_at": "2026-10-13T12:22:11.000Z" }, { "id": 159577, "urlhaus_id": "3949527", "url": "https://pub-0bf4d4ca8a6e426ea7d3d00ec3ecd192.r2.dev/index.html?__cf_chl_tk=JJxCKo48dU7Z4JaebhYdYrypAur9pqNIIwztS7OmgMGISAYdnYX6QTcAACKwY9gTUKDT5lb64S-.XcNt-1791893987-1.0.1.1-gGOyELsTvnwtZBKzqEDH", "host": "pub-0bf4d4ca8a6e426ea7d3d00ec3ecd192.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-13 12:22:06 UTC", "discovered_at": "2026-10-13T12:22:06.000Z" }, { "id": 159576, "urlhaus_id": "3949526", "url": "http://31.56.53.160:8787/payload.py?k=6805b2423ab6120", "host": "31.56.53.160", "host_ip": "31.56.53.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, python", "last_online": null, "first_seen": "2026-10-13 12:22:06 UTC", "discovered_at": "2026-10-13T12:22:06.000Z" }, { "id": 159575, "urlhaus_id": "3949525", "url": "https://pub-0bf4d4ca8a6e426ea7d3d00ec3ecd192.r2.dev/index.html?__cf_chl_tk=oSF3RM32aASFFPRl5_0Jc.PY4brFreSR-hPs-JiDLCoic7urEFlEeufvGdfO30YW5vt43BBAhoWC8fGg-1791893877-1.0.1.1-I9KwpGvr.7OMlljwf2zu", "host": "pub-0bf4d4ca8a6e426ea7d3d00ec3ecd192.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Evil-Redirect, rat", "last_online": null, "first_seen": "2026-10-13 12:22:06 UTC", "discovered_at": "2026-10-13T12:22:06.000Z" }, { "id": 159578, "urlhaus_id": "3949524", "url": "http://85.137.53.167:24380/bins/payloads/o.xml", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ActiveMQ", "last_online": null, "first_seen": "2026-10-13 12:22:05 UTC", "discovered_at": "2026-10-13T12:22:05.000Z" }, { "id": 159579, "urlhaus_id": "3949523", "url": "http://124.234.0.3:49415/i", "host": "124.234.0.3", "host_ip": "124.234.0.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 12:21:25 UTC", "discovered_at": "2026-10-13T12:21:25.000Z" }, { "id": 159580, "urlhaus_id": "3949522", "url": "http://117.63.188.199:51491/bin.sh", "host": "117.63.188.199", "host_ip": "117.63.188.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:23 UTC", "discovered_at": "2026-10-13T12:17:23.000Z" }, { "id": 159581, "urlhaus_id": "3949521", "url": "http://27.44.144.143:47094/i", "host": "27.44.144.143", "host_ip": "27.44.144.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:14 UTC", "discovered_at": "2026-10-13T12:17:14.000Z" }, { "id": 159582, "urlhaus_id": "3949520", "url": "http://117.26.72.241:59476/i", "host": "117.26.72.241", "host_ip": "117.26.72.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:10 UTC", "discovered_at": "2026-10-13T12:17:10.000Z" }, { "id": 159583, "urlhaus_id": "3949519", "url": "http://175.165.83.112:59303/i", "host": "175.165.83.112", "host_ip": "175.165.83.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:09 UTC", "discovered_at": "2026-10-13T12:17:09.000Z" }, { "id": 159585, "urlhaus_id": "3949518", "url": "http://175.166.11.6:50487/i", "host": "175.166.11.6", "host_ip": "175.166.11.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:08 UTC", "discovered_at": "2026-10-13T12:17:08.000Z" }, { "id": 159584, "urlhaus_id": "3949517", "url": "http://175.165.83.112:59303/bin.sh", "host": "175.165.83.112", "host_ip": "175.165.83.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:17:08 UTC", "discovered_at": "2026-10-13T12:17:08.000Z" }, { "id": 159586, "urlhaus_id": "3949516", "url": "http://123.5.126.3:51252/i", "host": "123.5.126.3", "host_ip": "123.5.126.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:02:08 UTC", "discovered_at": "2026-10-13T12:02:08.000Z" }, { "id": 159589, "urlhaus_id": "3949515", "url": "http://42.239.224.109:56903/bin.sh", "host": "42.239.224.109", "host_ip": "42.239.224.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:02:07 UTC", "discovered_at": "2026-10-13T12:02:07.000Z" }, { "id": 159588, "urlhaus_id": "3949514", "url": "http://42.224.77.32:33614/bin.sh", "host": "42.224.77.32", "host_ip": "42.224.77.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:02:07 UTC", "discovered_at": "2026-10-13T12:02:07.000Z" }, { "id": 159587, "urlhaus_id": "3949513", "url": "http://42.178.220.88:39578/i", "host": "42.178.220.88", "host_ip": "42.178.220.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 12:02:07 UTC", "discovered_at": "2026-10-13T12:02:07.000Z" }, { "id": 159590, "urlhaus_id": "3949512", "url": "http://120.28.137.87:46142/bin.sh", "host": "120.28.137.87", "host_ip": "120.28.137.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 12:00:18 UTC", "discovered_at": "2026-10-13T12:00:18.000Z" }, { "id": 159591, "urlhaus_id": "3949511", "url": "http://42.7.200.212:52051/i", "host": "42.7.200.212", "host_ip": "42.7.200.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 11:59:22 UTC", "discovered_at": "2026-10-13T11:59:22.000Z" }, { "id": 159592, "urlhaus_id": "3949510", "url": "http://124.234.0.3:49415/bin.sh", "host": "124.234.0.3", "host_ip": "124.234.0.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 11:52:11 UTC", "discovered_at": "2026-10-13T11:52:11.000Z" }, { "id": 159593, "urlhaus_id": "3949509", "url": "http://70.166.118.40:47652/i", "host": "70.166.118.40", "host_ip": "70.166.118.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:08 UTC", "discovered_at": "2026-10-13T11:47:08.000Z" }, { "id": 159595, "urlhaus_id": "3949508", "url": "http://182.124.19.237:57991/i", "host": "182.124.19.237", "host_ip": "182.124.19.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:07 UTC", "discovered_at": "2026-10-13T11:47:07.000Z" }, { "id": 159594, "urlhaus_id": "3949507", "url": "http://39.87.37.204:53798/i", "host": "39.87.37.204", "host_ip": "39.87.37.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:07 UTC", "discovered_at": "2026-10-13T11:47:07.000Z" }, { "id": 159598, "urlhaus_id": "3949506", "url": "http://39.87.37.204:53798/bin.sh", "host": "39.87.37.204", "host_ip": "39.87.37.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:06 UTC", "discovered_at": "2026-10-13T11:47:06.000Z" }, { "id": 159597, "urlhaus_id": "3949505", "url": "http://61.54.43.231:41092/i", "host": "61.54.43.231", "host_ip": "61.54.43.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:06 UTC", "discovered_at": "2026-10-13T11:47:06.000Z" }, { "id": 159596, "urlhaus_id": "3949504", "url": "http://39.90.144.65:44122/i", "host": "39.90.144.65", "host_ip": "39.90.144.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:47:06 UTC", "discovered_at": "2026-10-13T11:47:06.000Z" }, { "id": 159599, "urlhaus_id": "3949503", "url": "http://125.42.32.7:34205/i", "host": "125.42.32.7", "host_ip": "125.42.32.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 11:43:33 UTC", "discovered_at": "2026-10-13T11:43:33.000Z" }, { "id": 159600, "urlhaus_id": "3949502", "url": "http://222.138.101.246:41384/bin.sh", "host": "222.138.101.246", "host_ip": "222.138.101.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 11:41:19 UTC", "discovered_at": "2026-10-13T11:41:19.000Z" }, { "id": 159601, "urlhaus_id": "3949501", "url": "http://27.220.121.135:47097/bin.sh", "host": "27.220.121.135", "host_ip": "27.220.121.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 11:41:18 UTC", "discovered_at": "2026-10-13T11:41:18.000Z" }, { "id": 159602, "urlhaus_id": "3949500", "url": "http://113.238.173.112:33698/i", "host": "113.238.173.112", "host_ip": "113.238.173.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-13 11:40:20 UTC", "discovered_at": "2026-10-13T11:40:20.000Z" }, { "id": 159605, "urlhaus_id": "3949499", "url": "http://185.209.162.191/bins/arm5", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:20 UTC", "discovered_at": "2026-10-13T11:36:20.000Z" }, { "id": 159604, "urlhaus_id": "3949498", "url": "http://153.56.180.69/main_x86", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:20 UTC", "discovered_at": "2026-10-13T11:36:20.000Z" }, { "id": 159603, "urlhaus_id": "3949497", "url": "http://153.56.180.69/main_x86_64", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:20 UTC", "discovered_at": "2026-10-13T11:36:20.000Z" }, { "id": 159614, "urlhaus_id": "3949496", "url": "http://185.209.162.191/bins/m68k", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159613, "urlhaus_id": "3949495", "url": "http://185.209.162.191/bins/x86_64", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159612, "urlhaus_id": "3949494", "url": "http://185.209.162.191/bins/sh4", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159611, "urlhaus_id": "3949493", "url": "http://153.56.180.69/main_arm", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159610, "urlhaus_id": "3949492", "url": "http://185.209.162.191/bins/mips", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159609, "urlhaus_id": "3949491", "url": "http://185.209.162.191/bins/mpsl", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159608, "urlhaus_id": "3949490", "url": "http://185.209.162.191/arm7", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159607, "urlhaus_id": "3949489", "url": "http://176.65.139.151/mipsel", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159606, "urlhaus_id": "3949488", "url": "http://176.65.139.151/arm", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:19 UTC", "discovered_at": "2026-10-13T11:36:19.000Z" }, { "id": 159615, "urlhaus_id": "3949487", "url": "http://185.209.162.191/spc", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:17 UTC", "discovered_at": "2026-10-13T11:36:17.000Z" }, { "id": 159617, "urlhaus_id": "3949486", "url": "http://185.209.162.191/bins/arm7", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:14 UTC", "discovered_at": "2026-10-13T11:36:14.000Z" }, { "id": 159616, "urlhaus_id": "3949485", "url": "http://185.209.162.191/bins/ppc", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:14 UTC", "discovered_at": "2026-10-13T11:36:14.000Z" }, { "id": 159618, "urlhaus_id": "3949484", "url": "http://153.56.180.69/main_arm6", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:11 UTC", "discovered_at": "2026-10-13T11:36:11.000Z" }, { "id": 159622, "urlhaus_id": "3949483", "url": "http://185.209.162.191/bins/arm", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:10 UTC", "discovered_at": "2026-10-13T11:36:10.000Z" }, { "id": 159621, "urlhaus_id": "3949482", "url": "http://185.209.162.191/bins/spc", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:10 UTC", "discovered_at": "2026-10-13T11:36:10.000Z" }, { "id": 159620, "urlhaus_id": "3949481", "url": "http://185.209.162.191/arm/", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:10 UTC", "discovered_at": "2026-10-13T11:36:10.000Z" }, { "id": 159619, "urlhaus_id": "3949480", "url": "http://185.209.162.191/arm6", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:10 UTC", "discovered_at": "2026-10-13T11:36:10.000Z" }, { "id": 159624, "urlhaus_id": "3949479", "url": "http://185.209.162.191/mips", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:09 UTC", "discovered_at": "2026-10-13T11:36:09.000Z" }, { "id": 159623, "urlhaus_id": "3949478", "url": "http://185.209.162.191/ppc", "host": "185.209.162.191", "host_ip": "185.209.162.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 11:36:09 UTC", "discovered_at": "2026-10-13T11:36:09.000Z" }, { "id": 159625, "urlhaus_id": "3949477", "url": "http://105.186.199.209:52874/i", "host": "105.186.199.209", "host_ip": "105.186.199.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:32:20 UTC", "discovered_at": "2026-10-13T11:32:20.000Z" }, { "id": 159626, "urlhaus_id": "3949476", "url": "http://78.160.205.52:49904/i", "host": "78.160.205.52", "host_ip": "78.160.205.52", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:32:06 UTC", "discovered_at": "2026-10-13T11:32:06.000Z" }, { "id": 159627, "urlhaus_id": "3949475", "url": "http://91.92.242.236/files-129312398/files/file_4e3366830d6d5b4b.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-13 11:19:08 UTC", "discovered_at": "2026-10-13T11:19:08.000Z" }, { "id": 159629, "urlhaus_id": "3949474", "url": "http://182.127.0.237:56565/bin.sh", "host": "182.127.0.237", "host_ip": "182.127.0.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:17:06 UTC", "discovered_at": "2026-10-13T11:17:06.000Z" }, { "id": 159628, "urlhaus_id": "3949473", "url": "http://182.127.64.151:40844/i", "host": "182.127.64.151", "host_ip": "182.127.64.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 11:17:06 UTC", "discovered_at": "2026-10-13T11:17:06.000Z" }, { "id": 159630, "urlhaus_id": "3949472", "url": "http://219.154.182.123:38465/bin.sh", "host": "219.154.182.123", "host_ip": "219.154.182.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 11:08:18 UTC", "discovered_at": "2026-10-13T11:08:18.000Z" }, { "id": 159631, "urlhaus_id": "3949471", "url": "http://59.96.142.1:34686/bin.sh", "host": "59.96.142.1", "host_ip": "59.96.142.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:47:07 UTC", "discovered_at": "2026-10-13T10:47:07.000Z" }, { "id": 159632, "urlhaus_id": "3949470", "url": "http://124.6.169.54:35063/i", "host": "124.6.169.54", "host_ip": "124.6.169.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:47:06 UTC", "discovered_at": "2026-10-13T10:47:06.000Z" }, { "id": 159633, "urlhaus_id": "3949469", "url": "http://45.186.210.138:53606/bin.sh", "host": "45.186.210.138", "host_ip": "45.186.210.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 10:40:11 UTC", "discovered_at": "2026-10-13T10:40:11.000Z" }, { "id": 159634, "urlhaus_id": "3949468", "url": "http://42.55.37.26:55415/i", "host": "42.55.37.26", "host_ip": "42.55.37.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 10:39:07 UTC", "discovered_at": "2026-10-13T10:39:07.000Z" }, { "id": 159639, "urlhaus_id": "3949467", "url": "http://123.14.145.195:46530/i", "host": "123.14.145.195", "host_ip": "123.14.145.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:07 UTC", "discovered_at": "2026-10-13T10:32:07.000Z" }, { "id": 159638, "urlhaus_id": "3949466", "url": "http://175.175.197.28:34608/i", "host": "175.175.197.28", "host_ip": "175.175.197.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:07 UTC", "discovered_at": "2026-10-13T10:32:07.000Z" }, { "id": 159637, "urlhaus_id": "3949465", "url": "http://112.248.63.187:53567/i", "host": "112.248.63.187", "host_ip": "112.248.63.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:07 UTC", "discovered_at": "2026-10-13T10:32:07.000Z" }, { "id": 159636, "urlhaus_id": "3949464", "url": "http://42.178.31.252:45223/bin.sh", "host": "42.178.31.252", "host_ip": "42.178.31.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:07 UTC", "discovered_at": "2026-10-13T10:32:07.000Z" }, { "id": 159635, "urlhaus_id": "3949463", "url": "http://42.224.153.218:54698/i", "host": "42.224.153.218", "host_ip": "42.224.153.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:07 UTC", "discovered_at": "2026-10-13T10:32:07.000Z" }, { "id": 159640, "urlhaus_id": "3949462", "url": "http://123.129.133.185:54981/bin.sh", "host": "123.129.133.185", "host_ip": "123.129.133.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:32:06 UTC", "discovered_at": "2026-10-13T10:32:06.000Z" }, { "id": 159641, "urlhaus_id": "3949461", "url": "http://196.189.35.226:36597/i", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 10:12:18 UTC", "discovered_at": "2026-10-13T10:12:18.000Z" }, { "id": 159642, "urlhaus_id": "3949460", "url": "http://42.55.37.26:55415/bin.sh", "host": "42.55.37.26", "host_ip": "42.55.37.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 10:12:09 UTC", "discovered_at": "2026-10-13T10:12:09.000Z" }, { "id": 159643, "urlhaus_id": "3949459", "url": "http://115.49.31.210:54356/i", "host": "115.49.31.210", "host_ip": "115.49.31.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips", "last_online": null, "first_seen": "2026-10-13 10:02:15 UTC", "discovered_at": "2026-10-13T10:02:15.000Z" }, { "id": 159645, "urlhaus_id": "3949458", "url": "http://182.116.36.138:57060/i", "host": "182.116.36.138", "host_ip": "182.116.36.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:02:07 UTC", "discovered_at": "2026-10-13T10:02:07.000Z" }, { "id": 159644, "urlhaus_id": "3949457", "url": "http://182.116.36.138:57060/bin.sh", "host": "182.116.36.138", "host_ip": "182.116.36.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:02:07 UTC", "discovered_at": "2026-10-13T10:02:07.000Z" }, { "id": 159646, "urlhaus_id": "3949456", "url": "http://123.12.173.255:42722/bin.sh", "host": "123.12.173.255", "host_ip": "123.12.173.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:02:06 UTC", "discovered_at": "2026-10-13T10:02:06.000Z" }, { "id": 159647, "urlhaus_id": "3949455", "url": "http://47.76.71.217:8136/linux", "host": "47.76.71.217", "host_ip": "47.76.71.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:01:24 UTC", "discovered_at": "2026-10-13T10:01:24.000Z" }, { "id": 159648, "urlhaus_id": "3949454", "url": "http://31.56.209.73:32461/s/amd64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:01:09 UTC", "discovered_at": "2026-10-13T10:01:09.000Z" }, { "id": 159649, "urlhaus_id": "3949453", "url": "http://31.56.209.73:32461/s/kswpad", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:01:07 UTC", "discovered_at": "2026-10-13T10:01:07.000Z" }, { "id": 159650, "urlhaus_id": "3949452", "url": "http://31.56.209.73:32461/s/kal64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:01:05 UTC", "discovered_at": "2026-10-13T10:01:05.000Z" }, { "id": 159655, "urlhaus_id": "3949451", "url": "http://83.168.110.24/bins/arm", "host": "83.168.110.24", "host_ip": "83.168.110.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:00:07 UTC", "discovered_at": "2026-10-13T10:00:07.000Z" }, { "id": 159654, "urlhaus_id": "3949450", "url": "http://83.168.110.24/bins/x86_64", "host": "83.168.110.24", "host_ip": "83.168.110.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:00:07 UTC", "discovered_at": "2026-10-13T10:00:07.000Z" }, { "id": 159653, "urlhaus_id": "3949449", "url": "http://83.168.110.24/bins/arm7", "host": "83.168.110.24", "host_ip": "83.168.110.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:00:07 UTC", "discovered_at": "2026-10-13T10:00:07.000Z" }, { "id": 159652, "urlhaus_id": "3949448", "url": "http://83.168.110.24/bins/mips", "host": "83.168.110.24", "host_ip": "83.168.110.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:00:07 UTC", "discovered_at": "2026-10-13T10:00:07.000Z" }, { "id": 159651, "urlhaus_id": "3949447", "url": "http://83.168.110.24/bins/mpsl", "host": "83.168.110.24", "host_ip": "83.168.110.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 10:00:07 UTC", "discovered_at": "2026-10-13T10:00:07.000Z" }, { "id": 159656, "urlhaus_id": "3949446", "url": "http://196.189.35.226:36597/bin.sh", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 09:50:18 UTC", "discovered_at": "2026-10-13T09:50:18.000Z" }, { "id": 159657, "urlhaus_id": "3949445", "url": "http://120.28.215.36:56021/i", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:47:06 UTC", "discovered_at": "2026-10-13T09:47:06.000Z" }, { "id": 159658, "urlhaus_id": "3949444", "url": "http://105.225.40.144:45883/bin.sh", "host": "105.225.40.144", "host_ip": "105.225.40.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 09:39:15 UTC", "discovered_at": "2026-10-13T09:39:15.000Z" }, { "id": 159659, "urlhaus_id": "3949443", "url": "http://42.231.251.190:59734/i", "host": "42.231.251.190", "host_ip": "42.231.251.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:33:08 UTC", "discovered_at": "2026-10-13T09:33:08.000Z" }, { "id": 159660, "urlhaus_id": "3949442", "url": "http://42.225.63.96:56888/i", "host": "42.225.63.96", "host_ip": "42.225.63.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:32:16 UTC", "discovered_at": "2026-10-13T09:32:16.000Z" }, { "id": 159661, "urlhaus_id": "3949441", "url": "http://190.109.227.192:44463/bin.sh", "host": "190.109.227.192", "host_ip": "190.109.227.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 09:32:10 UTC", "discovered_at": "2026-10-13T09:32:10.000Z" }, { "id": 159665, "urlhaus_id": "3949440", "url": "http://120.84.214.199:34472/i", "host": "120.84.214.199", "host_ip": "120.84.214.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:32:08 UTC", "discovered_at": "2026-10-13T09:32:08.000Z" }, { "id": 159664, "urlhaus_id": "3949439", "url": "http://42.231.232.118:59134/i", "host": "42.231.232.118", "host_ip": "42.231.232.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:32:08 UTC", "discovered_at": "2026-10-13T09:32:08.000Z" }, { "id": 159663, "urlhaus_id": "3949438", "url": "http://42.232.224.169:36329/i", "host": "42.232.224.169", "host_ip": "42.232.224.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:32:08 UTC", "discovered_at": "2026-10-13T09:32:08.000Z" }, { "id": 159662, "urlhaus_id": "3949437", "url": "http://42.231.232.118:59134/bin.sh", "host": "42.231.232.118", "host_ip": "42.231.232.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:32:08 UTC", "discovered_at": "2026-10-13T09:32:08.000Z" }, { "id": 159666, "urlhaus_id": "3949436", "url": "http://175.165.81.57:39440/bin.sh", "host": "175.165.81.57", "host_ip": "175.165.81.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-13 09:29:07 UTC", "discovered_at": "2026-10-13T09:29:07.000Z" }, { "id": 159667, "urlhaus_id": "3949435", "url": "http://175.165.81.57:39440/i", "host": "175.165.81.57", "host_ip": "175.165.81.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-13 09:28:10 UTC", "discovered_at": "2026-10-13T09:28:10.000Z" }, { "id": 159668, "urlhaus_id": "3949434", "url": "http://202.47.54.175:42509/Mozi.m", "host": "202.47.54.175", "host_ip": "202.47.54.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:25:24 UTC", "discovered_at": "2026-10-13T09:25:24.000Z" }, { "id": 159669, "urlhaus_id": "3949433", "url": "http://85.137.53.167:24380/bins/payloads/wget.sh", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:25:09 UTC", "discovered_at": "2026-10-13T09:25:09.000Z" }, { "id": 159670, "urlhaus_id": "3949432", "url": "http://182.124.12.142:54495/bin.sh", "host": "182.124.12.142", "host_ip": "182.124.12.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 09:23:14 UTC", "discovered_at": "2026-10-13T09:23:14.000Z" }, { "id": 159672, "urlhaus_id": "3949431", "url": "http://196.64.219.249:52596/bin.sh", "host": "196.64.219.249", "host_ip": "196.64.219.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:16:08 UTC", "discovered_at": "2026-10-13T09:16:08.000Z" }, { "id": 159671, "urlhaus_id": "3949430", "url": "http://196.64.219.249:52596/i", "host": "196.64.219.249", "host_ip": "196.64.219.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:16:08 UTC", "discovered_at": "2026-10-13T09:16:08.000Z" }, { "id": 159673, "urlhaus_id": "3949429", "url": "http://123.12.234.153:53789/bin.sh", "host": "123.12.234.153", "host_ip": "123.12.234.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:16:07 UTC", "discovered_at": "2026-10-13T09:16:07.000Z" }, { "id": 159674, "urlhaus_id": "3949428", "url": "http://42.238.241.44:59565/i", "host": "42.238.241.44", "host_ip": "42.238.241.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:03:07 UTC", "discovered_at": "2026-10-13T09:03:07.000Z" }, { "id": 159675, "urlhaus_id": "3949427", "url": "http://219.155.234.19:34022/i", "host": "219.155.234.19", "host_ip": "219.155.234.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:02:08 UTC", "discovered_at": "2026-10-13T09:02:08.000Z" }, { "id": 159677, "urlhaus_id": "3949426", "url": "http://42.4.97.14:55031/i", "host": "42.4.97.14", "host_ip": "42.4.97.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:02:07 UTC", "discovered_at": "2026-10-13T09:02:07.000Z" }, { "id": 159676, "urlhaus_id": "3949425", "url": "http://42.238.248.174:40554/i", "host": "42.238.248.174", "host_ip": "42.238.248.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:02:07 UTC", "discovered_at": "2026-10-13T09:02:07.000Z" }, { "id": 159678, "urlhaus_id": "3949424", "url": "http://210.208.110.221:43583/bin.sh", "host": "210.208.110.221", "host_ip": "210.208.110.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 09:01:07 UTC", "discovered_at": "2026-10-13T09:01:07.000Z" }, { "id": 159679, "urlhaus_id": "3949423", "url": "http://219.156.19.56:35763/i", "host": "219.156.19.56", "host_ip": "219.156.19.56", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 08:58:24 UTC", "discovered_at": "2026-10-13T08:58:24.000Z" }, { "id": 159680, "urlhaus_id": "3949422", "url": "http://www.tribot.co.uk/Tribot.jar", "host": "www.tribot.co.uk", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-13 08:54:06 UTC", "discovered_at": "2026-10-13T08:54:06.000Z" }, { "id": 159681, "urlhaus_id": "3949421", "url": "http://195.178.110.29/d/432936b3a0439572/o/geeef/init.sh", "host": "195.178.110.29", "host_ip": "195.178.110.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "miner", "last_online": null, "first_seen": "2026-10-13 08:54:04 UTC", "discovered_at": "2026-10-13T08:54:04.000Z" }, { "id": 159682, "urlhaus_id": "3949420", "url": "https://benzinclick.live/pethelper.apk", "host": "benzinclick.live", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "apk, banker", "last_online": null, "first_seen": "2026-10-13 08:53:07 UTC", "discovered_at": "2026-10-13T08:53:07.000Z" }, { "id": 159683, "urlhaus_id": "3949419", "url": "http://182.119.221.187:43898/bin.sh", "host": "182.119.221.187", "host_ip": "182.119.221.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 08:38:21 UTC", "discovered_at": "2026-10-13T08:38:21.000Z" }, { "id": 159684, "urlhaus_id": "3949418", "url": "http://219.156.19.56:35763/bin.sh", "host": "219.156.19.56", "host_ip": "219.156.19.56", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 08:28:20 UTC", "discovered_at": "2026-10-13T08:28:20.000Z" }, { "id": 159685, "urlhaus_id": "3949417", "url": "http://46.163.181.104:41767/bin.sh", "host": "46.163.181.104", "host_ip": "46.163.181.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 08:22:12 UTC", "discovered_at": "2026-10-13T08:22:12.000Z" }, { "id": 159687, "urlhaus_id": "3949416", "url": "http://123.7.234.176:46900/i", "host": "123.7.234.176", "host_ip": "123.7.234.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:17:09 UTC", "discovered_at": "2026-10-13T08:17:09.000Z" }, { "id": 159686, "urlhaus_id": "3949415", "url": "http://221.15.94.127:38172/bin.sh", "host": "221.15.94.127", "host_ip": "221.15.94.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:17:09 UTC", "discovered_at": "2026-10-13T08:17:09.000Z" }, { "id": 159688, "urlhaus_id": "3949414", "url": "http://59.96.141.163:49804/bin.sh", "host": "59.96.141.163", "host_ip": "59.96.141.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:02:08 UTC", "discovered_at": "2026-10-13T08:02:08.000Z" }, { "id": 159691, "urlhaus_id": "3949413", "url": "http://59.96.141.163:49804/i", "host": "59.96.141.163", "host_ip": "59.96.141.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:02:07 UTC", "discovered_at": "2026-10-13T08:02:07.000Z" }, { "id": 159690, "urlhaus_id": "3949412", "url": "http://219.157.65.180:42224/bin.sh", "host": "219.157.65.180", "host_ip": "219.157.65.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:02:07 UTC", "discovered_at": "2026-10-13T08:02:07.000Z" }, { "id": 159689, "urlhaus_id": "3949411", "url": "http://59.97.255.67:43848/i", "host": "59.97.255.67", "host_ip": "59.97.255.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:02:07 UTC", "discovered_at": "2026-10-13T08:02:07.000Z" }, { "id": 159692, "urlhaus_id": "3949410", "url": "http://219.157.65.180:42224/i", "host": "219.157.65.180", "host_ip": "219.157.65.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 08:02:06 UTC", "discovered_at": "2026-10-13T08:02:06.000Z" }, { "id": 159693, "urlhaus_id": "3949409", "url": "http://221.15.185.45:51916/bin.sh", "host": "221.15.185.45", "host_ip": "221.15.185.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:57:18 UTC", "discovered_at": "2026-10-13T07:57:18.000Z" }, { "id": 159694, "urlhaus_id": "3949408", "url": "http://105.226.5.151:50093/i", "host": "105.226.5.151", "host_ip": "105.226.5.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:47:06 UTC", "discovered_at": "2026-10-13T07:47:06.000Z" }, { "id": 159695, "urlhaus_id": "3949407", "url": "http://175.165.86.250:47877/i", "host": "175.165.86.250", "host_ip": "175.165.86.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:42:17 UTC", "discovered_at": "2026-10-13T07:42:17.000Z" }, { "id": 159696, "urlhaus_id": "3949406", "url": "http://27.25.71.38:54860/bin.sh", "host": "27.25.71.38", "host_ip": "27.25.71.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 07:41:17 UTC", "discovered_at": "2026-10-13T07:41:17.000Z" }, { "id": 159697, "urlhaus_id": "3949405", "url": "http://175.165.86.250:47877/bin.sh", "host": "175.165.86.250", "host_ip": "175.165.86.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:41:15 UTC", "discovered_at": "2026-10-13T07:41:15.000Z" }, { "id": 159698, "urlhaus_id": "3949404", "url": "http://182.119.197.98:37791/i", "host": "182.119.197.98", "host_ip": "182.119.197.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:34:11 UTC", "discovered_at": "2026-10-13T07:34:11.000Z" }, { "id": 159699, "urlhaus_id": "3949403", "url": "http://123.14.210.153:59356/i", "host": "123.14.210.153", "host_ip": "123.14.210.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:33:08 UTC", "discovered_at": "2026-10-13T07:33:08.000Z" }, { "id": 159700, "urlhaus_id": "3949402", "url": "http://182.113.206.3:59417/i", "host": "182.113.206.3", "host_ip": "182.113.206.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:32:08 UTC", "discovered_at": "2026-10-13T07:32:08.000Z" }, { "id": 159702, "urlhaus_id": "3949401", "url": "http://123.189.205.161:41467/bin.sh", "host": "123.189.205.161", "host_ip": "123.189.205.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:32:07 UTC", "discovered_at": "2026-10-13T07:32:07.000Z" }, { "id": 159701, "urlhaus_id": "3949400", "url": "http://123.13.30.219:37228/i", "host": "123.13.30.219", "host_ip": "123.13.30.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:32:07 UTC", "discovered_at": "2026-10-13T07:32:07.000Z" }, { "id": 159703, "urlhaus_id": "3949399", "url": "http://94.244.36.34:37076/i", "host": "94.244.36.34", "host_ip": "94.244.36.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 07:29:22 UTC", "discovered_at": "2026-10-13T07:29:22.000Z" }, { "id": 159704, "urlhaus_id": "3949398", "url": "http://175.147.231.18:44765/i", "host": "175.147.231.18", "host_ip": "175.147.231.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:28:19 UTC", "discovered_at": "2026-10-13T07:28:19.000Z" }, { "id": 159705, "urlhaus_id": "3949397", "url": "http://114.227.64.135:38256/i", "host": "114.227.64.135", "host_ip": "114.227.64.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 07:20:15 UTC", "discovered_at": "2026-10-13T07:20:15.000Z" }, { "id": 159706, "urlhaus_id": "3949396", "url": "http://114.227.64.135:38256/bin.sh", "host": "114.227.64.135", "host_ip": "114.227.64.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 07:19:11 UTC", "discovered_at": "2026-10-13T07:19:11.000Z" }, { "id": 159707, "urlhaus_id": "3949395", "url": "http://105.226.5.151:50093/bin.sh", "host": "105.226.5.151", "host_ip": "105.226.5.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:17:08 UTC", "discovered_at": "2026-10-13T07:17:08.000Z" }, { "id": 159708, "urlhaus_id": "3949394", "url": "http://124.132.130.96:50755/bin.sh", "host": "124.132.130.96", "host_ip": "124.132.130.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:09:22 UTC", "discovered_at": "2026-10-13T07:09:22.000Z" }, { "id": 159709, "urlhaus_id": "3949393", "url": "https://github.com/MajorRaikage45/MimiLokinil/releases/download/v2.6/Loader.v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "dropper-job, github", "last_online": null, "first_seen": "2026-10-13 07:07:17 UTC", "discovered_at": "2026-10-13T07:07:17.000Z" }, { "id": 159710, "urlhaus_id": "3949392", "url": "http://94.244.36.34:37076/bin.sh", "host": "94.244.36.34", "host_ip": "94.244.36.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 07:04:16 UTC", "discovered_at": "2026-10-13T07:04:16.000Z" }, { "id": 159711, "urlhaus_id": "3949391", "url": "http://112.248.63.187:53567/bin.sh", "host": "112.248.63.187", "host_ip": "112.248.63.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:02:26 UTC", "discovered_at": "2026-10-13T07:02:26.000Z" }, { "id": 159712, "urlhaus_id": "3949390", "url": "http://45.163.85.239:42133/bin.sh", "host": "45.163.85.239", "host_ip": "45.163.85.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:02:14 UTC", "discovered_at": "2026-10-13T07:02:14.000Z" }, { "id": 159714, "urlhaus_id": "3949389", "url": "http://45.186.210.138:53606/i", "host": "45.186.210.138", "host_ip": "45.186.210.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:02:07 UTC", "discovered_at": "2026-10-13T07:02:07.000Z" }, { "id": 159713, "urlhaus_id": "3949388", "url": "http://45.163.85.239:42133/i", "host": "45.163.85.239", "host_ip": "45.163.85.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 07:02:07 UTC", "discovered_at": "2026-10-13T07:02:07.000Z" }, { "id": 159715, "urlhaus_id": "3949387", "url": "http://123.14.40.123:55464/i", "host": "123.14.40.123", "host_ip": "123.14.40.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:01:14 UTC", "discovered_at": "2026-10-13T07:01:14.000Z" }, { "id": 159716, "urlhaus_id": "3949386", "url": "http://175.147.231.18:44765/bin.sh", "host": "175.147.231.18", "host_ip": "175.147.231.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 07:00:24 UTC", "discovered_at": "2026-10-13T07:00:24.000Z" }, { "id": 159717, "urlhaus_id": "3949385", "url": "https://aafesorder.com/31aa8434-bc4d-511f-910d-adbab2766b4f", "host": "aafesorder.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2", "last_online": null, "first_seen": "2026-10-13 06:56:06 UTC", "discovered_at": "2026-10-13T06:56:06.000Z" }, { "id": 159718, "urlhaus_id": "3949384", "url": "http://180.188.142.1:24689/i", "host": "180.188.142.1", "host_ip": "180.188.142.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 06:36:12 UTC", "discovered_at": "2026-10-13T06:36:12.000Z" }, { "id": 159719, "urlhaus_id": "3949383", "url": "http://175.153.133.229:44327/Mozi.m", "host": "175.153.133.229", "host_ip": "175.153.133.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-13 06:27:07 UTC", "discovered_at": "2026-10-13T06:27:07.000Z" }, { "id": 159720, "urlhaus_id": "3949382", "url": "http://45.135.194.96/bins/dbg", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:27:06 UTC", "discovered_at": "2026-10-13T06:27:06.000Z" }, { "id": 159721, "urlhaus_id": "3949381", "url": "http://38.46.31.127:54561/bin.sh", "host": "38.46.31.127", "host_ip": "38.46.31.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 06:24:19 UTC", "discovered_at": "2026-10-13T06:24:19.000Z" }, { "id": 159722, "urlhaus_id": "3949380", "url": "http://104.223.84.34/pkgFkmn.txt", "host": "104.223.84.34", "host_ip": "104.223.84.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:23:08 UTC", "discovered_at": "2026-10-13T06:23:08.000Z" }, { "id": 159723, "urlhaus_id": "3949379", "url": "http://104.223.84.34/rkgoaok.txt", "host": "104.223.84.34", "host_ip": "104.223.84.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:22:08 UTC", "discovered_at": "2026-10-13T06:22:08.000Z" }, { "id": 159725, "urlhaus_id": "3949378", "url": "http://220.198.115.233:34039/bin.sh", "host": "220.198.115.233", "host_ip": "220.198.115.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:17:08 UTC", "discovered_at": "2026-10-13T06:17:08.000Z" }, { "id": 159724, "urlhaus_id": "3949377", "url": "http://105.154.111.213:36032/i", "host": "105.154.111.213", "host_ip": "105.154.111.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:17:08 UTC", "discovered_at": "2026-10-13T06:17:08.000Z" }, { "id": 159726, "urlhaus_id": "3949376", "url": "http://105.187.30.24:38917/bin.sh", "host": "105.187.30.24", "host_ip": "105.187.30.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 06:17:07 UTC", "discovered_at": "2026-10-13T06:17:07.000Z" }, { "id": 159727, "urlhaus_id": "3949375", "url": "http://180.188.142.1:24689/bin.sh", "host": "180.188.142.1", "host_ip": "180.188.142.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 06:04:23 UTC", "discovered_at": "2026-10-13T06:04:23.000Z" }, { "id": 159729, "urlhaus_id": "3949374", "url": "https://stat.bestcompliance.net/s", "host": "stat.bestcompliance.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-min", "last_online": null, "first_seen": "2026-10-13 06:00:14 UTC", "discovered_at": "2026-10-13T06:00:14.000Z" }, { "id": 159728, "urlhaus_id": "3949373", "url": "https://stat.bestcompliance.net/p", "host": "stat.bestcompliance.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-min", "last_online": null, "first_seen": "2026-10-13 06:00:14 UTC", "discovered_at": "2026-10-13T06:00:14.000Z" }, { "id": 159730, "urlhaus_id": "3949372", "url": "http://105.225.40.144:45883/i", "host": "105.225.40.144", "host_ip": "105.225.40.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:47:07 UTC", "discovered_at": "2026-10-13T05:47:07.000Z" }, { "id": 159732, "urlhaus_id": "3949371", "url": "http://120.84.214.205:43902/i", "host": "120.84.214.205", "host_ip": "120.84.214.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:32:07 UTC", "discovered_at": "2026-10-13T05:32:07.000Z" }, { "id": 159731, "urlhaus_id": "3949370", "url": "https://bvmatqnam.com.vn/js/pp10.bin", "host": "bvmatqnam.com.vn", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted", "last_online": null, "first_seen": "2026-10-13 05:32:07 UTC", "discovered_at": "2026-10-13T05:32:07.000Z" }, { "id": 159733, "urlhaus_id": "3949369", "url": "http://116.139.221.175:33222/i", "host": "116.139.221.175", "host_ip": "116.139.221.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:32:06 UTC", "discovered_at": "2026-10-13T05:32:06.000Z" }, { "id": 159734, "urlhaus_id": "3949368", "url": "https://bvmatqnam.com.vn/js/see3.ps1", "host": "bvmatqnam.com.vn", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-13 05:30:12 UTC", "discovered_at": "2026-10-13T05:30:12.000Z" }, { "id": 159735, "urlhaus_id": "3949367", "url": "https://bvmatqnam.com.vn/js/tt3.txt", "host": "bvmatqnam.com.vn", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-13 05:29:25 UTC", "discovered_at": "2026-10-13T05:29:25.000Z" }, { "id": 159739, "urlhaus_id": "3949366", "url": "http://143.20.154.42/bins/bot.ppc440", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:25:08 UTC", "discovered_at": "2026-10-13T05:25:08.000Z" }, { "id": 159738, "urlhaus_id": "3949365", "url": "http://45.137.70.17/sh4", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:25:08 UTC", "discovered_at": "2026-10-13T05:25:08.000Z" }, { "id": 159737, "urlhaus_id": "3949364", "url": "http://45.137.70.17/powerpc", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:25:08 UTC", "discovered_at": "2026-10-13T05:25:08.000Z" }, { "id": 159736, "urlhaus_id": "3949363", "url": "http://45.137.70.17/armv6l", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:25:08 UTC", "discovered_at": "2026-10-13T05:25:08.000Z" }, { "id": 159740, "urlhaus_id": "3949362", "url": "http://121.229.202.198:8981/linux", "host": "121.229.202.198", "host_ip": "121.229.202.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-13 05:24:44 UTC", "discovered_at": "2026-10-13T05:24:44.000Z" }, { "id": 159741, "urlhaus_id": "3949361", "url": "http://175.153.133.229:44327/bin.sh", "host": "175.153.133.229", "host_ip": "175.153.133.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-13 05:24:31 UTC", "discovered_at": "2026-10-13T05:24:31.000Z" }, { "id": 159742, "urlhaus_id": "3949360", "url": "http://196.189.98.110:34127/bin.sh", "host": "196.189.98.110", "host_ip": "196.189.98.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-13 05:24:30 UTC", "discovered_at": "2026-10-13T05:24:30.000Z" }, { "id": 159743, "urlhaus_id": "3949359", "url": "http://60.23.234.57:60642/bin.sh", "host": "60.23.234.57", "host_ip": "60.23.234.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:29 UTC", "discovered_at": "2026-10-13T05:24:29.000Z" }, { "id": 159745, "urlhaus_id": "3949358", "url": "http://125.40.153.104:44073/bin.sh", "host": "125.40.153.104", "host_ip": "125.40.153.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:27 UTC", "discovered_at": "2026-10-13T05:24:27.000Z" }, { "id": 159744, "urlhaus_id": "3949357", "url": "https://polinex.org/aether-1.3.1-26.1.2.jar", "host": "polinex.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, java, stealer", "last_online": null, "first_seen": "2026-10-13 05:24:27 UTC", "discovered_at": "2026-10-13T05:24:27.000Z" }, { "id": 159746, "urlhaus_id": "3949356", "url": "http://105.225.69.120:46879/Mozi.m", "host": "105.225.69.120", "host_ip": "105.225.69.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:25 UTC", "discovered_at": "2026-10-13T05:24:25.000Z" }, { "id": 159748, "urlhaus_id": "3949355", "url": "https://beamtechmacros.com/beamtech-1.1.8-mc26.1.2.jar", "host": "beamtechmacros.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:21 UTC", "discovered_at": "2026-10-13T05:24:21.000Z" }, { "id": 159747, "urlhaus_id": "3949354", "url": "http://114.227.63.225:37139/bin.sh", "host": "114.227.63.225", "host_ip": "114.227.63.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:21 UTC", "discovered_at": "2026-10-13T05:24:21.000Z" }, { "id": 159749, "urlhaus_id": "3949353", "url": "https://beamtechmacros.com/beamtech-1.1.8-mc26.2.jar", "host": "beamtechmacros.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:20 UTC", "discovered_at": "2026-10-13T05:24:20.000Z" }, { "id": 159750, "urlhaus_id": "3949352", "url": "http://115.56.177.207:57147/bin.sh", "host": "115.56.177.207", "host_ip": "115.56.177.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-13 05:24:19 UTC", "discovered_at": "2026-10-13T05:24:19.000Z" }, { "id": 159752, "urlhaus_id": "3949351", "url": "http://45.198.224.34/snypesh.sh", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "downloader, sh", "last_online": null, "first_seen": "2026-10-13 05:24:17 UTC", "discovered_at": "2026-10-13T05:24:17.000Z" }, { "id": 159751, "urlhaus_id": "3949350", "url": "http://216.126.80.56:43357/Mozi.m", "host": "216.126.80.56", "host_ip": "216.126.80.56", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:17 UTC", "discovered_at": "2026-10-13T05:24:17.000Z" }, { "id": 159753, "urlhaus_id": "3949349", "url": "https://csgroup.host/f/CbjJTwu7", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:16 UTC", "discovered_at": "2026-10-13T05:24:16.000Z" }, { "id": 159764, "urlhaus_id": "3949348", "url": "https://csgroup.host/d/CbjJTwu7", "host": "csgroup.host", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elft, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159763, "urlhaus_id": "3949347", "url": "https://ibidasjohnnraplc.com/system1.bat", "host": "ibidasjohnnraplc.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "bat", "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159762, "urlhaus_id": "3949346", "url": "http://45.137.70.17/sparc", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159761, "urlhaus_id": "3949345", "url": "http://45.137.70.17/armv5l", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159760, "urlhaus_id": "3949344", "url": "http://45.137.70.17/mipsel", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159759, "urlhaus_id": "3949343", "url": "http://45.137.70.17/i586", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159758, "urlhaus_id": "3949342", "url": "http://45.137.70.17/armv4l", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159757, "urlhaus_id": "3949341", "url": "http://45.137.70.17/mips", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159756, "urlhaus_id": "3949340", "url": "http://45.137.70.17/EkSgbins.sh", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159755, "urlhaus_id": "3949339", "url": "http://45.137.70.17/m68k", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159754, "urlhaus_id": "3949338", "url": "http://45.137.70.17/i686", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:14 UTC", "discovered_at": "2026-10-13T05:24:14.000Z" }, { "id": 159769, "urlhaus_id": "3949337", "url": "http://45.137.70.17/x86", "host": "45.137.70.17", "host_ip": "45.137.70.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:24:13 UTC", "discovered_at": "2026-10-13T05:24:13.000Z" }, { "id": 159768, "urlhaus_id": "3949336", "url": "http://217.60.195.142/hiddenbin/arm5", "host": "217.60.195.142", "host_ip": "217.60.195.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:13 UTC", "discovered_at": "2026-10-13T05:24:13.000Z" }, { "id": 159767, "urlhaus_id": "3949335", "url": "http://64.89.160.185/iran.i486", "host": "64.89.160.185", "host_ip": "64.89.160.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:13 UTC", "discovered_at": "2026-10-13T05:24:13.000Z" }, { "id": 159766, "urlhaus_id": "3949334", "url": "http://64.89.160.185/iran.mips", "host": "64.89.160.185", "host_ip": "64.89.160.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:13 UTC", "discovered_at": "2026-10-13T05:24:13.000Z" }, { "id": 159765, "urlhaus_id": "3949333", "url": "http://143.20.154.42/bins/bot.x86_32", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:13 UTC", "discovered_at": "2026-10-13T05:24:13.000Z" }, { "id": 159771, "urlhaus_id": "3949332", "url": "http://45.198.224.34/snypetcp.sh", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:09 UTC", "discovered_at": "2026-10-13T05:24:09.000Z" }, { "id": 159770, "urlhaus_id": "3949331", "url": "http://217.60.102.5/sh", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "dropper, honeypot, iot, mirai", "last_online": null, "first_seen": "2026-10-13 05:24:09 UTC", "discovered_at": "2026-10-13T05:24:09.000Z" }, { "id": 159772, "urlhaus_id": "3949330", "url": "ftp://176.65.139.40/jklm68k", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:24:08 UTC", "discovered_at": "2026-10-13T05:24:08.000Z" }, { "id": 159773, "urlhaus_id": "3949329", "url": "http://39.74.47.172:34375/bin.sh", "host": "39.74.47.172", "host_ip": "39.74.47.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-13 05:23:24 UTC", "discovered_at": "2026-10-13T05:23:24.000Z" }, { "id": 159774, "urlhaus_id": "3949328", "url": "https://security-analyze.ltd/anticheat_update.exe", "host": "security-analyze.ltd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:23:11 UTC", "discovered_at": "2026-10-13T05:23:11.000Z" }, { "id": 159775, "urlhaus_id": "3949327", "url": "http://64.89.160.185/aisu/aisu.i486", "host": "64.89.160.185", "host_ip": "64.89.160.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-13 05:23:09 UTC", "discovered_at": "2026-10-13T05:23:09.000Z" }, { "id": 159776, "urlhaus_id": "3949326", "url": "https://software.security-analyze.ltd/faceit.ps1", "host": "software.security-analyze.ltd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 05:23:08 UTC", "discovered_at": "2026-10-13T05:23:08.000Z" }, { "id": 159777, "urlhaus_id": "3949325", "url": "https://www.dropbox.com/scl/fi/vxf9abexyh7r7obesid96/Bulbulo.zip?rlkey=v5bb8nznht61xj8na9f512r8n&st=k231h5lq&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "KurdishMyth, MythJs, MythPrivate, rat", "last_online": null, "first_seen": "2026-10-13 05:22:24 UTC", "discovered_at": "2026-10-13T05:22:24.000Z" }, { "id": 159780, "urlhaus_id": "3949324", "url": "http://153.56.180.69/main_ppc", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:15 UTC", "discovered_at": "2026-10-13T05:05:15.000Z" }, { "id": 159779, "urlhaus_id": "3949323", "url": "http://153.56.180.69/main_mpsl", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:15 UTC", "discovered_at": "2026-10-13T05:05:15.000Z" }, { "id": 159778, "urlhaus_id": "3949322", "url": "http://153.56.180.69/main_sh4", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:15 UTC", "discovered_at": "2026-10-13T05:05:15.000Z" }, { "id": 159782, "urlhaus_id": "3949321", "url": "http://153.56.180.69/main_m68k", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:10 UTC", "discovered_at": "2026-10-13T05:05:10.000Z" }, { "id": 159781, "urlhaus_id": "3949320", "url": "http://153.56.180.69/main_arm5", "host": "153.56.180.69", "host_ip": "153.56.180.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:10 UTC", "discovered_at": "2026-10-13T05:05:10.000Z" }, { "id": 159783, "urlhaus_id": "3949319", "url": "http://176.65.139.151/ppc", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-13 05:05:09 UTC", "discovered_at": "2026-10-13T05:05:09.000Z" }, { "id": 159784, "urlhaus_id": "3949318", "url": "http://38.46.31.127:54561/i", "host": "38.46.31.127", "host_ip": "38.46.31.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 05:04:16 UTC", "discovered_at": "2026-10-13T05:04:16.000Z" }, { "id": 159785, "urlhaus_id": "3949317", "url": "http://112.248.114.87:44296/i", "host": "112.248.114.87", "host_ip": "112.248.114.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:47:24 UTC", "discovered_at": "2026-10-13T04:47:24.000Z" }, { "id": 159786, "urlhaus_id": "3949316", "url": "http://222.138.116.13:34606/i", "host": "222.138.116.13", "host_ip": "222.138.116.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:47:20 UTC", "discovered_at": "2026-10-13T04:47:20.000Z" }, { "id": 159787, "urlhaus_id": "3949315", "url": "http://218.16.164.47:59087/bin.sh", "host": "218.16.164.47", "host_ip": "218.16.164.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:47:07 UTC", "discovered_at": "2026-10-13T04:47:07.000Z" }, { "id": 159788, "urlhaus_id": "3949314", "url": "http://110.227.209.99:36818/i", "host": "110.227.209.99", "host_ip": "110.227.209.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:32:06 UTC", "discovered_at": "2026-10-13T04:32:06.000Z" }, { "id": 159790, "urlhaus_id": "3949313", "url": "http://210.208.104.156:35164/bin.sh", "host": "210.208.104.156", "host_ip": "210.208.104.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 04:17:12 UTC", "discovered_at": "2026-10-13T04:17:12.000Z" }, { "id": 159789, "urlhaus_id": "3949312", "url": "http://170.84.133.234:45340/bin.sh", "host": "170.84.133.234", "host_ip": "170.84.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 04:17:12 UTC", "discovered_at": "2026-10-13T04:17:12.000Z" }, { "id": 159791, "urlhaus_id": "3949311", "url": "http://112.248.81.107:48044/bin.sh", "host": "112.248.81.107", "host_ip": "112.248.81.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:17:06 UTC", "discovered_at": "2026-10-13T04:17:06.000Z" }, { "id": 159792, "urlhaus_id": "3949310", "url": "http://219.156.119.249:37129/bin.sh", "host": "219.156.119.249", "host_ip": "219.156.119.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 04:07:14 UTC", "discovered_at": "2026-10-13T04:07:14.000Z" }, { "id": 159793, "urlhaus_id": "3949309", "url": "http://115.62.215.189:52274/i", "host": "115.62.215.189", "host_ip": "115.62.215.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:03:07 UTC", "discovered_at": "2026-10-13T04:03:07.000Z" }, { "id": 159794, "urlhaus_id": "3949308", "url": "http://182.124.186.9:51100/i", "host": "182.124.186.9", "host_ip": "182.124.186.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:02:08 UTC", "discovered_at": "2026-10-13T04:02:08.000Z" }, { "id": 159795, "urlhaus_id": "3949307", "url": "http://59.96.138.239:37558/i", "host": "59.96.138.239", "host_ip": "59.96.138.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 04:02:07 UTC", "discovered_at": "2026-10-13T04:02:07.000Z" }, { "id": 159796, "urlhaus_id": "3949306", "url": "http://42.57.246.110:37470/i", "host": "42.57.246.110", "host_ip": "42.57.246.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 03:45:15 UTC", "discovered_at": "2026-10-13T03:45:15.000Z" }, { "id": 159797, "urlhaus_id": "3949305", "url": "http://171.213.236.137:46261/bin.sh", "host": "171.213.236.137", "host_ip": "171.213.236.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 03:43:56 UTC", "discovered_at": "2026-10-13T03:43:56.000Z" }, { "id": 159798, "urlhaus_id": "3949304", "url": "http://221.202.71.15:50160/bin.sh", "host": "221.202.71.15", "host_ip": "221.202.71.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 03:41:20 UTC", "discovered_at": "2026-10-13T03:41:20.000Z" }, { "id": 159800, "urlhaus_id": "3949303", "url": "http://103.172.186.194:48838/i", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:33:06 UTC", "discovered_at": "2026-10-13T03:33:06.000Z" }, { "id": 159799, "urlhaus_id": "3949302", "url": "http://182.126.92.31:39161/bin.sh", "host": "182.126.92.31", "host_ip": "182.126.92.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:33:06 UTC", "discovered_at": "2026-10-13T03:33:06.000Z" }, { "id": 159803, "urlhaus_id": "3949301", "url": "http://115.50.91.72:51917/i", "host": "115.50.91.72", "host_ip": "115.50.91.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:32:07 UTC", "discovered_at": "2026-10-13T03:32:07.000Z" }, { "id": 159802, "urlhaus_id": "3949300", "url": "http://115.50.91.72:51917/bin.sh", "host": "115.50.91.72", "host_ip": "115.50.91.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:32:07 UTC", "discovered_at": "2026-10-13T03:32:07.000Z" }, { "id": 159801, "urlhaus_id": "3949299", "url": "http://59.96.138.239:37558/bin.sh", "host": "59.96.138.239", "host_ip": "59.96.138.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:32:07 UTC", "discovered_at": "2026-10-13T03:32:07.000Z" }, { "id": 159804, "urlhaus_id": "3949298", "url": "http://115.63.8.20:54878/i", "host": "115.63.8.20", "host_ip": "115.63.8.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:17:06 UTC", "discovered_at": "2026-10-13T03:17:06.000Z" }, { "id": 159805, "urlhaus_id": "3949297", "url": "http://196.189.197.131:49548/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:17:05 UTC", "discovered_at": "2026-10-13T03:17:05.000Z" }, { "id": 159806, "urlhaus_id": "3949296", "url": "http://42.57.246.110:37470/bin.sh", "host": "42.57.246.110", "host_ip": "42.57.246.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 03:16:17 UTC", "discovered_at": "2026-10-13T03:16:17.000Z" }, { "id": 159807, "urlhaus_id": "3949295", "url": "http://163.142.93.231:38849/i", "host": "163.142.93.231", "host_ip": "163.142.93.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:12 UTC", "discovered_at": "2026-10-13T03:02:12.000Z" }, { "id": 159810, "urlhaus_id": "3949294", "url": "http://115.55.240.176:32771/i", "host": "115.55.240.176", "host_ip": "115.55.240.176", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:08 UTC", "discovered_at": "2026-10-13T03:02:08.000Z" }, { "id": 159809, "urlhaus_id": "3949293", "url": "http://42.224.102.154:41233/bin.sh", "host": "42.224.102.154", "host_ip": "42.224.102.154", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:08 UTC", "discovered_at": "2026-10-13T03:02:08.000Z" }, { "id": 159808, "urlhaus_id": "3949292", "url": "http://110.186.230.140:60525/i", "host": "110.186.230.140", "host_ip": "110.186.230.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:08 UTC", "discovered_at": "2026-10-13T03:02:08.000Z" }, { "id": 159813, "urlhaus_id": "3949291", "url": "http://42.179.97.86:59004/i", "host": "42.179.97.86", "host_ip": "42.179.97.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:07 UTC", "discovered_at": "2026-10-13T03:02:07.000Z" }, { "id": 159812, "urlhaus_id": "3949290", "url": "http://42.230.54.151:40331/i", "host": "42.230.54.151", "host_ip": "42.230.54.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:07 UTC", "discovered_at": "2026-10-13T03:02:07.000Z" }, { "id": 159811, "urlhaus_id": "3949289", "url": "http://163.142.95.133:41114/i", "host": "163.142.95.133", "host_ip": "163.142.95.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:07 UTC", "discovered_at": "2026-10-13T03:02:07.000Z" }, { "id": 159814, "urlhaus_id": "3949288", "url": "http://158.255.83.235:36871/i", "host": "158.255.83.235", "host_ip": "158.255.83.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 03:02:06 UTC", "discovered_at": "2026-10-13T03:02:06.000Z" }, { "id": 159815, "urlhaus_id": "3949287", "url": "http://115.50.202.231:58308/i", "host": "115.50.202.231", "host_ip": "115.50.202.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 02:57:20 UTC", "discovered_at": "2026-10-13T02:57:20.000Z" }, { "id": 159816, "urlhaus_id": "3949286", "url": "http://42.4.201.156:34866/i", "host": "42.4.201.156", "host_ip": "42.4.201.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 02:32:19 UTC", "discovered_at": "2026-10-13T02:32:19.000Z" }, { "id": 159818, "urlhaus_id": "3949285", "url": "http://170.84.133.234:45340/i", "host": "170.84.133.234", "host_ip": "170.84.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 02:32:06 UTC", "discovered_at": "2026-10-13T02:32:06.000Z" }, { "id": 159817, "urlhaus_id": "3949284", "url": "http://42.238.130.61:56801/i", "host": "42.238.130.61", "host_ip": "42.238.130.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 02:32:06 UTC", "discovered_at": "2026-10-13T02:32:06.000Z" }, { "id": 159819, "urlhaus_id": "3949283", "url": "http://123.7.221.183:36775/i", "host": "123.7.221.183", "host_ip": "123.7.221.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 02:22:19 UTC", "discovered_at": "2026-10-13T02:22:19.000Z" }, { "id": 159820, "urlhaus_id": "3949282", "url": "http://120.84.212.131:46106/i", "host": "120.84.212.131", "host_ip": "120.84.212.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 02:17:07 UTC", "discovered_at": "2026-10-13T02:17:07.000Z" }, { "id": 159821, "urlhaus_id": "3949281", "url": "http://180.103.139.206:3588/i", "host": "180.103.139.206", "host_ip": "180.103.139.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 02:15:20 UTC", "discovered_at": "2026-10-13T02:15:20.000Z" }, { "id": 159823, "urlhaus_id": "3949280", "url": "http://125.40.153.104:44073/i", "host": "125.40.153.104", "host_ip": "125.40.153.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 02:04:21 UTC", "discovered_at": "2026-10-13T02:04:21.000Z" }, { "id": 159822, "urlhaus_id": "3949279", "url": "http://123.7.221.183:36775/bin.sh", "host": "123.7.221.183", "host_ip": "123.7.221.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 02:04:21 UTC", "discovered_at": "2026-10-13T02:04:21.000Z" }, { "id": 159824, "urlhaus_id": "3949278", "url": "http://182.119.221.187:43898/i", "host": "182.119.221.187", "host_ip": "182.119.221.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 02:02:05 UTC", "discovered_at": "2026-10-13T02:02:05.000Z" }, { "id": 159825, "urlhaus_id": "3949277", "url": "http://1.61.203.231:46379/bin.sh", "host": "1.61.203.231", "host_ip": "1.61.203.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 01:53:21 UTC", "discovered_at": "2026-10-13T01:53:21.000Z" }, { "id": 159826, "urlhaus_id": "3949276", "url": "http://60.23.239.109:44110/i", "host": "60.23.239.109", "host_ip": "60.23.239.109", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:32:05 UTC", "discovered_at": "2026-10-13T01:32:05.000Z" }, { "id": 159827, "urlhaus_id": "3949275", "url": "http://222.141.133.234:50577/bin.sh", "host": "222.141.133.234", "host_ip": "222.141.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:17:07 UTC", "discovered_at": "2026-10-13T01:17:07.000Z" }, { "id": 159828, "urlhaus_id": "3949274", "url": "http://27.193.51.129:42610/i", "host": "27.193.51.129", "host_ip": "27.193.51.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 01:16:11 UTC", "discovered_at": "2026-10-13T01:16:11.000Z" }, { "id": 159829, "urlhaus_id": "3949273", "url": "http://182.124.12.142:54495/i", "host": "182.124.12.142", "host_ip": "182.124.12.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:13 UTC", "discovered_at": "2026-10-13T01:02:13.000Z" }, { "id": 159830, "urlhaus_id": "3949272", "url": "http://42.238.130.61:56801/bin.sh", "host": "42.238.130.61", "host_ip": "42.238.130.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:10 UTC", "discovered_at": "2026-10-13T01:02:10.000Z" }, { "id": 159831, "urlhaus_id": "3949271", "url": "http://182.121.58.197:47421/i", "host": "182.121.58.197", "host_ip": "182.121.58.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:09 UTC", "discovered_at": "2026-10-13T01:02:09.000Z" }, { "id": 159836, "urlhaus_id": "3949270", "url": "http://182.120.46.147:41326/bin.sh", "host": "182.120.46.147", "host_ip": "182.120.46.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:08 UTC", "discovered_at": "2026-10-13T01:02:08.000Z" }, { "id": 159835, "urlhaus_id": "3949269", "url": "http://116.139.178.34:58838/bin.sh", "host": "116.139.178.34", "host_ip": "116.139.178.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:08 UTC", "discovered_at": "2026-10-13T01:02:08.000Z" }, { "id": 159834, "urlhaus_id": "3949268", "url": "http://105.186.241.211:57115/bin.sh", "host": "105.186.241.211", "host_ip": "105.186.241.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:08 UTC", "discovered_at": "2026-10-13T01:02:08.000Z" }, { "id": 159833, "urlhaus_id": "3949267", "url": "http://182.122.199.178:49190/i", "host": "182.122.199.178", "host_ip": "182.122.199.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:08 UTC", "discovered_at": "2026-10-13T01:02:08.000Z" }, { "id": 159832, "urlhaus_id": "3949266", "url": "http://42.224.77.32:33614/i", "host": "42.224.77.32", "host_ip": "42.224.77.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:08 UTC", "discovered_at": "2026-10-13T01:02:08.000Z" }, { "id": 159837, "urlhaus_id": "3949265", "url": "http://182.122.199.178:49190/bin.sh", "host": "182.122.199.178", "host_ip": "182.122.199.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 01:02:07 UTC", "discovered_at": "2026-10-13T01:02:07.000Z" }, { "id": 159838, "urlhaus_id": "3949264", "url": "http://42.230.34.249:45500/i", "host": "42.230.34.249", "host_ip": "42.230.34.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:47:10 UTC", "discovered_at": "2026-10-13T00:47:10.000Z" }, { "id": 159840, "urlhaus_id": "3949263", "url": "http://115.56.96.117:37445/i", "host": "115.56.96.117", "host_ip": "115.56.96.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:47:08 UTC", "discovered_at": "2026-10-13T00:47:08.000Z" }, { "id": 159839, "urlhaus_id": "3949262", "url": "http://42.231.174.164:60965/i", "host": "42.231.174.164", "host_ip": "42.231.174.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:47:08 UTC", "discovered_at": "2026-10-13T00:47:08.000Z" }, { "id": 159841, "urlhaus_id": "3949261", "url": "http://101.108.13.178:40608/i", "host": "101.108.13.178", "host_ip": "101.108.13.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:47:07 UTC", "discovered_at": "2026-10-13T00:47:07.000Z" }, { "id": 159842, "urlhaus_id": "3949260", "url": "http://27.193.51.129:42610/bin.sh", "host": "27.193.51.129", "host_ip": "27.193.51.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 00:45:09 UTC", "discovered_at": "2026-10-13T00:45:09.000Z" }, { "id": 159843, "urlhaus_id": "3949259", "url": "http://119.183.102.216:59289/bin.sh", "host": "119.183.102.216", "host_ip": "119.183.102.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-13 00:35:22 UTC", "discovered_at": "2026-10-13T00:35:22.000Z" }, { "id": 159845, "urlhaus_id": "3949258", "url": "http://171.83.60.127:56990/i", "host": "171.83.60.127", "host_ip": "171.83.60.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:32:07 UTC", "discovered_at": "2026-10-13T00:32:07.000Z" }, { "id": 159844, "urlhaus_id": "3949257", "url": "http://115.57.245.249:51831/i", "host": "115.57.245.249", "host_ip": "115.57.245.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:32:07 UTC", "discovered_at": "2026-10-13T00:32:07.000Z" }, { "id": 159846, "urlhaus_id": "3949256", "url": "http://182.125.21.125:51156/i", "host": "182.125.21.125", "host_ip": "182.125.21.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:17:10 UTC", "discovered_at": "2026-10-13T00:17:10.000Z" }, { "id": 159848, "urlhaus_id": "3949255", "url": "http://59.96.138.221:42229/i", "host": "59.96.138.221", "host_ip": "59.96.138.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:17:07 UTC", "discovered_at": "2026-10-13T00:17:07.000Z" }, { "id": 159847, "urlhaus_id": "3949254", "url": "http://116.139.178.34:58838/i", "host": "116.139.178.34", "host_ip": "116.139.178.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-13 00:17:07 UTC", "discovered_at": "2026-10-13T00:17:07.000Z" }, { "id": 159849, "urlhaus_id": "3949253", "url": "http://42.239.78.50:60802/i", "host": "42.239.78.50", "host_ip": "42.239.78.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 00:16:22 UTC", "discovered_at": "2026-10-13T00:16:22.000Z" }, { "id": 159850, "urlhaus_id": "3949252", "url": "http://61.238.223.97:41521/i", "host": "61.238.223.97", "host_ip": "61.238.223.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-13 00:07:10 UTC", "discovered_at": "2026-10-13T00:07:10.000Z" }, { "id": 159851, "urlhaus_id": "3949251", "url": "http://42.239.78.50:60802/bin.sh", "host": "42.239.78.50", "host_ip": "42.239.78.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 23:50:15 UTC", "discovered_at": "2026-10-12T23:50:15.000Z" }, { "id": 159852, "urlhaus_id": "3949250", "url": "http://61.52.99.43:34864/i", "host": "61.52.99.43", "host_ip": "61.52.99.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:33:07 UTC", "discovered_at": "2026-10-12T23:33:07.000Z" }, { "id": 159853, "urlhaus_id": "3949249", "url": "http://123.14.84.27:58456/bin.sh", "host": "123.14.84.27", "host_ip": "123.14.84.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:32:06 UTC", "discovered_at": "2026-10-12T23:32:06.000Z" }, { "id": 159854, "urlhaus_id": "3949248", "url": "http://151.234.36.252:50606/i", "host": "151.234.36.252", "host_ip": "151.234.36.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 23:31:16 UTC", "discovered_at": "2026-10-12T23:31:16.000Z" }, { "id": 159855, "urlhaus_id": "3949247", "url": "http://61.238.223.97:41521/bin.sh", "host": "61.238.223.97", "host_ip": "61.238.223.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 23:29:19 UTC", "discovered_at": "2026-10-12T23:29:19.000Z" }, { "id": 159856, "urlhaus_id": "3949246", "url": "http://70.166.118.40:47652/bin.sh", "host": "70.166.118.40", "host_ip": "70.166.118.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 23:25:20 UTC", "discovered_at": "2026-10-12T23:25:20.000Z" }, { "id": 159857, "urlhaus_id": "3949245", "url": "http://42.57.20.190:45274/i", "host": "42.57.20.190", "host_ip": "42.57.20.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:17:06 UTC", "discovered_at": "2026-10-12T23:17:06.000Z" }, { "id": 159858, "urlhaus_id": "3949244", "url": "http://115.56.177.207:57147/i", "host": "115.56.177.207", "host_ip": "115.56.177.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 23:03:20 UTC", "discovered_at": "2026-10-12T23:03:20.000Z" }, { "id": 159859, "urlhaus_id": "3949243", "url": "http://119.180.79.16:42538/i", "host": "119.180.79.16", "host_ip": "119.180.79.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:02:10 UTC", "discovered_at": "2026-10-12T23:02:10.000Z" }, { "id": 159860, "urlhaus_id": "3949242", "url": "http://119.180.79.16:42538/bin.sh", "host": "119.180.79.16", "host_ip": "119.180.79.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:02:09 UTC", "discovered_at": "2026-10-12T23:02:09.000Z" }, { "id": 159862, "urlhaus_id": "3949241", "url": "http://112.248.81.107:48044/i", "host": "112.248.81.107", "host_ip": "112.248.81.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:02:07 UTC", "discovered_at": "2026-10-12T23:02:07.000Z" }, { "id": 159861, "urlhaus_id": "3949240", "url": "http://112.248.141.165:40560/i", "host": "112.248.141.165", "host_ip": "112.248.141.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 23:02:07 UTC", "discovered_at": "2026-10-12T23:02:07.000Z" }, { "id": 159863, "urlhaus_id": "3949239", "url": "http://116.139.172.245:54006/bin.sh", "host": "116.139.172.245", "host_ip": "116.139.172.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 22:59:22 UTC", "discovered_at": "2026-10-12T22:59:22.000Z" }, { "id": 159864, "urlhaus_id": "3949238", "url": "http://42.56.140.178:35036/bin.sh", "host": "42.56.140.178", "host_ip": "42.56.140.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:47:06 UTC", "discovered_at": "2026-10-12T22:47:06.000Z" }, { "id": 159865, "urlhaus_id": "3949237", "url": "http://31.56.209.86/mips", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:23 UTC", "discovered_at": "2026-10-12T22:34:23.000Z" }, { "id": 159867, "urlhaus_id": "3949236", "url": "http://31.56.209.86/powerpc", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:17 UTC", "discovered_at": "2026-10-12T22:34:17.000Z" }, { "id": 159866, "urlhaus_id": "3949235", "url": "http://31.56.209.86/armv7l", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:17 UTC", "discovered_at": "2026-10-12T22:34:17.000Z" }, { "id": 159869, "urlhaus_id": "3949234", "url": "http://31.56.209.86/aarch64", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:15 UTC", "discovered_at": "2026-10-12T22:34:15.000Z" }, { "id": 159868, "urlhaus_id": "3949233", "url": "http://31.56.209.86/mips64", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:15 UTC", "discovered_at": "2026-10-12T22:34:15.000Z" }, { "id": 159872, "urlhaus_id": "3949232", "url": "http://176.65.139.151/arm5", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:14 UTC", "discovered_at": "2026-10-12T22:34:14.000Z" }, { "id": 159871, "urlhaus_id": "3949231", "url": "http://176.65.139.151/x86_64", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:14 UTC", "discovered_at": "2026-10-12T22:34:14.000Z" }, { "id": 159870, "urlhaus_id": "3949230", "url": "http://31.56.209.86/mipsel", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 22:34:14 UTC", "discovered_at": "2026-10-12T22:34:14.000Z" }, { "id": 159873, "urlhaus_id": "3949229", "url": "http://175.165.80.178:44312/bin.sh", "host": "175.165.80.178", "host_ip": "175.165.80.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:32:17 UTC", "discovered_at": "2026-10-12T22:32:17.000Z" }, { "id": 159875, "urlhaus_id": "3949228", "url": "http://175.151.222.225:33901/i", "host": "175.151.222.225", "host_ip": "175.151.222.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:32:07 UTC", "discovered_at": "2026-10-12T22:32:07.000Z" }, { "id": 159874, "urlhaus_id": "3949227", "url": "http://103.172.221.97:55120/i", "host": "103.172.221.97", "host_ip": "103.172.221.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:32:07 UTC", "discovered_at": "2026-10-12T22:32:07.000Z" }, { "id": 159876, "urlhaus_id": "3949226", "url": "http://123.5.172.91:57091/bin.sh", "host": "123.5.172.91", "host_ip": "123.5.172.91", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 22:30:17 UTC", "discovered_at": "2026-10-12T22:30:17.000Z" }, { "id": 159877, "urlhaus_id": "3949225", "url": "http://175.151.222.225:33901/bin.sh", "host": "175.151.222.225", "host_ip": "175.151.222.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 22:29:10 UTC", "discovered_at": "2026-10-12T22:29:10.000Z" }, { "id": 159878, "urlhaus_id": "3949224", "url": "http://103.172.221.97:55120/bin.sh", "host": "103.172.221.97", "host_ip": "103.172.221.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:17:06 UTC", "discovered_at": "2026-10-12T22:17:06.000Z" }, { "id": 159879, "urlhaus_id": "3949223", "url": "http://42.235.49.252:47197/bin.sh", "host": "42.235.49.252", "host_ip": "42.235.49.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 22:11:17 UTC", "discovered_at": "2026-10-12T22:11:17.000Z" }, { "id": 159882, "urlhaus_id": "3949222", "url": "http://221.203.146.12:59086/bin.sh", "host": "221.203.146.12", "host_ip": "221.203.146.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:02:07 UTC", "discovered_at": "2026-10-12T22:02:07.000Z" }, { "id": 159881, "urlhaus_id": "3949221", "url": "http://183.35.50.75:40190/i", "host": "183.35.50.75", "host_ip": "183.35.50.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:02:07 UTC", "discovered_at": "2026-10-12T22:02:07.000Z" }, { "id": 159880, "urlhaus_id": "3949220", "url": "http://101.51.130.85:44981/i", "host": "101.51.130.85", "host_ip": "101.51.130.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:02:07 UTC", "discovered_at": "2026-10-12T22:02:07.000Z" }, { "id": 159883, "urlhaus_id": "3949219", "url": "http://83.233.56.26:51027/i", "host": "83.233.56.26", "host_ip": "83.233.56.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 22:02:06 UTC", "discovered_at": "2026-10-12T22:02:06.000Z" }, { "id": 159884, "urlhaus_id": "3949218", "url": "http://219.154.182.123:38465/i", "host": "219.154.182.123", "host_ip": "219.154.182.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:47:10 UTC", "discovered_at": "2026-10-12T21:47:10.000Z" }, { "id": 159885, "urlhaus_id": "3949217", "url": "http://123.10.69.247:36801/i", "host": "123.10.69.247", "host_ip": "123.10.69.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:47:08 UTC", "discovered_at": "2026-10-12T21:47:08.000Z" }, { "id": 159887, "urlhaus_id": "3949216", "url": "http://219.157.18.209:57018/i", "host": "219.157.18.209", "host_ip": "219.157.18.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:47:07 UTC", "discovered_at": "2026-10-12T21:47:07.000Z" }, { "id": 159886, "urlhaus_id": "3949215", "url": "http://187.45.95.254:55951/i", "host": "187.45.95.254", "host_ip": "187.45.95.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:47:07 UTC", "discovered_at": "2026-10-12T21:47:07.000Z" }, { "id": 159888, "urlhaus_id": "3949214", "url": "http://42.7.122.114:58373/bin.sh", "host": "42.7.122.114", "host_ip": "42.7.122.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 21:40:16 UTC", "discovered_at": "2026-10-12T21:40:16.000Z" }, { "id": 159889, "urlhaus_id": "3949213", "url": "http://60.23.233.72:45003/i", "host": "60.23.233.72", "host_ip": "60.23.233.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:32:20 UTC", "discovered_at": "2026-10-12T21:32:20.000Z" }, { "id": 159890, "urlhaus_id": "3949212", "url": "http://101.51.130.85:44981/bin.sh", "host": "101.51.130.85", "host_ip": "101.51.130.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:32:07 UTC", "discovered_at": "2026-10-12T21:32:07.000Z" }, { "id": 159891, "urlhaus_id": "3949211", "url": "http://115.63.134.244:47728/i", "host": "115.63.134.244", "host_ip": "115.63.134.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 21:30:19 UTC", "discovered_at": "2026-10-12T21:30:19.000Z" }, { "id": 159893, "urlhaus_id": "3949210", "url": "http://175.173.92.197:45016/bin.sh", "host": "175.173.92.197", "host_ip": "175.173.92.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:17:07 UTC", "discovered_at": "2026-10-12T21:17:07.000Z" }, { "id": 159892, "urlhaus_id": "3949209", "url": "http://175.174.99.21:54093/i", "host": "175.174.99.21", "host_ip": "175.174.99.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:17:07 UTC", "discovered_at": "2026-10-12T21:17:07.000Z" }, { "id": 159895, "urlhaus_id": "3949208", "url": "http://115.61.17.142:58520/i", "host": "115.61.17.142", "host_ip": "115.61.17.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:17:06 UTC", "discovered_at": "2026-10-12T21:17:06.000Z" }, { "id": 159894, "urlhaus_id": "3949207", "url": "http://115.62.157.255:57569/bin.sh", "host": "115.62.157.255", "host_ip": "115.62.157.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:17:06 UTC", "discovered_at": "2026-10-12T21:17:06.000Z" }, { "id": 159896, "urlhaus_id": "3949206", "url": "http://42.180.78.75:51234/i", "host": "42.180.78.75", "host_ip": "42.180.78.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 21:16:12 UTC", "discovered_at": "2026-10-12T21:16:12.000Z" }, { "id": 159899, "urlhaus_id": "3949205", "url": "http://60.23.232.219:37378/i", "host": "60.23.232.219", "host_ip": "60.23.232.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:02:08 UTC", "discovered_at": "2026-10-12T21:02:08.000Z" }, { "id": 159898, "urlhaus_id": "3949204", "url": "http://61.53.132.141:45671/i", "host": "61.53.132.141", "host_ip": "61.53.132.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:02:08 UTC", "discovered_at": "2026-10-12T21:02:08.000Z" }, { "id": 159897, "urlhaus_id": "3949203", "url": "http://61.53.132.141:45671/bin.sh", "host": "61.53.132.141", "host_ip": "61.53.132.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:02:08 UTC", "discovered_at": "2026-10-12T21:02:08.000Z" }, { "id": 159901, "urlhaus_id": "3949202", "url": "http://182.120.46.147:41326/i", "host": "182.120.46.147", "host_ip": "182.120.46.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:02:07 UTC", "discovered_at": "2026-10-12T21:02:07.000Z" }, { "id": 159900, "urlhaus_id": "3949201", "url": "http://182.127.125.146:57050/bin.sh", "host": "182.127.125.146", "host_ip": "182.127.125.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 21:02:07 UTC", "discovered_at": "2026-10-12T21:02:07.000Z" }, { "id": 159902, "urlhaus_id": "3949200", "url": "http://42.180.78.75:51234/bin.sh", "host": "42.180.78.75", "host_ip": "42.180.78.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 20:50:19 UTC", "discovered_at": "2026-10-12T20:50:19.000Z" }, { "id": 159903, "urlhaus_id": "3949199", "url": "http://119.183.26.169:57722/bin.sh", "host": "119.183.26.169", "host_ip": "119.183.26.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:47:07 UTC", "discovered_at": "2026-10-12T20:47:07.000Z" }, { "id": 159904, "urlhaus_id": "3949198", "url": "http://61.53.73.21:38343/i", "host": "61.53.73.21", "host_ip": "61.53.73.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:47:06 UTC", "discovered_at": "2026-10-12T20:47:06.000Z" }, { "id": 159905, "urlhaus_id": "3949197", "url": "http://123.12.173.255:42722/i", "host": "123.12.173.255", "host_ip": "123.12.173.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:32:12 UTC", "discovered_at": "2026-10-12T20:32:12.000Z" }, { "id": 159906, "urlhaus_id": "3949196", "url": "http://27.215.110.113:47557/i", "host": "27.215.110.113", "host_ip": "27.215.110.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:32:11 UTC", "discovered_at": "2026-10-12T20:32:11.000Z" }, { "id": 159908, "urlhaus_id": "3949195", "url": "http://27.215.110.113:47557/bin.sh", "host": "27.215.110.113", "host_ip": "27.215.110.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:32:06 UTC", "discovered_at": "2026-10-12T20:32:06.000Z" }, { "id": 159907, "urlhaus_id": "3949194", "url": "http://222.139.35.60:57183/i", "host": "222.139.35.60", "host_ip": "222.139.35.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:32:06 UTC", "discovered_at": "2026-10-12T20:32:06.000Z" }, { "id": 159909, "urlhaus_id": "3949193", "url": "http://60.184.122.182:36505/i", "host": "60.184.122.182", "host_ip": "60.184.122.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 20:29:32 UTC", "discovered_at": "2026-10-12T20:29:32.000Z" }, { "id": 159910, "urlhaus_id": "3949192", "url": "http://27.25.71.38:54860/i", "host": "27.25.71.38", "host_ip": "27.25.71.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 20:08:26 UTC", "discovered_at": "2026-10-12T20:08:26.000Z" }, { "id": 159911, "urlhaus_id": "3949191", "url": "http://125.45.67.122:42612/i", "host": "125.45.67.122", "host_ip": "125.45.67.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 20:06:19 UTC", "discovered_at": "2026-10-12T20:06:19.000Z" }, { "id": 159912, "urlhaus_id": "3949190", "url": "http://60.184.122.182:36505/bin.sh", "host": "60.184.122.182", "host_ip": "60.184.122.182", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 20:04:13 UTC", "discovered_at": "2026-10-12T20:04:13.000Z" }, { "id": 159913, "urlhaus_id": "3949189", "url": "http://123.97.76.148:53839/i", "host": "123.97.76.148", "host_ip": "123.97.76.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 20:02:10 UTC", "discovered_at": "2026-10-12T20:02:10.000Z" }, { "id": 159914, "urlhaus_id": "3949188", "url": "http://222.127.73.23:58186/i", "host": "222.127.73.23", "host_ip": "222.127.73.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:47:07 UTC", "discovered_at": "2026-10-12T19:47:07.000Z" }, { "id": 159915, "urlhaus_id": "3949187", "url": "http://221.14.39.147:55001/i", "host": "221.14.39.147", "host_ip": "221.14.39.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:47:06 UTC", "discovered_at": "2026-10-12T19:47:06.000Z" }, { "id": 159916, "urlhaus_id": "3949186", "url": "http://125.45.67.122:42612/bin.sh", "host": "125.45.67.122", "host_ip": "125.45.67.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 19:43:12 UTC", "discovered_at": "2026-10-12T19:43:12.000Z" }, { "id": 159917, "urlhaus_id": "3949185", "url": "http://178.206.171.51:45243/bin.sh", "host": "178.206.171.51", "host_ip": "178.206.171.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 19:33:21 UTC", "discovered_at": "2026-10-12T19:33:21.000Z" }, { "id": 159918, "urlhaus_id": "3949184", "url": "http://222.137.145.82:55607/i", "host": "222.137.145.82", "host_ip": "222.137.145.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:32:09 UTC", "discovered_at": "2026-10-12T19:32:09.000Z" }, { "id": 159921, "urlhaus_id": "3949183", "url": "http://39.73.144.63:60305/bin.sh", "host": "39.73.144.63", "host_ip": "39.73.144.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:32:06 UTC", "discovered_at": "2026-10-12T19:32:06.000Z" }, { "id": 159920, "urlhaus_id": "3949182", "url": "http://27.207.229.93:51766/bin.sh", "host": "27.207.229.93", "host_ip": "27.207.229.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:32:06 UTC", "discovered_at": "2026-10-12T19:32:06.000Z" }, { "id": 159919, "urlhaus_id": "3949181", "url": "http://123.129.133.185:54981/i", "host": "123.129.133.185", "host_ip": "123.129.133.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:32:06 UTC", "discovered_at": "2026-10-12T19:32:06.000Z" }, { "id": 159922, "urlhaus_id": "3949180", "url": "http://110.136.10.85:46168/bin.sh", "host": "110.136.10.85", "host_ip": "110.136.10.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 19:21:17 UTC", "discovered_at": "2026-10-12T19:21:17.000Z" }, { "id": 159923, "urlhaus_id": "3949179", "url": "http://114.226.124.233:43512/i", "host": "114.226.124.233", "host_ip": "114.226.124.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 19:20:36 UTC", "discovered_at": "2026-10-12T19:20:36.000Z" }, { "id": 159924, "urlhaus_id": "3949178", "url": "http://105.187.30.24:38917/i", "host": "105.187.30.24", "host_ip": "105.187.30.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:17:14 UTC", "discovered_at": "2026-10-12T19:17:14.000Z" }, { "id": 159925, "urlhaus_id": "3949177", "url": "http://182.124.1.62:44920/i", "host": "182.124.1.62", "host_ip": "182.124.1.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:17:08 UTC", "discovered_at": "2026-10-12T19:17:08.000Z" }, { "id": 159926, "urlhaus_id": "3949176", "url": "http://115.204.23.50:47845/i", "host": "115.204.23.50", "host_ip": "115.204.23.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 19:13:17 UTC", "discovered_at": "2026-10-12T19:13:17.000Z" }, { "id": 159927, "urlhaus_id": "3949175", "url": "http://65512.cfd/eclipse.x86_64", "host": "65512.cfd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:13:09 UTC", "discovered_at": "2026-10-12T19:13:09.000Z" }, { "id": 159929, "urlhaus_id": "3949174", "url": "https://c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud/storage/v1/object/sign/mod-files/meteor-client/meteor-client-1.21.11-86.jar?token=eyJraWQiOiIyNGE1ZGEwNi1lYzcxLTQ3MjYtOTgxMi02MDg3YmQwOWFjZTYiLCJhbGciOiJIUzUxMiJ9.eyJ1cmwiOiJtb2QtZmlsZXMvbWV0ZW9yLWNsaWVudC9tZXRlb3ItY2xpZW50LTEuMjEuMTEtODYuamFyIiwic2NvcGUiOiJkb3dubG9hZCIsImlhdCI6MTc5MTgzMTk4NSwiZXhwIjoxNzkxODMyNTg1fQ.9QijUPcpt2zADbuIslXMc8Q1NFCQX2bmxim9v2z8Fz0OeljDY141GDpQ0K6p64Fk4SRqSQ7WZgniF82BR2KfSg", "host": "c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 19:09:13 UTC", "discovered_at": "2026-10-12T19:09:13.000Z" }, { "id": 159928, "urlhaus_id": "3949173", "url": "https://c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud/storage/v1/object/sign/mod-files/krypton-client/KryptonPlus.jar?token=eyJraWQiOiIyNGE1ZGEwNi1lYzcxLTQ3MjYtOTgxMi02MDg3YmQwOWFjZTYiLCJhbGciOiJIUzUxMiJ9.eyJ1cmwiOiJtb2QtZmlsZXMva3J5cHRvbi1jbGllbnQvS3J5cHRvblBsdXMuamFyIiwic2NvcGUiOiJkb3dubG9hZCIsImlhdCI6MTc5MTgzMjA3OCwiZXhwIjoxNzkxODMyNjc4fQ.mD_SdqW8DBFjb--YFXCQSPGh7GoXNx81rzLXz1TiUzC3u88-Gv1Tv8CxGjl9tBnj63kT3qHlht1hVHuXgn7oMA", "host": "c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 19:09:13 UTC", "discovered_at": "2026-10-12T19:09:13.000Z" }, { "id": 159930, "urlhaus_id": "3949172", "url": "https://c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud/storage/v1/object/sign/mod-files/opsec/opsec-1.21.11+v1.1.7.1.jar?token=eyJraWQiOiIyNGE1ZGEwNi1lYzcxLTQ3MjYtOTgxMi02MDg3YmQwOWFjZTYiLCJhbGciOiJIUzUxMiJ9.eyJ1cmwiOiJtb2QtZmlsZXMvb3BzZWMvb3BzZWMtMS4yMS4xMSt2MS4xLjcuMS5qYXIiLCJzY29wZSI6ImRvd25sb2FkIiwiaWF0IjoxNzkxODMyMDQwLCJleHAiOjE3OTE4MzI2NDB9.GMqsAYT-q4uKE3XO58jjQpXiy3IFdUItA4_wkp4a9RrEYLBgCIV1woOw7wqwpGfEauPtHlkteLzTzPLh9jELaA", "host": "c--617b5f35-a107-4800-9047-a429934c0483-prod.lovable.cloud", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 19:09:08 UTC", "discovered_at": "2026-10-12T19:09:08.000Z" }, { "id": 159931, "urlhaus_id": "3949171", "url": "http://182.113.25.83:46080/bin.sh", "host": "182.113.25.83", "host_ip": "182.113.25.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 19:02:14 UTC", "discovered_at": "2026-10-12T19:02:14.000Z" }, { "id": 159932, "urlhaus_id": "3949170", "url": "https://cdn.discordapp.com/attachments/1558538178170855506/1558539628779143208/Nova_1.21.11.jar?ex=6ace71a3&is=6acd2023&hm=c1eae6a12fab251587b9922092a345cce0581cdd37a84db0d101a14000e3d039&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 19:02:11 UTC", "discovered_at": "2026-10-12T19:02:11.000Z" }, { "id": 159934, "urlhaus_id": "3949169", "url": "https://cdn.discordapp.com/attachments/1558537759193305238/1558538966754398325/KryptonClient-1.21.11.jar?ex=6ace7105&is=6acd1f85&hm=dd1152c5791252c9189fb3c0bdf14b5cdf3f5d726251d16fccaac70247fe4dc5&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 19:02:09 UTC", "discovered_at": "2026-10-12T19:02:09.000Z" }, { "id": 159933, "urlhaus_id": "3949168", "url": "http://112.198.238.18:37154/i", "host": "112.198.238.18", "host_ip": "112.198.238.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:02:09 UTC", "discovered_at": "2026-10-12T19:02:09.000Z" }, { "id": 159935, "urlhaus_id": "3949167", "url": "http://109.97.45.66:34167/i", "host": "109.97.45.66", "host_ip": "109.97.45.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 19:02:07 UTC", "discovered_at": "2026-10-12T19:02:07.000Z" }, { "id": 158377, "urlhaus_id": "3949166", "url": "http://23.132.164.72:8888/file/img_234455.png", "host": "23.132.164.72", "host_ip": "23.132.164.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat, stego", "last_online": null, "first_seen": "2026-10-12 18:52:07 UTC", "discovered_at": "2026-10-12T18:52:07.000Z" }, { "id": 158378, "urlhaus_id": "3949165", "url": "http://114.226.124.233:43512/bin.sh", "host": "114.226.124.233", "host_ip": "114.226.124.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 18:51:20 UTC", "discovered_at": "2026-10-12T18:51:20.000Z" }, { "id": 158379, "urlhaus_id": "3949164", "url": "https://new-orleans.pl/wp-includes/Text/bhxlvkt/erlodfc/stykqbz/ssecured_stub.ps1", "host": "new-orleans.pl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-12 18:48:07 UTC", "discovered_at": "2026-10-12T18:48:07.000Z" }, { "id": 158381, "urlhaus_id": "3949163", "url": "https://cdn.discordapp.com/attachments/1557190077522649129/1558972064323346582/MorphV2.jar?ex=6ace0a20&is=6accb8a0&hm=b7ddca9fb558651eab24a095e1e6e8bce4e98057ad991097631d03b9f0cd511e&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:48:06 UTC", "discovered_at": "2026-10-12T18:48:06.000Z" }, { "id": 158380, "urlhaus_id": "3949162", "url": "https://activegrp.co.za/img_140114.png", "host": "activegrp.co.za", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "stego", "last_online": null, "first_seen": "2026-10-12 18:48:06 UTC", "discovered_at": "2026-10-12T18:48:06.000Z" }, { "id": 158382, "urlhaus_id": "3949161", "url": "https://cdn.discordapp.com/attachments/1559259585808695467/1559259940613521428/GoobaCRACKED.jar?ex=6ace6d7b&is=6acd1bfb&hm=edfbf483f62c0f39f32dcf1b07fbc48dc88373312fac7e95f4d9b1dfbed2181f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:16 UTC", "discovered_at": "2026-10-12T18:47:16.000Z" }, { "id": 158384, "urlhaus_id": "3949160", "url": "https://cdn.discordapp.com/attachments/1557189284102934558/1557193833127743529/CodeEngineCracked.jar?backend=b2&ex=6ace2985&is=6accd805&hm=22000876502c1ff386610d11ceea26b90773413780f73fde3b4e6b2eca173705&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:11 UTC", "discovered_at": "2026-10-12T18:47:11.000Z" }, { "id": 158383, "urlhaus_id": "3949159", "url": "https://cdn.discordapp.com/attachments/1557190400052166666/1559258245275721880/WaterClientDev.jar?ex=6ace6be7&is=6acd1a67&hm=25d1151c6512a87e0e7826e01c716b961d1766d978bdcab4315ee802f691ddd0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:11 UTC", "discovered_at": "2026-10-12T18:47:11.000Z" }, { "id": 158385, "urlhaus_id": "3949158", "url": "https://cdn.discordapp.com/attachments/1557190619187773582/1559259137131417721/67ClientCracked.jar?ex=6ace6cbb&is=6acd1b3b&hm=b2f1382a187f0a56484f7af8f4a2b8c43c9b38952a985fdb3a0edad0e94ae953&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:10 UTC", "discovered_at": "2026-10-12T18:47:10.000Z" }, { "id": 158392, "urlhaus_id": "3949157", "url": "https://cdn.discordapp.com/attachments/1557188215520370778/1557193185917149204/SwyzzyClientCracked.jar?backend=b2&ex=6ace28ea&is=6accd76a&hm=7697dbec32ab3081b1805d70629a69c67e47f177af40d38c2bf2e51483d02be0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158391, "urlhaus_id": "3949156", "url": "https://cdn.discordapp.com/attachments/1557189927907631244/1558971327300243568/Larp_Debug_V8_2.jar?ex=6ace0970&is=6accb7f0&hm=9bc4617fdd5c8b3edc755ce6ebcc28a8283c2f67bc470c55f15c0fbe7a1795db&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158390, "urlhaus_id": "3949155", "url": "https://cdn.discordapp.com/attachments/1557189597404991528/1558968799099625564/Nova_Addon.jar?ex=6ace0715&is=6accb595&hm=4c11b5908976ab897ef243baa03520741a2ec64432b34975fe5e05231676afd7&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158389, "urlhaus_id": "3949154", "url": "https://cdn.discordapp.com/attachments/1557190213120303175/1558972335887880242/mental_debug_cracked.jar?ex=6ace0a61&is=6accb8e1&hm=887dfe3a41d4602262e7eb21073df9ac6ab2597eb72c7581807376caf82f40c9&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158388, "urlhaus_id": "3949153", "url": "https://cdn.discordapp.com/attachments/1557190023886020640/1558971575255040081/SpedDebugCracked-.jar?ex=6ace09ab&is=6accb82b&hm=49353d6f1dbb89df797790ad8d8cd7785d961866e606e3eadacc346a7131db92&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158387, "urlhaus_id": "3949152", "url": "https://cdn.discordapp.com/attachments/1557190559662088223/1559258960614391912/WaterClientCracked.jar?ex=6ace6c91&is=6acd1b11&hm=70e31dd563b633ecfb4d9815dd4628b00e665b137479600f66d083d1fe31cdf3&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158386, "urlhaus_id": "3949151", "url": "https://cdn.discordapp.com/attachments/1557189739763994644/1558970084800864267/Lemon_Debug.jar?ex=6ace0848&is=6accb6c8&hm=024423b7657f622fb6f5618c2ed59bade00e4edea98a87f31d5adac1947a94fe&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-12 18:47:09 UTC", "discovered_at": "2026-10-12T18:47:09.000Z" }, { "id": 158393, "urlhaus_id": "3949150", "url": "http://27.215.55.107:33268/Mozi.m", "host": "27.215.55.107", "host_ip": "27.215.55.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:46:20 UTC", "discovered_at": "2026-10-12T18:46:20.000Z" }, { "id": 158394, "urlhaus_id": "3949149", "url": "http://115.204.23.50:47845/bin.sh", "host": "115.204.23.50", "host_ip": "115.204.23.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 18:44:17 UTC", "discovered_at": "2026-10-12T18:44:17.000Z" }, { "id": 158396, "urlhaus_id": "3949148", "url": "http://27.207.112.61:45686/bin.sh", "host": "27.207.112.61", "host_ip": "27.207.112.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:32:08 UTC", "discovered_at": "2026-10-12T18:32:08.000Z" }, { "id": 158395, "urlhaus_id": "3949147", "url": "http://196.190.1.39:57366/i", "host": "196.190.1.39", "host_ip": "196.190.1.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:32:08 UTC", "discovered_at": "2026-10-12T18:32:08.000Z" }, { "id": 158398, "urlhaus_id": "3949146", "url": "http://104.223.84.34/1.jpg", "host": "104.223.84.34", "host_ip": "104.223.84.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:31:07 UTC", "discovered_at": "2026-10-12T18:31:07.000Z" }, { "id": 158397, "urlhaus_id": "3949145", "url": "http://104.223.84.34/55/besofluck.htA", "host": "104.223.84.34", "host_ip": "104.223.84.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:31:07 UTC", "discovered_at": "2026-10-12T18:31:07.000Z" }, { "id": 158399, "urlhaus_id": "3949144", "url": "http://nd.tdpqnf.com/sxpl/dbjdfmd.txt", "host": "nd.tdpqnf.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, RemcosRAT, rev-base64-loader", "last_online": null, "first_seen": "2026-10-12 18:29:09 UTC", "discovered_at": "2026-10-12T18:29:09.000Z" }, { "id": 158400, "urlhaus_id": "3949143", "url": "http://182.127.125.146:57050/i", "host": "182.127.125.146", "host_ip": "182.127.125.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:17:07 UTC", "discovered_at": "2026-10-12T18:17:07.000Z" }, { "id": 158401, "urlhaus_id": "3949142", "url": "http://182.126.92.31:39161/i", "host": "182.126.92.31", "host_ip": "182.126.92.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 18:14:22 UTC", "discovered_at": "2026-10-12T18:14:22.000Z" }, { "id": 158402, "urlhaus_id": "3949141", "url": "http://183.129.51.116:48161/bin.sh", "host": "183.129.51.116", "host_ip": "183.129.51.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-12 18:11:17 UTC", "discovered_at": "2026-10-12T18:11:17.000Z" }, { "id": 158403, "urlhaus_id": "3949140", "url": "https://krause-fahrzeuge.de/api/poly-token", "host": "krause-fahrzeuge.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-12 18:11:09 UTC", "discovered_at": "2026-10-12T18:11:09.000Z" }, { "id": 158406, "urlhaus_id": "3949139", "url": "http://146.103.101.229/Tucoyodel", "host": "146.103.101.229", "host_ip": "146.103.101.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Amos, ClickFix, macho, macOS, stealer", "last_online": null, "first_seen": "2026-10-12 18:11:07 UTC", "discovered_at": "2026-10-12T18:11:07.000Z" }, { "id": 158405, "urlhaus_id": "3949138", "url": "https://krause-fahrzeuge.de/api/cm-token", "host": "krause-fahrzeuge.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-12 18:11:07 UTC", "discovered_at": "2026-10-12T18:11:07.000Z" }, { "id": 158404, "urlhaus_id": "3949137", "url": "http://180.191.49.27:56901/Mozi.m", "host": "180.191.49.27", "host_ip": "180.191.49.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:11:07 UTC", "discovered_at": "2026-10-12T18:11:07.000Z" }, { "id": 158407, "urlhaus_id": "3949136", "url": "http://146.103.101.229/Lurowuf", "host": "146.103.101.229", "host_ip": "146.103.101.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Amos, ClickFix, macOS, shell, stage1", "last_online": null, "first_seen": "2026-10-12 18:11:06 UTC", "discovered_at": "2026-10-12T18:11:06.000Z" }, { "id": 158408, "urlhaus_id": "3949135", "url": "http://113.238.229.213:41846/bin.sh", "host": "113.238.229.213", "host_ip": "113.238.229.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 18:05:21 UTC", "discovered_at": "2026-10-12T18:05:21.000Z" }, { "id": 158409, "urlhaus_id": "3949134", "url": "http://219.156.119.249:37129/i", "host": "219.156.119.249", "host_ip": "219.156.119.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:02:08 UTC", "discovered_at": "2026-10-12T18:02:08.000Z" }, { "id": 158410, "urlhaus_id": "3949133", "url": "http://120.84.215.56:40496/i", "host": "120.84.215.56", "host_ip": "120.84.215.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:02:07 UTC", "discovered_at": "2026-10-12T18:02:07.000Z" }, { "id": 158411, "urlhaus_id": "3949132", "url": "http://222.134.175.65:48300/i", "host": "222.134.175.65", "host_ip": "222.134.175.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 18:02:06 UTC", "discovered_at": "2026-10-12T18:02:06.000Z" }, { "id": 158412, "urlhaus_id": "3949131", "url": "http://222.138.78.42:48194/i", "host": "222.138.78.42", "host_ip": "222.138.78.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 17:43:21 UTC", "discovered_at": "2026-10-12T17:43:21.000Z" }, { "id": 158413, "urlhaus_id": "3949130", "url": "http://163.142.78.62:48371/i", "host": "163.142.78.62", "host_ip": "163.142.78.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 17:42:19 UTC", "discovered_at": "2026-10-12T17:42:19.000Z" }, { "id": 158414, "urlhaus_id": "3949129", "url": "http://105.186.118.157:54387/bin.sh", "host": "105.186.118.157", "host_ip": "105.186.118.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 17:10:29 UTC", "discovered_at": "2026-10-12T17:10:29.000Z" }, { "id": 158415, "urlhaus_id": "3949128", "url": "http://117.235.146.45:60112/bin.sh", "host": "117.235.146.45", "host_ip": "117.235.146.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 17:02:15 UTC", "discovered_at": "2026-10-12T17:02:15.000Z" }, { "id": 158416, "urlhaus_id": "3949127", "url": "http://117.26.227.112:44031/bin.sh", "host": "117.26.227.112", "host_ip": "117.26.227.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 17:00:20 UTC", "discovered_at": "2026-10-12T17:00:20.000Z" }, { "id": 158417, "urlhaus_id": "3949126", "url": "http://222.241.234.107:50704/i", "host": "222.241.234.107", "host_ip": "222.241.234.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:47:08 UTC", "discovered_at": "2026-10-12T16:47:08.000Z" }, { "id": 158418, "urlhaus_id": "3949125", "url": "http://125.106.96.203:56709/bin.sh", "host": "125.106.96.203", "host_ip": "125.106.96.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 16:29:19 UTC", "discovered_at": "2026-10-12T16:29:19.000Z" }, { "id": 158419, "urlhaus_id": "3949124", "url": "http://42.5.16.160:56683/bin.sh", "host": "42.5.16.160", "host_ip": "42.5.16.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 16:18:15 UTC", "discovered_at": "2026-10-12T16:18:15.000Z" }, { "id": 158420, "urlhaus_id": "3949123", "url": "http://123.161.90.221:44391/bin.sh", "host": "123.161.90.221", "host_ip": "123.161.90.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:17:08 UTC", "discovered_at": "2026-10-12T16:17:08.000Z" }, { "id": 158422, "urlhaus_id": "3949122", "url": "http://123.170.101.120:36920/i", "host": "123.170.101.120", "host_ip": "123.170.101.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:17:07 UTC", "discovered_at": "2026-10-12T16:17:07.000Z" }, { "id": 158421, "urlhaus_id": "3949121", "url": "http://123.14.84.27:58456/i", "host": "123.14.84.27", "host_ip": "123.14.84.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:17:07 UTC", "discovered_at": "2026-10-12T16:17:07.000Z" }, { "id": 158423, "urlhaus_id": "3949120", "url": "http://222.141.81.197:51511/i", "host": "222.141.81.197", "host_ip": "222.141.81.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:17:05 UTC", "discovered_at": "2026-10-12T16:17:05.000Z" }, { "id": 158424, "urlhaus_id": "3949119", "url": "http://31.76.101.174/files/Xeno-v1.3.60.exe", "host": "31.76.101.174", "host_ip": "31.76.101.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:09:44 UTC", "discovered_at": "2026-10-12T16:09:44.000Z" }, { "id": 158426, "urlhaus_id": "3949118", "url": "http://176.65.139.76/bins/x86", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:09:26 UTC", "discovered_at": "2026-10-12T16:09:26.000Z" }, { "id": 158425, "urlhaus_id": "3949117", "url": "http://31.76.101.174/files/app.exe", "host": "31.76.101.174", "host_ip": "31.76.101.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 16:09:26 UTC", "discovered_at": "2026-10-12T16:09:26.000Z" }, { "id": 158427, "urlhaus_id": "3949116", "url": "http://176.65.139.151/mips", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:09:20 UTC", "discovered_at": "2026-10-12T16:09:20.000Z" }, { "id": 158430, "urlhaus_id": "3949115", "url": "http://176.65.139.76/bins/ppc", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:16 UTC", "discovered_at": "2026-10-12T16:08:16.000Z" }, { "id": 158429, "urlhaus_id": "3949114", "url": "http://176.65.139.151/m68k", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:16 UTC", "discovered_at": "2026-10-12T16:08:16.000Z" }, { "id": 158428, "urlhaus_id": "3949113", "url": "http://176.65.139.151/arm7", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:16 UTC", "discovered_at": "2026-10-12T16:08:16.000Z" }, { "id": 158433, "urlhaus_id": "3949112", "url": "http://176.65.139.76/bins/spc", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:07 UTC", "discovered_at": "2026-10-12T16:08:07.000Z" }, { "id": 158432, "urlhaus_id": "3949111", "url": "http://176.65.139.151/mips64", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:07 UTC", "discovered_at": "2026-10-12T16:08:07.000Z" }, { "id": 158431, "urlhaus_id": "3949110", "url": "http://176.65.139.151/arm6", "host": "176.65.139.151", "host_ip": "176.65.139.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 16:08:07 UTC", "discovered_at": "2026-10-12T16:08:07.000Z" }, { "id": 158434, "urlhaus_id": "3949109", "url": "http://120.28.135.4:56775/bin.sh", "host": "120.28.135.4", "host_ip": "120.28.135.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 15:58:28 UTC", "discovered_at": "2026-10-12T15:58:28.000Z" }, { "id": 158437, "urlhaus_id": "3949108", "url": "http://42.178.31.252:45223/i", "host": "42.178.31.252", "host_ip": "42.178.31.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:47:06 UTC", "discovered_at": "2026-10-12T15:47:06.000Z" }, { "id": 158436, "urlhaus_id": "3949107", "url": "http://120.84.215.161:35060/i", "host": "120.84.215.161", "host_ip": "120.84.215.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:47:06 UTC", "discovered_at": "2026-10-12T15:47:06.000Z" }, { "id": 158435, "urlhaus_id": "3949106", "url": "http://42.227.36.195:56580/bin.sh", "host": "42.227.36.195", "host_ip": "42.227.36.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:47:06 UTC", "discovered_at": "2026-10-12T15:47:06.000Z" }, { "id": 158438, "urlhaus_id": "3949105", "url": "https://cocuktekstil.com/r", "host": "cocuktekstil.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, ps1, stager", "last_online": null, "first_seen": "2026-10-12 15:36:07 UTC", "discovered_at": "2026-10-12T15:36:07.000Z" }, { "id": 158439, "urlhaus_id": "3949104", "url": "http://115.50.227.210:56808/bin.sh", "host": "115.50.227.210", "host_ip": "115.50.227.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 15:23:13 UTC", "discovered_at": "2026-10-12T15:23:13.000Z" }, { "id": 158440, "urlhaus_id": "3949103", "url": "http://122.235.142.205:53856/i", "host": "122.235.142.205", "host_ip": "122.235.142.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:17:07 UTC", "discovered_at": "2026-10-12T15:17:07.000Z" }, { "id": 158442, "urlhaus_id": "3949102", "url": "http://120.84.212.9:54297/i", "host": "120.84.212.9", "host_ip": "120.84.212.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:17:06 UTC", "discovered_at": "2026-10-12T15:17:06.000Z" }, { "id": 158441, "urlhaus_id": "3949101", "url": "http://105.186.241.211:57115/i", "host": "105.186.241.211", "host_ip": "105.186.241.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:17:06 UTC", "discovered_at": "2026-10-12T15:17:06.000Z" }, { "id": 158443, "urlhaus_id": "3949100", "url": "http://183.129.51.116:48161/i", "host": "183.129.51.116", "host_ip": "183.129.51.116", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 15:02:10 UTC", "discovered_at": "2026-10-12T15:02:10.000Z" }, { "id": 158444, "urlhaus_id": "3949099", "url": "http://117.63.188.228:51491/i", "host": "117.63.188.228", "host_ip": "117.63.188.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 14:49:18 UTC", "discovered_at": "2026-10-12T14:49:18.000Z" }, { "id": 158445, "urlhaus_id": "3949098", "url": "http://115.48.149.27:55128/i", "host": "115.48.149.27", "host_ip": "115.48.149.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:47:08 UTC", "discovered_at": "2026-10-12T14:47:08.000Z" }, { "id": 158447, "urlhaus_id": "3949097", "url": "http://1.61.203.231:46379/i", "host": "1.61.203.231", "host_ip": "1.61.203.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:47:07 UTC", "discovered_at": "2026-10-12T14:47:07.000Z" }, { "id": 158446, "urlhaus_id": "3949096", "url": "http://115.49.29.192:35328/bin.sh", "host": "115.49.29.192", "host_ip": "115.49.29.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:47:07 UTC", "discovered_at": "2026-10-12T14:47:07.000Z" }, { "id": 158448, "urlhaus_id": "3949095", "url": "http://123.12.8.15:34927/bin.sh", "host": "123.12.8.15", "host_ip": "123.12.8.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 14:32:15 UTC", "discovered_at": "2026-10-12T14:32:15.000Z" }, { "id": 158449, "urlhaus_id": "3949094", "url": "http://213.5.19.99:13681/i", "host": "213.5.19.99", "host_ip": "213.5.19.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:32:05 UTC", "discovered_at": "2026-10-12T14:32:05.000Z" }, { "id": 158450, "urlhaus_id": "3949093", "url": "http://117.63.188.228:51491/bin.sh", "host": "117.63.188.228", "host_ip": "117.63.188.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 14:23:11 UTC", "discovered_at": "2026-10-12T14:23:11.000Z" }, { "id": 158451, "urlhaus_id": "3949092", "url": "http://115.57.82.253:47965/i", "host": "115.57.82.253", "host_ip": "115.57.82.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:17:07 UTC", "discovered_at": "2026-10-12T14:17:07.000Z" }, { "id": 158452, "urlhaus_id": "3949091", "url": "http://62.60.226.140/files/5279938618/Ha0vowG.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-12 14:05:06 UTC", "discovered_at": "2026-10-12T14:05:06.000Z" }, { "id": 158453, "urlhaus_id": "3949090", "url": "http://42.53.12.33:58009/bin.sh", "host": "42.53.12.33", "host_ip": "42.53.12.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 14:02:07 UTC", "discovered_at": "2026-10-12T14:02:07.000Z" }, { "id": 158455, "urlhaus_id": "3949089", "url": "http://59.96.136.247:47589/i", "host": "59.96.136.247", "host_ip": "59.96.136.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 13:48:16 UTC", "discovered_at": "2026-10-12T13:48:16.000Z" }, { "id": 158454, "urlhaus_id": "3949088", "url": "http://59.96.136.247:47589/bin.sh", "host": "59.96.136.247", "host_ip": "59.96.136.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 13:48:16 UTC", "discovered_at": "2026-10-12T13:48:16.000Z" }, { "id": 158457, "urlhaus_id": "3949087", "url": "http://42.224.88.202:59961/i", "host": "42.224.88.202", "host_ip": "42.224.88.202", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:47:07 UTC", "discovered_at": "2026-10-12T13:47:07.000Z" }, { "id": 158456, "urlhaus_id": "3949086", "url": "http://103.152.100.5:46138/i", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:47:07 UTC", "discovered_at": "2026-10-12T13:47:07.000Z" }, { "id": 158458, "urlhaus_id": "3949085", "url": "http://117.223.140.115:57427/i", "host": "117.223.140.115", "host_ip": "117.223.140.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 13:44:13 UTC", "discovered_at": "2026-10-12T13:44:13.000Z" }, { "id": 158459, "urlhaus_id": "3949084", "url": "http://42.224.120.224:40929/i", "host": "42.224.120.224", "host_ip": "42.224.120.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:32:10 UTC", "discovered_at": "2026-10-12T13:32:10.000Z" }, { "id": 158460, "urlhaus_id": "3949083", "url": "http://42.53.12.33:58009/i", "host": "42.53.12.33", "host_ip": "42.53.12.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:32:08 UTC", "discovered_at": "2026-10-12T13:32:08.000Z" }, { "id": 158462, "urlhaus_id": "3949082", "url": "http://42.233.144.133:42242/bin.sh", "host": "42.233.144.133", "host_ip": "42.233.144.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:32:07 UTC", "discovered_at": "2026-10-12T13:32:07.000Z" }, { "id": 158461, "urlhaus_id": "3949081", "url": "http://42.239.224.109:56903/i", "host": "42.239.224.109", "host_ip": "42.239.224.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:32:07 UTC", "discovered_at": "2026-10-12T13:32:07.000Z" }, { "id": 158463, "urlhaus_id": "3949080", "url": "http://117.223.140.115:57427/bin.sh", "host": "117.223.140.115", "host_ip": "117.223.140.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 13:29:23 UTC", "discovered_at": "2026-10-12T13:29:23.000Z" }, { "id": 158464, "urlhaus_id": "3949079", "url": "https://tms.hazentransferllc.com/GeneralRequirementsV2.aspx_files/saved_resource.html", "host": "tms.hazentransferllc.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:24:09 UTC", "discovered_at": "2026-10-12T13:24:09.000Z" }, { "id": 158465, "urlhaus_id": "3949078", "url": "http://186.149.204.12:37018/bin.sh", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:13 UTC", "discovered_at": "2026-10-12T13:17:13.000Z" }, { "id": 158466, "urlhaus_id": "3949077", "url": "http://186.149.204.12:37018/i", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:12 UTC", "discovered_at": "2026-10-12T13:17:12.000Z" }, { "id": 158468, "urlhaus_id": "3949076", "url": "http://61.54.182.188:33277/i", "host": "61.54.182.188", "host_ip": "61.54.182.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:09 UTC", "discovered_at": "2026-10-12T13:17:09.000Z" }, { "id": 158467, "urlhaus_id": "3949075", "url": "http://115.49.29.192:35328/i", "host": "115.49.29.192", "host_ip": "115.49.29.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:09 UTC", "discovered_at": "2026-10-12T13:17:09.000Z" }, { "id": 158470, "urlhaus_id": "3949074", "url": "http://210.208.104.156:35164/i", "host": "210.208.104.156", "host_ip": "210.208.104.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:07 UTC", "discovered_at": "2026-10-12T13:17:07.000Z" }, { "id": 158469, "urlhaus_id": "3949073", "url": "http://24.54.74.184:58821/i", "host": "24.54.74.184", "host_ip": "24.54.74.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:07 UTC", "discovered_at": "2026-10-12T13:17:07.000Z" }, { "id": 158471, "urlhaus_id": "3949072", "url": "http://103.152.100.5:46138/bin.sh", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:17:06 UTC", "discovered_at": "2026-10-12T13:17:06.000Z" }, { "id": 158473, "urlhaus_id": "3949071", "url": "http://115.50.48.150:34845/i", "host": "115.50.48.150", "host_ip": "115.50.48.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:02:06 UTC", "discovered_at": "2026-10-12T13:02:06.000Z" }, { "id": 158472, "urlhaus_id": "3949070", "url": "http://61.53.140.53:37630/bin.sh", "host": "61.53.140.53", "host_ip": "61.53.140.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 13:02:06 UTC", "discovered_at": "2026-10-12T13:02:06.000Z" }, { "id": 158474, "urlhaus_id": "3949069", "url": "http://210.208.110.4:37963/i", "host": "210.208.110.4", "host_ip": "210.208.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:47:09 UTC", "discovered_at": "2026-10-12T12:47:09.000Z" }, { "id": 158475, "urlhaus_id": "3949068", "url": "http://115.57.82.253:47965/bin.sh", "host": "115.57.82.253", "host_ip": "115.57.82.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:47:08 UTC", "discovered_at": "2026-10-12T12:47:08.000Z" }, { "id": 158477, "urlhaus_id": "3949067", "url": "http://36.89.252.178:52289/i", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:47:07 UTC", "discovered_at": "2026-10-12T12:47:07.000Z" }, { "id": 158476, "urlhaus_id": "3949066", "url": "http://96.246.230.97:37176/i", "host": "96.246.230.97", "host_ip": "96.246.230.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:47:07 UTC", "discovered_at": "2026-10-12T12:47:07.000Z" }, { "id": 158478, "urlhaus_id": "3949065", "url": "http://38.60.179.31:9999/payload.b64", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "deserialization, java, Sliver, tooling, ysoserial", "last_online": null, "first_seen": "2026-10-12 12:43:06 UTC", "discovered_at": "2026-10-12T12:43:06.000Z" }, { "id": 158482, "urlhaus_id": "3949064", "url": "http://38.60.179.31:9999/gen.sh", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2, Sliver, tooling", "last_online": null, "first_seen": "2026-10-12 12:43:05 UTC", "discovered_at": "2026-10-12T12:43:05.000Z" }, { "id": 158481, "urlhaus_id": "3949063", "url": "http://38.60.179.31:9999/oc_listen.py", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2, oob, python, tooling", "last_online": null, "first_seen": "2026-10-12 12:43:05 UTC", "discovered_at": "2026-10-12T12:43:05.000Z" }, { "id": 158480, "urlhaus_id": "3949062", "url": "http://38.60.179.31:9999/gen.rc", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2, Sliver, tooling", "last_online": null, "first_seen": "2026-10-12 12:43:05 UTC", "discovered_at": "2026-10-12T12:43:05.000Z" }, { "id": 158479, "urlhaus_id": "3949061", "url": "http://38.60.179.31:9999/c2.py", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2, python, Sliver, tooling", "last_online": null, "first_seen": "2026-10-12 12:43:05 UTC", "discovered_at": "2026-10-12T12:43:05.000Z" }, { "id": 158483, "urlhaus_id": "3949060", "url": "http://217.60.242.38/setup.sh", "host": "217.60.242.38", "host_ip": "217.60.242.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-12 12:37:20 UTC", "discovered_at": "2026-10-12T12:37:20.000Z" }, { "id": 158484, "urlhaus_id": "3949059", "url": "http://123.132.181.11:43546/bin.sh", "host": "123.132.181.11", "host_ip": "123.132.181.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 12:37:18 UTC", "discovered_at": "2026-10-12T12:37:18.000Z" }, { "id": 158485, "urlhaus_id": "3949058", "url": "http://38.60.179.31:9999/payload.bin", "host": "38.60.179.31", "host_ip": "38.60.179.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CommonsCollections6, deserialization, exploit, java, RCE, reverse-shell, Sliver, ysoserial", "last_online": null, "first_seen": "2026-10-12 12:37:07 UTC", "discovered_at": "2026-10-12T12:37:07.000Z" }, { "id": 158486, "urlhaus_id": "3949057", "url": "http://115.52.188.61:54082/i", "host": "115.52.188.61", "host_ip": "115.52.188.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:32:07 UTC", "discovered_at": "2026-10-12T12:32:07.000Z" }, { "id": 158487, "urlhaus_id": "3949056", "url": "http://42.227.36.195:56580/i", "host": "42.227.36.195", "host_ip": "42.227.36.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 12:22:14 UTC", "discovered_at": "2026-10-12T12:22:14.000Z" }, { "id": 158488, "urlhaus_id": "3949055", "url": "http://123.11.2.73:47057/i", "host": "123.11.2.73", "host_ip": "123.11.2.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 12:20:23 UTC", "discovered_at": "2026-10-12T12:20:23.000Z" }, { "id": 158489, "urlhaus_id": "3949054", "url": "http://115.52.199.227:44946/i", "host": "115.52.199.227", "host_ip": "115.52.199.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:17:08 UTC", "discovered_at": "2026-10-12T12:17:08.000Z" }, { "id": 158490, "urlhaus_id": "3949053", "url": "http://61.53.150.241:45354/bin.sh", "host": "61.53.150.241", "host_ip": "61.53.150.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:17:07 UTC", "discovered_at": "2026-10-12T12:17:07.000Z" }, { "id": 158491, "urlhaus_id": "3949052", "url": "http://196.189.132.118:53982/i", "host": "196.189.132.118", "host_ip": "196.189.132.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 12:10:19 UTC", "discovered_at": "2026-10-12T12:10:19.000Z" }, { "id": 158492, "urlhaus_id": "3949051", "url": "http://222.246.23.235:60522/i", "host": "222.246.23.235", "host_ip": "222.246.23.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 12:02:09 UTC", "discovered_at": "2026-10-12T12:02:09.000Z" }, { "id": 158493, "urlhaus_id": "3949050", "url": "http://123.11.2.73:47057/bin.sh", "host": "123.11.2.73", "host_ip": "123.11.2.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 12:00:15 UTC", "discovered_at": "2026-10-12T12:00:15.000Z" }, { "id": 158494, "urlhaus_id": "3949049", "url": "http://196.189.132.118:53982/bin.sh", "host": "196.189.132.118", "host_ip": "196.189.132.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 11:53:20 UTC", "discovered_at": "2026-10-12T11:53:20.000Z" }, { "id": 158495, "urlhaus_id": "3949048", "url": "http://202.166.165.60:33281/i", "host": "202.166.165.60", "host_ip": "202.166.165.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:48:06 UTC", "discovered_at": "2026-10-12T11:48:06.000Z" }, { "id": 158497, "urlhaus_id": "3949047", "url": "http://210.208.110.4:37963/bin.sh", "host": "210.208.110.4", "host_ip": "210.208.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:47:08 UTC", "discovered_at": "2026-10-12T11:47:08.000Z" }, { "id": 158496, "urlhaus_id": "3949046", "url": "http://219.155.203.127:53694/i", "host": "219.155.203.127", "host_ip": "219.155.203.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:47:08 UTC", "discovered_at": "2026-10-12T11:47:08.000Z" }, { "id": 158499, "urlhaus_id": "3949045", "url": "http://210.208.110.21:53906/bin.sh", "host": "210.208.110.21", "host_ip": "210.208.110.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:47:07 UTC", "discovered_at": "2026-10-12T11:47:07.000Z" }, { "id": 158498, "urlhaus_id": "3949044", "url": "http://202.110.28.103:33133/bin.sh", "host": "202.110.28.103", "host_ip": "202.110.28.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:47:07 UTC", "discovered_at": "2026-10-12T11:47:07.000Z" }, { "id": 158500, "urlhaus_id": "3949043", "url": "http://27.220.121.135:47097/i", "host": "27.220.121.135", "host_ip": "27.220.121.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 11:36:19 UTC", "discovered_at": "2026-10-12T11:36:19.000Z" }, { "id": 158501, "urlhaus_id": "3949042", "url": "http://210.208.111.26:47927/i", "host": "210.208.111.26", "host_ip": "210.208.111.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:32:09 UTC", "discovered_at": "2026-10-12T11:32:09.000Z" }, { "id": 158502, "urlhaus_id": "3949041", "url": "http://221.199.194.186:55579/i", "host": "221.199.194.186", "host_ip": "221.199.194.186", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:32:07 UTC", "discovered_at": "2026-10-12T11:32:07.000Z" }, { "id": 158503, "urlhaus_id": "3949040", "url": "http://27.44.145.53:38129/i", "host": "27.44.145.53", "host_ip": "27.44.145.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 11:31:19 UTC", "discovered_at": "2026-10-12T11:31:19.000Z" }, { "id": 158504, "urlhaus_id": "3949039", "url": "http://175.174.40.98:55253/bin.sh", "host": "175.174.40.98", "host_ip": "175.174.40.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 11:30:24 UTC", "discovered_at": "2026-10-12T11:30:24.000Z" }, { "id": 158505, "urlhaus_id": "3949038", "url": "http://123.5.125.158:49342/i", "host": "123.5.125.158", "host_ip": "123.5.125.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 11:22:20 UTC", "discovered_at": "2026-10-12T11:22:20.000Z" }, { "id": 158506, "urlhaus_id": "3949037", "url": "http://42.177.100.35:47417/i", "host": "42.177.100.35", "host_ip": "42.177.100.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:17:06 UTC", "discovered_at": "2026-10-12T11:17:06.000Z" }, { "id": 158507, "urlhaus_id": "3949036", "url": "http://60.211.46.158:57185/i", "host": "60.211.46.158", "host_ip": "60.211.46.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:02:07 UTC", "discovered_at": "2026-10-12T11:02:07.000Z" }, { "id": 158511, "urlhaus_id": "3949035", "url": "http://222.141.73.146:57830/bin.sh", "host": "222.141.73.146", "host_ip": "222.141.73.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:02:06 UTC", "discovered_at": "2026-10-12T11:02:06.000Z" }, { "id": 158510, "urlhaus_id": "3949034", "url": "http://115.58.90.151:44550/bin.sh", "host": "115.58.90.151", "host_ip": "115.58.90.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:02:06 UTC", "discovered_at": "2026-10-12T11:02:06.000Z" }, { "id": 158509, "urlhaus_id": "3949033", "url": "http://221.202.215.132:46445/bin.sh", "host": "221.202.215.132", "host_ip": "221.202.215.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:02:06 UTC", "discovered_at": "2026-10-12T11:02:06.000Z" }, { "id": 158508, "urlhaus_id": "3949032", "url": "http://60.23.238.24:56754/i", "host": "60.23.238.24", "host_ip": "60.23.238.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 11:02:06 UTC", "discovered_at": "2026-10-12T11:02:06.000Z" }, { "id": 158512, "urlhaus_id": "3949031", "url": "http://123.5.125.158:49342/bin.sh", "host": "123.5.125.158", "host_ip": "123.5.125.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 10:55:11 UTC", "discovered_at": "2026-10-12T10:55:11.000Z" }, { "id": 158513, "urlhaus_id": "3949030", "url": "http://42.230.218.97:45408/bin.sh", "host": "42.230.218.97", "host_ip": "42.230.218.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 10:47:28 UTC", "discovered_at": "2026-10-12T10:47:28.000Z" }, { "id": 158514, "urlhaus_id": "3949029", "url": "http://210.208.110.42:48935/bin.sh", "host": "210.208.110.42", "host_ip": "210.208.110.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:47:08 UTC", "discovered_at": "2026-10-12T10:47:08.000Z" }, { "id": 158517, "urlhaus_id": "3949028", "url": "http://59.96.142.225:39848/bin.sh", "host": "59.96.142.225", "host_ip": "59.96.142.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:47:07 UTC", "discovered_at": "2026-10-12T10:47:07.000Z" }, { "id": 158516, "urlhaus_id": "3949027", "url": "http://210.97.100.192:49378/i", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:47:07 UTC", "discovered_at": "2026-10-12T10:47:07.000Z" }, { "id": 158515, "urlhaus_id": "3949026", "url": "http://115.62.157.255:57569/i", "host": "115.62.157.255", "host_ip": "115.62.157.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:47:07 UTC", "discovered_at": "2026-10-12T10:47:07.000Z" }, { "id": 158518, "urlhaus_id": "3949025", "url": "http://210.208.116.107:36015/i", "host": "210.208.116.107", "host_ip": "210.208.116.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:29 UTC", "discovered_at": "2026-10-12T10:32:29.000Z" }, { "id": 158524, "urlhaus_id": "3949024", "url": "http://210.97.100.192:49378/bin.sh", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158523, "urlhaus_id": "3949023", "url": "http://42.228.218.9:58691/bin.sh", "host": "42.228.218.9", "host_ip": "42.228.218.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158522, "urlhaus_id": "3949022", "url": "http://190.109.227.192:44463/i", "host": "190.109.227.192", "host_ip": "190.109.227.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158521, "urlhaus_id": "3949021", "url": "http://196.189.68.239:57241/i", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158520, "urlhaus_id": "3949020", "url": "http://202.166.165.60:33281/bin.sh", "host": "202.166.165.60", "host_ip": "202.166.165.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158519, "urlhaus_id": "3949019", "url": "http://196.189.68.239:57241/bin.sh", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:07 UTC", "discovered_at": "2026-10-12T10:32:07.000Z" }, { "id": 158525, "urlhaus_id": "3949018", "url": "http://185.141.233.178:48118/i", "host": "185.141.233.178", "host_ip": "185.141.233.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:32:06 UTC", "discovered_at": "2026-10-12T10:32:06.000Z" }, { "id": 158526, "urlhaus_id": "3949017", "url": "http://27.197.62.42:53563/i", "host": "27.197.62.42", "host_ip": "27.197.62.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 10:26:16 UTC", "discovered_at": "2026-10-12T10:26:16.000Z" }, { "id": 158527, "urlhaus_id": "3949016", "url": "http://42.233.144.133:42242/i", "host": "42.233.144.133", "host_ip": "42.233.144.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 10:17:07 UTC", "discovered_at": "2026-10-12T10:17:07.000Z" }, { "id": 158528, "urlhaus_id": "3949015", "url": "https://cdn.discordapp.com/attachments/1543991927924457544/1559131740604465222/bundle_5.zip?ex=6acdf616&is=6acca496&hm=b7bfd42a898f86d57d1892a97e2f65b4798ac00262877a86839f26fe4d32c22d&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-12 09:57:37 UTC", "discovered_at": "2026-10-12T09:57:37.000Z" }, { "id": 158529, "urlhaus_id": "3949014", "url": "http://210.208.111.220:59920/i", "host": "210.208.111.220", "host_ip": "210.208.111.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:47:07 UTC", "discovered_at": "2026-10-12T09:47:07.000Z" }, { "id": 158531, "urlhaus_id": "3949013", "url": "http://210.208.110.221:43583/i", "host": "210.208.110.221", "host_ip": "210.208.110.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:47:06 UTC", "discovered_at": "2026-10-12T09:47:06.000Z" }, { "id": 158530, "urlhaus_id": "3949012", "url": "http://220.198.113.126:38197/i", "host": "220.198.113.126", "host_ip": "220.198.113.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:47:06 UTC", "discovered_at": "2026-10-12T09:47:06.000Z" }, { "id": 158532, "urlhaus_id": "3949011", "url": "http://210.208.110.172:59801/i", "host": "210.208.110.172", "host_ip": "210.208.110.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:47:05 UTC", "discovered_at": "2026-10-12T09:47:05.000Z" }, { "id": 158533, "urlhaus_id": "3949010", "url": "http://185.141.233.178:48118/bin.sh", "host": "185.141.233.178", "host_ip": "185.141.233.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:47:04 UTC", "discovered_at": "2026-10-12T09:47:04.000Z" }, { "id": 158538, "urlhaus_id": "3949009", "url": "http://94.154.43.137/m68k", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:41:19 UTC", "discovered_at": "2026-10-12T09:41:19.000Z" }, { "id": 158537, "urlhaus_id": "3949008", "url": "http://94.154.43.137/mips64", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:41:19 UTC", "discovered_at": "2026-10-12T09:41:19.000Z" }, { "id": 158536, "urlhaus_id": "3949007", "url": "http://94.154.43.137/arm7", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:41:19 UTC", "discovered_at": "2026-10-12T09:41:19.000Z" }, { "id": 158535, "urlhaus_id": "3949006", "url": "http://94.154.43.137/mipsel", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:41:19 UTC", "discovered_at": "2026-10-12T09:41:19.000Z" }, { "id": 158534, "urlhaus_id": "3949005", "url": "http://94.154.43.137/arm5", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:41:19 UTC", "discovered_at": "2026-10-12T09:41:19.000Z" }, { "id": 158539, "urlhaus_id": "3949004", "url": "http://176.65.139.76/bins/m68k", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:40:13 UTC", "discovered_at": "2026-10-12T09:40:13.000Z" }, { "id": 158541, "urlhaus_id": "3949003", "url": "http://176.65.139.76/bins/mips", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:17 UTC", "discovered_at": "2026-10-12T09:39:17.000Z" }, { "id": 158540, "urlhaus_id": "3949002", "url": "http://176.65.139.76/bins/sh4", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:17 UTC", "discovered_at": "2026-10-12T09:39:17.000Z" }, { "id": 158542, "urlhaus_id": "3949001", "url": "http://176.65.139.76/bins/x86_64", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:09 UTC", "discovered_at": "2026-10-12T09:39:09.000Z" }, { "id": 158549, "urlhaus_id": "3949000", "url": "http://176.65.139.76/bins/arm6", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158548, "urlhaus_id": "3948999", "url": "http://94.154.43.137/x86_64", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158547, "urlhaus_id": "3948998", "url": "http://94.154.43.137/ppc", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158546, "urlhaus_id": "3948997", "url": "http://176.65.139.76/bins/arm5", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158545, "urlhaus_id": "3948996", "url": "http://94.154.43.137/arm6", "host": "94.154.43.137", "host_ip": "94.154.43.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158544, "urlhaus_id": "3948995", "url": "http://176.65.139.76/bins/arm7", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158543, "urlhaus_id": "3948994", "url": "http://176.65.139.76/bins/arm", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-12 09:39:08 UTC", "discovered_at": "2026-10-12T09:39:08.000Z" }, { "id": 158550, "urlhaus_id": "3948993", "url": "http://221.202.107.229:58448/i", "host": "221.202.107.229", "host_ip": "221.202.107.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:33:20 UTC", "discovered_at": "2026-10-12T09:33:20.000Z" }, { "id": 158551, "urlhaus_id": "3948992", "url": "http://61.52.216.45:48028/i", "host": "61.52.216.45", "host_ip": "61.52.216.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:33:07 UTC", "discovered_at": "2026-10-12T09:33:07.000Z" }, { "id": 158554, "urlhaus_id": "3948991", "url": "http://61.52.110.184:40461/i", "host": "61.52.110.184", "host_ip": "61.52.110.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:32:07 UTC", "discovered_at": "2026-10-12T09:32:07.000Z" }, { "id": 158553, "urlhaus_id": "3948990", "url": "http://61.52.110.184:40461/bin.sh", "host": "61.52.110.184", "host_ip": "61.52.110.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:32:07 UTC", "discovered_at": "2026-10-12T09:32:07.000Z" }, { "id": 158552, "urlhaus_id": "3948989", "url": "http://91.92.242.236/files-129312398/files/file_eba22b93c4d912e0.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "9d2ca3, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-12 09:32:07 UTC", "discovered_at": "2026-10-12T09:32:07.000Z" }, { "id": 158555, "urlhaus_id": "3948988", "url": "http://175.160.112.104:58191/i", "host": "175.160.112.104", "host_ip": "175.160.112.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 09:22:21 UTC", "discovered_at": "2026-10-12T09:22:21.000Z" }, { "id": 158556, "urlhaus_id": "3948987", "url": "http://222.139.67.114:59134/i", "host": "222.139.67.114", "host_ip": "222.139.67.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 09:19:17 UTC", "discovered_at": "2026-10-12T09:19:17.000Z" }, { "id": 158557, "urlhaus_id": "3948986", "url": "http://61.53.88.238:39682/i", "host": "61.53.88.238", "host_ip": "61.53.88.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 09:05:17 UTC", "discovered_at": "2026-10-12T09:05:17.000Z" }, { "id": 158558, "urlhaus_id": "3948985", "url": "http://221.202.215.132:46445/i", "host": "221.202.215.132", "host_ip": "221.202.215.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 09:02:08 UTC", "discovered_at": "2026-10-12T09:02:08.000Z" }, { "id": 158559, "urlhaus_id": "3948984", "url": "http://91.92.242.236/files-129312398/files/file_c1972017151d3297.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-12 08:59:08 UTC", "discovered_at": "2026-10-12T08:59:08.000Z" }, { "id": 158560, "urlhaus_id": "3948983", "url": "https://www.tmcksa.com/abex2/dIcfipS.txt", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, Formbook, rev-base64-loader", "last_online": null, "first_seen": "2026-10-12 08:53:07 UTC", "discovered_at": "2026-10-12T08:53:07.000Z" }, { "id": 158562, "urlhaus_id": "3948982", "url": "http://182.119.197.98:37791/bin.sh", "host": "182.119.197.98", "host_ip": "182.119.197.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:52:23 UTC", "discovered_at": "2026-10-12T08:52:23.000Z" }, { "id": 158561, "urlhaus_id": "3948981", "url": "http://222.142.204.162:37228/bin.sh", "host": "222.142.204.162", "host_ip": "222.142.204.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:52:23 UTC", "discovered_at": "2026-10-12T08:52:23.000Z" }, { "id": 158564, "urlhaus_id": "3948980", "url": "http://91.92.242.236/files-129312398/files/file_f44993b0dff159ea.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-12 08:52:06 UTC", "discovered_at": "2026-10-12T08:52:06.000Z" }, { "id": 158563, "urlhaus_id": "3948979", "url": "https://vejnqoajk1soxy1x.public.blob.vercel-storage.com/OpenWordDocument.ps1", "host": "vejnqoajk1soxy1x.public.blob.vercel-storage.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:52:06 UTC", "discovered_at": "2026-10-12T08:52:06.000Z" }, { "id": 158565, "urlhaus_id": "3948978", "url": "http://124.129.119.149:38697/i", "host": "124.129.119.149", "host_ip": "124.129.119.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:36:06 UTC", "discovered_at": "2026-10-12T08:36:06.000Z" }, { "id": 158566, "urlhaus_id": "3948977", "url": "http://124.129.119.149:38697/bin.sh", "host": "124.129.119.149", "host_ip": "124.129.119.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:34:18 UTC", "discovered_at": "2026-10-12T08:34:18.000Z" }, { "id": 158568, "urlhaus_id": "3948976", "url": "https://sqpengg.com/vi1xwsm/trbhoun/wzyergu/cc/secured_stub1.ps1", "host": "sqpengg.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-12 08:24:10 UTC", "discovered_at": "2026-10-12T08:24:10.000Z" }, { "id": 158567, "urlhaus_id": "3948975", "url": "https://sedrezltd.best/bobbi/secured_stub.ps1", "host": "sedrezltd.best", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-12 08:24:10 UTC", "discovered_at": "2026-10-12T08:24:10.000Z" }, { "id": 158569, "urlhaus_id": "3948974", "url": "http://125.40.158.82:42912/bin.sh", "host": "125.40.158.82", "host_ip": "125.40.158.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:23:16 UTC", "discovered_at": "2026-10-12T08:23:16.000Z" }, { "id": 158570, "urlhaus_id": "3948973", "url": "http://123.173.109.117:49424/i", "host": "123.173.109.117", "host_ip": "123.173.109.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 08:22:19 UTC", "discovered_at": "2026-10-12T08:22:19.000Z" }, { "id": 158571, "urlhaus_id": "3948972", "url": "https://sedrezltd.best/ceo/secured_stub.ps1", "host": "sedrezltd.best", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-12 08:20:09 UTC", "discovered_at": "2026-10-12T08:20:09.000Z" }, { "id": 158572, "urlhaus_id": "3948971", "url": "http://23.132.164.72:8888/file/img_151712.png", "host": "23.132.164.72", "host_ip": "23.132.164.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego", "last_online": null, "first_seen": "2026-10-12 08:19:06 UTC", "discovered_at": "2026-10-12T08:19:06.000Z" }, { "id": 158573, "urlhaus_id": "3948970", "url": "https://activegrp.co.za/img_160619.png", "host": "activegrp.co.za", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-12 08:18:09 UTC", "discovered_at": "2026-10-12T08:18:09.000Z" }, { "id": 158574, "urlhaus_id": "3948969", "url": "https://rough-truth-e072.publicftpresend.workers.dev/yoixlfdae", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-12 08:18:07 UTC", "discovered_at": "2026-10-12T08:18:07.000Z" }, { "id": 158575, "urlhaus_id": "3948968", "url": "http://182.117.155.139:35245/i", "host": "182.117.155.139", "host_ip": "182.117.155.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:17:07 UTC", "discovered_at": "2026-10-12T08:17:07.000Z" }, { "id": 158576, "urlhaus_id": "3948967", "url": "https://samul.elblag.pl/img_190228.png", "host": "samul.elblag.pl", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, stego", "last_online": null, "first_seen": "2026-10-12 08:16:07 UTC", "discovered_at": "2026-10-12T08:16:07.000Z" }, { "id": 158577, "urlhaus_id": "3948966", "url": "http://147.45.116.134/xppimg_040306.png", "host": "147.45.116.134", "host_ip": "147.45.116.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-12 08:14:12 UTC", "discovered_at": "2026-10-12T08:14:12.000Z" }, { "id": 158578, "urlhaus_id": "3948965", "url": "http://123.10.203.32:43613/bin.sh", "host": "123.10.203.32", "host_ip": "123.10.203.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 08:10:11 UTC", "discovered_at": "2026-10-12T08:10:11.000Z" }, { "id": 158579, "urlhaus_id": "3948964", "url": "https://summitcapitalpatners.ink/img_063332.png", "host": "summitcapitalpatners.ink", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Formbook, stego", "last_online": null, "first_seen": "2026-10-12 08:10:10 UTC", "discovered_at": "2026-10-12T08:10:10.000Z" }, { "id": 158580, "urlhaus_id": "3948963", "url": "https://rough-truth-e072.publicftpresend.workers.dev/lllahvot", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, Formbook", "last_online": null, "first_seen": "2026-10-12 08:10:08 UTC", "discovered_at": "2026-10-12T08:10:08.000Z" }, { "id": 158581, "urlhaus_id": "3948962", "url": "https://twejamaica.org/huUMsMsK/secured_stub.ps1", "host": "twejamaica.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-12 08:09:30 UTC", "discovered_at": "2026-10-12T08:09:30.000Z" }, { "id": 158582, "urlhaus_id": "3948961", "url": "https://www.beinke-aufzuege.de/components/com_media/fkqabmp/ntxqre1/edfwcgi/mmmsecured_stub.ps1", "host": "www.beinke-aufzuege.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-12 08:09:06 UTC", "discovered_at": "2026-10-12T08:09:06.000Z" }, { "id": 158583, "urlhaus_id": "3948960", "url": "https://livinginpurpose.co.za/.well-known/pxup.exe", "host": "livinginpurpose.co.za", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, xworm", "last_online": null, "first_seen": "2026-10-12 08:04:15 UTC", "discovered_at": "2026-10-12T08:04:15.000Z" }, { "id": 158584, "urlhaus_id": "3948959", "url": "http://112.247.84.180:44529/i", "host": "112.247.84.180", "host_ip": "112.247.84.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:25 UTC", "discovered_at": "2026-10-12T08:02:25.000Z" }, { "id": 158586, "urlhaus_id": "3948958", "url": "http://123.189.205.161:41467/i", "host": "123.189.205.161", "host_ip": "123.189.205.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:08 UTC", "discovered_at": "2026-10-12T08:02:08.000Z" }, { "id": 158585, "urlhaus_id": "3948957", "url": "http://111.179.174.242:56237/i", "host": "111.179.174.242", "host_ip": "111.179.174.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:08 UTC", "discovered_at": "2026-10-12T08:02:08.000Z" }, { "id": 158590, "urlhaus_id": "3948956", "url": "http://39.74.101.68:39326/i", "host": "39.74.101.68", "host_ip": "39.74.101.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:07 UTC", "discovered_at": "2026-10-12T08:02:07.000Z" }, { "id": 158589, "urlhaus_id": "3948955", "url": "http://110.136.10.85:46168/i", "host": "110.136.10.85", "host_ip": "110.136.10.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:07 UTC", "discovered_at": "2026-10-12T08:02:07.000Z" }, { "id": 158588, "urlhaus_id": "3948954", "url": "http://27.206.196.202:60367/bin.sh", "host": "27.206.196.202", "host_ip": "27.206.196.202", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:07 UTC", "discovered_at": "2026-10-12T08:02:07.000Z" }, { "id": 158587, "urlhaus_id": "3948953", "url": "http://39.88.129.230:57094/bin.sh", "host": "39.88.129.230", "host_ip": "39.88.129.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 08:02:07 UTC", "discovered_at": "2026-10-12T08:02:07.000Z" }, { "id": 158591, "urlhaus_id": "3948952", "url": "http://123.173.109.117:49424/bin.sh", "host": "123.173.109.117", "host_ip": "123.173.109.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 08:01:17 UTC", "discovered_at": "2026-10-12T08:01:17.000Z" }, { "id": 158592, "urlhaus_id": "3948951", "url": "http://115.62.178.98:43960/i", "host": "115.62.178.98", "host_ip": "115.62.178.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 07:54:26 UTC", "discovered_at": "2026-10-12T07:54:26.000Z" }, { "id": 158593, "urlhaus_id": "3948950", "url": "https://ibidasjohnnraplc.com/system.exe", "host": "ibidasjohnnraplc.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exse", "last_online": null, "first_seen": "2026-10-12 07:52:09 UTC", "discovered_at": "2026-10-12T07:52:09.000Z" }, { "id": 158594, "urlhaus_id": "3948949", "url": "http://31.56.209.73:32461/b/kal64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-12 07:46:15 UTC", "discovered_at": "2026-10-12T07:46:15.000Z" }, { "id": 158596, "urlhaus_id": "3948948", "url": "http://31.56.209.73:32461/b/amd64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-12 07:46:13 UTC", "discovered_at": "2026-10-12T07:46:13.000Z" }, { "id": 158595, "urlhaus_id": "3948947", "url": "http://31.56.209.86/x86_64", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-12 07:46:13 UTC", "discovered_at": "2026-10-12T07:46:13.000Z" }, { "id": 158597, "urlhaus_id": "3948946", "url": "http://31.56.209.73:32461/b/kswpad", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-12 07:46:12 UTC", "discovered_at": "2026-10-12T07:46:12.000Z" }, { "id": 158598, "urlhaus_id": "3948945", "url": "http://31.56.209.86/st_x86_64", "host": "31.56.209.86", "host_ip": "31.56.209.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-12 07:46:10 UTC", "discovered_at": "2026-10-12T07:46:10.000Z" }, { "id": 158599, "urlhaus_id": "3948944", "url": "http://42.55.12.91:57818/bin.sh", "host": "42.55.12.91", "host_ip": "42.55.12.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 07:39:19 UTC", "discovered_at": "2026-10-12T07:39:19.000Z" }, { "id": 158600, "urlhaus_id": "3948943", "url": "https://internetlouisiana.com/curl/42403afd2906a8f3062e3ddb19b28572d88db9ae74b147319383bd280c6bec0a", "host": "internetlouisiana.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, macOS, MacSync, zsh", "last_online": null, "first_seen": "2026-10-12 07:32:11 UTC", "discovered_at": "2026-10-12T07:32:11.000Z" }, { "id": 158601, "urlhaus_id": "3948942", "url": "http://41.216.227.122:51974/i", "host": "41.216.227.122", "host_ip": "41.216.227.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:32:09 UTC", "discovered_at": "2026-10-12T07:32:09.000Z" }, { "id": 158603, "urlhaus_id": "3948941", "url": "http://39.88.129.230:57094/i", "host": "39.88.129.230", "host_ip": "39.88.129.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:32:07 UTC", "discovered_at": "2026-10-12T07:32:07.000Z" }, { "id": 158602, "urlhaus_id": "3948940", "url": "http://103.140.87.105:50331/i", "host": "103.140.87.105", "host_ip": "103.140.87.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:32:07 UTC", "discovered_at": "2026-10-12T07:32:07.000Z" }, { "id": 158604, "urlhaus_id": "3948939", "url": "http://123.153.38.114:48247/bin.sh", "host": "123.153.38.114", "host_ip": "123.153.38.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 07:29:18 UTC", "discovered_at": "2026-10-12T07:29:18.000Z" }, { "id": 158605, "urlhaus_id": "3948938", "url": "https://drive.google.com/uc?export=download&id=1BAlUSCPNZCeMy4RL5mAJ3YnfYXKrSM2L", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-12 07:29:09 UTC", "discovered_at": "2026-10-12T07:29:09.000Z" }, { "id": 158608, "urlhaus_id": "3948937", "url": "https://briannacorporation.com/manager/MpcZsNiyLyPAfar30.bin", "host": "briannacorporation.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-12 07:29:08 UTC", "discovered_at": "2026-10-12T07:29:08.000Z" }, { "id": 158607, "urlhaus_id": "3948936", "url": "https://briannacorporation.com/manager/Equiradial.xsn", "host": "briannacorporation.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-12 07:29:08 UTC", "discovered_at": "2026-10-12T07:29:08.000Z" }, { "id": 158606, "urlhaus_id": "3948935", "url": "https://drive.google.com/uc?export=download&id=1l7z_xcVoPUuFUtTXIRSucUuKWe-rnwmw", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-12 07:29:08 UTC", "discovered_at": "2026-10-12T07:29:08.000Z" }, { "id": 158609, "urlhaus_id": "3948934", "url": "http://109.123.243.121/mipsel", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:28:43 UTC", "discovered_at": "2026-10-12T07:28:43.000Z" }, { "id": 158610, "urlhaus_id": "3948933", "url": "http://109.123.243.121/x86_64", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:28:34 UTC", "discovered_at": "2026-10-12T07:28:34.000Z" }, { "id": 158611, "urlhaus_id": "3948932", "url": "http://109.123.243.121/armv6l", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:28:20 UTC", "discovered_at": "2026-10-12T07:28:20.000Z" }, { "id": 158612, "urlhaus_id": "3948931", "url": "http://109.123.243.121/armv7l", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:28:17 UTC", "discovered_at": "2026-10-12T07:28:17.000Z" }, { "id": 158613, "urlhaus_id": "3948930", "url": "http://109.123.243.121/armv5l", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:28:04 UTC", "discovered_at": "2026-10-12T07:28:04.000Z" }, { "id": 158614, "urlhaus_id": "3948929", "url": "http://109.123.243.121/ppc64", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:26:06 UTC", "discovered_at": "2026-10-12T07:26:06.000Z" }, { "id": 158615, "urlhaus_id": "3948928", "url": "http://109.123.243.121/mips", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:23:57 UTC", "discovered_at": "2026-10-12T07:23:57.000Z" }, { "id": 158616, "urlhaus_id": "3948927", "url": "http://109.123.243.121/i686", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:23:18 UTC", "discovered_at": "2026-10-12T07:23:18.000Z" }, { "id": 158630, "urlhaus_id": "3948926", "url": "http://45.198.224.34/snype.armv5l", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158629, "urlhaus_id": "3948925", "url": "http://45.198.224.34/snype.i586", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158628, "urlhaus_id": "3948924", "url": "http://45.198.224.34/snype.arm5", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158627, "urlhaus_id": "3948923", "url": "http://45.198.224.34/snype.armv4l", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158626, "urlhaus_id": "3948922", "url": "http://45.198.224.34/snype.sparc", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158625, "urlhaus_id": "3948921", "url": "http://45.198.224.34/snype.armv7l", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158624, "urlhaus_id": "3948920", "url": "http://45.198.224.34/snype.i686", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158623, "urlhaus_id": "3948919", "url": "http://45.198.224.34/snype.m68k", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158622, "urlhaus_id": "3948918", "url": "http://45.198.224.34/snype.armv6l", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158621, "urlhaus_id": "3948917", "url": "http://45.198.224.34/snype.arm6", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158620, "urlhaus_id": "3948916", "url": "http://45.198.224.34/snype.arm4", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158619, "urlhaus_id": "3948915", "url": "http://45.198.224.34/snype.sh4", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158618, "urlhaus_id": "3948914", "url": "http://45.198.224.34/snype.mipsel", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158617, "urlhaus_id": "3948913", "url": "http://45.198.224.34/snype.powerpc", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:10 UTC", "discovered_at": "2026-10-12T07:21:10.000Z" }, { "id": 158631, "urlhaus_id": "3948912", "url": "http://45.198.224.34/snype.x86_64", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:09 UTC", "discovered_at": "2026-10-12T07:21:09.000Z" }, { "id": 158632, "urlhaus_id": "3948911", "url": "http://45.153.34.108/bins/Hilix.arm7", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:07 UTC", "discovered_at": "2026-10-12T07:21:07.000Z" }, { "id": 158633, "urlhaus_id": "3948910", "url": "https://threejrev.com/r", "host": "threejrev.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, stager", "last_online": null, "first_seen": "2026-10-12 07:21:06 UTC", "discovered_at": "2026-10-12T07:21:06.000Z" }, { "id": 158638, "urlhaus_id": "3948909", "url": "http://45.153.34.108/bins/Hilix.arm6", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:05 UTC", "discovered_at": "2026-10-12T07:21:05.000Z" }, { "id": 158637, "urlhaus_id": "3948908", "url": "http://45.153.34.108/bins/Hilix.ppc", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:05 UTC", "discovered_at": "2026-10-12T07:21:05.000Z" }, { "id": 158636, "urlhaus_id": "3948907", "url": "http://45.153.34.108/bins/Hilix.sh4", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:05 UTC", "discovered_at": "2026-10-12T07:21:05.000Z" }, { "id": 158635, "urlhaus_id": "3948906", "url": "http://45.153.34.108/bins/Hilix.arm4", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:05 UTC", "discovered_at": "2026-10-12T07:21:05.000Z" }, { "id": 158634, "urlhaus_id": "3948905", "url": "http://45.153.34.108/bins/Hilix.m68k", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:21:05 UTC", "discovered_at": "2026-10-12T07:21:05.000Z" }, { "id": 158639, "urlhaus_id": "3948904", "url": "https://threejrev.com/g.php", "host": "threejrev.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, dropper", "last_online": null, "first_seen": "2026-10-12 07:20:34 UTC", "discovered_at": "2026-10-12T07:20:34.000Z" }, { "id": 158640, "urlhaus_id": "3948903", "url": "http://45.198.224.34/snype.ppc", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 07:20:32 UTC", "discovered_at": "2026-10-12T07:20:32.000Z" }, { "id": 158645, "urlhaus_id": "3948902", "url": "https://cdn.discordapp.com/attachments/1558949934496219279/1558950293205418097/bundle.zip?ex=6acd4d19&is=6acbfb99&hm=42ce4727da2ac86a08e5ed52faa83ac9be63272c713455d3b5d65592b343ee3d&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-12 07:20:31 UTC", "discovered_at": "2026-10-12T07:20:31.000Z" }, { "id": 158644, "urlhaus_id": "3948901", "url": "http://138.124.59.179/hb_x86", "host": "138.124.59.179", "host_ip": "138.124.59.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "138-124-59-179, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-12 07:20:31 UTC", "discovered_at": "2026-10-12T07:20:31.000Z" }, { "id": 158643, "urlhaus_id": "3948900", "url": "http://138.124.59.179/hb_x86_64", "host": "138.124.59.179", "host_ip": "138.124.59.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "138-124-59-179, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-12 07:20:31 UTC", "discovered_at": "2026-10-12T07:20:31.000Z" }, { "id": 158642, "urlhaus_id": "3948899", "url": "http://138.124.59.179/hb_arm", "host": "138.124.59.179", "host_ip": "138.124.59.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "138-124-59-179, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-12 07:20:31 UTC", "discovered_at": "2026-10-12T07:20:31.000Z" }, { "id": 158641, "urlhaus_id": "3948898", "url": "http://45.198.224.34/snype.mpsl", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 07:20:31 UTC", "discovered_at": "2026-10-12T07:20:31.000Z" }, { "id": 158648, "urlhaus_id": "3948897", "url": "http://45.198.224.34/snype.mips", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 07:20:30 UTC", "discovered_at": "2026-10-12T07:20:30.000Z" }, { "id": 158647, "urlhaus_id": "3948896", "url": "http://45.198.224.34/snype.x86", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 07:20:30 UTC", "discovered_at": "2026-10-12T07:20:30.000Z" }, { "id": 158646, "urlhaus_id": "3948895", "url": "http://45.198.224.34/snype.sh", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "downloader, sh", "last_online": null, "first_seen": "2026-10-12 07:20:30 UTC", "discovered_at": "2026-10-12T07:20:30.000Z" }, { "id": 158649, "urlhaus_id": "3948894", "url": "http://27.36.243.82:43173/bin.sh", "host": "27.36.243.82", "host_ip": "27.36.243.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-12 07:20:28 UTC", "discovered_at": "2026-10-12T07:20:28.000Z" }, { "id": 158650, "urlhaus_id": "3948893", "url": "https://cdn.discordapp.com/attachments/1527080045678694581/1558893049310875648/Ryo.exe?ex=6acd17c9&is=6acbc649&hm=121d60f61b73516ee09ee4b8393c52fc4881d8a10cd231e17480a11644b94bfa&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:27 UTC", "discovered_at": "2026-10-12T07:20:27.000Z" }, { "id": 158651, "urlhaus_id": "3948892", "url": "https://ns.devmicro7.workers.dev/zips/e8bb3088f6c55fa6.zip", "host": "ns.devmicro7.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "java, minecraft, zip", "last_online": null, "first_seen": "2026-10-12 07:20:24 UTC", "discovered_at": "2026-10-12T07:20:24.000Z" }, { "id": 158654, "urlhaus_id": "3948891", "url": "https://wall.casajuanchos.com/pidor.ps1", "host": "wall.casajuanchos.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, FakeCaptcha, ps1", "last_online": null, "first_seen": "2026-10-12 07:20:10 UTC", "discovered_at": "2026-10-12T07:20:10.000Z" }, { "id": 158653, "urlhaus_id": "3948890", "url": "https://locservice.short.gy/ZRsvn1k9w", "host": "locservice.short.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "bat, ContagiousInterview, VSCode", "last_online": null, "first_seen": "2026-10-12 07:20:10 UTC", "discovered_at": "2026-10-12T07:20:10.000Z" }, { "id": 158652, "urlhaus_id": "3948889", "url": "http://105.224.11.212:46589/Mozi.m", "host": "105.224.11.212", "host_ip": "105.224.11.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:10 UTC", "discovered_at": "2026-10-12T07:20:10.000Z" }, { "id": 158655, "urlhaus_id": "3948888", "url": "https://api.jsonsilo.com/public/a3a74085-0717-412c-b903-000237b099fe", "host": "api.jsonsilo.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js", "last_online": null, "first_seen": "2026-10-12 07:20:09 UTC", "discovered_at": "2026-10-12T07:20:09.000Z" }, { "id": 158658, "urlhaus_id": "3948887", "url": "https://rs74ed.s.gy/1460d20e7505bb18", "host": "rs74ed.s.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:20:08 UTC", "discovered_at": "2026-10-12T07:20:08.000Z" }, { "id": 158657, "urlhaus_id": "3948886", "url": "https://db-connectors.vercel.app/server/v2", "host": "db-connectors.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:20:08 UTC", "discovered_at": "2026-10-12T07:20:08.000Z" }, { "id": 158656, "urlhaus_id": "3948885", "url": "https://skynetwork.lat", "host": "skynetwork.lat", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-12 07:20:08 UTC", "discovered_at": "2026-10-12T07:20:08.000Z" }, { "id": 158670, "urlhaus_id": "3948884", "url": "https://api.npoint.io/40e32d283a9d97e59252/a", "host": "api.npoint.io", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "pypi, python", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158669, "urlhaus_id": "3948883", "url": "https://configprovider.short.gy/8f3d559759e67132", "host": "configprovider.short.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158668, "urlhaus_id": "3948882", "url": "https://s1w21.comen.store/update.sh", "host": "s1w21.comen.store", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158667, "urlhaus_id": "3948881", "url": "http://45.153.34.108/bins/Hilix.mpsl", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158666, "urlhaus_id": "3948880", "url": "http://2.27.14.196:882/rainimips", "host": "2.27.14.196", "host_ip": "2.27.14.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158665, "urlhaus_id": "3948879", "url": "http://45.153.34.108/bins/Hilix.arm5", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158664, "urlhaus_id": "3948878", "url": "http://212.193.3.61:4873/", "host": "212.193.3.61", "host_ip": "212.193.3.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "npm, rogue-registry", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158663, "urlhaus_id": "3948877", "url": "http://151.240.151.223/app/3af981719677/FileInspectorX.msi", "host": "151.240.151.223", "host_ip": "151.240.151.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158662, "urlhaus_id": "3948876", "url": "https://db-connectify.vercel.app/server/v2", "host": "db-connectify.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158661, "urlhaus_id": "3948875", "url": "http://45.153.34.108/bins/Hilix.x86", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158660, "urlhaus_id": "3948874", "url": "http://45.153.34.108/bins/Hilix.mips", "host": "45.153.34.108", "host_ip": "45.153.34.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158659, "urlhaus_id": "3948873", "url": "https://4b5ad122.jsdelivrnetnpm.pages.dev/config.js", "host": "4b5ad122.jsdelivrnetnpm.pages.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "js, npm", "last_online": null, "first_seen": "2026-10-12 07:20:07 UTC", "discovered_at": "2026-10-12T07:20:07.000Z" }, { "id": 158671, "urlhaus_id": "3948872", "url": "http://45.61.129.179/api/service/f43729dbad1c5a00380e710e537ffd6f", "host": "45.61.129.179", "host_ip": "45.61.129.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:19:20 UTC", "discovered_at": "2026-10-12T07:19:20.000Z" }, { "id": 158674, "urlhaus_id": "3948871", "url": "http://182.113.225.172:55594/bin.sh", "host": "182.113.225.172", "host_ip": "182.113.225.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 07:19:17 UTC", "discovered_at": "2026-10-12T07:19:17.000Z" }, { "id": 158673, "urlhaus_id": "3948870", "url": "https://locservice.short.gy/ZRsvn1k9l", "host": "locservice.short.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, sh, VSCode", "last_online": null, "first_seen": "2026-10-12 07:19:17 UTC", "discovered_at": "2026-10-12T07:19:17.000Z" }, { "id": 158672, "urlhaus_id": "3948869", "url": "https://locservice.short.gy/ZRsvn1k9m", "host": "locservice.short.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, sh, VSCode", "last_online": null, "first_seen": "2026-10-12 07:19:17 UTC", "discovered_at": "2026-10-12T07:19:17.000Z" }, { "id": 158675, "urlhaus_id": "3948868", "url": "https://cdn.discordapp.com/attachments/1557407042342490153/1558930025087111208/bundle.zip?ex=6acd3a39&is=6acbe8b9&hm=d87dee57337cca055561b91abdf79267971c3acb3f79af64618d3b03225810d9&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-12 07:19:16 UTC", "discovered_at": "2026-10-12T07:19:16.000Z" }, { "id": 158676, "urlhaus_id": "3948867", "url": "https://26usdm.oss-cn-beijing.aliyuncs.com/tad", "host": "26usdm.oss-cn-beijing.aliyuncs.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-12 07:19:15 UTC", "discovered_at": "2026-10-12T07:19:15.000Z" }, { "id": 158679, "urlhaus_id": "3948866", "url": "https://yu8y1w.oss-cn-beijing.aliyuncs.com/tad", "host": "yu8y1w.oss-cn-beijing.aliyuncs.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-12 07:19:07 UTC", "discovered_at": "2026-10-12T07:19:07.000Z" }, { "id": 158678, "urlhaus_id": "3948865", "url": "https://locservice.short.gy/NAZyrea3Bs9iLbd", "host": "locservice.short.gy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:19:07 UTC", "discovered_at": "2026-10-12T07:19:07.000Z" }, { "id": 158677, "urlhaus_id": "3948864", "url": "https://unby6r.oss-cn-beijing.aliyuncs.com/tad", "host": "unby6r.oss-cn-beijing.aliyuncs.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-12 07:19:07 UTC", "discovered_at": "2026-10-12T07:19:07.000Z" }, { "id": 158680, "urlhaus_id": "3948863", "url": "http://104.194.11.16/api/service/f43729dbad1c5a00380e710e537ffd6f", "host": "104.194.11.16", "host_ip": "104.194.11.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, js, npm", "last_online": null, "first_seen": "2026-10-12 07:19:05 UTC", "discovered_at": "2026-10-12T07:19:05.000Z" }, { "id": 158681, "urlhaus_id": "3948862", "url": "http://42.237.50.40:42148/i", "host": "42.237.50.40", "host_ip": "42.237.50.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:17:07 UTC", "discovered_at": "2026-10-12T07:17:07.000Z" }, { "id": 158682, "urlhaus_id": "3948861", "url": "http://125.106.96.203:56709/i", "host": "125.106.96.203", "host_ip": "125.106.96.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:14 UTC", "discovered_at": "2026-10-12T07:12:14.000Z" }, { "id": 158684, "urlhaus_id": "3948860", "url": "http://175.165.87.25:34973/i", "host": "175.165.87.25", "host_ip": "175.165.87.25", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:11 UTC", "discovered_at": "2026-10-12T07:12:11.000Z" }, { "id": 158683, "urlhaus_id": "3948859", "url": "https://raw.githubusercontent.com/hahagotemm/Damage-multiplier-ChooChoo-Charles-hack/HEAD/chromatolytic/hack-Charles-Damage-multiplier-Choo-impartially.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 07:12:11 UTC", "discovered_at": "2026-10-12T07:12:11.000Z" }, { "id": 158695, "urlhaus_id": "3948858", "url": "http://175.147.156.226:35685/bin.sh", "host": "175.147.156.226", "host_ip": "175.147.156.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158694, "urlhaus_id": "3948857", "url": "http://125.47.235.13:51381/i", "host": "125.47.235.13", "host_ip": "125.47.235.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158693, "urlhaus_id": "3948856", "url": "http://175.153.133.229:44327/i", "host": "175.153.133.229", "host_ip": "175.153.133.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158692, "urlhaus_id": "3948855", "url": "http://125.44.25.65:57677/i", "host": "125.44.25.65", "host_ip": "125.44.25.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158691, "urlhaus_id": "3948854", "url": "http://175.148.153.137:44857/i", "host": "175.148.153.137", "host_ip": "175.148.153.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158690, "urlhaus_id": "3948853", "url": "http://171.213.236.137:46261/i", "host": "171.213.236.137", "host_ip": "171.213.236.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158689, "urlhaus_id": "3948852", "url": "http://59.97.249.134:41054/i", "host": "59.97.249.134", "host_ip": "59.97.249.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158688, "urlhaus_id": "3948851", "url": "http://175.147.156.226:35685/i", "host": "175.147.156.226", "host_ip": "175.147.156.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158687, "urlhaus_id": "3948850", "url": "http://175.10.24.230:48436/i", "host": "175.10.24.230", "host_ip": "175.10.24.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158686, "urlhaus_id": "3948849", "url": "http://59.96.140.133:37558/i", "host": "59.96.140.133", "host_ip": "59.96.140.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158685, "urlhaus_id": "3948848", "url": "http://123.12.8.15:34927/i", "host": "123.12.8.15", "host_ip": "123.12.8.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:10 UTC", "discovered_at": "2026-10-12T07:12:10.000Z" }, { "id": 158698, "urlhaus_id": "3948847", "url": "http://222.141.79.86:47396/bin.sh", "host": "222.141.79.86", "host_ip": "222.141.79.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:09 UTC", "discovered_at": "2026-10-12T07:12:09.000Z" }, { "id": 158697, "urlhaus_id": "3948846", "url": "http://222.127.60.98:55106/i", "host": "222.127.60.98", "host_ip": "222.127.60.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:09 UTC", "discovered_at": "2026-10-12T07:12:09.000Z" }, { "id": 158696, "urlhaus_id": "3948845", "url": "http://125.42.126.60:54296/i", "host": "125.42.126.60", "host_ip": "125.42.126.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:09 UTC", "discovered_at": "2026-10-12T07:12:09.000Z" }, { "id": 158699, "urlhaus_id": "3948844", "url": "http://46.236.65.235:49018/i", "host": "46.236.65.235", "host_ip": "46.236.65.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:08 UTC", "discovered_at": "2026-10-12T07:12:08.000Z" }, { "id": 158700, "urlhaus_id": "3948843", "url": "http://5.167.126.229:23301/i", "host": "5.167.126.229", "host_ip": "5.167.126.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 07:12:07 UTC", "discovered_at": "2026-10-12T07:12:07.000Z" }, { "id": 158714, "urlhaus_id": "3948842", "url": "https://raw.githubusercontent.com/idiomatic-astaticgalvanometer9591/OsuFinder/HEAD/docs/1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158713, "urlhaus_id": "3948841", "url": "https://raw.githubusercontent.com/sigmaboytoilet1/Chain-No-Kizuna/HEAD/chainnokizuna/utils/Kizuna_No_Chain_1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158712, "urlhaus_id": "3948840", "url": "https://raw.githubusercontent.com/hakimpain/BlenderQuestionAnswer/HEAD/BlenderQuestionAnswer_app/Blender_Agentic_RAG/Blender_Answer_Question_v1.1-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158711, "urlhaus_id": "3948839", "url": "https://raw.githubusercontent.com/shady843/webxr-dev-skill/HEAD/cryptorrhetic/webxr-dev-skill-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158710, "urlhaus_id": "3948838", "url": "https://raw.githubusercontent.com/vkaentertainment/tailcode/HEAD/bin/Software-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158709, "urlhaus_id": "3948837", "url": "https://raw.githubusercontent.com/tahaahmed10/ptl/HEAD/vendor/phpparser/phpparser_52_71/test/PhpParser/Serializer/Software_3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158708, "urlhaus_id": "3948836", "url": "https://raw.githubusercontent.com/carlosuper-ai/bodycam-external/HEAD/screenshots/v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158707, "urlhaus_id": "3948835", "url": "https://raw.githubusercontent.com/Ariefed/daily-hackernews/HEAD/unwritten/daily-hackernews-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158706, "urlhaus_id": "3948834", "url": "https://raw.githubusercontent.com/clevastunning3272/ViVa/HEAD/greaten/Vi_Va_hauler.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158705, "urlhaus_id": "3948833", "url": "https://raw.githubusercontent.com/Fafaisa6305/dsh-gamemode/HEAD/assets/1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158704, "urlhaus_id": "3948832", "url": "https://raw.githubusercontent.com/fool0klein/gemini-watermark-remover/HEAD/js/gemini-watermark-remover-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158703, "urlhaus_id": "3948831", "url": "https://raw.githubusercontent.com/Anastasiya322/redis-mongo-backup-tool/HEAD/savoyed/backup_mongo_redis_tool_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158702, "urlhaus_id": "3948830", "url": "https://raw.githubusercontent.com/dezqy/core-keeper-mod-menu/HEAD/hydrocele/keeper_mod_core_menu_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158701, "urlhaus_id": "3948829", "url": "https://raw.githubusercontent.com/rdjverse/CancerGuardian/HEAD/model/Guardian_Cancer_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:11 UTC", "discovered_at": "2026-10-12T06:59:11.000Z" }, { "id": 158719, "urlhaus_id": "3948828", "url": "https://raw.githubusercontent.com/deepaa6809/anvil/HEAD/website/public/Software_v2.3-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:10 UTC", "discovered_at": "2026-10-12T06:59:10.000Z" }, { "id": 158718, "urlhaus_id": "3948827", "url": "https://raw.githubusercontent.com/winterd3290/cc-balance-overlay/HEAD/docs/balance_overlay_cc_3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:10 UTC", "discovered_at": "2026-10-12T06:59:10.000Z" }, { "id": 158717, "urlhaus_id": "3948826", "url": "https://raw.githubusercontent.com/Clayuremir/Casino-Game-Smart-Contract/HEAD/idl/Game_Smart_Casino_Contract_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:10 UTC", "discovered_at": "2026-10-12T06:59:10.000Z" }, { "id": 158716, "urlhaus_id": "3948825", "url": "https://raw.githubusercontent.com/namandon/aws-ai-cost-optimizer/HEAD/aws-ai-cost-optimizer/terraform/optimizer-aws-cost-ai-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:10 UTC", "discovered_at": "2026-10-12T06:59:10.000Z" }, { "id": 158715, "urlhaus_id": "3948824", "url": "https://raw.githubusercontent.com/Mariam500000/PageIndex/HEAD/tutorials/tree-search/Index_Page_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:10 UTC", "discovered_at": "2026-10-12T06:59:10.000Z" }, { "id": 158722, "urlhaus_id": "3948823", "url": "https://raw.githubusercontent.com/thasinduniduwara/christmas-tree/HEAD/src/christmas-tree-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:09 UTC", "discovered_at": "2026-10-12T06:59:09.000Z" }, { "id": 158721, "urlhaus_id": "3948822", "url": "https://raw.githubusercontent.com/sajjad3730/ARP-Spoofer-MITM-Attack/HEAD/src/ARP-Spoofer-MITM-Attack/Infrastructure/2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:09 UTC", "discovered_at": "2026-10-12T06:59:09.000Z" }, { "id": 158720, "urlhaus_id": "3948821", "url": "https://raw.githubusercontent.com/whitakerunsaturated400/osint-feed/HEAD/tests/osint-feed-v3.5-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:09 UTC", "discovered_at": "2026-10-12T06:59:09.000Z" }, { "id": 158723, "urlhaus_id": "3948820", "url": "https://raw.githubusercontent.com/Ricarddefensive803/caveman-skill/HEAD/windsurf/caveman-skill-2.2-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:08 UTC", "discovered_at": "2026-10-12T06:59:08.000Z" }, { "id": 158726, "urlhaus_id": "3948819", "url": "https://raw.githubusercontent.com/Unavowed-easternchurch142/telegram-to-obsidian/HEAD/config/workspace/skills/obsidian/obsidian_to_telegram_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:07 UTC", "discovered_at": "2026-10-12T06:59:07.000Z" }, { "id": 158725, "urlhaus_id": "3948818", "url": "https://raw.githubusercontent.com/xiandavid16/tracker-manager/HEAD/network/manager_tracker_interstreak.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:07 UTC", "discovered_at": "2026-10-12T06:59:07.000Z" }, { "id": 158724, "urlhaus_id": "3948817", "url": "https://raw.githubusercontent.com/aidenscot6148/Pulse-Engine_Market_Intelligence_Platform/HEAD/pulseengine/core/Market-Pulse-Platform-Engine-Intelligence-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:07 UTC", "discovered_at": "2026-10-12T06:59:07.000Z" }, { "id": 158728, "urlhaus_id": "3948816", "url": "https://raw.githubusercontent.com/hectorfabiogh-bot/excel-password-unlocker/HEAD/myelocerebellar/password_excel_unlocker_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:06 UTC", "discovered_at": "2026-10-12T06:59:06.000Z" }, { "id": 158727, "urlhaus_id": "3948815", "url": "https://raw.githubusercontent.com/riccardoglacial391/supermeskill/HEAD/potentiometric/Software-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:06 UTC", "discovered_at": "2026-10-12T06:59:06.000Z" }, { "id": 158731, "urlhaus_id": "3948814", "url": "https://raw.githubusercontent.com/Youssef20004/OmniAntigravityRemoteChat/HEAD/src/utils/Antigravity-Remote-Omni-Chat-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:05 UTC", "discovered_at": "2026-10-12T06:59:05.000Z" }, { "id": 158730, "urlhaus_id": "3948813", "url": "https://raw.githubusercontent.com/Commercialmessageaeciospore1727/free-ai-tools/HEAD/website/src/lib/ai-tools-free-Aten.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:05 UTC", "discovered_at": "2026-10-12T06:59:05.000Z" }, { "id": 158729, "urlhaus_id": "3948812", "url": "https://raw.githubusercontent.com/Rolex8637/openclaw-orchestrator/HEAD/src/agents/orchestrator_openclaw_countercurrently.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:05 UTC", "discovered_at": "2026-10-12T06:59:05.000Z" }, { "id": 158732, "urlhaus_id": "3948811", "url": "https://raw.githubusercontent.com/coveringommastrephes591/tuck/HEAD/costopleural/Software_awapuhi.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:04 UTC", "discovered_at": "2026-10-12T06:59:04.000Z" }, { "id": 158739, "urlhaus_id": "3948810", "url": "https://raw.githubusercontent.com/chantalmiriane19/advanced-discord-music-bot/HEAD/settings/advanced-music-bot-discord-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158738, "urlhaus_id": "3948809", "url": "https://raw.githubusercontent.com/Maranh0/ai-junior-data_scientist/HEAD/data_tools/scientist_data_junior_ai_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158737, "urlhaus_id": "3948808", "url": "https://raw.githubusercontent.com/lmoudamir/thalamus/HEAD/integration-tests/calorie-cam/Software-v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158736, "urlhaus_id": "3948807", "url": "https://raw.githubusercontent.com/Cingulumsloppyjoe432/bnb-trading-bot/HEAD/src/lib/bnb_trading_bot_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158735, "urlhaus_id": "3948806", "url": "https://raw.githubusercontent.com/Antoninabated443/claude-code-wechat-channel/HEAD/dist/wechat_claude_channel_code_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158734, "urlhaus_id": "3948805", "url": "https://raw.githubusercontent.com/linapatel518/rbxfpsunlocker/HEAD/sheepwalker/Software_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158733, "urlhaus_id": "3948804", "url": "https://raw.githubusercontent.com/German-glissade758/free-multimodal-proxy/HEAD/precultivate/3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:03 UTC", "discovered_at": "2026-10-12T06:59:03.000Z" }, { "id": 158744, "urlhaus_id": "3948803", "url": "https://raw.githubusercontent.com/sttefanyverde/flowsurface/HEAD/src/screen/dashboard/panel/Software_1.6-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:02 UTC", "discovered_at": "2026-10-12T06:59:02.000Z" }, { "id": 158743, "urlhaus_id": "3948802", "url": "https://raw.githubusercontent.com/soldat-panther/qq-farm-cdp-auto/HEAD/calenture/farm-cdp-qq-auto-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:02 UTC", "discovered_at": "2026-10-12T06:59:02.000Z" }, { "id": 158742, "urlhaus_id": "3948801", "url": "https://raw.githubusercontent.com/Katerinalves752/hay-star/HEAD/native/src/v1.4-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:02 UTC", "discovered_at": "2026-10-12T06:59:02.000Z" }, { "id": 158741, "urlhaus_id": "3948800", "url": "https://raw.githubusercontent.com/richardm7399/WallWhisper/HEAD/examples/openclaw-config/Whisper_Wall_v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:02 UTC", "discovered_at": "2026-10-12T06:59:02.000Z" }, { "id": 158740, "urlhaus_id": "3948799", "url": "https://raw.githubusercontent.com/nascencyunpredictability749/financial-intelligence-system/HEAD/.mvn/wrapper/salfern.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:02 UTC", "discovered_at": "2026-10-12T06:59:02.000Z" }, { "id": 158749, "urlhaus_id": "3948798", "url": "https://raw.githubusercontent.com/Ajaysid561/BakaMusic/HEAD/src/renderer/core/recently-playlist/Music_Baka_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:01 UTC", "discovered_at": "2026-10-12T06:59:01.000Z" }, { "id": 158748, "urlhaus_id": "3948797", "url": "https://raw.githubusercontent.com/Workpennisetumcenchroides181/safe-refactor-engine/HEAD/references/refactor_engine_safe_Dutchy.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:01 UTC", "discovered_at": "2026-10-12T06:59:01.000Z" }, { "id": 158747, "urlhaus_id": "3948796", "url": "https://raw.githubusercontent.com/frendel2004/connect-plugin/HEAD/Commands/plugin-connect-Canaanitish.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:01 UTC", "discovered_at": "2026-10-12T06:59:01.000Z" }, { "id": 158746, "urlhaus_id": "3948795", "url": "https://raw.githubusercontent.com/telescoped-scat758/Live-YT-Translator/HEAD/public/Translator_Live_Y_v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:01 UTC", "discovered_at": "2026-10-12T06:59:01.000Z" }, { "id": 158745, "urlhaus_id": "3948794", "url": "https://raw.githubusercontent.com/compoundladyship287/oats/HEAD/spike/AudioCaptureSpike/Sources/3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:01 UTC", "discovered_at": "2026-10-12T06:59:01.000Z" }, { "id": 158754, "urlhaus_id": "3948793", "url": "https://raw.githubusercontent.com/nxuantien642-dotcom/MarvelRivals-Hack---Marvel-Rivals-Hack-2026/HEAD/unvouched/Marvel_Rivals_Hack_3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:00 UTC", "discovered_at": "2026-10-12T06:59:00.000Z" }, { "id": 158753, "urlhaus_id": "3948792", "url": "https://raw.githubusercontent.com/nupurgurnule/GoldMAC/HEAD/assets/MAC-Gold-3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:00 UTC", "discovered_at": "2026-10-12T06:59:00.000Z" }, { "id": 158752, "urlhaus_id": "3948791", "url": "https://raw.githubusercontent.com/Zosly/N--Admin/HEAD/html/Admin_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:00 UTC", "discovered_at": "2026-10-12T06:59:00.000Z" }, { "id": 158751, "urlhaus_id": "3948790", "url": "https://raw.githubusercontent.com/hima84/Tweaks/HEAD/Treron/Software-v3.5-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:00 UTC", "discovered_at": "2026-10-12T06:59:00.000Z" }, { "id": 158750, "urlhaus_id": "3948789", "url": "https://raw.githubusercontent.com/Noahdu7312/Palworld-Capture-Rate-Trainer/HEAD/belly/Trainer_Palworld_Rate_Capture_3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:59:00 UTC", "discovered_at": "2026-10-12T06:59:00.000Z" }, { "id": 158756, "urlhaus_id": "3948788", "url": "https://raw.githubusercontent.com/Johnnytec2024/ytm-keep-alive/HEAD/boist/alive_keep_ytm_3.5-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:58 UTC", "discovered_at": "2026-10-12T06:58:58.000Z" }, { "id": 158755, "urlhaus_id": "3948787", "url": "https://raw.githubusercontent.com/Spongernondriver422/claudeshot/HEAD/skills/Software-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:58 UTC", "discovered_at": "2026-10-12T06:58:58.000Z" }, { "id": 158759, "urlhaus_id": "3948786", "url": "https://raw.githubusercontent.com/sonchimto111/SQLVulnInjector/HEAD/api/SQL_Vuln_Injector_3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:56 UTC", "discovered_at": "2026-10-12T06:58:56.000Z" }, { "id": 158758, "urlhaus_id": "3948785", "url": "https://raw.githubusercontent.com/michel-angelo/IntRR/HEAD/src/modules/clustering/RR_Int_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:56 UTC", "discovered_at": "2026-10-12T06:58:56.000Z" }, { "id": 158757, "urlhaus_id": "3948784", "url": "https://raw.githubusercontent.com/bdbetterweb/Memebership-Plan-Component/HEAD/Guide/Memebership_Component_Plan_v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:56 UTC", "discovered_at": "2026-10-12T06:58:56.000Z" }, { "id": 158762, "urlhaus_id": "3948783", "url": "https://raw.githubusercontent.com/katinkadomestic506/deep-rock-rogue-core-mods/HEAD/mods/rock_rogue_deep_mods_core_3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:55 UTC", "discovered_at": "2026-10-12T06:58:55.000Z" }, { "id": 158761, "urlhaus_id": "3948782", "url": "https://raw.githubusercontent.com/Azkal22/Adobe-Tool-Premiere-Pro/HEAD/Albanian/2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:55 UTC", "discovered_at": "2026-10-12T06:58:55.000Z" }, { "id": 158760, "urlhaus_id": "3948781", "url": "https://raw.githubusercontent.com/bs779517/story-skills/HEAD/skills/worldbuilding/references/skills_story_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:55 UTC", "discovered_at": "2026-10-12T06:58:55.000Z" }, { "id": 158765, "urlhaus_id": "3948780", "url": "https://raw.githubusercontent.com/flybynight-donatodagnolobramante9295/Apex-Legends-FPS-Boost/HEAD/unconjugated/v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:54 UTC", "discovered_at": "2026-10-12T06:58:54.000Z" }, { "id": 158764, "urlhaus_id": "3948779", "url": "https://raw.githubusercontent.com/goofball7162/BraintreeCHK/HEAD/pic/Braintree_CHK_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:54 UTC", "discovered_at": "2026-10-12T06:58:54.000Z" }, { "id": 158763, "urlhaus_id": "3948778", "url": "https://raw.githubusercontent.com/loqganesh-hue/aulalibre/HEAD/aula/Software_v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:54 UTC", "discovered_at": "2026-10-12T06:58:54.000Z" }, { "id": 158768, "urlhaus_id": "3948777", "url": "https://raw.githubusercontent.com/houseunlimited/hinge-auto/HEAD/voice/auto_hinge_armarium.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:53 UTC", "discovered_at": "2026-10-12T06:58:53.000Z" }, { "id": 158767, "urlhaus_id": "3948776", "url": "https://raw.githubusercontent.com/Chineseyamgrossprofit190/aegis/HEAD/scripts/check_stats/Software-guestwise.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:53 UTC", "discovered_at": "2026-10-12T06:58:53.000Z" }, { "id": 158766, "urlhaus_id": "3948775", "url": "https://raw.githubusercontent.com/BillyGames123/Phone-Number-Lookup/HEAD/sialaden/Phone-Number-Lookup-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:53 UTC", "discovered_at": "2026-10-12T06:58:53.000Z" }, { "id": 158774, "urlhaus_id": "3948774", "url": "https://raw.githubusercontent.com/Somersetunderstood190/dayz-trainer-menu-script/HEAD/bluefish/2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158773, "urlhaus_id": "3948773", "url": "https://raw.githubusercontent.com/erikceballos/nano-banana-cli/HEAD/internal/nano_cli_banana_1.9-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158772, "urlhaus_id": "3948772", "url": "https://raw.githubusercontent.com/Dylan-Emanuel/cloudflare-bypass-2026/HEAD/noncorrespondent/bypass_cloudflare_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158771, "urlhaus_id": "3948771", "url": "https://raw.githubusercontent.com/droftgamer-wq/researcher-skill/HEAD/researcher/references/researcher-skill-inebriative.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158770, "urlhaus_id": "3948770", "url": "https://raw.githubusercontent.com/itandi5191/TomodachiPC/HEAD/Port/Tomodachi_PC_v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158769, "urlhaus_id": "3948769", "url": "https://raw.githubusercontent.com/raulika223/ecommerce-product-service/HEAD/alembic/versions/service-product-ecommerce-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:52 UTC", "discovered_at": "2026-10-12T06:58:52.000Z" }, { "id": 158779, "urlhaus_id": "3948768", "url": "https://raw.githubusercontent.com/ayushgowda121/opencode-anthropic-oauth/HEAD/herniology/oauth-anthropic-opencode-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:51 UTC", "discovered_at": "2026-10-12T06:58:51.000Z" }, { "id": 158778, "urlhaus_id": "3948767", "url": "https://raw.githubusercontent.com/xbxh6452/-ARP-Spoofing-Detection-Active-Injection-Technique/HEAD/docs/Technique_Spoofing_AR_Injection_Detection_Active_v3.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:51 UTC", "discovered_at": "2026-10-12T06:58:51.000Z" }, { "id": 158777, "urlhaus_id": "3948766", "url": "https://raw.githubusercontent.com/tungusicamericanalligator425/Control-Note/HEAD/unrobed/Control-Note-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:51 UTC", "discovered_at": "2026-10-12T06:58:51.000Z" }, { "id": 158776, "urlhaus_id": "3948765", "url": "https://raw.githubusercontent.com/harshdeepk585/twitter-bridge-mcp/HEAD/saeculum/bridge-mcp-twitter-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:51 UTC", "discovered_at": "2026-10-12T06:58:51.000Z" }, { "id": 158775, "urlhaus_id": "3948764", "url": "https://raw.githubusercontent.com/Lyam2147/Slay-The-Spire-2-Trainer/HEAD/assets/Slay-The-Spire-Trainer-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:51 UTC", "discovered_at": "2026-10-12T06:58:51.000Z" }, { "id": 158785, "urlhaus_id": "3948763", "url": "https://raw.githubusercontent.com/darkgrey-curmudgeon671/github-star-organizer/HEAD/src/organizer_star_github_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158784, "urlhaus_id": "3948762", "url": "https://raw.githubusercontent.com/HoodxSp5dda/Domain-Executor/HEAD/Assets/Sounds/Domain_Executor_v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158783, "urlhaus_id": "3948761", "url": "https://raw.githubusercontent.com/RagnerMG4/exprust/HEAD/src/Software_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158782, "urlhaus_id": "3948760", "url": "https://raw.githubusercontent.com/ScarXparth/claude-doctor-skill/HEAD/layers/doctor-claude-skill-2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158781, "urlhaus_id": "3948759", "url": "https://raw.githubusercontent.com/Rhizopuselbow112/Servo-Control-ESP8266-Blynk-OLED-temp-humidity/HEAD/outstroke/Blynk-OLE-ES-Control-temp-Servo-humidity-v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158780, "urlhaus_id": "3948758", "url": "https://raw.githubusercontent.com/bambiematutinal642/clawgod/HEAD/antiparastatitis/Software-2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:50 UTC", "discovered_at": "2026-10-12T06:58:50.000Z" }, { "id": 158788, "urlhaus_id": "3948757", "url": "https://raw.githubusercontent.com/Icy-Senpal/bypass-all/HEAD/udrl-vs/examples/bypass_all_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:49 UTC", "discovered_at": "2026-10-12T06:58:49.000Z" }, { "id": 158787, "urlhaus_id": "3948756", "url": "https://raw.githubusercontent.com/Maimoss/Avatax/HEAD/public/Software_v1.7-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:49 UTC", "discovered_at": "2026-10-12T06:58:49.000Z" }, { "id": 158786, "urlhaus_id": "3948755", "url": "https://raw.githubusercontent.com/christia2304/r6s-helper-script-loader/HEAD/fingerlet/Pulmonata.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:49 UTC", "discovered_at": "2026-10-12T06:58:49.000Z" }, { "id": 158791, "urlhaus_id": "3948754", "url": "https://raw.githubusercontent.com/Younes-ELKHADRAOUI/node-ts-express-prisma-boilerplate/HEAD/tests/unit/boilerplate_express_ts_node_prisma_v1.8-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:48 UTC", "discovered_at": "2026-10-12T06:58:48.000Z" }, { "id": 158790, "urlhaus_id": "3948753", "url": "https://raw.githubusercontent.com/vkxxxii99/The-Witcher-3-DLC-Unlocker-Cross-Platform-Koalageddon-ScreamAPI-/HEAD/saily/The_AP_Koalageddon_Platform_DL_Scream_Witcher_Cross_Unlocker_2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:48 UTC", "discovered_at": "2026-10-12T06:58:48.000Z" }, { "id": 158789, "urlhaus_id": "3948752", "url": "https://raw.githubusercontent.com/syed-sadiq-hussaini/Arcana/HEAD/examples/dashboard/Software_1.3-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:48 UTC", "discovered_at": "2026-10-12T06:58:48.000Z" }, { "id": 158795, "urlhaus_id": "3948751", "url": "https://raw.githubusercontent.com/ahmedmoha9088/PhoenixFish/HEAD/src/main/java/com/Fish-Phoenix-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:47 UTC", "discovered_at": "2026-10-12T06:58:47.000Z" }, { "id": 158794, "urlhaus_id": "3948750", "url": "https://raw.githubusercontent.com/Pheniciasigner2504/Rust-Scripting/HEAD/Vejoz/2.0-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:47 UTC", "discovered_at": "2026-10-12T06:58:47.000Z" }, { "id": 158793, "urlhaus_id": "3948749", "url": "https://raw.githubusercontent.com/edouardclose19/ltk-manager-lol/HEAD/docs/screenshots/lol-ltk-manager-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:47 UTC", "discovered_at": "2026-10-12T06:58:47.000Z" }, { "id": 158792, "urlhaus_id": "3948748", "url": "https://raw.githubusercontent.com/pankajydv08/PolyglotLAB-python-translator/HEAD/tests/translator_python_LA_Polyglot_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:47 UTC", "discovered_at": "2026-10-12T06:58:47.000Z" }, { "id": 158796, "urlhaus_id": "3948747", "url": "https://raw.githubusercontent.com/rjzxui/obsidian-vault-cli/HEAD/tests/fixtures/vault-obsidian-cli-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:46 UTC", "discovered_at": "2026-10-12T06:58:46.000Z" }, { "id": 158800, "urlhaus_id": "3948746", "url": "https://raw.githubusercontent.com/Kilndried-irreplaceableness140/omada-docker-password-reset/HEAD/Jalalaean/password_docker_omada_reset_1.3-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:45 UTC", "discovered_at": "2026-10-12T06:58:45.000Z" }, { "id": 158799, "urlhaus_id": "3948745", "url": "https://raw.githubusercontent.com/Nicolashobday/Valve-Deadlock-Full-Access-Bypass/HEAD/actability/2.7-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:45 UTC", "discovered_at": "2026-10-12T06:58:45.000Z" }, { "id": 158798, "urlhaus_id": "3948744", "url": "https://raw.githubusercontent.com/shayanhayee/cruster/HEAD/crates/cruster/migrations/Software-3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:45 UTC", "discovered_at": "2026-10-12T06:58:45.000Z" }, { "id": 158797, "urlhaus_id": "3948743", "url": "https://raw.githubusercontent.com/softineerdanish/faahhh-notifier-plugin-intellij/HEAD/docs/faahhh-plugin-notifier-intellij-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:45 UTC", "discovered_at": "2026-10-12T06:58:45.000Z" }, { "id": 158802, "urlhaus_id": "3948742", "url": "https://raw.githubusercontent.com/ylayann/antec/HEAD/prd/Software-precinction.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:44 UTC", "discovered_at": "2026-10-12T06:58:44.000Z" }, { "id": 158801, "urlhaus_id": "3948741", "url": "https://raw.githubusercontent.com/kodiwxbiznes-glitch/Basanos-ESP32-S3/HEAD/test/host/Basanos_ES_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:44 UTC", "discovered_at": "2026-10-12T06:58:44.000Z" }, { "id": 158805, "urlhaus_id": "3948740", "url": "https://raw.githubusercontent.com/afanbe9488/removebanana/HEAD/core/Software-v1.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:43 UTC", "discovered_at": "2026-10-12T06:58:43.000Z" }, { "id": 158804, "urlhaus_id": "3948739", "url": "https://raw.githubusercontent.com/martinez9388/ai-browser-tutorial/HEAD/upspring/ai_tutorial_browser_v2.2-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:43 UTC", "discovered_at": "2026-10-12T06:58:43.000Z" }, { "id": 158803, "urlhaus_id": "3948738", "url": "https://raw.githubusercontent.com/gastosperosonales/partner-api-gateway/HEAD/app/models/partner-api-gateway-Mitannian.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:43 UTC", "discovered_at": "2026-10-12T06:58:43.000Z" }, { "id": 158806, "urlhaus_id": "3948737", "url": "https://raw.githubusercontent.com/danya120o3/processhacker-mcp/HEAD/extensions/mcp-processhacker-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:42 UTC", "discovered_at": "2026-10-12T06:58:42.000Z" }, { "id": 158808, "urlhaus_id": "3948736", "url": "https://raw.githubusercontent.com/ryukyagamilight/terminal-skills/HEAD/docker/networking/skills_terminal_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:41 UTC", "discovered_at": "2026-10-12T06:58:41.000Z" }, { "id": 158807, "urlhaus_id": "3948735", "url": "https://raw.githubusercontent.com/Aizzud840/free-code/HEAD/src/commands/fast/code_free_1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:41 UTC", "discovered_at": "2026-10-12T06:58:41.000Z" }, { "id": 158812, "urlhaus_id": "3948734", "url": "https://raw.githubusercontent.com/hrcosigntheta/travelblog-website-template/HEAD/public/images/gear/website_template_travelblog_extraovular.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:40 UTC", "discovered_at": "2026-10-12T06:58:40.000Z" }, { "id": 158811, "urlhaus_id": "3948733", "url": "https://raw.githubusercontent.com/UmarWaqas513/Breakout-Game/HEAD/metaphonize/Breakout_Game_v1.8-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:40 UTC", "discovered_at": "2026-10-12T06:58:40.000Z" }, { "id": 158810, "urlhaus_id": "3948732", "url": "https://raw.githubusercontent.com/rajdadhome3165/authn-authz-playground/HEAD/JwtAuthentication/Models/playground-authn-authz-v2.2-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:40 UTC", "discovered_at": "2026-10-12T06:58:40.000Z" }, { "id": 158809, "urlhaus_id": "3948731", "url": "https://raw.githubusercontent.com/zakirullahzaki/statusgator-go-client/HEAD/statusgator/go_statusgator_client_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:40 UTC", "discovered_at": "2026-10-12T06:58:40.000Z" }, { "id": 158818, "urlhaus_id": "3948730", "url": "https://raw.githubusercontent.com/rbarriaultjr/flock-detection/HEAD/FlockDetection/detection-flock-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158817, "urlhaus_id": "3948729", "url": "https://raw.githubusercontent.com/Maryoumal2003/WeatherWise-App/HEAD/centuplication/App-Weather-Wise-3.3-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158816, "urlhaus_id": "3948728", "url": "https://raw.githubusercontent.com/Chancelsanvitaliaprocumbens571/Armada/HEAD/bot/Software-v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158815, "urlhaus_id": "3948727", "url": "https://raw.githubusercontent.com/longphamok1323/2025doubao-free-api/HEAD/public/doubao_api_free_inanga.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158814, "urlhaus_id": "3948726", "url": "https://raw.githubusercontent.com/Ethanj7750/face-anti-spoofing-dataset/HEAD/preterpolitical/face_anti_dataset_spoofing_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158813, "urlhaus_id": "3948725", "url": "https://raw.githubusercontent.com/syntactic-orleanism949/logal-rag/HEAD/unoperatic/logal_rag_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:39 UTC", "discovered_at": "2026-10-12T06:58:39.000Z" }, { "id": 158823, "urlhaus_id": "3948724", "url": "https://raw.githubusercontent.com/himuxhehe/ai-jail/HEAD/src/jail-ai-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:38 UTC", "discovered_at": "2026-10-12T06:58:38.000Z" }, { "id": 158822, "urlhaus_id": "3948723", "url": "https://raw.githubusercontent.com/Hugomo1/epoch/HEAD/src/store/Software-staminode.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:38 UTC", "discovered_at": "2026-10-12T06:58:38.000Z" }, { "id": 158821, "urlhaus_id": "3948722", "url": "https://raw.githubusercontent.com/thainereflecting360/Otexum-Pulse/HEAD/Properties/PublishProfiles/Otexum_Pulse_v1.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:38 UTC", "discovered_at": "2026-10-12T06:58:38.000Z" }, { "id": 158820, "urlhaus_id": "3948721", "url": "https://raw.githubusercontent.com/rhomirafernando/fuzzbox/HEAD/src/Software-1.6-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:38 UTC", "discovered_at": "2026-10-12T06:58:38.000Z" }, { "id": 158819, "urlhaus_id": "3948720", "url": "https://raw.githubusercontent.com/piroplayers69-ops/S3T-Former/HEAD/spiking-topo-transformer-code/config/Former-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:38 UTC", "discovered_at": "2026-10-12T06:58:38.000Z" }, { "id": 158828, "urlhaus_id": "3948719", "url": "https://raw.githubusercontent.com/Luciuscloaked100/OpenManus-Max/HEAD/openmanus_max/tool/builtin/Open-Max-Manus-untwinned.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:37 UTC", "discovered_at": "2026-10-12T06:58:37.000Z" }, { "id": 158827, "urlhaus_id": "3948718", "url": "https://raw.githubusercontent.com/rick97julho/do-i-have-the-vram/HEAD/do_i_have_the_vram/__pycache__/have_do_vram_the_i_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:37 UTC", "discovered_at": "2026-10-12T06:58:37.000Z" }, { "id": 158826, "urlhaus_id": "3948717", "url": "https://raw.githubusercontent.com/Singhalesebradycardia99/Polymarket-Copy-Trade-Bot/HEAD/frontend/src/api/Copy-Polymarket-Bot-Trade-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:37 UTC", "discovered_at": "2026-10-12T06:58:37.000Z" }, { "id": 158825, "urlhaus_id": "3948716", "url": "https://raw.githubusercontent.com/Ice24787/MaskMyURL-Url-Obfuscator-a0/HEAD/deflagrator/Url-a-Mask-My-Obfuscator-UR-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:37 UTC", "discovered_at": "2026-10-12T06:58:37.000Z" }, { "id": 158824, "urlhaus_id": "3948715", "url": "https://raw.githubusercontent.com/mayakovskieveninglychnis927/SkriptGG/HEAD/Cistercianism/1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:37 UTC", "discovered_at": "2026-10-12T06:58:37.000Z" }, { "id": 158833, "urlhaus_id": "3948714", "url": "https://raw.githubusercontent.com/extended-yellowochre569/software_development_department/HEAD/docs/technical/development_software_department_brightsomeness.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:36 UTC", "discovered_at": "2026-10-12T06:58:36.000Z" }, { "id": 158832, "urlhaus_id": "3948713", "url": "https://raw.githubusercontent.com/Minded-nakuru841/headscale-install/HEAD/docs/images/install-headscale-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:36 UTC", "discovered_at": "2026-10-12T06:58:36.000Z" }, { "id": 158831, "urlhaus_id": "3948712", "url": "https://raw.githubusercontent.com/Girondismascorbicacid50/gridshot/HEAD/gridshot/cli/Software-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:36 UTC", "discovered_at": "2026-10-12T06:58:36.000Z" }, { "id": 158830, "urlhaus_id": "3948711", "url": "https://raw.githubusercontent.com/Ugisp77/wip-hex-tile-game/HEAD/src/core/game-hex-tile-wip-1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:36 UTC", "discovered_at": "2026-10-12T06:58:36.000Z" }, { "id": 158829, "urlhaus_id": "3948710", "url": "https://raw.githubusercontent.com/ngatran302018/dotnet-task-management-system/HEAD/TaskSphere/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/system-task-management-dotnet-1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:36 UTC", "discovered_at": "2026-10-12T06:58:36.000Z" }, { "id": 158834, "urlhaus_id": "3948709", "url": "https://raw.githubusercontent.com/mpahlevi64/LowLevelBanana/HEAD/eval/deshadowing/basicsr/metrics/__pycache__/Level_Low_Banana_1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:35 UTC", "discovered_at": "2026-10-12T06:58:35.000Z" }, { "id": 158836, "urlhaus_id": "3948708", "url": "https://raw.githubusercontent.com/Dicxon-Ronald/dashboard-1771929897-5/HEAD/tests/dashboard-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:34 UTC", "discovered_at": "2026-10-12T06:58:34.000Z" }, { "id": 158835, "urlhaus_id": "3948707", "url": "https://raw.githubusercontent.com/Erfundamentalist881/ABSENKU/HEAD/Allium/Software-v1.1-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:34 UTC", "discovered_at": "2026-10-12T06:58:34.000Z" }, { "id": 158840, "urlhaus_id": "3948706", "url": "https://raw.githubusercontent.com/Jay-Bosco/GoofishCredentialsBot/HEAD/docs/.vitepress/Credentials-Bot-Goofish-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:32 UTC", "discovered_at": "2026-10-12T06:58:32.000Z" }, { "id": 158839, "urlhaus_id": "3948705", "url": "https://raw.githubusercontent.com/Abhishek-97735/Equity-Line/HEAD/Duboisia/Equity_Line_v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:32 UTC", "discovered_at": "2026-10-12T06:58:32.000Z" }, { "id": 158838, "urlhaus_id": "3948704", "url": "https://raw.githubusercontent.com/avinash9336/react-native-profile-card/HEAD/screenshots/profile-react-card-native-v2.6-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:32 UTC", "discovered_at": "2026-10-12T06:58:32.000Z" }, { "id": 158837, "urlhaus_id": "3948703", "url": "https://raw.githubusercontent.com/Expostfacto-paging599/go-hfp/HEAD/smallholder/hfp_go_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:32 UTC", "discovered_at": "2026-10-12T06:58:32.000Z" }, { "id": 158845, "urlhaus_id": "3948702", "url": "https://raw.githubusercontent.com/yeahns278/lemonade-dashboard/HEAD/src/dashboard_lemonade_halcyonic.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:31 UTC", "discovered_at": "2026-10-12T06:58:31.000Z" }, { "id": 158844, "urlhaus_id": "3948701", "url": "https://raw.githubusercontent.com/brandaobe8314/Condi-Botnet-V9.2/HEAD/assets/Botnet_Condi_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:31 UTC", "discovered_at": "2026-10-12T06:58:31.000Z" }, { "id": 158843, "urlhaus_id": "3948700", "url": "https://raw.githubusercontent.com/crackerbarrel-benevolence768/Medusa-Forza-Horizon-6/HEAD/neglectable/Forza_Medusa_Horizon_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:31 UTC", "discovered_at": "2026-10-12T06:58:31.000Z" }, { "id": 158842, "urlhaus_id": "3948699", "url": "https://raw.githubusercontent.com/Saeed-Gaming/crypto-trades-fifo/HEAD/pseudobrachium/crypto-trades-fifo-v1.1-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:31 UTC", "discovered_at": "2026-10-12T06:58:31.000Z" }, { "id": 158841, "urlhaus_id": "3948698", "url": "https://raw.githubusercontent.com/yusufyusufyuf/open-queue/HEAD/.opencode/plugin/open_queue_3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:31 UTC", "discovered_at": "2026-10-12T06:58:31.000Z" }, { "id": 158847, "urlhaus_id": "3948697", "url": "https://raw.githubusercontent.com/Alexcomplementary40/ELF-pytorch/HEAD/pytorch_lightning/encoders/pytorch-EL-v1.5-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:30 UTC", "discovered_at": "2026-10-12T06:58:30.000Z" }, { "id": 158846, "urlhaus_id": "3948696", "url": "https://raw.githubusercontent.com/COMMANDLOVE/AppEnclave/HEAD/AppEnclave.Examples.ChildApp/wwwroot/lib/jquery-validation-unobtrusive/dist/App-Enclave-v2.5-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:30 UTC", "discovered_at": "2026-10-12T06:58:30.000Z" }, { "id": 158850, "urlhaus_id": "3948695", "url": "https://raw.githubusercontent.com/kentunderage549/cc-harness-skills/HEAD/skills/dream-memory/references/harness-cc-skills-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:29 UTC", "discovered_at": "2026-10-12T06:58:29.000Z" }, { "id": 158849, "urlhaus_id": "3948694", "url": "https://raw.githubusercontent.com/wangcai0124/camera-hack/HEAD/arduino/serial_bridge/camera-hack-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:29 UTC", "discovered_at": "2026-10-12T06:58:29.000Z" }, { "id": 158848, "urlhaus_id": "3948693", "url": "https://raw.githubusercontent.com/showy-headteacher114/cve-2025-66398/HEAD/docker/vendor/cve_v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:29 UTC", "discovered_at": "2026-10-12T06:58:29.000Z" }, { "id": 158853, "urlhaus_id": "3948692", "url": "https://raw.githubusercontent.com/thiagocavalheiro/polymarket-sports-trading-bot/HEAD/lib/bot-sports-trading-polymarket-2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:28 UTC", "discovered_at": "2026-10-12T06:58:28.000Z" }, { "id": 158852, "urlhaus_id": "3948691", "url": "https://raw.githubusercontent.com/ROCJ05478/camofox-browser/HEAD/expandedness/camofox_browser_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:28 UTC", "discovered_at": "2026-10-12T06:58:28.000Z" }, { "id": 158851, "urlhaus_id": "3948690", "url": "https://raw.githubusercontent.com/BA762/governance-framework/HEAD/hempbush/governance_framework_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:28 UTC", "discovered_at": "2026-10-12T06:58:28.000Z" }, { "id": 158859, "urlhaus_id": "3948689", "url": "https://raw.githubusercontent.com/bananasminecraftroblox192-glitch/DEPI-SSIS-ETL-DWH-Project/HEAD/Images/DEP-Project-ET-SSI-DW-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158858, "urlhaus_id": "3948688", "url": "https://raw.githubusercontent.com/Luisveloza/api-manager/HEAD/src-tauri/icons/android/mipmap-anydpi-v26/manager-api-2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158857, "urlhaus_id": "3948687", "url": "https://raw.githubusercontent.com/juliettaspecialistic335/AdderNet/HEAD/addernet/Adder-Net-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158856, "urlhaus_id": "3948686", "url": "https://raw.githubusercontent.com/Alvin1231231231/ty/HEAD/docs/features/screenshots/Software_3.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158855, "urlhaus_id": "3948685", "url": "https://raw.githubusercontent.com/AzzaFizatiaina/real-estate-platform/HEAD/src/main/java/com/devtiro/realestate/services/platform_estate_real_3.2-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158854, "urlhaus_id": "3948684", "url": "https://raw.githubusercontent.com/Arid-carrotpudding634/Freequick-Suite/HEAD/anthropogenist/Freequick-Suite-3.3-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:27 UTC", "discovered_at": "2026-10-12T06:58:27.000Z" }, { "id": 158865, "urlhaus_id": "3948683", "url": "https://raw.githubusercontent.com/corse7e/temm1e/HEAD/crates/temm1e-gateway/e-temm-pretty.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158864, "urlhaus_id": "3948682", "url": "https://raw.githubusercontent.com/sagar9892/MysteryGiftInjector/HEAD/MysteryGiftInjector/Resources/Gift-Mystery-Injector-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158863, "urlhaus_id": "3948681", "url": "https://raw.githubusercontent.com/transcultural-papering633/codex-pets/HEAD/Quintin/codex-pets-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158862, "urlhaus_id": "3948680", "url": "https://raw.githubusercontent.com/Sternal-primogenitor824/Gpu-Overclock-Tool/HEAD/mimosaceous/Gpu_Tool_Overclock_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158861, "urlhaus_id": "3948679", "url": "https://raw.githubusercontent.com/SannTod/Jenny-Mod-Minecraft-ALL-VERSIONS/HEAD/anim/meconophagism.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158860, "urlhaus_id": "3948678", "url": "https://raw.githubusercontent.com/Toperythroblast876/omem/HEAD/skills/ourmem/scripts/Software_v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:26 UTC", "discovered_at": "2026-10-12T06:58:26.000Z" }, { "id": 158870, "urlhaus_id": "3948677", "url": "https://raw.githubusercontent.com/Salahnahryry/plume-network-season-2/HEAD/src/network_season_plume_v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:25 UTC", "discovered_at": "2026-10-12T06:58:25.000Z" }, { "id": 158869, "urlhaus_id": "3948676", "url": "https://raw.githubusercontent.com/JorgePantera/mythril/HEAD/clothes/Software_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:25 UTC", "discovered_at": "2026-10-12T06:58:25.000Z" }, { "id": 158868, "urlhaus_id": "3948675", "url": "https://raw.githubusercontent.com/clixgvvv/AndroidLLMServerScript/HEAD/influenceable/Android_LLM_Server_Script_daggy.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:25 UTC", "discovered_at": "2026-10-12T06:58:25.000Z" }, { "id": 158867, "urlhaus_id": "3948674", "url": "https://raw.githubusercontent.com/NguyenPhamMC/whisperer/HEAD/bin/Software-v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:25 UTC", "discovered_at": "2026-10-12T06:58:25.000Z" }, { "id": 158866, "urlhaus_id": "3948673", "url": "https://raw.githubusercontent.com/Oasisincoherence641/glm-5.3/HEAD/core/v3.4-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:25 UTC", "discovered_at": "2026-10-12T06:58:25.000Z" }, { "id": 158871, "urlhaus_id": "3948672", "url": "https://raw.githubusercontent.com/Walloperlioncub193/Canva-Resource/HEAD/Video-Editor/Resource-Canva-2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:24 UTC", "discovered_at": "2026-10-12T06:58:24.000Z" }, { "id": 158873, "urlhaus_id": "3948671", "url": "https://raw.githubusercontent.com/agencytribuneship732/any-buddy/HEAD/src/config/buddy-any-v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:22 UTC", "discovered_at": "2026-10-12T06:58:22.000Z" }, { "id": 158872, "urlhaus_id": "3948670", "url": "https://raw.githubusercontent.com/felipedeso7za4444/scientific-thinking-general/HEAD/agents/thinking-scientific-general-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:22 UTC", "discovered_at": "2026-10-12T06:58:22.000Z" }, { "id": 158876, "urlhaus_id": "3948669", "url": "https://raw.githubusercontent.com/tedmunduncertain140/Wireless-water-tank-monitoring-lora/HEAD/code/code/tank_water_Wireless_monitoring_lora_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:21 UTC", "discovered_at": "2026-10-12T06:58:21.000Z" }, { "id": 158875, "urlhaus_id": "3948668", "url": "https://raw.githubusercontent.com/blastocladialesepha247/Cyberpunk-2077-Cyberware-Overdrive/HEAD/knotgrass/Cyberpunk-Overdrive-Cyberware-v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:21 UTC", "discovered_at": "2026-10-12T06:58:21.000Z" }, { "id": 158874, "urlhaus_id": "3948667", "url": "https://raw.githubusercontent.com/sociologisttentcaterpillarmoth213/100xdev-ci-cd/HEAD/mycohemia/ci_cd_xdev_v2.3-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:21 UTC", "discovered_at": "2026-10-12T06:58:21.000Z" }, { "id": 158879, "urlhaus_id": "3948666", "url": "https://raw.githubusercontent.com/khisag4704/claude-code-ollama-local/HEAD/src/code_local_ollama_claude_v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:20 UTC", "discovered_at": "2026-10-12T06:58:20.000Z" }, { "id": 158878, "urlhaus_id": "3948665", "url": "https://raw.githubusercontent.com/nartac/bitcoin-strategy-backtester/HEAD/tests/backtester_strategy_bitcoin_2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:20 UTC", "discovered_at": "2026-10-12T06:58:20.000Z" }, { "id": 158877, "urlhaus_id": "3948664", "url": "https://raw.githubusercontent.com/patri8659/image2lego/HEAD/mastwood/lego-image-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:20 UTC", "discovered_at": "2026-10-12T06:58:20.000Z" }, { "id": 158882, "urlhaus_id": "3948663", "url": "https://raw.githubusercontent.com/moynaastir205/SkyRoads-Codex/HEAD/crates/skyroads-audio-ref/Codex-Sky-Roads-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:19 UTC", "discovered_at": "2026-10-12T06:58:19.000Z" }, { "id": 158881, "urlhaus_id": "3948662", "url": "https://raw.githubusercontent.com/vanesselo9574/SmartGardenIoT-ESP32/HEAD/laravel/database/Io-Smart-Garden-ES-1.2-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:19 UTC", "discovered_at": "2026-10-12T06:58:19.000Z" }, { "id": 158880, "urlhaus_id": "3948661", "url": "https://raw.githubusercontent.com/BINbzzzzz/league-of-legends-hack-lab/HEAD/pivalic/of-hack-league-lab-legends-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:19 UTC", "discovered_at": "2026-10-12T06:58:19.000Z" }, { "id": 158887, "urlhaus_id": "3948660", "url": "https://raw.githubusercontent.com/LouisPROgramm/ECU-Bypass-Framework-XRS9000/HEAD/camber/Bypass-XR-EC-Framework-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:18 UTC", "discovered_at": "2026-10-12T06:58:18.000Z" }, { "id": 158886, "urlhaus_id": "3948659", "url": "https://raw.githubusercontent.com/Autistic-antidiuretichormone154/Windows-Optimizer/HEAD/proxeny/Windows_Optimizer_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:18 UTC", "discovered_at": "2026-10-12T06:58:18.000Z" }, { "id": 158885, "urlhaus_id": "3948658", "url": "https://raw.githubusercontent.com/Tennesseei161/Telegram-Member-Adder/HEAD/dietician/Telegram_Member_Adder_2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:18 UTC", "discovered_at": "2026-10-12T06:58:18.000Z" }, { "id": 158884, "urlhaus_id": "3948657", "url": "https://raw.githubusercontent.com/aikih9831/DexBar/HEAD/triorchism/Bar_Dex_2.0-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:18 UTC", "discovered_at": "2026-10-12T06:58:18.000Z" }, { "id": 158883, "urlhaus_id": "3948656", "url": "https://raw.githubusercontent.com/reenahot496/claude-code/HEAD/src/tools/ExitPlanModeTool/code-claude-v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:18 UTC", "discovered_at": "2026-10-12T06:58:18.000Z" }, { "id": 158889, "urlhaus_id": "3948655", "url": "https://raw.githubusercontent.com/Mewing2/Omega-Life-loot-drop-trainer/HEAD/peakily/drop_Omega_loot_Life_trainer_v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:17 UTC", "discovered_at": "2026-10-12T06:58:17.000Z" }, { "id": 158888, "urlhaus_id": "3948654", "url": "https://raw.githubusercontent.com/khareemibraheem/EEWParser-Rust/HEAD/src/Parser_Rust_EEW_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:17 UTC", "discovered_at": "2026-10-12T06:58:17.000Z" }, { "id": 158890, "urlhaus_id": "3948653", "url": "https://raw.githubusercontent.com/kristiencertain714/Banned-words/HEAD/Banned-words-list/words-Banned-1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:16 UTC", "discovered_at": "2026-10-12T06:58:16.000Z" }, { "id": 158892, "urlhaus_id": "3948652", "url": "https://raw.githubusercontent.com/SamEricBailey/PlayWright-Framework-PoC/HEAD/tests/performance/C-Wright-Po-Play-Framework-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:15 UTC", "discovered_at": "2026-10-12T06:58:15.000Z" }, { "id": 158891, "urlhaus_id": "3948651", "url": "https://raw.githubusercontent.com/kembang7020/open-swe/HEAD/agent/middleware/swe-open-1.9-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:15 UTC", "discovered_at": "2026-10-12T06:58:15.000Z" }, { "id": 158902, "urlhaus_id": "3948650", "url": "https://raw.githubusercontent.com/Rutherforddry602/sha2-ecdsa/HEAD/src/cluster/ecdsa-sha-2.9-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158901, "urlhaus_id": "3948649", "url": "https://raw.githubusercontent.com/Zeltrin/Particle-Pioneer-Testnet-bot/HEAD/succentor/bot_Particle_Testnet_Pioneer_v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158900, "urlhaus_id": "3948648", "url": "https://raw.githubusercontent.com/benji6783/life-together-rp-script-hub/HEAD/continuable/2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158899, "urlhaus_id": "3948647", "url": "https://raw.githubusercontent.com/blake476bedwell/RoMaV2/HEAD/data/Ma_Ro_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158898, "urlhaus_id": "3948646", "url": "https://raw.githubusercontent.com/VIPkostya42/heartopia-mod-menu/HEAD/corniculate/v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158897, "urlhaus_id": "3948645", "url": "https://raw.githubusercontent.com/sai1987s/youtube-blur-remover/HEAD/scripts/blur_remover_youtube_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158896, "urlhaus_id": "3948644", "url": "https://raw.githubusercontent.com/Waterinsoluble-orderplatyctenea746/book2skills/HEAD/skills/harness-step2-fill-docs/book_skills_3.5-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158895, "urlhaus_id": "3948643", "url": "https://raw.githubusercontent.com/ileanebisectional51/TaskManager/HEAD/unintermitted/Task-Manager-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158894, "urlhaus_id": "3948642", "url": "https://raw.githubusercontent.com/Joint-hynerpetonbassetti583/hackaton-cubepath-2026/HEAD/maceration/hackaton-cubepath-v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158893, "urlhaus_id": "3948641", "url": "https://raw.githubusercontent.com/luis1234321xd/ANEgpt/HEAD/nanochat/tasks/Egpt_AN_2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:14 UTC", "discovered_at": "2026-10-12T06:58:14.000Z" }, { "id": 158905, "urlhaus_id": "3948640", "url": "https://raw.githubusercontent.com/Marinaflagrant322/ICRA2026-Paper-List/HEAD/synthronoi/List-Paper-ICR-2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:13 UTC", "discovered_at": "2026-10-12T06:58:13.000Z" }, { "id": 158904, "urlhaus_id": "3948639", "url": "https://raw.githubusercontent.com/bartolomeimaidenly351/Pnr_converter_Roaming/HEAD/mixochromosome/Roaming_converter_Pnr_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:13 UTC", "discovered_at": "2026-10-12T06:58:13.000Z" }, { "id": 158903, "urlhaus_id": "3948638", "url": "https://raw.githubusercontent.com/noone6954/VMware-Workstation-Player-No-Trial/HEAD/engrossment/Player_Trial_Mware_Workstation_V_No_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:13 UTC", "discovered_at": "2026-10-12T06:58:13.000Z" }, { "id": 158907, "urlhaus_id": "3948637", "url": "https://raw.githubusercontent.com/ILikeThaiFood/argus/HEAD/frontend/app/Software-3.4-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:12 UTC", "discovered_at": "2026-10-12T06:58:12.000Z" }, { "id": 158906, "urlhaus_id": "3948636", "url": "https://raw.githubusercontent.com/keratodermiazhukov571/TopLevelSystem/HEAD/modules/mod_template/Level-System-Top-v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:12 UTC", "discovered_at": "2026-10-12T06:58:12.000Z" }, { "id": 158911, "urlhaus_id": "3948635", "url": "https://raw.githubusercontent.com/YoLo-EnD/jam-cli/HEAD/src/tools/jam-cli-3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:11 UTC", "discovered_at": "2026-10-12T06:58:11.000Z" }, { "id": 158910, "urlhaus_id": "3948634", "url": "https://raw.githubusercontent.com/ehgus6653/AlertTicker-Card/HEAD/nonmicrobic/Alert_Card_Ticker_v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:11 UTC", "discovered_at": "2026-10-12T06:58:11.000Z" }, { "id": 158909, "urlhaus_id": "3948633", "url": "https://raw.githubusercontent.com/XAKLESK/cre-agent-skills/HEAD/claude-code-plugins/cre-brokerage/agent-cre-skills-v3.9-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:11 UTC", "discovered_at": "2026-10-12T06:58:11.000Z" }, { "id": 158908, "urlhaus_id": "3948632", "url": "https://raw.githubusercontent.com/bluechip-correlationalanalysis630/YConstruction/HEAD/epicoelia/Construction_Y_v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:11 UTC", "discovered_at": "2026-10-12T06:58:11.000Z" }, { "id": 158915, "urlhaus_id": "3948631", "url": "https://raw.githubusercontent.com/MirianElena/nvim-external-tui/HEAD/tests/tui_external_nvim_2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:10 UTC", "discovered_at": "2026-10-12T06:58:10.000Z" }, { "id": 158914, "urlhaus_id": "3948630", "url": "https://raw.githubusercontent.com/VicNa559/code-offline/HEAD/agent_data/agent/offline-code-v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:10 UTC", "discovered_at": "2026-10-12T06:58:10.000Z" }, { "id": 158913, "urlhaus_id": "3948629", "url": "https://raw.githubusercontent.com/EDDY7688/openvpn-over-icmp/HEAD/server/ovpn/icmp_over_openvpn_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:10 UTC", "discovered_at": "2026-10-12T06:58:10.000Z" }, { "id": 158912, "urlhaus_id": "3948628", "url": "https://raw.githubusercontent.com/liyamuowner/ScribeBot/HEAD/app/capture-selftest/Bot-Scribe-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:10 UTC", "discovered_at": "2026-10-12T06:58:10.000Z" }, { "id": 158918, "urlhaus_id": "3948627", "url": "https://raw.githubusercontent.com/hossamesam/Vue-mitm-poc/HEAD/ios/Runner/Base.lproj/mitm_Vue_poc_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:09 UTC", "discovered_at": "2026-10-12T06:58:09.000Z" }, { "id": 158917, "urlhaus_id": "3948626", "url": "https://raw.githubusercontent.com/reviewtaipei284/awesome-claudecode-paper-proofreading/HEAD/prompts/awesome-proofreading-paper-claudecode-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:09 UTC", "discovered_at": "2026-10-12T06:58:09.000Z" }, { "id": 158916, "urlhaus_id": "3948625", "url": "https://raw.githubusercontent.com/samuelsab391-afk/airline-flight-delay-analysis/HEAD/tribunitian/flight_analysis_airline_delay_3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:09 UTC", "discovered_at": "2026-10-12T06:58:09.000Z" }, { "id": 158920, "urlhaus_id": "3948624", "url": "https://raw.githubusercontent.com/agustedire542/unityxclaude/HEAD/Editor/Communication/Software_Altair.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:08 UTC", "discovered_at": "2026-10-12T06:58:08.000Z" }, { "id": 158919, "urlhaus_id": "3948623", "url": "https://raw.githubusercontent.com/adelinom2952/restaurant-tycoon-script-hub/HEAD/myelotherapy/v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:08 UTC", "discovered_at": "2026-10-12T06:58:08.000Z" }, { "id": 158922, "urlhaus_id": "3948622", "url": "https://raw.githubusercontent.com/helloworld718/git-history-timeline/HEAD/examples/git-timeline-history-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:07 UTC", "discovered_at": "2026-10-12T06:58:07.000Z" }, { "id": 158921, "urlhaus_id": "3948621", "url": "https://raw.githubusercontent.com/danteanterior266/lerobot-genesis/HEAD/examples/genesis_lerobot_1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:07 UTC", "discovered_at": "2026-10-12T06:58:07.000Z" }, { "id": 158926, "urlhaus_id": "3948620", "url": "https://raw.githubusercontent.com/Mystic-backstroker315/flowcus/HEAD/crates/flowcus-storage/src/codec/Software-3.8-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:06 UTC", "discovered_at": "2026-10-12T06:58:06.000Z" }, { "id": 158925, "urlhaus_id": "3948619", "url": "https://raw.githubusercontent.com/berberisvulgarisprelacy184/one-tap-ws92-script-hub/HEAD/monogeny/2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:06 UTC", "discovered_at": "2026-10-12T06:58:06.000Z" }, { "id": 158924, "urlhaus_id": "3948618", "url": "https://raw.githubusercontent.com/Unpretentious-swatsquad791/soft-ue-cli/HEAD/soft_ue_cli/plugin_data/SoftUEBridge/Source/SoftUEBridgeEditor/Private/Tools/soft_cli_ue_v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:06 UTC", "discovered_at": "2026-10-12T06:58:06.000Z" }, { "id": 158923, "urlhaus_id": "3948617", "url": "https://raw.githubusercontent.com/jazzman08/Adopt-Me-Script/HEAD/cornification/Me_Adopt_Script_2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:06 UTC", "discovered_at": "2026-10-12T06:58:06.000Z" }, { "id": 158928, "urlhaus_id": "3948616", "url": "https://raw.githubusercontent.com/KungBugFuOnYou/tubescrape/HEAD/src/tubescrape/api/routes/Software-magistrality.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:05 UTC", "discovered_at": "2026-10-12T06:58:05.000Z" }, { "id": 158927, "urlhaus_id": "3948615", "url": "https://raw.githubusercontent.com/Ranpops/SpamShield/HEAD/.devcontainer/Shield_Spam_1.0-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:05 UTC", "discovered_at": "2026-10-12T06:58:05.000Z" }, { "id": 158930, "urlhaus_id": "3948614", "url": "https://raw.githubusercontent.com/markko17/strategy-generalization-analysis/HEAD/results/strategy_generalization_analysis_v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:04 UTC", "discovered_at": "2026-10-12T06:58:04.000Z" }, { "id": 158929, "urlhaus_id": "3948613", "url": "https://raw.githubusercontent.com/Eden006/AmaiGirl/HEAD/res/models/Girl_Amai_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:04 UTC", "discovered_at": "2026-10-12T06:58:04.000Z" }, { "id": 158934, "urlhaus_id": "3948612", "url": "https://raw.githubusercontent.com/nyxy5078/TaxiAgent/HEAD/src/main/java/com/fancy/taxiagent/agentbase/amap/pojo/route/Taxi_Agent_2.6-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:03 UTC", "discovered_at": "2026-10-12T06:58:03.000Z" }, { "id": 158933, "urlhaus_id": "3948611", "url": "https://raw.githubusercontent.com/Hikaru17zx/licitaciones-espana/HEAD/valencia/subvenciones/licitaciones_espana_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:03 UTC", "discovered_at": "2026-10-12T06:58:03.000Z" }, { "id": 158932, "urlhaus_id": "3948610", "url": "https://raw.githubusercontent.com/Leesan080425/mssqlbof/HEAD/src/tds/Software-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:03 UTC", "discovered_at": "2026-10-12T06:58:03.000Z" }, { "id": 158931, "urlhaus_id": "3948609", "url": "https://raw.githubusercontent.com/shahi405/enkastela/HEAD/fuzz/fuzz_targets/Software_v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:03 UTC", "discovered_at": "2026-10-12T06:58:03.000Z" }, { "id": 158941, "urlhaus_id": "3948608", "url": "https://raw.githubusercontent.com/reall8164/wechat-openclaw-plugin/HEAD/src/runtime/wechat-plugin-openclaw-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158940, "urlhaus_id": "3948607", "url": "https://raw.githubusercontent.com/warm-mannalichen723/qclaw-skip-invite/HEAD/assets/qclaw_invite_skip_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158939, "urlhaus_id": "3948606", "url": "https://raw.githubusercontent.com/DiscordBotssS/HA_menstrual_gauge/HEAD/custom_components/menstruation_gauge/www/menstrual-H-gauge-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158938, "urlhaus_id": "3948605", "url": "https://raw.githubusercontent.com/kamzy01/TG-WebApp-Proxy/HEAD/src/App_T_Proxy_Web_2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158937, "urlhaus_id": "3948604", "url": "https://raw.githubusercontent.com/EngerING/RemoteDownloaderPHP/HEAD/reviewal/Downloader_Remote_PHP_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158936, "urlhaus_id": "3948603", "url": "https://raw.githubusercontent.com/Dappajordan/wede/HEAD/backend/internal/auth/Software_3.2-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158935, "urlhaus_id": "3948602", "url": "https://raw.githubusercontent.com/salamamuhammad96-sudo/ml-valuation-evaluation-framework/HEAD/reports/evaluation_valuation_framework_ml_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:02 UTC", "discovered_at": "2026-10-12T06:58:02.000Z" }, { "id": 158944, "urlhaus_id": "3948601", "url": "https://raw.githubusercontent.com/Ilikek3310/agent-recall/HEAD/parisis/agent-recall-v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:01 UTC", "discovered_at": "2026-10-12T06:58:01.000Z" }, { "id": 158943, "urlhaus_id": "3948600", "url": "https://raw.githubusercontent.com/65y6650/hermes-lcm/HEAD/scripts/hermes_lcm_v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:01 UTC", "discovered_at": "2026-10-12T06:58:01.000Z" }, { "id": 158942, "urlhaus_id": "3948599", "url": "https://raw.githubusercontent.com/rinomakin21/w5-football-prediction/HEAD/src/data/football-w-prediction-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:01 UTC", "discovered_at": "2026-10-12T06:58:01.000Z" }, { "id": 158946, "urlhaus_id": "3948598", "url": "https://raw.githubusercontent.com/hosksj/Clothers-AnalysisAndSegmentation/HEAD/disarray/Clothers-Segmentation-Analysis-And-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:00 UTC", "discovered_at": "2026-10-12T06:58:00.000Z" }, { "id": 158945, "urlhaus_id": "3948597", "url": "https://raw.githubusercontent.com/kaiphrox/AI-Skills/HEAD/scripts/Skills-A-dimensionally.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:58:00 UTC", "discovered_at": "2026-10-12T06:58:00.000Z" }, { "id": 158949, "urlhaus_id": "3948596", "url": "https://raw.githubusercontent.com/carolafortified787/codex-plugin-cc/HEAD/plugins/codex/.claude-plugin/cc_plugin_codex_3.6-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:59 UTC", "discovered_at": "2026-10-12T06:57:59.000Z" }, { "id": 158948, "urlhaus_id": "3948595", "url": "https://raw.githubusercontent.com/temboohms68/Flipper-Zero-IR-Signal-Generator/HEAD/kitcheny/Generator-Flipper-I-Signal-Zero-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:59 UTC", "discovered_at": "2026-10-12T06:57:59.000Z" }, { "id": 158947, "urlhaus_id": "3948594", "url": "https://raw.githubusercontent.com/Lindakimno1844/scribe-ai-engine/HEAD/nasitis/ai_scribe_engine_3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:59 UTC", "discovered_at": "2026-10-12T06:57:59.000Z" }, { "id": 158954, "urlhaus_id": "3948593", "url": "https://raw.githubusercontent.com/rgoldr88/claude-rlm/HEAD/rlm-skill/rlm-claude-v1.7-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:58 UTC", "discovered_at": "2026-10-12T06:57:58.000Z" }, { "id": 158953, "urlhaus_id": "3948592", "url": "https://raw.githubusercontent.com/paraplegic-upperavon116/ei-ToDoListSenacLesson/HEAD/specification/assets/ei_Senac_Lesson_To_Do_List_v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:58 UTC", "discovered_at": "2026-10-12T06:57:58.000Z" }, { "id": 158952, "urlhaus_id": "3948591", "url": "https://raw.githubusercontent.com/Lauricamphoric300/Termux-Commands/HEAD/Photos/Commands-Termux-v2.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:58 UTC", "discovered_at": "2026-10-12T06:57:58.000Z" }, { "id": 158951, "urlhaus_id": "3948590", "url": "https://raw.githubusercontent.com/Gak6900/awesome-frontend-skills/HEAD/mastodont/awesome_frontend_skills_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:58 UTC", "discovered_at": "2026-10-12T06:57:58.000Z" }, { "id": 158950, "urlhaus_id": "3948589", "url": "https://raw.githubusercontent.com/brittcaloric720/steam-tools/HEAD/tools/tools_steam_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:58 UTC", "discovered_at": "2026-10-12T06:57:58.000Z" }, { "id": 158955, "urlhaus_id": "3948588", "url": "https://raw.githubusercontent.com/Kalantashighereducation540/Fortnite-Vortex-2026/HEAD/homeomorphic/Fortnite-Vortex-3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:57 UTC", "discovered_at": "2026-10-12T06:57:57.000Z" }, { "id": 158960, "urlhaus_id": "3948587", "url": "https://raw.githubusercontent.com/Prajankumar001/youtube-title-generator/HEAD/scripts/youtube-title-generator-2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:56 UTC", "discovered_at": "2026-10-12T06:57:56.000Z" }, { "id": 158959, "urlhaus_id": "3948586", "url": "https://raw.githubusercontent.com/Aseptic-melaguetapepper552/backtesting/HEAD/counselee/Software-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:56 UTC", "discovered_at": "2026-10-12T06:57:56.000Z" }, { "id": 158958, "urlhaus_id": "3948585", "url": "https://raw.githubusercontent.com/bo33bood/Tuneify-Music-App/HEAD/com.Tuneify-Music-App/src/main/java/com/App_Tuneify_Music_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:56 UTC", "discovered_at": "2026-10-12T06:57:56.000Z" }, { "id": 158957, "urlhaus_id": "3948584", "url": "https://raw.githubusercontent.com/Leptospirasheepcote429/ScreenBrain/HEAD/ScreenBrain/App/Brain-Screen-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:56 UTC", "discovered_at": "2026-10-12T06:57:56.000Z" }, { "id": 158956, "urlhaus_id": "3948583", "url": "https://raw.githubusercontent.com/verathorn/likhis/HEAD/internal/exporters/Software_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:56 UTC", "discovered_at": "2026-10-12T06:57:56.000Z" }, { "id": 158962, "urlhaus_id": "3948582", "url": "https://raw.githubusercontent.com/Timesukkumnerd/resonant-archive/HEAD/skills/archive_resonant_3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:55 UTC", "discovered_at": "2026-10-12T06:57:55.000Z" }, { "id": 158961, "urlhaus_id": "3948581", "url": "https://raw.githubusercontent.com/ibnuahkam/mawaqit-prayer-display/HEAD/data/prayer_display_mawaqit_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:55 UTC", "discovered_at": "2026-10-12T06:57:55.000Z" }, { "id": 158964, "urlhaus_id": "3948580", "url": "https://raw.githubusercontent.com/bridgepartnershoe860/harness-engineering-from-cc-to-ai-coding/HEAD/examples/coding-ai-cc-to-harness-from-engineering-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:54 UTC", "discovered_at": "2026-10-12T06:57:54.000Z" }, { "id": 158963, "urlhaus_id": "3948579", "url": "https://raw.githubusercontent.com/confirmed-asiancoralsnake620/bobbie-releases/HEAD/megasclere/releases-bobbie-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:54 UTC", "discovered_at": "2026-10-12T06:57:54.000Z" }, { "id": 158965, "urlhaus_id": "3948578", "url": "https://raw.githubusercontent.com/Ajaykumar-8307/zola-theme-cyber-walk/HEAD/static/zola-cyber-theme-walk-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:53 UTC", "discovered_at": "2026-10-12T06:57:53.000Z" }, { "id": 158968, "urlhaus_id": "3948577", "url": "https://raw.githubusercontent.com/dwdmslm86-a11y/valorant-hack-aim-esp-lab/HEAD/pheon/2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:52 UTC", "discovered_at": "2026-10-12T06:57:52.000Z" }, { "id": 158967, "urlhaus_id": "3948576", "url": "https://raw.githubusercontent.com/dubious-pinetum918/clix/HEAD/clix/mcp/Software-v2.1-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:52 UTC", "discovered_at": "2026-10-12T06:57:52.000Z" }, { "id": 158966, "urlhaus_id": "3948575", "url": "https://raw.githubusercontent.com/MahmutLXD/beautyoura-website/HEAD/chuprassy/website_beautyoura_v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:52 UTC", "discovered_at": "2026-10-12T06:57:52.000Z" }, { "id": 158974, "urlhaus_id": "3948574", "url": "https://raw.githubusercontent.com/Oscar22222224gtggf/shopify-github-command-list/HEAD/whorled/list-shopify-command-github-2.9-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158973, "urlhaus_id": "3948573", "url": "https://raw.githubusercontent.com/pieterbesieged17/lavalink-hosting/HEAD/timelily/lavalink_hosting_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158972, "urlhaus_id": "3948572", "url": "https://raw.githubusercontent.com/bahruddinrm/seomachine/HEAD/output/Software-instrengthen.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158971, "urlhaus_id": "3948571", "url": "https://raw.githubusercontent.com/maycko22/SlimeHologram/HEAD/base/src/main/Slime-Hologram-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158970, "urlhaus_id": "3948570", "url": "https://raw.githubusercontent.com/AshwiniP05/WerZatSonGUI/HEAD/Scaphites/2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158969, "urlhaus_id": "3948569", "url": "https://raw.githubusercontent.com/squaretoed-manholecover705/pdf-password-unlocker/HEAD/ameliorate/pdf_password_unlocker_subvirate.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:51 UTC", "discovered_at": "2026-10-12T06:57:51.000Z" }, { "id": 158978, "urlhaus_id": "3948568", "url": "https://raw.githubusercontent.com/instrumentoftortureprofile691/deskwoot-js/HEAD/docs/deskwoot_js_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:50 UTC", "discovered_at": "2026-10-12T06:57:50.000Z" }, { "id": 158977, "urlhaus_id": "3948567", "url": "https://raw.githubusercontent.com/Shamussuited879/codex-on-desk/HEAD/src/dashboard/on_codex_desk_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:50 UTC", "discovered_at": "2026-10-12T06:57:50.000Z" }, { "id": 158976, "urlhaus_id": "3948566", "url": "https://raw.githubusercontent.com/mohdhasnain786/html-complete-course/HEAD/undivulged/html-course-complete-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:50 UTC", "discovered_at": "2026-10-12T06:57:50.000Z" }, { "id": 158975, "urlhaus_id": "3948565", "url": "https://raw.githubusercontent.com/QuesoVfx/awesome-shortcuts/HEAD/coagent/awesome_shortcuts_v2.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:50 UTC", "discovered_at": "2026-10-12T06:57:50.000Z" }, { "id": 158985, "urlhaus_id": "3948564", "url": "https://raw.githubusercontent.com/Alerandre123/trexo-pdf-signer/HEAD/website/src/pdf-trexo-signer-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158984, "urlhaus_id": "3948563", "url": "https://raw.githubusercontent.com/creamdede/Void-Nuke/HEAD/enticement/Nuke-Void-1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158983, "urlhaus_id": "3948562", "url": "https://raw.githubusercontent.com/xGeoMetric/calculator/HEAD/unlapsed/Software_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158982, "urlhaus_id": "3948561", "url": "https://raw.githubusercontent.com/dessert9431/awesome-ai-friendly-cli/HEAD/presuperficially/friendly-awesome-ai-cli-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158981, "urlhaus_id": "3948560", "url": "https://raw.githubusercontent.com/bryanppa5478/-Discord-OSINT-Transform-for-Maltego/HEAD/ghostish/OSIN_Transform_Maltego_Discord_for_1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158980, "urlhaus_id": "3948559", "url": "https://raw.githubusercontent.com/Shourya0609/forecasting_the_US_treasury_yield_curve/HEAD/troner/yield-curve-treasury-forecasting-the-U-1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158979, "urlhaus_id": "3948558", "url": "https://raw.githubusercontent.com/jonath3390/fashion-ecommerce-website/HEAD/nephrophthisis/fashion_website_ecommerce_hereditist.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:49 UTC", "discovered_at": "2026-10-12T06:57:49.000Z" }, { "id": 158989, "urlhaus_id": "3948557", "url": "https://raw.githubusercontent.com/mikenob39wang/phone-number-location-tracking-tool/HEAD/Jacobinically/location_number_tracking_tool_phone_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:48 UTC", "discovered_at": "2026-10-12T06:57:48.000Z" }, { "id": 158988, "urlhaus_id": "3948556", "url": "https://raw.githubusercontent.com/cardiovascular-ponytail533/deadlock-script-loader-2026/HEAD/Aimee/loader_script_deadlock_v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:48 UTC", "discovered_at": "2026-10-12T06:57:48.000Z" }, { "id": 158987, "urlhaus_id": "3948555", "url": "https://raw.githubusercontent.com/twelve-today822/JuAI/HEAD/assets/AI_Ju_riverwards.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:48 UTC", "discovered_at": "2026-10-12T06:57:48.000Z" }, { "id": 158986, "urlhaus_id": "3948554", "url": "https://raw.githubusercontent.com/styven2022/whatsapp-chatbot/HEAD/demulsibility/chatbot_whatsapp_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:48 UTC", "discovered_at": "2026-10-12T06:57:48.000Z" }, { "id": 158994, "urlhaus_id": "3948553", "url": "https://raw.githubusercontent.com/connorssubmitter868/crackwifi/HEAD/aniseed/Software_2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:47 UTC", "discovered_at": "2026-10-12T06:57:47.000Z" }, { "id": 158993, "urlhaus_id": "3948552", "url": "https://raw.githubusercontent.com/Daleneanderthal2025/data-collection-projects/HEAD/doctolib-scraping/projects_collection_data_v1.7-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:47 UTC", "discovered_at": "2026-10-12T06:57:47.000Z" }, { "id": 158992, "urlhaus_id": "3948551", "url": "https://raw.githubusercontent.com/abuttan1979/VLN-YuanNav/HEAD/vln/project/Yuan-Nav-VL-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:47 UTC", "discovered_at": "2026-10-12T06:57:47.000Z" }, { "id": 158991, "urlhaus_id": "3948550", "url": "https://raw.githubusercontent.com/juiceless-drapery236/.github/HEAD/profile/github-v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:47 UTC", "discovered_at": "2026-10-12T06:57:47.000Z" }, { "id": 158990, "urlhaus_id": "3948549", "url": "https://raw.githubusercontent.com/Florisheedless915/grok-register/HEAD/vendor/grok2api/_public/static/function/register_grok_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:47 UTC", "discovered_at": "2026-10-12T06:57:47.000Z" }, { "id": 158996, "urlhaus_id": "3948548", "url": "https://raw.githubusercontent.com/nunzioaccording289/ai-skill-hub/HEAD/subpiston/hub_skill_ai_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:46 UTC", "discovered_at": "2026-10-12T06:57:46.000Z" }, { "id": 158995, "urlhaus_id": "3948547", "url": "https://raw.githubusercontent.com/melabase781/StartupSpy/HEAD/ViewModels/Startup_Spy_3.8-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:46 UTC", "discovered_at": "2026-10-12T06:57:46.000Z" }, { "id": 158999, "urlhaus_id": "3948546", "url": "https://raw.githubusercontent.com/yassine3010/awesome-image-generation/HEAD/pasteurize/generation_image_awesome_1.4-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:45 UTC", "discovered_at": "2026-10-12T06:57:45.000Z" }, { "id": 158998, "urlhaus_id": "3948545", "url": "https://raw.githubusercontent.com/Elseysidebyside696/rust-recoil-pattern-research/HEAD/contemplator/pattern_research_recoil_rust_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:45 UTC", "discovered_at": "2026-10-12T06:57:45.000Z" }, { "id": 158997, "urlhaus_id": "3948544", "url": "https://raw.githubusercontent.com/Seamed-boardroom443/jump-steal-script-hub-2026/HEAD/coevally/steal-script-jump-hub-v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:45 UTC", "discovered_at": "2026-10-12T06:57:45.000Z" }, { "id": 159001, "urlhaus_id": "3948543", "url": "https://raw.githubusercontent.com/aserrato7n/academic_paper_generation/HEAD/flummer/academic-generation-paper-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:43 UTC", "discovered_at": "2026-10-12T06:57:43.000Z" }, { "id": 159000, "urlhaus_id": "3948542", "url": "https://raw.githubusercontent.com/Samuray49/awesome-ai-agent-testing/HEAD/allogeneous/testing_awesome_ai_agent_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:43 UTC", "discovered_at": "2026-10-12T06:57:43.000Z" }, { "id": 159003, "urlhaus_id": "3948541", "url": "https://raw.githubusercontent.com/isco357/robinhood-auto-testnet/HEAD/src/testnet_robinhood_auto_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:42 UTC", "discovered_at": "2026-10-12T06:57:42.000Z" }, { "id": 159002, "urlhaus_id": "3948540", "url": "https://raw.githubusercontent.com/ScottJame/Resonance-A-Plague-Tale-Legacy-Trainer/HEAD/assets/burg.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:42 UTC", "discovered_at": "2026-10-12T06:57:42.000Z" }, { "id": 159011, "urlhaus_id": "3948539", "url": "https://raw.githubusercontent.com/Mirthful-joiner511/SamFonts/HEAD/Caingang/Sam_Fonts_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159010, "urlhaus_id": "3948538", "url": "https://raw.githubusercontent.com/j4tech236/ShimaStyle/HEAD/layout/Library/PreferenceLoader/Preferences/Shima-Style-pebbly.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159009, "urlhaus_id": "3948537", "url": "https://raw.githubusercontent.com/Barbariannj/Rat-Remote-Access/HEAD/latheron/Access-Rat-Remote-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159008, "urlhaus_id": "3948536", "url": "https://raw.githubusercontent.com/Rubonal4649/ai-engineering-from-scratch/HEAD/phases/10-llms-from-scratch/08-dpo/outputs/ai-engineering-from-scratch-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159007, "urlhaus_id": "3948535", "url": "https://raw.githubusercontent.com/twelfth-puerperium297/tokenoptim/HEAD/skills/full/Software-Lithodes.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159006, "urlhaus_id": "3948534", "url": "https://raw.githubusercontent.com/Mammoth-countsminute684/shredstream-sdk-python/HEAD/assets/shredstream_sdk_python_3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159005, "urlhaus_id": "3948533", "url": "https://raw.githubusercontent.com/nikimanki1337228-oss/hunt-showdown-menu/HEAD/defiber/showdown-hunt-menu-v1.7-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159004, "urlhaus_id": "3948532", "url": "https://raw.githubusercontent.com/Zenitho-Live/PythonToEXE/HEAD/app/core/Python_To_EXE_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:40 UTC", "discovered_at": "2026-10-12T06:57:40.000Z" }, { "id": 159016, "urlhaus_id": "3948531", "url": "https://raw.githubusercontent.com/Algometryorphansite609/aws-lift-shift-migration/HEAD/terraform/modules/dms/migration_aws_lift_shift_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:39 UTC", "discovered_at": "2026-10-12T06:57:39.000Z" }, { "id": 159015, "urlhaus_id": "3948530", "url": "https://raw.githubusercontent.com/Marigoldaculeate869/Virtual-Food-Photographer/HEAD/src/components/Virtual_Food_Photographer_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:39 UTC", "discovered_at": "2026-10-12T06:57:39.000Z" }, { "id": 159014, "urlhaus_id": "3948529", "url": "https://raw.githubusercontent.com/dikdi419/refract-update-loader/HEAD/begloom/loader-update-refract-1.2-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:39 UTC", "discovered_at": "2026-10-12T06:57:39.000Z" }, { "id": 159013, "urlhaus_id": "3948528", "url": "https://raw.githubusercontent.com/ridged-drosophyllumlusitanicum439/reVC-Wii/HEAD/Tacca/3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:39 UTC", "discovered_at": "2026-10-12T06:57:39.000Z" }, { "id": 159012, "urlhaus_id": "3948527", "url": "https://raw.githubusercontent.com/mitchellrevill123/PtionsPlus/HEAD/PtionsPlus.xcodeproj/Ptions-Plus-v3.1-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:39 UTC", "discovered_at": "2026-10-12T06:57:39.000Z" }, { "id": 159019, "urlhaus_id": "3948526", "url": "https://raw.githubusercontent.com/Symphonic-ovibos446/Medusa-FH6-v2.Menu/HEAD/loricoid/3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:38 UTC", "discovered_at": "2026-10-12T06:57:38.000Z" }, { "id": 159018, "urlhaus_id": "3948525", "url": "https://raw.githubusercontent.com/buitranxuanhuy/frankenfs/HEAD/artifacts/e2e/20260212_161747_ffs_smoke/Software_1.7-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:38 UTC", "discovered_at": "2026-10-12T06:57:38.000Z" }, { "id": 159017, "urlhaus_id": "3948524", "url": "https://raw.githubusercontent.com/Louis1larry/NotSkype/HEAD/allottable/Skype_Not_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:38 UTC", "discovered_at": "2026-10-12T06:57:38.000Z" }, { "id": 159028, "urlhaus_id": "3948523", "url": "https://raw.githubusercontent.com/MaruScheffer/J2ME-Web-Core/HEAD/games/archive/Web_M_Core_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159027, "urlhaus_id": "3948522", "url": "https://raw.githubusercontent.com/expeditious-wind179/vibe-isometric-sprites/HEAD/Eucirripedia/sprites_vibe_isometric_v1.9-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159026, "urlhaus_id": "3948521", "url": "https://raw.githubusercontent.com/adam0360/Web-Scraper-for-E-commerce/HEAD/glycogenous/for-commerce-Scraper-Web-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159025, "urlhaus_id": "3948520", "url": "https://raw.githubusercontent.com/Duffelcoatterpsichore141/iam-lite/HEAD/tests/iam-lite-v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159024, "urlhaus_id": "3948519", "url": "https://raw.githubusercontent.com/younger-osage691/any2pdf/HEAD/lovstudio-any2pdf/pdf_any_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159023, "urlhaus_id": "3948518", "url": "https://raw.githubusercontent.com/poinote9/ExigeOS/HEAD/src/Exige-OS-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159022, "urlhaus_id": "3948517", "url": "https://raw.githubusercontent.com/riawat511/club-5060ti/HEAD/data/schema/club-ti-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159021, "urlhaus_id": "3948516", "url": "https://raw.githubusercontent.com/Lapk0m/n01d-overwatch/HEAD/Shared/overwatch-n-d-2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159020, "urlhaus_id": "3948515", "url": "https://raw.githubusercontent.com/Matita8730/Grain-Rot-Trainer/HEAD/madreporitic/1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:37 UTC", "discovered_at": "2026-10-12T06:57:37.000Z" }, { "id": 159030, "urlhaus_id": "3948514", "url": "https://raw.githubusercontent.com/K4LLER/stigmergic-tracefinder/HEAD/aortarctia/stigmergic-tracefinder-1.3-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:36 UTC", "discovered_at": "2026-10-12T06:57:36.000Z" }, { "id": 159029, "urlhaus_id": "3948513", "url": "https://raw.githubusercontent.com/zainow000/claudecodeui/HEAD/src/components/task-master/context/Software_3.3-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:36 UTC", "discovered_at": "2026-10-12T06:57:36.000Z" }, { "id": 159035, "urlhaus_id": "3948512", "url": "https://raw.githubusercontent.com/mapiatoto81-byte/Whatsapp-Dekstop/HEAD/vendor/github.com/jchv/go-webview2/webviewloader/sdk/x86/v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:35 UTC", "discovered_at": "2026-10-12T06:57:35.000Z" }, { "id": 159034, "urlhaus_id": "3948511", "url": "https://raw.githubusercontent.com/Caylaunpredictable245/AnimePahe/HEAD/core/Pahe-Anime-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:35 UTC", "discovered_at": "2026-10-12T06:57:35.000Z" }, { "id": 159033, "urlhaus_id": "3948510", "url": "https://raw.githubusercontent.com/Arhankabirzi/vite-plugin-component-debugger/HEAD/soup/plugin_component_debugger_vite_v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:35 UTC", "discovered_at": "2026-10-12T06:57:35.000Z" }, { "id": 159032, "urlhaus_id": "3948509", "url": "https://raw.githubusercontent.com/cacodaemonic-impulseexplosive956/claude_code_src/HEAD/thenceforwards/src_code_claude_v3.8-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:35 UTC", "discovered_at": "2026-10-12T06:57:35.000Z" }, { "id": 159031, "urlhaus_id": "3948508", "url": "https://raw.githubusercontent.com/Bicapsular-consulate683/abitragebot/HEAD/src/fast-landing-api/Software-3.5-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:35 UTC", "discovered_at": "2026-10-12T06:57:35.000Z" }, { "id": 159036, "urlhaus_id": "3948507", "url": "https://raw.githubusercontent.com/Juanvil9941/AI-Invoice-System/HEAD/frontend/src/lib/Invoice_A_System_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:34 UTC", "discovered_at": "2026-10-12T06:57:34.000Z" }, { "id": 159037, "urlhaus_id": "3948506", "url": "https://raw.githubusercontent.com/shoedactylorhizamaculatafuchsii29/osint-username-search/HEAD/polybasicity/username_osint_search_capreolar.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:33 UTC", "discovered_at": "2026-10-12T06:57:33.000Z" }, { "id": 159038, "urlhaus_id": "3948505", "url": "https://raw.githubusercontent.com/techspireinnovation/MindAct/HEAD/examples/skills/yolov8-industrial-finetune/references/Act_Mind_v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:32 UTC", "discovered_at": "2026-10-12T06:57:32.000Z" }, { "id": 159039, "urlhaus_id": "3948504", "url": "https://raw.githubusercontent.com/hiothere/reflexio/HEAD/docs/examples/Software_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:31 UTC", "discovered_at": "2026-10-12T06:57:31.000Z" }, { "id": 159041, "urlhaus_id": "3948503", "url": "https://raw.githubusercontent.com/sansoz/pz-mod-menu/HEAD/barrenly/menu_mod_pz_1.6-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:30 UTC", "discovered_at": "2026-10-12T06:57:30.000Z" }, { "id": 159040, "urlhaus_id": "3948502", "url": "https://raw.githubusercontent.com/Marjathirtyfour391/polymarket-trading-bot-ai-model-btc-5m-15m-1h-stacked-ensemble-xgboost-lightgbm/HEAD/docs/images/2.4-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:30 UTC", "discovered_at": "2026-10-12T06:57:30.000Z" }, { "id": 159042, "urlhaus_id": "3948501", "url": "https://raw.githubusercontent.com/Truelobsterrumcocktail359/lucky-block-script-loader/HEAD/ericineous/v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:29 UTC", "discovered_at": "2026-10-12T06:57:29.000Z" }, { "id": 159046, "urlhaus_id": "3948500", "url": "https://raw.githubusercontent.com/thien1324/TraversalNavigationDataPlugin/HEAD/Source/TraversalNavData/Navigation-Traversal-Plugin-Data-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:28 UTC", "discovered_at": "2026-10-12T06:57:28.000Z" }, { "id": 159045, "urlhaus_id": "3948499", "url": "https://raw.githubusercontent.com/caiyo-slim/Higgs_v3-TTS-ComfyUI/HEAD/example_workflows/Comfy-TT-Higgs-v-UI-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:28 UTC", "discovered_at": "2026-10-12T06:57:28.000Z" }, { "id": 159044, "urlhaus_id": "3948498", "url": "https://raw.githubusercontent.com/Danghaiye7797/call-of-duty-script-hub/HEAD/carbonylic/duty_script_call_hub_of_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:28 UTC", "discovered_at": "2026-10-12T06:57:28.000Z" }, { "id": 159043, "urlhaus_id": "3948497", "url": "https://raw.githubusercontent.com/noncollapsable-cultivation470/n2k/HEAD/internal/adapter/k-n-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:28 UTC", "discovered_at": "2026-10-12T06:57:28.000Z" }, { "id": 159055, "urlhaus_id": "3948496", "url": "https://raw.githubusercontent.com/Henriksidelong63/7-days-to-die-trainer/HEAD/7-days-to-die-trainer/src/test/java/com/sevendaystodie/die-trainer-days-to-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159054, "urlhaus_id": "3948495", "url": "https://raw.githubusercontent.com/JLABUAN/open-agent-sdk-rust/HEAD/examples/open_agent_rust_sdk_v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159053, "urlhaus_id": "3948494", "url": "https://raw.githubusercontent.com/sarmadshakeel/fastscaff/HEAD/fastscaff/templates/Software_v3.9-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159052, "urlhaus_id": "3948493", "url": "https://raw.githubusercontent.com/ivanievillpuff/LinqContraband/HEAD/tests/LinqContraband.Tests/Analyzers/LC016_AvoidDateTimeNow/Contraband-Linq-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159051, "urlhaus_id": "3948492", "url": "https://raw.githubusercontent.com/Infini8y/Apex-Trading/HEAD/kubernetes/Apex-Trading-v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159050, "urlhaus_id": "3948491", "url": "https://raw.githubusercontent.com/rychardsonaguar-art/qiaomu-music-player-ncm/HEAD/references/music_qiaomu_ncm_player_1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159049, "urlhaus_id": "3948490", "url": "https://raw.githubusercontent.com/Deracz/RyExploit/HEAD/elastin/Ry_Exploit_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159048, "urlhaus_id": "3948489", "url": "https://raw.githubusercontent.com/rosehome2/ultimate-linux/HEAD/Ceratophrys/linux-ultimate-v1.2-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159047, "urlhaus_id": "3948488", "url": "https://raw.githubusercontent.com/demoncrom/dont-reset-password/HEAD/supabase/functions/vote/dont-password-reset-2.6-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:27 UTC", "discovered_at": "2026-10-12T06:57:27.000Z" }, { "id": 159063, "urlhaus_id": "3948487", "url": "https://raw.githubusercontent.com/Perjala1833/Work_Review/HEAD/src-tauri/src/Work-Review-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159062, "urlhaus_id": "3948486", "url": "https://raw.githubusercontent.com/preparebuddyy/n8n-self-hosted/HEAD/diagrammatic/hosted-n-self-v2.9-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159061, "urlhaus_id": "3948485", "url": "https://raw.githubusercontent.com/Isometrical-selection572/claude_code_cli/HEAD/src/components/LspRecommendation/code-claude-cli-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159060, "urlhaus_id": "3948484", "url": "https://raw.githubusercontent.com/Armillary-italy713/Smart-Config-Kit/HEAD/FlClash/Config_Kit_Smart_v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159059, "urlhaus_id": "3948483", "url": "https://raw.githubusercontent.com/LucaRain/ECommerce-Api/HEAD/src/ECommerce.Application/DTOs/Product/Api-E-Commerce-Huchnom.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159058, "urlhaus_id": "3948482", "url": "https://raw.githubusercontent.com/straight-nyctereutes110/free-claude-code/HEAD/src/free_code_claude_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159057, "urlhaus_id": "3948481", "url": "https://raw.githubusercontent.com/sigridcorrupting777/nano-claude-code/HEAD/assets/claude_code_nano_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159056, "urlhaus_id": "3948480", "url": "https://raw.githubusercontent.com/lorgnettelicentiate468/autoresearch-crypto/HEAD/omnivalence/autoresearch_crypto_v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:26 UTC", "discovered_at": "2026-10-12T06:57:26.000Z" }, { "id": 159068, "urlhaus_id": "3948479", "url": "https://raw.githubusercontent.com/Filearsip/wapp/HEAD/helices/Software_v3.5-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:25 UTC", "discovered_at": "2026-10-12T06:57:25.000Z" }, { "id": 159067, "urlhaus_id": "3948478", "url": "https://raw.githubusercontent.com/Spongecanceroftheliver64/f5_safezones/HEAD/penalization/safezones_f_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:25 UTC", "discovered_at": "2026-10-12T06:57:25.000Z" }, { "id": 159066, "urlhaus_id": "3948477", "url": "https://raw.githubusercontent.com/godddd333/PUBG-Hack---PUBG-Aimbot-ESP-2026/HEAD/synchronously/1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:25 UTC", "discovered_at": "2026-10-12T06:57:25.000Z" }, { "id": 159065, "urlhaus_id": "3948476", "url": "https://raw.githubusercontent.com/cellularphonedolly511/Solana-Token-Staking-Smart-Contract/HEAD/programs/tapestry-explorer-statking-contract/Contract-Solana-Smart-Staking-Token-v1.9-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:25 UTC", "discovered_at": "2026-10-12T06:57:25.000Z" }, { "id": 159064, "urlhaus_id": "3948475", "url": "https://raw.githubusercontent.com/vpsdugiya/Fishing-planet-mod-2026/HEAD/hyperphalangism/planet-mod-Fishing-v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:25 UTC", "discovered_at": "2026-10-12T06:57:25.000Z" }, { "id": 159071, "urlhaus_id": "3948474", "url": "https://raw.githubusercontent.com/Spiritofturpentineawe96/MiroFish-EN/HEAD/normal/Miro-Fish-EN-3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:24 UTC", "discovered_at": "2026-10-12T06:57:24.000Z" }, { "id": 159070, "urlhaus_id": "3948473", "url": "https://raw.githubusercontent.com/OmarAhad/lrc/HEAD/docs/Software_v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:24 UTC", "discovered_at": "2026-10-12T06:57:24.000Z" }, { "id": 159069, "urlhaus_id": "3948472", "url": "https://raw.githubusercontent.com/Tecky50/seedance-api/HEAD/adytum/api-seedance-diaheliotropically.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:24 UTC", "discovered_at": "2026-10-12T06:57:24.000Z" }, { "id": 159073, "urlhaus_id": "3948471", "url": "https://raw.githubusercontent.com/howardNMClan/Metabolic-Tokenomics/HEAD/loathsomely/Metabolic-Tokenomics-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:23 UTC", "discovered_at": "2026-10-12T06:57:23.000Z" }, { "id": 159072, "urlhaus_id": "3948470", "url": "https://raw.githubusercontent.com/klkape6358/MOUSE-P.I.-For-Hire-Release-Game-Desktop-Version/HEAD/Code/Desktop-Release-Version-Game-MOUS-For-Hire-3.3-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:23 UTC", "discovered_at": "2026-10-12T06:57:23.000Z" }, { "id": 159077, "urlhaus_id": "3948469", "url": "https://raw.githubusercontent.com/Wheyecologicalwarfare3565/proofodds/HEAD/tests/v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:21 UTC", "discovered_at": "2026-10-12T06:57:21.000Z" }, { "id": 159076, "urlhaus_id": "3948468", "url": "https://raw.githubusercontent.com/FranckDJOUKWE/OSX4VM/HEAD/OpenCore/EFI/OC/Kexts/VirtualSMC.kext/Contents/VM_OS_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:21 UTC", "discovered_at": "2026-10-12T06:57:21.000Z" }, { "id": 159075, "urlhaus_id": "3948467", "url": "https://raw.githubusercontent.com/Corkoakbartholdgeorgeniebuhr336/deadlock-internal-script-executor/HEAD/humidityproof/internal_script_deadlock_executor_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:21 UTC", "discovered_at": "2026-10-12T06:57:21.000Z" }, { "id": 159074, "urlhaus_id": "3948466", "url": "https://raw.githubusercontent.com/wagawgaw/Pumpfun-Sniper-Bot/HEAD/DexLab/Pumpfun-Bot-Sniper-v3.5-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:21 UTC", "discovered_at": "2026-10-12T06:57:21.000Z" }, { "id": 159078, "urlhaus_id": "3948465", "url": "https://raw.githubusercontent.com/bhavya7995/AI_governance/HEAD/usage/A_governance_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:19 UTC", "discovered_at": "2026-10-12T06:57:19.000Z" }, { "id": 159081, "urlhaus_id": "3948464", "url": "https://raw.githubusercontent.com/Pointcosmologist787/audiophiles-dream/HEAD/screenshots/audiophiles_dream_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:18 UTC", "discovered_at": "2026-10-12T06:57:18.000Z" }, { "id": 159080, "urlhaus_id": "3948463", "url": "https://raw.githubusercontent.com/victormendozamx/crypto-data-aggregator/HEAD/src/app/api/v1/defi/crypto_aggregator_data_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:18 UTC", "discovered_at": "2026-10-12T06:57:18.000Z" }, { "id": 159079, "urlhaus_id": "3948462", "url": "https://raw.githubusercontent.com/abundhance12/free-VPN/HEAD/octaploid/VPN_free_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:18 UTC", "discovered_at": "2026-10-12T06:57:18.000Z" }, { "id": 159086, "urlhaus_id": "3948461", "url": "https://raw.githubusercontent.com/Ahmed-Mazh2r/AgentMind/HEAD/examples/Mind-Agent-3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:16 UTC", "discovered_at": "2026-10-12T06:57:16.000Z" }, { "id": 159085, "urlhaus_id": "3948460", "url": "https://raw.githubusercontent.com/Marshanda14816/agent-skills/HEAD/skills/agent-skills-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:16 UTC", "discovered_at": "2026-10-12T06:57:16.000Z" }, { "id": 159084, "urlhaus_id": "3948459", "url": "https://raw.githubusercontent.com/AngelicaArabe/OTA-IOT/HEAD/include/IOT_OT_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:16 UTC", "discovered_at": "2026-10-12T06:57:16.000Z" }, { "id": 159083, "urlhaus_id": "3948458", "url": "https://raw.githubusercontent.com/Fazechristian00/FilzaJailedDS/HEAD/XPF/external/ChOma/include/DS_Filza_Jailed_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:16 UTC", "discovered_at": "2026-10-12T06:57:16.000Z" }, { "id": 159082, "urlhaus_id": "3948457", "url": "https://raw.githubusercontent.com/tensei3san/API-Header-Spoofer/HEAD/houseleek/Spoofer-Header-AP-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:16 UTC", "discovered_at": "2026-10-12T06:57:16.000Z" }, { "id": 159095, "urlhaus_id": "3948456", "url": "https://raw.githubusercontent.com/jacobvr186/OpenBook/HEAD/tests/unit/Book-Open-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159094, "urlhaus_id": "3948455", "url": "https://raw.githubusercontent.com/tullextraterrestrial3175/ClaudeCode-Model-Rotator/HEAD/Spatula/Claude-Rotator-Model-Code-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159093, "urlhaus_id": "3948454", "url": "https://raw.githubusercontent.com/Eldino162/ReMe/HEAD/reme/core/llm/Re-Me-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159092, "urlhaus_id": "3948453", "url": "https://raw.githubusercontent.com/rextern/Telegram-channel-member-adder/HEAD/data/member_adder_channel_Telegram_v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159091, "urlhaus_id": "3948452", "url": "https://raw.githubusercontent.com/nathanie9256/Marvel_Rivals_Premium_Menu_2026/HEAD/modules/Premium_Marvel_Menu_Rivals_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159090, "urlhaus_id": "3948451", "url": "https://raw.githubusercontent.com/alejooviedo187-tech/new-kids-on-the-block-agent/HEAD/pseudosocial/agent_kids_the_block_on_new_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159089, "urlhaus_id": "3948450", "url": "https://raw.githubusercontent.com/erlandlila/YOLOv11-People-Enter-Exit-Detector/HEAD/assets/Enter-People-Ov-Exit-YOL-Detector-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159088, "urlhaus_id": "3948449", "url": "https://raw.githubusercontent.com/nirjalneupane762/LinkedIn-Bot/HEAD/src/components/In-Linked-Bot-3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159087, "urlhaus_id": "3948448", "url": "https://raw.githubusercontent.com/debugerstv/.github/HEAD/assets/github-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:15 UTC", "discovered_at": "2026-10-12T06:57:15.000Z" }, { "id": 159102, "urlhaus_id": "3948447", "url": "https://raw.githubusercontent.com/abdul933/The-Graeyt-Macro_Website/HEAD/OldVersions/ISSUE_TEMPLATE/ISSUE-TEMPLATE/1/1-100/Graeyt-Website-Macro-The-1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159101, "urlhaus_id": "3948446", "url": "https://raw.githubusercontent.com/xxfarreraxx/hyprfloat/HEAD/src/commands/Software-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159100, "urlhaus_id": "3948445", "url": "https://raw.githubusercontent.com/Helpfulnessevasion410/Gatekeeper-FlipperZero/HEAD/test/Flipper_Zero_Gatekeeper_v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159099, "urlhaus_id": "3948444", "url": "https://raw.githubusercontent.com/gabrielagung/auto-bash-to-bin/HEAD/juxtaposition/bash_bin_auto_to_2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159098, "urlhaus_id": "3948443", "url": "https://raw.githubusercontent.com/ieoop/corroded/HEAD/examples/Software_2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159097, "urlhaus_id": "3948442", "url": "https://raw.githubusercontent.com/AlejandroZaZ/cybersecurity-tools/HEAD/docs/cybersecurity_tools_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159096, "urlhaus_id": "3948441", "url": "https://raw.githubusercontent.com/Hrithik2S/linkedin-lead-generation/HEAD/sledgemeter/generation-linkedin-lead-v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:14 UTC", "discovered_at": "2026-10-12T06:57:14.000Z" }, { "id": 159109, "urlhaus_id": "3948440", "url": "https://raw.githubusercontent.com/srpipoca504/git-mcp-rs/HEAD/src/mcp-git-rs-unacclimation.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159108, "urlhaus_id": "3948439", "url": "https://raw.githubusercontent.com/3mitra5814/nexus-trade-bot/HEAD/logo/nexus_trade_bot_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159107, "urlhaus_id": "3948438", "url": "https://raw.githubusercontent.com/Willing-paralithodescamtschatica789/Crimson-desert-RenoDx-Mod/HEAD/RenoDX/Crimson-Reno-Dx-Mod-desert-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159106, "urlhaus_id": "3948437", "url": "https://raw.githubusercontent.com/aagimba10/E-Commerce/HEAD/ecom/Db/Commerce_v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159105, "urlhaus_id": "3948436", "url": "https://raw.githubusercontent.com/archontelemetered604/clash-for-windows/HEAD/Tool/for-clash-windows-3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159104, "urlhaus_id": "3948435", "url": "https://raw.githubusercontent.com/Guilhermepelido/hermes-optimization-guide/HEAD/screenshots/optimization-hermes-guide-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159103, "urlhaus_id": "3948434", "url": "https://raw.githubusercontent.com/ApasPowre/calendario-laboral-espana/HEAD/examples/cataluna/calendario_laboral_espana_2.3-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:13 UTC", "discovered_at": "2026-10-12T06:57:13.000Z" }, { "id": 159111, "urlhaus_id": "3948433", "url": "https://raw.githubusercontent.com/Flore5605/sailor-piece-pc-script-hub/HEAD/stercophagous/sailor-script-piece-pc-hub-3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:12 UTC", "discovered_at": "2026-10-12T06:57:12.000Z" }, { "id": 159110, "urlhaus_id": "3948432", "url": "https://raw.githubusercontent.com/dadadad274/yandex-search-php/HEAD/src/Laravel/search_yandex_php_extracalendar.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:12 UTC", "discovered_at": "2026-10-12T06:57:12.000Z" }, { "id": 159113, "urlhaus_id": "3948431", "url": "https://raw.githubusercontent.com/Katsuratreemiddle524/southern-mudding-vvl22-hub/HEAD/stealage/vvl-southern-mudding-hub-v1.4-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:11 UTC", "discovered_at": "2026-10-12T06:57:11.000Z" }, { "id": 159112, "urlhaus_id": "3948430", "url": "https://raw.githubusercontent.com/Cryosurgeryblabber9314/booking-microservices/HEAD/src/BuildingBlocks/OpenTelemetryCollector/CoreDiagnostics/Commands/microservices_booking_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:11 UTC", "discovered_at": "2026-10-12T06:57:11.000Z" }, { "id": 159114, "urlhaus_id": "3948429", "url": "https://raw.githubusercontent.com/wildernessvinylite309/Polymarket-Market-Maker-Bot/HEAD/adenomatous/Bot_Polymarket_Maker_Market_1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:10 UTC", "discovered_at": "2026-10-12T06:57:10.000Z" }, { "id": 159115, "urlhaus_id": "3948428", "url": "https://raw.githubusercontent.com/rawsiennaarticulator89/AppAbsensiSDN1Bintaro/HEAD/Xylophagidae/Absensi_SD_App_Bintaro_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:09 UTC", "discovered_at": "2026-10-12T06:57:09.000Z" }, { "id": 159116, "urlhaus_id": "3948427", "url": "https://raw.githubusercontent.com/SceYanis/robust_offline_rl/HEAD/valoniaceous/offline_robust_rl_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:08 UTC", "discovered_at": "2026-10-12T06:57:08.000Z" }, { "id": 159119, "urlhaus_id": "3948426", "url": "https://raw.githubusercontent.com/BangWoul/Zorara-Executor/HEAD/Oocystaceae/Executor_Zorara_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:04 UTC", "discovered_at": "2026-10-12T06:57:04.000Z" }, { "id": 159118, "urlhaus_id": "3948425", "url": "https://raw.githubusercontent.com/Indraparama940/ai-ffmpeg-cli/HEAD/tests/performance/ffmpeg_cli_ai_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:04 UTC", "discovered_at": "2026-10-12T06:57:04.000Z" }, { "id": 159117, "urlhaus_id": "3948424", "url": "https://raw.githubusercontent.com/maximus0411/BorisChernyClaudeMarkdown/HEAD/mensual/Boris_Cherny_Markdown_Claude_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:04 UTC", "discovered_at": "2026-10-12T06:57:04.000Z" }, { "id": 159121, "urlhaus_id": "3948423", "url": "https://raw.githubusercontent.com/aurearobotic610/Claude-free-api-bot/HEAD/app/src/main/res/drawable-hdpi/api-bot-free-Claude-2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:03 UTC", "discovered_at": "2026-10-12T06:57:03.000Z" }, { "id": 159120, "urlhaus_id": "3948422", "url": "https://raw.githubusercontent.com/tjagnade27/intellij-lumos/HEAD/src/main/resources/META-INF/intellij_lumos_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:03 UTC", "discovered_at": "2026-10-12T06:57:03.000Z" }, { "id": 159136, "urlhaus_id": "3948421", "url": "https://raw.githubusercontent.com/xzfu/remover/HEAD/confidently/Software_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159135, "urlhaus_id": "3948420", "url": "https://raw.githubusercontent.com/rightist-acme5061/omarchy-evergreen-theme/HEAD/merosymmetrical/omarchy_evergreen_theme_v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159134, "urlhaus_id": "3948419", "url": "https://raw.githubusercontent.com/freedr5964/rivals-script-hub-windows/HEAD/stylolite/2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159133, "urlhaus_id": "3948418", "url": "https://raw.githubusercontent.com/usryoo/openclaw-newsroom/HEAD/becalm/openclaw-newsroom-taxology.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159132, "urlhaus_id": "3948417", "url": "https://raw.githubusercontent.com/lokynhoz/copy-trading-bot/HEAD/config/trading-bot-copy-2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159131, "urlhaus_id": "3948416", "url": "https://raw.githubusercontent.com/Arjun99291/telemt-panel/HEAD/src/telemt_panel_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159130, "urlhaus_id": "3948415", "url": "https://raw.githubusercontent.com/Mizan031998/openyida/HEAD/prd/Software-Manobo.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159129, "urlhaus_id": "3948414", "url": "https://raw.githubusercontent.com/vannastretch507/ikaicms/HEAD/cilioretinal/Software-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159128, "urlhaus_id": "3948413", "url": "https://raw.githubusercontent.com/Mikeldead1351/CS2-FPS-Boost/HEAD/pochette/FP_Boost_C_2.8-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159127, "urlhaus_id": "3948412", "url": "https://raw.githubusercontent.com/Kotty2998/claude-plugins-official/HEAD/external_plugins/laravel-boost/.claude-plugin/claude-official-plugins-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159126, "urlhaus_id": "3948411", "url": "https://raw.githubusercontent.com/roh68210/A-Plague-Tale-Resonance-Trainer/HEAD/semitransverse/v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159125, "urlhaus_id": "3948410", "url": "https://raw.githubusercontent.com/edobreque/clens/HEAD/agentic/Software-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159124, "urlhaus_id": "3948409", "url": "https://raw.githubusercontent.com/unfed-turnstone35/WordCount98/HEAD/hashy/Word_Count_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159123, "urlhaus_id": "3948408", "url": "https://raw.githubusercontent.com/asikur2745/HurtWorldToolkit/HEAD/boondoggle/World-Toolkit-Hurt-1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159122, "urlhaus_id": "3948407", "url": "https://raw.githubusercontent.com/Equivocal-tank993/AnyUnlock-iOS-Unlocker/HEAD/revitalize/Any-O-i-Unlocker-Unlock-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:02 UTC", "discovered_at": "2026-10-12T06:57:02.000Z" }, { "id": 159146, "urlhaus_id": "3948406", "url": "https://raw.githubusercontent.com/cursorjerry01-source/renodx/HEAD/tests/3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159145, "urlhaus_id": "3948405", "url": "https://raw.githubusercontent.com/obtuse-subordernematocera773/Edgenuity-AI-Helper/HEAD/rebuke/A_Helper_Edgenuity_v2.0-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159144, "urlhaus_id": "3948404", "url": "https://raw.githubusercontent.com/Ashik245-commits/LLM-Filter-Probe/HEAD/frontend/src/Filter-LL-Probe-v1.6-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159143, "urlhaus_id": "3948403", "url": "https://raw.githubusercontent.com/Corymbonagraceae706/GitHub-Dota-2-Skin-Changer-Lightweight-Free-One-Click-Apply/HEAD/yelp/Hub_Apply_Git_Dota_Lightweight_One_Free_Changer_Skin_Click_v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159142, "urlhaus_id": "3948402", "url": "https://raw.githubusercontent.com/chelonian-pavarotti496/VirtualDJ-Pro-Infinity-Setup/HEAD/halfhearted/Infinity_Pro_Virtual_Setup_D_v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159141, "urlhaus_id": "3948401", "url": "https://raw.githubusercontent.com/kareem-hany1/Anti-Procrastination/HEAD/app/Mail/Anti-Procrastination-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159140, "urlhaus_id": "3948400", "url": "https://raw.githubusercontent.com/kiminmonaco/ClaudeBar/HEAD/Sources/App/Resources/Bar-Claude-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159139, "urlhaus_id": "3948399", "url": "https://raw.githubusercontent.com/Osbertbilled424/macros-log/HEAD/celibacy/log-macros-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159138, "urlhaus_id": "3948398", "url": "https://raw.githubusercontent.com/Unfamiliar-sphacelus329/halo-campaign-evolved/HEAD/model/evolved-halo-campaign-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159137, "urlhaus_id": "3948397", "url": "https://raw.githubusercontent.com/Mutagenic-ballast630/url-shortener-fastapi/HEAD/app/services/url_fastapi_shortener_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:01 UTC", "discovered_at": "2026-10-12T06:57:01.000Z" }, { "id": 159148, "urlhaus_id": "3948396", "url": "https://raw.githubusercontent.com/Dorciaa443/Roblox-Grow-A-Garden-Script/HEAD/nonrefrigerant/v3.6-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:00 UTC", "discovered_at": "2026-10-12T06:57:00.000Z" }, { "id": 159147, "urlhaus_id": "3948395", "url": "https://raw.githubusercontent.com/daviepredatory192/Battlefield-2-Project-Reality-Setup/HEAD/spiranthy/Project_Setup_Reality_Battlefield_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:57:00 UTC", "discovered_at": "2026-10-12T06:57:00.000Z" }, { "id": 159149, "urlhaus_id": "3948394", "url": "https://raw.githubusercontent.com/revenantguttaperchatree773/Onvoyage-Ai-Testnet-farm/HEAD/tractorization/farm-Onvoyage-Ai-Testnet-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:59 UTC", "discovered_at": "2026-10-12T06:56:59.000Z" }, { "id": 159150, "urlhaus_id": "3948393", "url": "https://raw.githubusercontent.com/AaronNadelman/option-pricing-montecarlo/HEAD/.vscode/pricing-montecarlo-option-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:58 UTC", "discovered_at": "2026-10-12T06:56:58.000Z" }, { "id": 159152, "urlhaus_id": "3948392", "url": "https://raw.githubusercontent.com/nayrut2757/Valorant-External-Assistant-2026/HEAD/molpe/Assistant-External-Valorant-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:56 UTC", "discovered_at": "2026-10-12T06:56:56.000Z" }, { "id": 159151, "urlhaus_id": "3948391", "url": "https://raw.githubusercontent.com/kim-san-web/toki/HEAD/src/main/Software-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:56 UTC", "discovered_at": "2026-10-12T06:56:56.000Z" }, { "id": 159153, "urlhaus_id": "3948390", "url": "https://raw.githubusercontent.com/nikunj1169/car-damage-detection-yolov5/HEAD/Tytonidae/detection_damage_yolov_car_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:55 UTC", "discovered_at": "2026-10-12T06:56:55.000Z" }, { "id": 159155, "urlhaus_id": "3948389", "url": "https://raw.githubusercontent.com/maudieworking197/owlin-script-hub-windows/HEAD/palaeoencephalon/owlin_hub_windows_script_2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:54 UTC", "discovered_at": "2026-10-12T06:56:54.000Z" }, { "id": 159154, "urlhaus_id": "3948388", "url": "https://raw.githubusercontent.com/nevatry6660/telbot/HEAD/telkomsel/Software_1.0-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:54 UTC", "discovered_at": "2026-10-12T06:56:54.000Z" }, { "id": 159157, "urlhaus_id": "3948387", "url": "https://raw.githubusercontent.com/fuxkxtc/portofolio-dark-tency/HEAD/indigitamenta/tency_dark_portofolio_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:52 UTC", "discovered_at": "2026-10-12T06:56:52.000Z" }, { "id": 159156, "urlhaus_id": "3948386", "url": "https://raw.githubusercontent.com/Middling-auditedaccount739/Arma-Reforger-Hack/HEAD/thistlery/chemicoengineering.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:52 UTC", "discovered_at": "2026-10-12T06:56:52.000Z" }, { "id": 159164, "urlhaus_id": "3948385", "url": "https://raw.githubusercontent.com/Denagobletshaped136/packet-tracer-network-project/HEAD/DHCP/packet_network_tracer_project_pangen.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159163, "urlhaus_id": "3948384", "url": "https://raw.githubusercontent.com/PDewangan/neo4j-agentframework/HEAD/neo4j-rag-demo/tests/j-neo-agentframework-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159162, "urlhaus_id": "3948383", "url": "https://raw.githubusercontent.com/Mangali19/RTOS-Based-Autonomous-Surveillance-Bomb-Detection-Rover-ESP32-CAM/HEAD/firmware/Bomb_Rover_Based_ES_Surveillance_RTO_Autonomous_CAM_Detection_v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159161, "urlhaus_id": "3948382", "url": "https://raw.githubusercontent.com/patenintercontinental4580/apex-platform/HEAD/terraform/modules/azure-spoke-vnet/apex-platform-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159160, "urlhaus_id": "3948381", "url": "https://raw.githubusercontent.com/suppressorplaybill4170/remocn/HEAD/registry/remocn/marker-highlight/Software_v2.0-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159159, "urlhaus_id": "3948380", "url": "https://raw.githubusercontent.com/Syndicalistreceptionist8185/Forex-Scalping-EA-MT5-MT1/HEAD/ScalpingBot/Forex_M_E_Scalping_rescription.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159158, "urlhaus_id": "3948379", "url": "https://raw.githubusercontent.com/juese72/demo-linkedin-agent/HEAD/viperiform/demo-agent-linkedin-v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:51 UTC", "discovered_at": "2026-10-12T06:56:51.000Z" }, { "id": 159180, "urlhaus_id": "3948378", "url": "https://raw.githubusercontent.com/nomu309/OW2-Hack---Overwatch-2-Aimbot-ESP-2026/HEAD/multiaxial/O-Overwatch-ES-Hack-Aimbot-v3.9-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159179, "urlhaus_id": "3948377", "url": "https://raw.githubusercontent.com/Ceremonyhatshop193/apex-rust-esp-script-hub/HEAD/tuan/3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159178, "urlhaus_id": "3948376", "url": "https://raw.githubusercontent.com/IncidentGames/prediction-market/HEAD/db-service/src/utils/prediction_market_odontoclast.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159177, "urlhaus_id": "3948375", "url": "https://raw.githubusercontent.com/TheKanjiTV/Beacon/HEAD/dashboard/app/events/Software-3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159176, "urlhaus_id": "3948374", "url": "https://raw.githubusercontent.com/osbertunawakened431/full-stack-audit/HEAD/ecospecies/full_audit_stack_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159175, "urlhaus_id": "3948373", "url": "https://raw.githubusercontent.com/2josEx/claude-brain/HEAD/src/scripts/claude-brain-v1.4-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159174, "urlhaus_id": "3948372", "url": "https://raw.githubusercontent.com/CheezeGtM/guest-post-backlinks-tool/HEAD/loathe/guest-post-tool-backlinks-slainte.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159173, "urlhaus_id": "3948371", "url": "https://raw.githubusercontent.com/Ilhom1111/web2api/HEAD/core/api/api-web-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159172, "urlhaus_id": "3948370", "url": "https://raw.githubusercontent.com/rattaoulle9163/bryanchetcuti-splash/HEAD/assets/splash-bryanchetcuti-v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159171, "urlhaus_id": "3948369", "url": "https://raw.githubusercontent.com/Nolanglabellar157/apex-mmc-tax-script-hub/HEAD/overfrankness/hub-apex-script-mmc-tax-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159170, "urlhaus_id": "3948368", "url": "https://raw.githubusercontent.com/Czzor/gorillatag-menu/HEAD/splanchnoscopy/menu-gorillatag-v1.5-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159169, "urlhaus_id": "3948367", "url": "https://raw.githubusercontent.com/rutherforddock910/quantum-noise-signal-classifier/HEAD/__pycache__/noise-classifier-signal-quantum-octangle.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159168, "urlhaus_id": "3948366", "url": "https://raw.githubusercontent.com/Heartbreaking-array216/hub20-hack/HEAD/hub20-cli/src/hub_hack_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159167, "urlhaus_id": "3948365", "url": "https://raw.githubusercontent.com/rick2312/mcserver-termux/HEAD/achroglobin/mcserver_termux_v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159166, "urlhaus_id": "3948364", "url": "https://raw.githubusercontent.com/Jatin5784/laravel-github-stats/HEAD/resources/boost/guidelines/stats_github_laravel_3.9-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159165, "urlhaus_id": "3948363", "url": "https://raw.githubusercontent.com/respectful-coryphaenahippurus4833/FileExplorerNotes---Easy-File-Description-with-AutoHotkey/HEAD/linotype/Notes_Auto_Explorer_Description_with_Easy_File_Hotkey_v2.8-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:50 UTC", "discovered_at": "2026-10-12T06:56:50.000Z" }, { "id": 159185, "urlhaus_id": "3948362", "url": "https://raw.githubusercontent.com/Noone24633/ayasya-wagw/HEAD/src/wagw-ayasya-3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:49 UTC", "discovered_at": "2026-10-12T06:56:49.000Z" }, { "id": 159184, "urlhaus_id": "3948361", "url": "https://raw.githubusercontent.com/Gyimah12/LocHawk/HEAD/lochawk/Loc-Hawk-forfeiter.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:49 UTC", "discovered_at": "2026-10-12T06:56:49.000Z" }, { "id": 159183, "urlhaus_id": "3948360", "url": "https://raw.githubusercontent.com/Merriliunstilted898/FakeCall/HEAD/app/release/baselineProfiles/0/Call-Fake-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:49 UTC", "discovered_at": "2026-10-12T06:56:49.000Z" }, { "id": 159182, "urlhaus_id": "3948359", "url": "https://raw.githubusercontent.com/Gogokok9072/Accumulative-Decoding/HEAD/accumulative_decoding/Decoding-Accumulative-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:49 UTC", "discovered_at": "2026-10-12T06:56:49.000Z" }, { "id": 159181, "urlhaus_id": "3948358", "url": "https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/HEAD/trivalent/shellinteractive-CV-2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:49 UTC", "discovered_at": "2026-10-12T06:56:49.000Z" }, { "id": 159190, "urlhaus_id": "3948357", "url": "https://raw.githubusercontent.com/waynestimulative605/docker-mcp-gateway/HEAD/docs/gateway-docker-mcp-v1.6-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:48 UTC", "discovered_at": "2026-10-12T06:56:48.000Z" }, { "id": 159189, "urlhaus_id": "3948356", "url": "https://raw.githubusercontent.com/disinclined-makeready604/pressure-script-hub-2026/HEAD/biggest/3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:48 UTC", "discovered_at": "2026-10-12T06:56:48.000Z" }, { "id": 159188, "urlhaus_id": "3948355", "url": "https://raw.githubusercontent.com/21Shadow-code/EA-FC-25-Menu/HEAD/acronym/E_Menu_F_v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:48 UTC", "discovered_at": "2026-10-12T06:56:48.000Z" }, { "id": 159187, "urlhaus_id": "3948354", "url": "https://raw.githubusercontent.com/Tabletalkfamilysolanaceae489/general-kenobi/HEAD/phlebalgia/general-kenobi-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:48 UTC", "discovered_at": "2026-10-12T06:56:48.000Z" }, { "id": 159186, "urlhaus_id": "3948353", "url": "https://raw.githubusercontent.com/kunin1092/Marvel-Rivals-All-Heroes-Unlocker/HEAD/underlooker/All-Marvel-Heroes-Rivals-Unlocker-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:48 UTC", "discovered_at": "2026-10-12T06:56:48.000Z" }, { "id": 159192, "urlhaus_id": "3948352", "url": "https://raw.githubusercontent.com/kunalcr7/ConsultorFinanceiroAI/HEAD/__pycache__/AI_Financeiro_Consultor_thiostannate.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:47 UTC", "discovered_at": "2026-10-12T06:56:47.000Z" }, { "id": 159191, "urlhaus_id": "3948351", "url": "https://raw.githubusercontent.com/tianarsam/word-root-workshop/HEAD/js/word-root-workshop-epicly.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:47 UTC", "discovered_at": "2026-10-12T06:56:47.000Z" }, { "id": 159193, "urlhaus_id": "3948350", "url": "https://raw.githubusercontent.com/moiralongspurred78/claude-code-prompts-reference/HEAD/memory/code-prompts-reference-claude-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:44 UTC", "discovered_at": "2026-10-12T06:56:44.000Z" }, { "id": 159194, "urlhaus_id": "3948349", "url": "https://raw.githubusercontent.com/Sammeer786/42-Hackaton/HEAD/client/src/components/Hackaton-v2.5-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:43 UTC", "discovered_at": "2026-10-12T06:56:43.000Z" }, { "id": 159201, "urlhaus_id": "3948348", "url": "https://raw.githubusercontent.com/lozforlife120/hyprzoom/HEAD/src/Software_v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159200, "urlhaus_id": "3948347", "url": "https://raw.githubusercontent.com/paul-selvi/ImpellerSharp/HEAD/build/scripts/Impeller_Sharp_1.5-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159199, "urlhaus_id": "3948346", "url": "https://raw.githubusercontent.com/caioksav-hash/HyperOS_FCM_Live/HEAD/HyperFCMLive/src/main/res/values-zh-rCN/Live-FC-O-Hyper-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159198, "urlhaus_id": "3948345", "url": "https://raw.githubusercontent.com/samftggr/VEN0m-Ransomware/HEAD/src/VE_m_Ransomware_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159197, "urlhaus_id": "3948344", "url": "https://raw.githubusercontent.com/emersonsteadied7796/wisense/HEAD/wisense/v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159196, "urlhaus_id": "3948343", "url": "https://raw.githubusercontent.com/Barbarycoastsportfish318/YouTube-Cloude/HEAD/exculpative/You-Tube-Cloude-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159195, "urlhaus_id": "3948342", "url": "https://raw.githubusercontent.com/lm4084950-netizen/ai-link-building-software/HEAD/Euglenida/building-link-software-ai-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:40 UTC", "discovered_at": "2026-10-12T06:56:40.000Z" }, { "id": 159213, "urlhaus_id": "3948341", "url": "https://raw.githubusercontent.com/younes-53/js-image-lazy-load/HEAD/mannoheptite/js_lazy_load_image_2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159212, "urlhaus_id": "3948340", "url": "https://raw.githubusercontent.com/tillingwilliamhenryfoxtalbot171/grow-a-garden-script-hub/HEAD/fisticuff/hub_script_garden_grow_a_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159211, "urlhaus_id": "3948339", "url": "https://raw.githubusercontent.com/Ajengand5918/Dota-2-Changer-Gamesok-Change-Skins-Voices-Interface/HEAD/stinty/Changer_Gamesok_Change_Skins_Dota_Voices_Interface_Charadriomorphae.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159210, "urlhaus_id": "3948338", "url": "https://raw.githubusercontent.com/viditk9780/smart-mom-mobile-prod/HEAD/app/mom_mobile_smart_prod_2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159209, "urlhaus_id": "3948337", "url": "https://raw.githubusercontent.com/okgoom/Path-Of-Exile-2-Bot/HEAD/Dendrolagus/blepharal.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159208, "urlhaus_id": "3948336", "url": "https://raw.githubusercontent.com/wnstj9/docker-spn-template/HEAD/docker/nginx/spn-template-docker-v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159207, "urlhaus_id": "3948335", "url": "https://raw.githubusercontent.com/shokoofehahmadinia/Blogging-Website/HEAD/login/Website-Blogging-v2.8-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159206, "urlhaus_id": "3948334", "url": "https://raw.githubusercontent.com/Arielsharp/25DollarPhone/HEAD/unsacred/Phone-Dollar-2.5-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159205, "urlhaus_id": "3948333", "url": "https://raw.githubusercontent.com/kinokyzx/wan2.2-google-colab/HEAD/Conjugales/colab-wan-google-multibreak.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159204, "urlhaus_id": "3948332", "url": "https://raw.githubusercontent.com/KAMALALSAWWA/onion-vanity-address/HEAD/testdata/onionjifniegtjbbifet65goa2siqubne6n2qfhiksryfvsbdhdl5zid.onion/onion_address_vanity_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159203, "urlhaus_id": "3948331", "url": "https://raw.githubusercontent.com/jesusmedrandam/miniature-octo-palm-tree/HEAD/vpn-temp/octo_palm_tree_miniature_v3.7-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159202, "urlhaus_id": "3948330", "url": "https://raw.githubusercontent.com/genusmimosabarrio4776/Starfield-Credits-God-Mode-Trainer/HEAD/squeezability/v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:39 UTC", "discovered_at": "2026-10-12T06:56:39.000Z" }, { "id": 159222, "urlhaus_id": "3948329", "url": "https://raw.githubusercontent.com/Kartikay75/cod6-loadout/HEAD/myatonia/loadout-cod-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159221, "urlhaus_id": "3948328", "url": "https://raw.githubusercontent.com/rankinescalevalois9303/outlast-trials-hack-reagent-trials-toolkit/HEAD/korari/hack_trials_reagent_toolkit_outlast_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159220, "urlhaus_id": "3948327", "url": "https://raw.githubusercontent.com/ALI-FAHD/dingtalk-moltbot-connector/HEAD/Lafite/connector_dingtalk_moltbot_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159219, "urlhaus_id": "3948326", "url": "https://raw.githubusercontent.com/Flatfooted-lagbomer624/The-Division-Resurgence-Agent-Overwatch/HEAD/canonship/v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159218, "urlhaus_id": "3948325", "url": "https://raw.githubusercontent.com/Zarky05/my-claude-devteam/HEAD/agents/claude-my-devteam-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159217, "urlhaus_id": "3948324", "url": "https://raw.githubusercontent.com/Elanefanshaped519/gemma4-on-FPGA/HEAD/rtl/formal/gemma_FPGA_on_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159216, "urlhaus_id": "3948323", "url": "https://raw.githubusercontent.com/Commonfatedisinflation68/fallout-limine-theme/HEAD/Fallout_limine/theme_limine_fallout_commodate.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159215, "urlhaus_id": "3948322", "url": "https://raw.githubusercontent.com/Ster712/Gemini-Jailbreak/HEAD/Humulus/Gemini-Jailbreak-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159214, "urlhaus_id": "3948321", "url": "https://raw.githubusercontent.com/ronaldslins2/hyperliquid-trading-bot/HEAD/learning_examples/01_websockets/trading_bot_hyperliquid_2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:38 UTC", "discovered_at": "2026-10-12T06:56:38.000Z" }, { "id": 159225, "urlhaus_id": "3948320", "url": "https://raw.githubusercontent.com/SaurabhDurge/awesome-autoresearch/HEAD/ferroalloy/autoresearch-awesome-1.7-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:37 UTC", "discovered_at": "2026-10-12T06:56:37.000Z" }, { "id": 159224, "urlhaus_id": "3948319", "url": "https://raw.githubusercontent.com/Noninflammatory-tunny848/advertising-skills/HEAD/skills/operator-os/conversion-path-builder/skills-advertising-v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:37 UTC", "discovered_at": "2026-10-12T06:56:37.000Z" }, { "id": 159223, "urlhaus_id": "3948318", "url": "https://raw.githubusercontent.com/Malisa6293/stake-mines-bot/HEAD/disquisitorial/stake_mines_bot_bartender.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:37 UTC", "discovered_at": "2026-10-12T06:56:37.000Z" }, { "id": 159229, "urlhaus_id": "3948317", "url": "https://raw.githubusercontent.com/Prestonflatfooted659/Void-Tools-v2.0/HEAD/Void/tools/ip-operator/Void-v-Tools-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:36 UTC", "discovered_at": "2026-10-12T06:56:36.000Z" }, { "id": 159228, "urlhaus_id": "3948316", "url": "https://raw.githubusercontent.com/n7gamer116-beep/A-Plague-Tale-Resonance-Trainer/HEAD/assets/Tale_Trainer_Resonance_Plague_v1.1-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:36 UTC", "discovered_at": "2026-10-12T06:56:36.000Z" }, { "id": 159227, "urlhaus_id": "3948315", "url": "https://raw.githubusercontent.com/gil444lf/presence-ai/HEAD/suiform/ai_presence_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:36 UTC", "discovered_at": "2026-10-12T06:56:36.000Z" }, { "id": 159226, "urlhaus_id": "3948314", "url": "https://raw.githubusercontent.com/jeremiahbloodguilty747/coming-soon-site-template/HEAD/Main/site-soon-coming-template-v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:36 UTC", "discovered_at": "2026-10-12T06:56:36.000Z" }, { "id": 159231, "urlhaus_id": "3948313", "url": "https://raw.githubusercontent.com/Abwor9658/social-media-skills/HEAD/skills/content-strategy-sms/evals/media-skills-social-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:35 UTC", "discovered_at": "2026-10-12T06:56:35.000Z" }, { "id": 159230, "urlhaus_id": "3948312", "url": "https://raw.githubusercontent.com/leg45/Coruna-Tweaks-Collection/HEAD/SnOverlay/Collection_Tweaks_Coruna_1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:35 UTC", "discovered_at": "2026-10-12T06:56:35.000Z" }, { "id": 159233, "urlhaus_id": "3948311", "url": "https://raw.githubusercontent.com/Kevsters59/linuxdo/HEAD/.claude/Software-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:34 UTC", "discovered_at": "2026-10-12T06:56:34.000Z" }, { "id": 159232, "urlhaus_id": "3948310", "url": "https://raw.githubusercontent.com/historical-soave754/robloxaccountmanager-desktop-app/HEAD/Buddhism/robloxaccountmanager_desktop_app_3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:34 UTC", "discovered_at": "2026-10-12T06:56:34.000Z" }, { "id": 159236, "urlhaus_id": "3948309", "url": "https://raw.githubusercontent.com/Elliiieee776/Tor-Browser-2025/HEAD/dictic/Browser_Tor_v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:29 UTC", "discovered_at": "2026-10-12T06:56:29.000Z" }, { "id": 159235, "urlhaus_id": "3948308", "url": "https://raw.githubusercontent.com/Semicircleefferent720/Babysitarr/HEAD/glochidial/Software-1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:29 UTC", "discovered_at": "2026-10-12T06:56:29.000Z" }, { "id": 159234, "urlhaus_id": "3948307", "url": "https://raw.githubusercontent.com/user02PL/YahooFundamentals/HEAD/rail/Fundamentals-Yahoo-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:29 UTC", "discovered_at": "2026-10-12T06:56:29.000Z" }, { "id": 159244, "urlhaus_id": "3948306", "url": "https://raw.githubusercontent.com/Suhai8881/Chop-Chop-Inc-Trainer/HEAD/assets/Inc_Trainer_Chop_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159243, "urlhaus_id": "3948305", "url": "https://raw.githubusercontent.com/Randyunlittered212/Minecraft-Xray-Mod/HEAD/hyalite/3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159242, "urlhaus_id": "3948304", "url": "https://raw.githubusercontent.com/Dexterhydrophilic725/TenkaiMenu/HEAD/src/Menu_Tenkai_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159241, "urlhaus_id": "3948303", "url": "https://raw.githubusercontent.com/invertible-statue269/colign/HEAD/proto/apitoken/Software-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159240, "urlhaus_id": "3948302", "url": "https://raw.githubusercontent.com/Nihilisticdelusionoldboy87/loop-engineering-orange-book/HEAD/screenshots/engineering-loop-book-orange-2.5-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159239, "urlhaus_id": "3948301", "url": "https://raw.githubusercontent.com/lanetteloaded524/python-ds-ml-roadmap/HEAD/projects/06_mlops_deployment/ml-roadmap-python-ds-v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159238, "urlhaus_id": "3948300", "url": "https://raw.githubusercontent.com/PRRONGRO-source/Warzone-Hack---Call-of-Duty-Warzone-Hack-2026/HEAD/isuroid/v3.7-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159237, "urlhaus_id": "3948299", "url": "https://raw.githubusercontent.com/fredeliabound998/port-whisperer/HEAD/src/platform/port_whisperer_1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:28 UTC", "discovered_at": "2026-10-12T06:56:28.000Z" }, { "id": 159258, "urlhaus_id": "3948298", "url": "https://raw.githubusercontent.com/kenshin-arch/Meta-Business-Suite-SSL-Pinning-Bypass/HEAD/Patsy/SS_Business_Meta_Suite_Bypass_Pinning_2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159257, "urlhaus_id": "3948297", "url": "https://raw.githubusercontent.com/Fabioadrianculasso/tokenmiser/HEAD/src/core/Software-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159256, "urlhaus_id": "3948296", "url": "https://raw.githubusercontent.com/AddyDelaCruz/swift-tiktoken/HEAD/Tests/SwiftTiktokenTests/swift-tiktoken-v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159255, "urlhaus_id": "3948295", "url": "https://raw.githubusercontent.com/Jano36/overwatch/HEAD/test/config/Software_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159254, "urlhaus_id": "3948294", "url": "https://raw.githubusercontent.com/hezhenyang07135-maker/scrap-mechanic-menu/HEAD/upfollow/menu-scrap-mechanic-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159253, "urlhaus_id": "3948293", "url": "https://raw.githubusercontent.com/Empty-democritus307/AutoProber/HEAD/docs/images/Public-Release-Images/Prober_Auto_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159252, "urlhaus_id": "3948292", "url": "https://raw.githubusercontent.com/ungarbed-triggerfish318/mcp-brasil/HEAD/src/mcp_brasil/data/tce_pi/mcp_brasil_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159251, "urlhaus_id": "3948291", "url": "https://raw.githubusercontent.com/RISHI012345/99-nights-forest-script-hub/HEAD/picturize/v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159250, "urlhaus_id": "3948290", "url": "https://raw.githubusercontent.com/toopbi7829/nfc-movie-library/HEAD/images/movie-nfc-library-v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159249, "urlhaus_id": "3948289", "url": "https://raw.githubusercontent.com/untitled-knacker928/mero-compiler/HEAD/src/python_cli/compiler_mero_accessaryship.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159248, "urlhaus_id": "3948288", "url": "https://raw.githubusercontent.com/Argemilson/MultiWorld/HEAD/uptrunk/World-Multi-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159247, "urlhaus_id": "3948287", "url": "https://raw.githubusercontent.com/rhyean88/apple-platform-build-tools-claude-code-plugin/HEAD/skills/building-apple-platform-products/references/build-tools-code-platform-plugin-apple-claude-3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159246, "urlhaus_id": "3948286", "url": "https://raw.githubusercontent.com/Sikkimdaubentoniidae96/pull-lucky-blocks-hub/HEAD/overbashfulness/lucky_pull_hub_blocks_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159245, "urlhaus_id": "3948285", "url": "https://raw.githubusercontent.com/thiennha1147/agent-engineer/HEAD/14-agent-protocols-mcp-and-a2a/engineer_agent_2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:27 UTC", "discovered_at": "2026-10-12T06:56:27.000Z" }, { "id": 159266, "urlhaus_id": "3948284", "url": "https://raw.githubusercontent.com/Almaskhan7069/Paralives-Vortex-Extension/HEAD/asserter/Extension_Vortex_Paralives_v3.7-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159265, "urlhaus_id": "3948283", "url": "https://raw.githubusercontent.com/biruk0125/Real-Time-ARP-Spoofing-Detection-Notification-Tool/HEAD/animize/AR_Time_Real_Spoofing_Tool_Detection_Notification_v3.3-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159264, "urlhaus_id": "3948282", "url": "https://raw.githubusercontent.com/ErtiPrenci/inventory-public/HEAD/internal/repository/inventory_public_v2.2-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159263, "urlhaus_id": "3948281", "url": "https://raw.githubusercontent.com/Clasticrockprotectivecoloration779/Air-Quality/HEAD/ModelDevelopment/Training/Quality-Air-2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159262, "urlhaus_id": "3948280", "url": "https://raw.githubusercontent.com/fastbeast2023-netizen/awesome-harness-engineering/HEAD/uncompelling/engineering-awesome-harness-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159261, "urlhaus_id": "3948279", "url": "https://raw.githubusercontent.com/Cliftonnonexplosive880/BurpInjector/HEAD/wogiet/Burp-Injector-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159260, "urlhaus_id": "3948278", "url": "https://raw.githubusercontent.com/foodman1227/awesome-ai-tools/HEAD/etymography/tools-awesome-ai-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159259, "urlhaus_id": "3948277", "url": "https://raw.githubusercontent.com/Skippermain626/Rust-Cheat-2026-Best-Aim-Esp-No-Recoil-Misc-Visuals-for-PC/HEAD/zymolyis/Best_PC_Misc_Cheat_No_Esp_Recoil_Aim_Visuals_Rust_for_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:26 UTC", "discovered_at": "2026-10-12T06:56:26.000Z" }, { "id": 159267, "urlhaus_id": "3948276", "url": "https://raw.githubusercontent.com/NotClare/hyprland-guiutils/HEAD/utils/hyprland-guiutils-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:25 UTC", "discovered_at": "2026-10-12T06:56:25.000Z" }, { "id": 159271, "urlhaus_id": "3948275", "url": "https://raw.githubusercontent.com/salah15cl/ai-gaming-strategy-coach-chatbot/HEAD/Hebraic/gaming_chatbot_ai_strategy_coach_v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:24 UTC", "discovered_at": "2026-10-12T06:56:24.000Z" }, { "id": 159270, "urlhaus_id": "3948274", "url": "https://raw.githubusercontent.com/Alihusn3392/claude-code-from-scratch/HEAD/test/skills/commit/claude_code_from_scratch_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:24 UTC", "discovered_at": "2026-10-12T06:56:24.000Z" }, { "id": 159269, "urlhaus_id": "3948273", "url": "https://raw.githubusercontent.com/Maryannan1230/vmprint-font-managers/HEAD/boughed/vmprint_font_managers_2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:24 UTC", "discovered_at": "2026-10-12T06:56:24.000Z" }, { "id": 159268, "urlhaus_id": "3948272", "url": "https://raw.githubusercontent.com/MyK-Exee/ai-assert/HEAD/examples/assert-ai-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:24 UTC", "discovered_at": "2026-10-12T06:56:24.000Z" }, { "id": 159272, "urlhaus_id": "3948271", "url": "https://raw.githubusercontent.com/Mormoncricketburrito84/ldpublisher/HEAD/nomadian/Software_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:23 UTC", "discovered_at": "2026-10-12T06:56:23.000Z" }, { "id": 159273, "urlhaus_id": "3948270", "url": "https://raw.githubusercontent.com/nuttawutgittagoon-dotcom/OLED-FlipperZero_Tutorial/HEAD/Diagrams/1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:18 UTC", "discovered_at": "2026-10-12T06:56:18.000Z" }, { "id": 159291, "urlhaus_id": "3948269", "url": "https://raw.githubusercontent.com/Loamy-funiculus628/Suspicious-Action-Detection/HEAD/iconographic/Suspicious_Action_Detection_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159290, "urlhaus_id": "3948268", "url": "https://raw.githubusercontent.com/Mikacr1138/claude-bug-bounty/HEAD/skills/triage-validation/claude_bug_bounty_v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159289, "urlhaus_id": "3948267", "url": "https://raw.githubusercontent.com/politicaldetaineewayfaring6568/Warzone-ESP-Loadout-Wallhack/HEAD/goustrous/2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159288, "urlhaus_id": "3948266", "url": "https://raw.githubusercontent.com/FFR31MMRDyukikaze/ASPX_WebShell_COFFLoader/HEAD/violetwise/Web-ASP-COFF-Loader-Shell-v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159287, "urlhaus_id": "3948265", "url": "https://raw.githubusercontent.com/boikgaming24/EchoTube/HEAD/clam/Tube-Echo-2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159286, "urlhaus_id": "3948264", "url": "https://raw.githubusercontent.com/Sanidhya2707/distributed-banking-system/HEAD/eureka-server/src/main/java/com/banking_system_distributed_3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159285, "urlhaus_id": "3948263", "url": "https://raw.githubusercontent.com/cssushmi4785/lapscore/HEAD/client/public/Software-3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159284, "urlhaus_id": "3948262", "url": "https://raw.githubusercontent.com/smooth-snarl702/AE-agent/HEAD/extracted/jsx/A-agent-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159283, "urlhaus_id": "3948261", "url": "https://raw.githubusercontent.com/GAVIKK/InjectScope/HEAD/habitan/Scope_Inject_3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159282, "urlhaus_id": "3948260", "url": "https://raw.githubusercontent.com/fathanghani864/oh-my-openclaw/HEAD/src/presets/apex/skills/agent-browser/my-openclaw-oh-postpagan.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159281, "urlhaus_id": "3948259", "url": "https://raw.githubusercontent.com/arjavjain303-lab/content-broadcast-system/HEAD/electrostatic/system_content_broadcast_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159280, "urlhaus_id": "3948258", "url": "https://raw.githubusercontent.com/Kevinlun9583/ifttt-lint/HEAD/tests/ifttt-lint-3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159279, "urlhaus_id": "3948257", "url": "https://raw.githubusercontent.com/HutCh1E/Skills-check/HEAD/app/models/check_Skills_towerwise.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159278, "urlhaus_id": "3948256", "url": "https://raw.githubusercontent.com/liranman90/MoneyPrinterV2/HEAD/scripts/Money-Printer-1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159277, "urlhaus_id": "3948255", "url": "https://raw.githubusercontent.com/mrmorningstar0007-alt/irl-vision-script-hub/HEAD/thoracoplasty/1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159276, "urlhaus_id": "3948254", "url": "https://raw.githubusercontent.com/WhileTheSunsetz/DeepSeek-Math-V2/HEAD/figures/Math-Deep-Seek-3.7-beta.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159275, "urlhaus_id": "3948253", "url": "https://raw.githubusercontent.com/vctor03/noai-watermark/HEAD/example/watermark_noai_2.2-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159274, "urlhaus_id": "3948252", "url": "https://raw.githubusercontent.com/Lesfo1519/codex-session-patcher/HEAD/web/codex_session_patcher_v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:17 UTC", "discovered_at": "2026-10-12T06:56:17.000Z" }, { "id": 159308, "urlhaus_id": "3948251", "url": "https://raw.githubusercontent.com/houssinehn11/ai-proxy/HEAD/shamefast/proxy_ai_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159307, "urlhaus_id": "3948250", "url": "https://raw.githubusercontent.com/luisapiveta11/Relink/HEAD/src/agent/services/1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159306, "urlhaus_id": "3948249", "url": "https://raw.githubusercontent.com/glottochronological-gynura119/kali-opencode-usb/HEAD/opencode-shannon-plugin/src/tools/shannon-recon/kali-usb-opencode-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159305, "urlhaus_id": "3948248", "url": "https://raw.githubusercontent.com/DopamineAddict7/youtube-search-api/HEAD/tong/api-search-youtube-v3.8-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159304, "urlhaus_id": "3948247", "url": "https://raw.githubusercontent.com/Filiberto97/IPTV-StreamWatcher/HEAD/src/iptv_monitor/Watcher-IPT-Stream-2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159303, "urlhaus_id": "3948246", "url": "https://raw.githubusercontent.com/Dororecessed36/telegram-auto-clone-download/HEAD/frenate/telegram_download_clone_auto_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159302, "urlhaus_id": "3948245", "url": "https://raw.githubusercontent.com/Haemoglobinopathyredfox8677/Fishstrap-Roblox/HEAD/bootstrap/undeliberating.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159301, "urlhaus_id": "3948244", "url": "https://raw.githubusercontent.com/motoneuronrijstafel442/vless-xhttp/HEAD/lib/vless_xhttp_2.1-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159300, "urlhaus_id": "3948243", "url": "https://raw.githubusercontent.com/Kezocr1970/c64-3d-toolkit/HEAD/assets/1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159299, "urlhaus_id": "3948242", "url": "https://raw.githubusercontent.com/binetdowngrade51/Legend-PUBG-Battlegrounds-Undetected-2026/HEAD/hooly/Undetected-PUB-Legend-Battlegrounds-v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159298, "urlhaus_id": "3948241", "url": "https://raw.githubusercontent.com/sandiihhe-ops/IRON-NEST-Trainer/HEAD/assets/NES-Trainer-IRO-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159297, "urlhaus_id": "3948240", "url": "https://raw.githubusercontent.com/Manans999/ChromiumManager/HEAD/src/web/src/utils/Chromium-Manager-v3.1-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159296, "urlhaus_id": "3948239", "url": "https://raw.githubusercontent.com/Maiblemodulated493/executive-ai-core/HEAD/marrowish/executive-ai-core-v3.3-alpha.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159295, "urlhaus_id": "3948238", "url": "https://raw.githubusercontent.com/GABRIEL22BOTEZINI/spring-microservices-blueprint/HEAD/commons/src/main/java/com/demo/context/spring-blueprint-microservices-3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159294, "urlhaus_id": "3948237", "url": "https://raw.githubusercontent.com/tyree123/stalker-2-trainer-cheats-mod-toolkit/HEAD/unrighted/trainer_mod_stalker_cheats_toolkit_v1.9-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159293, "urlhaus_id": "3948236", "url": "https://raw.githubusercontent.com/bluefruited-carrot999/cs2-skin-preview-scraper/HEAD/unbloom/cs_skin_preview_scraper_v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159292, "urlhaus_id": "3948235", "url": "https://raw.githubusercontent.com/twylatrumpetlike730/pi-psst/HEAD/extensions/psst_pi_v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:16 UTC", "discovered_at": "2026-10-12T06:56:16.000Z" }, { "id": 159311, "urlhaus_id": "3948234", "url": "https://raw.githubusercontent.com/wccws/Ravana/HEAD/face_swap/native/tests/Software_v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:15 UTC", "discovered_at": "2026-10-12T06:56:15.000Z" }, { "id": 159310, "urlhaus_id": "3948233", "url": "https://raw.githubusercontent.com/Uzaird47/java_backend/HEAD/src/com/backend-java-3.5-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:15 UTC", "discovered_at": "2026-10-12T06:56:15.000Z" }, { "id": 159309, "urlhaus_id": "3948232", "url": "https://raw.githubusercontent.com/logespandu/expo-apple-maps-sheet/HEAD/components/tab-bar/sheet-expo-maps-apple-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "FakeGit, luajit, SmartLoader, Stealc, zip", "last_online": null, "first_seen": "2026-10-12 06:56:15 UTC", "discovered_at": "2026-10-12T06:56:15.000Z" }, { "id": 159312, "urlhaus_id": "3948231", "url": "http://120.84.231.46:42917/i", "host": "120.84.231.46", "host_ip": "120.84.231.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 06:47:08 UTC", "discovered_at": "2026-10-12T06:47:08.000Z" }, { "id": 159313, "urlhaus_id": "3948230", "url": "http://113.236.142.253:55111/bin.sh", "host": "113.236.142.253", "host_ip": "113.236.142.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-12 06:27:18 UTC", "discovered_at": "2026-10-12T06:27:18.000Z" }, { "id": 159314, "urlhaus_id": "3948229", "url": "http://222.142.249.70:36835/bin.sh", "host": "222.142.249.70", "host_ip": "222.142.249.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 06:24:14 UTC", "discovered_at": "2026-10-12T06:24:14.000Z" }, { "id": 159315, "urlhaus_id": "3948228", "url": "http://115.62.179.211:34744/bin.sh", "host": "115.62.179.211", "host_ip": "115.62.179.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 06:17:06 UTC", "discovered_at": "2026-10-12T06:17:06.000Z" }, { "id": 159316, "urlhaus_id": "3948227", "url": "http://210.208.110.130:42149/i", "host": "210.208.110.130", "host_ip": "210.208.110.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 06:02:09 UTC", "discovered_at": "2026-10-12T06:02:09.000Z" }, { "id": 159317, "urlhaus_id": "3948226", "url": "http://196.189.98.110:34127/i", "host": "196.189.98.110", "host_ip": "196.189.98.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 06:02:06 UTC", "discovered_at": "2026-10-12T06:02:06.000Z" }, { "id": 159318, "urlhaus_id": "3948225", "url": "http://60.18.71.175:56620/bin.sh", "host": "60.18.71.175", "host_ip": "60.18.71.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 06:01:28 UTC", "discovered_at": "2026-10-12T06:01:28.000Z" }, { "id": 159319, "urlhaus_id": "3948224", "url": "http://182.127.0.237:56565/i", "host": "182.127.0.237", "host_ip": "182.127.0.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 05:47:08 UTC", "discovered_at": "2026-10-12T05:47:08.000Z" }, { "id": 159320, "urlhaus_id": "3948223", "url": "http://222.141.79.86:47396/i", "host": "222.141.79.86", "host_ip": "222.141.79.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 05:39:21 UTC", "discovered_at": "2026-10-12T05:39:21.000Z" }, { "id": 159321, "urlhaus_id": "3948222", "url": "http://42.235.49.252:47197/i", "host": "42.235.49.252", "host_ip": "42.235.49.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 05:32:07 UTC", "discovered_at": "2026-10-12T05:32:07.000Z" }, { "id": 159322, "urlhaus_id": "3948221", "url": "http://183.35.50.12:38590/i", "host": "183.35.50.12", "host_ip": "183.35.50.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:47:06 UTC", "discovered_at": "2026-10-12T04:47:06.000Z" }, { "id": 159324, "urlhaus_id": "3948220", "url": "http://42.234.189.85:45368/i", "host": "42.234.189.85", "host_ip": "42.234.189.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:32:07 UTC", "discovered_at": "2026-10-12T04:32:07.000Z" }, { "id": 159323, "urlhaus_id": "3948219", "url": "http://182.127.110.188:40844/i", "host": "182.127.110.188", "host_ip": "182.127.110.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:32:07 UTC", "discovered_at": "2026-10-12T04:32:07.000Z" }, { "id": 159325, "urlhaus_id": "3948218", "url": "http://42.238.168.152:41810/bin.sh", "host": "42.238.168.152", "host_ip": "42.238.168.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:32:06 UTC", "discovered_at": "2026-10-12T04:32:06.000Z" }, { "id": 159326, "urlhaus_id": "3948217", "url": "http://193.187.101.209:55899/i", "host": "193.187.101.209", "host_ip": "193.187.101.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 04:22:09 UTC", "discovered_at": "2026-10-12T04:22:09.000Z" }, { "id": 159327, "urlhaus_id": "3948216", "url": "http://27.219.186.191:34590/bin.sh", "host": "27.219.186.191", "host_ip": "27.219.186.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 04:18:20 UTC", "discovered_at": "2026-10-12T04:18:20.000Z" }, { "id": 159328, "urlhaus_id": "3948215", "url": "http://210.208.111.100:41194/i", "host": "210.208.111.100", "host_ip": "210.208.111.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:17:06 UTC", "discovered_at": "2026-10-12T04:17:06.000Z" }, { "id": 159329, "urlhaus_id": "3948214", "url": "http://182.123.208.160:36182/i", "host": "182.123.208.160", "host_ip": "182.123.208.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 04:10:12 UTC", "discovered_at": "2026-10-12T04:10:12.000Z" }, { "id": 159330, "urlhaus_id": "3948213", "url": "http://222.141.133.234:50577/i", "host": "222.141.133.234", "host_ip": "222.141.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 04:06:17 UTC", "discovered_at": "2026-10-12T04:06:17.000Z" }, { "id": 159332, "urlhaus_id": "3948212", "url": "http://42.224.114.237:54698/i", "host": "42.224.114.237", "host_ip": "42.224.114.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:02:07 UTC", "discovered_at": "2026-10-12T04:02:07.000Z" }, { "id": 159331, "urlhaus_id": "3948211", "url": "http://42.228.218.9:58691/i", "host": "42.228.218.9", "host_ip": "42.228.218.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:02:07 UTC", "discovered_at": "2026-10-12T04:02:07.000Z" }, { "id": 159333, "urlhaus_id": "3948210", "url": "http://42.232.227.88:40830/i", "host": "42.232.227.88", "host_ip": "42.232.227.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 04:02:06 UTC", "discovered_at": "2026-10-12T04:02:06.000Z" }, { "id": 159334, "urlhaus_id": "3948209", "url": "http://122.241.88.118:60851/i", "host": "122.241.88.118", "host_ip": "122.241.88.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-12 03:56:16 UTC", "discovered_at": "2026-10-12T03:56:16.000Z" }, { "id": 159335, "urlhaus_id": "3948208", "url": "http://46.163.181.104:41767/i", "host": "46.163.181.104", "host_ip": "46.163.181.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 03:51:15 UTC", "discovered_at": "2026-10-12T03:51:15.000Z" }, { "id": 159336, "urlhaus_id": "3948207", "url": "http://182.123.208.160:36182/bin.sh", "host": "182.123.208.160", "host_ip": "182.123.208.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 03:48:11 UTC", "discovered_at": "2026-10-12T03:48:11.000Z" }, { "id": 159337, "urlhaus_id": "3948206", "url": "http://120.28.215.50:48402/i", "host": "120.28.215.50", "host_ip": "120.28.215.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 03:32:14 UTC", "discovered_at": "2026-10-12T03:32:14.000Z" }, { "id": 159338, "urlhaus_id": "3948205", "url": "http://61.54.41.100:59180/bin.sh", "host": "61.54.41.100", "host_ip": "61.54.41.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 03:22:18 UTC", "discovered_at": "2026-10-12T03:22:18.000Z" }, { "id": 159339, "urlhaus_id": "3948204", "url": "http://120.84.212.143:33992/i", "host": "120.84.212.143", "host_ip": "120.84.212.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 02:53:27 UTC", "discovered_at": "2026-10-12T02:53:27.000Z" }, { "id": 159340, "urlhaus_id": "3948203", "url": "http://120.28.201.75:44745/i", "host": "120.28.201.75", "host_ip": "120.28.201.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:47:06 UTC", "discovered_at": "2026-10-12T02:47:06.000Z" }, { "id": 159345, "urlhaus_id": "3948202", "url": "http://117.26.227.112:44031/i", "host": "117.26.227.112", "host_ip": "117.26.227.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:08 UTC", "discovered_at": "2026-10-12T02:32:08.000Z" }, { "id": 159344, "urlhaus_id": "3948201", "url": "http://219.157.32.89:56291/bin.sh", "host": "219.157.32.89", "host_ip": "219.157.32.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:08 UTC", "discovered_at": "2026-10-12T02:32:08.000Z" }, { "id": 159343, "urlhaus_id": "3948200", "url": "http://219.157.32.89:56291/i", "host": "219.157.32.89", "host_ip": "219.157.32.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:08 UTC", "discovered_at": "2026-10-12T02:32:08.000Z" }, { "id": 159342, "urlhaus_id": "3948199", "url": "http://210.208.111.100:41194/bin.sh", "host": "210.208.111.100", "host_ip": "210.208.111.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:08 UTC", "discovered_at": "2026-10-12T02:32:08.000Z" }, { "id": 159341, "urlhaus_id": "3948198", "url": "http://203.160.9.182:33077/i", "host": "203.160.9.182", "host_ip": "203.160.9.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:08 UTC", "discovered_at": "2026-10-12T02:32:08.000Z" }, { "id": 159346, "urlhaus_id": "3948197", "url": "http://210.208.110.51:44372/i", "host": "210.208.110.51", "host_ip": "210.208.110.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:32:07 UTC", "discovered_at": "2026-10-12T02:32:07.000Z" }, { "id": 159347, "urlhaus_id": "3948196", "url": "http://61.53.15.189:56888/bin.sh", "host": "61.53.15.189", "host_ip": "61.53.15.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 02:29:18 UTC", "discovered_at": "2026-10-12T02:29:18.000Z" }, { "id": 159348, "urlhaus_id": "3948195", "url": "http://120.84.212.143:33992/bin.sh", "host": "120.84.212.143", "host_ip": "120.84.212.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 02:26:30 UTC", "discovered_at": "2026-10-12T02:26:30.000Z" }, { "id": 159349, "urlhaus_id": "3948194", "url": "http://113.236.142.253:55111/i", "host": "113.236.142.253", "host_ip": "113.236.142.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 02:23:14 UTC", "discovered_at": "2026-10-12T02:23:14.000Z" }, { "id": 159350, "urlhaus_id": "3948193", "url": "http://42.84.60.12:58877/i", "host": "42.84.60.12", "host_ip": "42.84.60.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 02:17:06 UTC", "discovered_at": "2026-10-12T02:17:06.000Z" }, { "id": 159351, "urlhaus_id": "3948192", "url": "http://61.53.140.53:37630/i", "host": "61.53.140.53", "host_ip": "61.53.140.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 02:13:18 UTC", "discovered_at": "2026-10-12T02:13:18.000Z" }, { "id": 159352, "urlhaus_id": "3948191", "url": "http://42.87.145.61:38450/bin.sh", "host": "42.87.145.61", "host_ip": "42.87.145.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-12 01:48:10 UTC", "discovered_at": "2026-10-12T01:48:10.000Z" }, { "id": 159355, "urlhaus_id": "3948190", "url": "http://115.55.135.64:55348/i", "host": "115.55.135.64", "host_ip": "115.55.135.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:32:08 UTC", "discovered_at": "2026-10-12T01:32:08.000Z" }, { "id": 159354, "urlhaus_id": "3948189", "url": "http://59.96.141.18:46876/i", "host": "59.96.141.18", "host_ip": "59.96.141.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:32:08 UTC", "discovered_at": "2026-10-12T01:32:08.000Z" }, { "id": 159353, "urlhaus_id": "3948188", "url": "http://58.208.147.148:39764/i", "host": "58.208.147.148", "host_ip": "58.208.147.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:32:08 UTC", "discovered_at": "2026-10-12T01:32:08.000Z" }, { "id": 159357, "urlhaus_id": "3948187", "url": "http://210.208.110.147:40189/bin.sh", "host": "210.208.110.147", "host_ip": "210.208.110.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:32:07 UTC", "discovered_at": "2026-10-12T01:32:07.000Z" }, { "id": 159356, "urlhaus_id": "3948186", "url": "http://45.171.177.193:33304/i", "host": "45.171.177.193", "host_ip": "45.171.177.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:32:07 UTC", "discovered_at": "2026-10-12T01:32:07.000Z" }, { "id": 159359, "urlhaus_id": "3948185", "url": "http://219.155.201.217:59689/i", "host": "219.155.201.217", "host_ip": "219.155.201.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:09 UTC", "discovered_at": "2026-10-12T01:17:09.000Z" }, { "id": 159358, "urlhaus_id": "3948184", "url": "http://115.62.179.211:34744/i", "host": "115.62.179.211", "host_ip": "115.62.179.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:09 UTC", "discovered_at": "2026-10-12T01:17:09.000Z" }, { "id": 159363, "urlhaus_id": "3948183", "url": "http://210.208.110.42:48935/i", "host": "210.208.110.42", "host_ip": "210.208.110.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:08 UTC", "discovered_at": "2026-10-12T01:17:08.000Z" }, { "id": 159362, "urlhaus_id": "3948182", "url": "http://210.208.110.147:40189/i", "host": "210.208.110.147", "host_ip": "210.208.110.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:08 UTC", "discovered_at": "2026-10-12T01:17:08.000Z" }, { "id": 159361, "urlhaus_id": "3948181", "url": "http://115.58.90.151:44550/i", "host": "115.58.90.151", "host_ip": "115.58.90.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:08 UTC", "discovered_at": "2026-10-12T01:17:08.000Z" }, { "id": 159360, "urlhaus_id": "3948180", "url": "http://210.208.111.74:42473/i", "host": "210.208.111.74", "host_ip": "210.208.111.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:17:08 UTC", "discovered_at": "2026-10-12T01:17:08.000Z" }, { "id": 159364, "urlhaus_id": "3948179", "url": "http://220.198.113.11:36304/i", "host": "220.198.113.11", "host_ip": "220.198.113.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 01:02:20 UTC", "discovered_at": "2026-10-12T01:02:20.000Z" }, { "id": 159365, "urlhaus_id": "3948178", "url": "http://119.114.134.132:51983/bin.sh", "host": "119.114.134.132", "host_ip": "119.114.134.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 00:47:07 UTC", "discovered_at": "2026-10-12T00:47:07.000Z" }, { "id": 159366, "urlhaus_id": "3948177", "url": "http://222.137.97.203:53364/bin.sh", "host": "222.137.97.203", "host_ip": "222.137.97.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 00:32:06 UTC", "discovered_at": "2026-10-12T00:32:06.000Z" }, { "id": 159367, "urlhaus_id": "3948176", "url": "http://154.242.143.151:50387/i", "host": "154.242.143.151", "host_ip": "154.242.143.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-12 00:02:06 UTC", "discovered_at": "2026-10-12T00:02:06.000Z" }, { "id": 159368, "urlhaus_id": "3948175", "url": "http://180.149.219.213:53810/i", "host": "180.149.219.213", "host_ip": "180.149.219.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 23:35:15 UTC", "discovered_at": "2026-10-11T23:35:15.000Z" }, { "id": 159370, "urlhaus_id": "3948174", "url": "http://125.46.173.149:58427/bin.sh", "host": "125.46.173.149", "host_ip": "125.46.173.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:32:07 UTC", "discovered_at": "2026-10-11T23:32:07.000Z" }, { "id": 159369, "urlhaus_id": "3948173", "url": "http://221.15.185.45:51916/i", "host": "221.15.185.45", "host_ip": "221.15.185.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:32:07 UTC", "discovered_at": "2026-10-11T23:32:07.000Z" }, { "id": 159371, "urlhaus_id": "3948172", "url": "http://130.0.43.154:57792/bin.sh", "host": "130.0.43.154", "host_ip": "130.0.43.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 23:18:18 UTC", "discovered_at": "2026-10-11T23:18:18.000Z" }, { "id": 159372, "urlhaus_id": "3948171", "url": "http://119.183.26.169:57722/i", "host": "119.183.26.169", "host_ip": "119.183.26.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:17:07 UTC", "discovered_at": "2026-10-11T23:17:07.000Z" }, { "id": 159373, "urlhaus_id": "3948170", "url": "http://182.114.35.23:43016/i", "host": "182.114.35.23", "host_ip": "182.114.35.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:02:08 UTC", "discovered_at": "2026-10-11T23:02:08.000Z" }, { "id": 159375, "urlhaus_id": "3948169", "url": "http://182.113.25.83:46080/i", "host": "182.113.25.83", "host_ip": "182.113.25.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:02:07 UTC", "discovered_at": "2026-10-11T23:02:07.000Z" }, { "id": 159374, "urlhaus_id": "3948168", "url": "http://175.174.40.98:55253/i", "host": "175.174.40.98", "host_ip": "175.174.40.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:02:07 UTC", "discovered_at": "2026-10-11T23:02:07.000Z" }, { "id": 159376, "urlhaus_id": "3948167", "url": "http://222.137.154.63:48972/bin.sh", "host": "222.137.154.63", "host_ip": "222.137.154.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 23:02:06 UTC", "discovered_at": "2026-10-11T23:02:06.000Z" }, { "id": 157465, "urlhaus_id": "3948126", "url": "http://105.226.5.161:48433/i", "host": "105.226.5.161", "host_ip": "105.226.5.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 18:58:13 UTC", "discovered_at": "2026-10-11T18:58:13.000Z" }, { "id": 157466, "urlhaus_id": "3948125", "url": "http://222.138.101.246:41384/i", "host": "222.138.101.246", "host_ip": "222.138.101.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 18:47:06 UTC", "discovered_at": "2026-10-11T18:47:06.000Z" }, { "id": 157467, "urlhaus_id": "3948124", "url": "https://taunahi.skyblock-qol.com/TaunahiAutoPatch-b7-fabric.jar", "host": "taunahi.skyblock-qol.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 18:34:07 UTC", "discovered_at": "2026-10-11T18:34:07.000Z" }, { "id": 157469, "urlhaus_id": "3948123", "url": "https://feed-delta.com/f/qus5n9iecneukfdd5bqagg/8d5wkyb6", "host": "feed-delta.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, zsh", "last_online": null, "first_seen": "2026-10-11 18:34:05 UTC", "discovered_at": "2026-10-11T18:34:05.000Z" }, { "id": 157468, "urlhaus_id": "3948122", "url": "https://feed-delta.com/curl/18r59ofv/fxv1t3fowzox6ghlb.txt", "host": "feed-delta.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS, zsh", "last_online": null, "first_seen": "2026-10-11 18:34:05 UTC", "discovered_at": "2026-10-11T18:34:05.000Z" }, { "id": 157470, "urlhaus_id": "3948121", "url": "http://105.226.5.161:48433/bin.sh", "host": "105.226.5.161", "host_ip": "105.226.5.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 18:31:31 UTC", "discovered_at": "2026-10-11T18:31:31.000Z" }, { "id": 157471, "urlhaus_id": "3948120", "url": "http://180.190.188.110:51985/i", "host": "180.190.188.110", "host_ip": "180.190.188.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 18:31:22 UTC", "discovered_at": "2026-10-11T18:31:22.000Z" }, { "id": 157472, "urlhaus_id": "3948119", "url": "https://voidgame.ink/zalupa/Void%20Launcher.rar?v=1791741131145&r=4np6h3", "host": "voidgame.ink", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-voidgame, stealer", "last_online": null, "first_seen": "2026-10-11 18:29:29 UTC", "discovered_at": "2026-10-11T18:29:29.000Z" }, { "id": 157473, "urlhaus_id": "3948118", "url": "http://110.42.232.120:8897/?h=110.42.232.120&p=8897&t=tcp&a=a64&stage=true&k=b41bfef6tcp", "host": "110.42.232.120", "host_ip": "110.42.232.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm64, elf, vshell", "last_online": null, "first_seen": "2026-10-11 18:28:58 UTC", "discovered_at": "2026-10-11T18:28:58.000Z" }, { "id": 157474, "urlhaus_id": "3948117", "url": "http://110.42.232.120:8897/?h=110.42.232.120&p=8897&t=tcp&a=a32&stage=true&k=b41bfef6tcp", "host": "110.42.232.120", "host_ip": "110.42.232.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, elf, vshell", "last_online": null, "first_seen": "2026-10-11 18:28:48 UTC", "discovered_at": "2026-10-11T18:28:48.000Z" }, { "id": 157475, "urlhaus_id": "3948116", "url": "https://cdn.discordapp.com/attachments/1487471200522207422/1558575558043107509/bundle.zip?ex=6acbf019&is=6aca9e99&hm=e5a387311d1a09297f12483208bb35c284507fccf586bb3af5ba0a08bd441bec&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 18:28:37 UTC", "discovered_at": "2026-10-11T18:28:37.000Z" }, { "id": 157476, "urlhaus_id": "3948115", "url": "https://cdn.discordapp.com/attachments/1558894388057350258/1558894459301658634/bundle.zip?ex=6acd1919&is=6acbc799&hm=e8e16ac6c1a60f6e2550ce451e8b078ddf3a0d35edd62abe8bd6d8c5440ded0e&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 18:28:24 UTC", "discovered_at": "2026-10-11T18:28:24.000Z" }, { "id": 157477, "urlhaus_id": "3948114", "url": "https://origin.nemoclawcloud.com/DvnX.zip", "host": "origin.nemoclawcloud.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-11 18:28:23 UTC", "discovered_at": "2026-10-11T18:28:23.000Z" }, { "id": 157478, "urlhaus_id": "3948113", "url": "https://cdn.discordapp.com/attachments/1555272738183061585/1558572762866389032/bundle.zip?ex=6acbed7f&is=6aca9bff&hm=cb9d93f21b681de5d2665a2bf65260efd7a33c43dee7c91b58ee1d4354b66967&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 18:28:21 UTC", "discovered_at": "2026-10-11T18:28:21.000Z" }, { "id": 157479, "urlhaus_id": "3948112", "url": "https://drive.usercontent.google.com/download?id=1tZApf8r52iWTbCFbncYiQTgUiKVtT9_L&export=download&authuser=0&confirm=t&uuid=1e1dd160-6170-4291-9946-3c17d14a17d7&at=AMrWOn1GOle5aEA706WPJcoNRPak%3A1791741732974", "host": "drive.usercontent.google.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw- 123123, stealer", "last_online": null, "first_seen": "2026-10-11 18:28:15 UTC", "discovered_at": "2026-10-11T18:28:15.000Z" }, { "id": 157480, "urlhaus_id": "3948111", "url": "https://getoutofthebackseat.com/HashManager64.zip", "host": "getoutofthebackseat.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "HijackLoader, IDATLoader, ZigClipper, zip", "last_online": null, "first_seen": "2026-10-11 18:28:10 UTC", "discovered_at": "2026-10-11T18:28:10.000Z" }, { "id": 157481, "urlhaus_id": "3948110", "url": "http://222.136.49.200:40792/i", "host": "222.136.49.200", "host_ip": "222.136.49.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 18:02:11 UTC", "discovered_at": "2026-10-11T18:02:11.000Z" }, { "id": 157483, "urlhaus_id": "3948109", "url": "http://115.56.160.116:50789/bin.sh", "host": "115.56.160.116", "host_ip": "115.56.160.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 18:02:06 UTC", "discovered_at": "2026-10-11T18:02:06.000Z" }, { "id": 157482, "urlhaus_id": "3948108", "url": "http://115.55.129.129:55799/i", "host": "115.55.129.129", "host_ip": "115.55.129.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 18:02:06 UTC", "discovered_at": "2026-10-11T18:02:06.000Z" }, { "id": 157484, "urlhaus_id": "3948107", "url": "http://123.12.25.193:37742/i", "host": "123.12.25.193", "host_ip": "123.12.25.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:52:11 UTC", "discovered_at": "2026-10-11T17:52:11.000Z" }, { "id": 157485, "urlhaus_id": "3948106", "url": "http://42.55.6.11:49652/i", "host": "42.55.6.11", "host_ip": "42.55.6.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:50:20 UTC", "discovered_at": "2026-10-11T17:50:20.000Z" }, { "id": 157486, "urlhaus_id": "3948105", "url": "https://immortales.fun/Divine.zip", "host": "immortales.fun", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-11 17:46:16 UTC", "discovered_at": "2026-10-11T17:46:16.000Z" }, { "id": 157487, "urlhaus_id": "3948104", "url": "https://wsd.immortales.fun/Divine.zip", "host": "wsd.immortales.fun", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-11 17:33:32 UTC", "discovered_at": "2026-10-11T17:33:32.000Z" }, { "id": 157488, "urlhaus_id": "3948103", "url": "https://github.com/discordananisikem-pixel/fenasinbasabelasin/releases/download/n/bundle.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 17:33:18 UTC", "discovered_at": "2026-10-11T17:33:18.000Z" }, { "id": 157489, "urlhaus_id": "3948102", "url": "http://115.53.201.33:44073/bin.sh", "host": "115.53.201.33", "host_ip": "115.53.201.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:33:17 UTC", "discovered_at": "2026-10-11T17:33:17.000Z" }, { "id": 157490, "urlhaus_id": "3948101", "url": "http://222.141.40.236:50078/bin.sh", "host": "222.141.40.236", "host_ip": "222.141.40.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:32:07 UTC", "discovered_at": "2026-10-11T17:32:07.000Z" }, { "id": 157491, "urlhaus_id": "3948100", "url": "http://115.53.201.33:44073/i", "host": "115.53.201.33", "host_ip": "115.53.201.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:28:08 UTC", "discovered_at": "2026-10-11T17:28:08.000Z" }, { "id": 157492, "urlhaus_id": "3948099", "url": "http://123.12.25.193:37742/bin.sh", "host": "123.12.25.193", "host_ip": "123.12.25.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:27:16 UTC", "discovered_at": "2026-10-11T17:27:16.000Z" }, { "id": 157494, "urlhaus_id": "3948098", "url": "http://123.9.244.39:39490/i", "host": "123.9.244.39", "host_ip": "123.9.244.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:17:07 UTC", "discovered_at": "2026-10-11T17:17:07.000Z" }, { "id": 157493, "urlhaus_id": "3948097", "url": "http://123.9.244.39:39490/bin.sh", "host": "123.9.244.39", "host_ip": "123.9.244.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:17:07 UTC", "discovered_at": "2026-10-11T17:17:07.000Z" }, { "id": 157496, "urlhaus_id": "3948096", "url": "http://64.235.45.196/api.exe", "host": "64.235.45.196", "host_ip": "64.235.45.196", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat", "last_online": null, "first_seen": "2026-10-11 17:09:07 UTC", "discovered_at": "2026-10-11T17:09:07.000Z" }, { "id": 157495, "urlhaus_id": "3948095", "url": "http://64.235.45.196/api2.exe", "host": "64.235.45.196", "host_ip": "64.235.45.196", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-11 17:09:07 UTC", "discovered_at": "2026-10-11T17:09:07.000Z" }, { "id": 157497, "urlhaus_id": "3948094", "url": "http://42.87.210.20:57683/i", "host": "42.87.210.20", "host_ip": "42.87.210.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-11 17:08:29 UTC", "discovered_at": "2026-10-11T17:08:29.000Z" }, { "id": 157498, "urlhaus_id": "3948093", "url": "https://cdn.discordapp.com/attachments/1519428468599951424/1558874277275639873/bundle.zip?ex=6acd064e&is=6acbb4ce&hm=2aaf0e96bd284eb57d633f09755dbe56d43db340569798577b9bc24be9feae55&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 17:08:17 UTC", "discovered_at": "2026-10-11T17:08:17.000Z" }, { "id": 157499, "urlhaus_id": "3948092", "url": "http://182.126.109.1:38888/i", "host": "182.126.109.1", "host_ip": "182.126.109.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 17:08:15 UTC", "discovered_at": "2026-10-11T17:08:15.000Z" }, { "id": 157500, "urlhaus_id": "3948091", "url": "http://42.224.251.249:49409/Mozi.m", "host": "42.224.251.249", "host_ip": "42.224.251.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:08:06 UTC", "discovered_at": "2026-10-11T17:08:06.000Z" }, { "id": 157501, "urlhaus_id": "3948090", "url": "https://87.106.233.9/f/tF5AqDuH", "host": "87.106.233.9", "host_ip": "87.106.233.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, malware", "last_online": null, "first_seen": "2026-10-11 17:08:04 UTC", "discovered_at": "2026-10-11T17:08:04.000Z" }, { "id": 157502, "urlhaus_id": "3948089", "url": "http://115.56.160.116:50789/i", "host": "115.56.160.116", "host_ip": "115.56.160.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:02:07 UTC", "discovered_at": "2026-10-11T17:02:07.000Z" }, { "id": 157503, "urlhaus_id": "3948088", "url": "http://115.55.223.24:50944/i", "host": "115.55.223.24", "host_ip": "115.55.223.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 17:02:06 UTC", "discovered_at": "2026-10-11T17:02:06.000Z" }, { "id": 157504, "urlhaus_id": "3948087", "url": "http://180.245.62.121:48408/bin.sh", "host": "180.245.62.121", "host_ip": "180.245.62.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 16:46:13 UTC", "discovered_at": "2026-10-11T16:46:13.000Z" }, { "id": 157505, "urlhaus_id": "3948086", "url": "http://196.189.35.172:59888/i", "host": "196.189.35.172", "host_ip": "196.189.35.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-11 16:28:08 UTC", "discovered_at": "2026-10-11T16:28:08.000Z" }, { "id": 157506, "urlhaus_id": "3948085", "url": "http://115.48.151.254:59876/i", "host": "115.48.151.254", "host_ip": "115.48.151.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 16:25:16 UTC", "discovered_at": "2026-10-11T16:25:16.000Z" }, { "id": 157507, "urlhaus_id": "3948084", "url": "http://182.126.109.1:38888/bin.sh", "host": "182.126.109.1", "host_ip": "182.126.109.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 16:20:14 UTC", "discovered_at": "2026-10-11T16:20:14.000Z" }, { "id": 157508, "urlhaus_id": "3948083", "url": "http://115.63.75.92:34648/i", "host": "115.63.75.92", "host_ip": "115.63.75.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 16:02:08 UTC", "discovered_at": "2026-10-11T16:02:08.000Z" }, { "id": 157509, "urlhaus_id": "3948082", "url": "http://123.13.99.50:60095/i", "host": "123.13.99.50", "host_ip": "123.13.99.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 15:50:08 UTC", "discovered_at": "2026-10-11T15:50:08.000Z" }, { "id": 157510, "urlhaus_id": "3948081", "url": "http://wp.fujeigroup.com:8888/file/img_220945.png", "host": "wp.fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat, stego", "last_online": null, "first_seen": "2026-10-11 15:48:07 UTC", "discovered_at": "2026-10-11T15:48:07.000Z" }, { "id": 157511, "urlhaus_id": "3948080", "url": "https://fotoschop.cl/Smmrgie.txt", "host": "fotoschop.cl", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-11 15:47:10 UTC", "discovered_at": "2026-10-11T15:47:10.000Z" }, { "id": 157515, "urlhaus_id": "3948079", "url": "http://14.221.238.196:60513/i", "host": "14.221.238.196", "host_ip": "14.221.238.196", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:47:07 UTC", "discovered_at": "2026-10-11T15:47:07.000Z" }, { "id": 157514, "urlhaus_id": "3948078", "url": "http://119.183.2.67:48032/i", "host": "119.183.2.67", "host_ip": "119.183.2.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:47:07 UTC", "discovered_at": "2026-10-11T15:47:07.000Z" }, { "id": 157513, "urlhaus_id": "3948077", "url": "http://123.5.172.91:57091/i", "host": "123.5.172.91", "host_ip": "123.5.172.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:47:07 UTC", "discovered_at": "2026-10-11T15:47:07.000Z" }, { "id": 157512, "urlhaus_id": "3948076", "url": "http://222.142.249.70:36835/i", "host": "222.142.249.70", "host_ip": "222.142.249.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:47:07 UTC", "discovered_at": "2026-10-11T15:47:07.000Z" }, { "id": 157517, "urlhaus_id": "3948075", "url": "https://rough-truth-e072.publicftpresend.workers.dev/gemgvdpeix", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AgentTesla, ascii", "last_online": null, "first_seen": "2026-10-11 15:46:06 UTC", "discovered_at": "2026-10-11T15:46:06.000Z" }, { "id": 157516, "urlhaus_id": "3948074", "url": "https://sp.negrrwe.info/pnct/ddnmame.txt", "host": "sp.negrrwe.info", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, Formbook", "last_online": null, "first_seen": "2026-10-11 15:46:06 UTC", "discovered_at": "2026-10-11T15:46:06.000Z" }, { "id": 157518, "urlhaus_id": "3948073", "url": "https://whisone.cc/files/Whisone_V3.rar", "host": "whisone.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-2026, stealer", "last_online": null, "first_seen": "2026-10-11 15:45:22 UTC", "discovered_at": "2026-10-11T15:45:22.000Z" }, { "id": 157519, "urlhaus_id": "3948072", "url": "http://147.45.116.134/72img_021534.png", "host": "147.45.116.134", "host_ip": "147.45.116.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-11 15:33:10 UTC", "discovered_at": "2026-10-11T15:33:10.000Z" }, { "id": 157520, "urlhaus_id": "3948071", "url": "https://pub-53fe969c6db649fba6466eb765f54359.r2.dev/gvaqnm.png", "host": "pub-53fe969c6db649fba6466eb765f54359.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AgentTesla, stego", "last_online": null, "first_seen": "2026-10-11 15:32:08 UTC", "discovered_at": "2026-10-11T15:32:08.000Z" }, { "id": 157521, "urlhaus_id": "3948070", "url": "https://voidgame.ink/zalupa/Void%20Launcher.rar?v=1791732304860&r=0nqqux", "host": "voidgame.ink", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-voidgame, stealer", "last_online": null, "first_seen": "2026-10-11 15:30:49 UTC", "discovered_at": "2026-10-11T15:30:49.000Z" }, { "id": 157522, "urlhaus_id": "3948069", "url": "https://download948.mediafire.com/n9wyk8kgnkegD7ZBt1vcvWeQeaKaUCAGrMgiv2rDHxl3gaKHuzQvgEEyXQJrvJK5URvt8rvmo3bZtJPeYgGih0W2e4hpTmw9E2V5fOYPiiy8S1sOkWZhvt_ZrOSiyNrMAEDCwWOtj6pZsfj9LFOCRMZ6fU3eSV5B5-2R5oS22Xc/z4b06x88erl36fx/Cs2Hack.zip", "host": "download948.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-cs2hack, stealer", "last_online": null, "first_seen": "2026-10-11 15:28:39 UTC", "discovered_at": "2026-10-11T15:28:39.000Z" }, { "id": 157523, "urlhaus_id": "3948068", "url": "https://filezilla.cc/serverpython86.exe", "host": "filezilla.cc", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-11 15:22:08 UTC", "discovered_at": "2026-10-11T15:22:08.000Z" }, { "id": 157524, "urlhaus_id": "3948067", "url": "http://123.13.99.50:60095/bin.sh", "host": "123.13.99.50", "host_ip": "123.13.99.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 15:21:15 UTC", "discovered_at": "2026-10-11T15:21:15.000Z" }, { "id": 157525, "urlhaus_id": "3948066", "url": "https://oldisgoldgameis.com/OurNew.exe", "host": "oldisgoldgameis.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:21:12 UTC", "discovered_at": "2026-10-11T15:21:12.000Z" }, { "id": 157526, "urlhaus_id": "3948065", "url": "https://anibusclientpro.netlify.app/download", "host": "anibusclientpro.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-11 15:16:10 UTC", "discovered_at": "2026-10-11T15:16:10.000Z" }, { "id": 157527, "urlhaus_id": "3948064", "url": "http://115.57.214.90:58429/i", "host": "115.57.214.90", "host_ip": "115.57.214.90", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:16:08 UTC", "discovered_at": "2026-10-11T15:16:08.000Z" }, { "id": 157528, "urlhaus_id": "3948063", "url": "http://117.26.82.23:56779/i", "host": "117.26.82.23", "host_ip": "117.26.82.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:02:07 UTC", "discovered_at": "2026-10-11T15:02:07.000Z" }, { "id": 157529, "urlhaus_id": "3948062", "url": "http://27.207.240.78:52856/i", "host": "27.207.240.78", "host_ip": "27.207.240.78", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 15:02:06 UTC", "discovered_at": "2026-10-11T15:02:06.000Z" }, { "id": 157530, "urlhaus_id": "3948061", "url": "http://119.179.248.208:43654/i", "host": "119.179.248.208", "host_ip": "119.179.248.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:47:06 UTC", "discovered_at": "2026-10-11T14:47:06.000Z" }, { "id": 157531, "urlhaus_id": "3948060", "url": "http://112.248.103.215:38282/i", "host": "112.248.103.215", "host_ip": "112.248.103.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 14:44:10 UTC", "discovered_at": "2026-10-11T14:44:10.000Z" }, { "id": 157532, "urlhaus_id": "3948059", "url": "https://gitlab.com/chaingangs/fivem-mod-menu/-/raw/HEAD/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-11 14:42:11 UTC", "discovered_at": "2026-10-11T14:42:11.000Z" }, { "id": 157536, "urlhaus_id": "3948058", "url": "https://gitlab.com/fredostorm/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/HEAD/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-11 14:42:08 UTC", "discovered_at": "2026-10-11T14:42:08.000Z" }, { "id": 157535, "urlhaus_id": "3948057", "url": "https://gitlab.com/LoraHex/lunaexecutor/-/raw/HEAD/LunaExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-11 14:42:08 UTC", "discovered_at": "2026-10-11T14:42:08.000Z" }, { "id": 157534, "urlhaus_id": "3948056", "url": "https://github.com/iceclerryk/redENGINE-FiveM/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 14:42:08 UTC", "discovered_at": "2026-10-11T14:42:08.000Z" }, { "id": 157533, "urlhaus_id": "3948055", "url": "https://github.com/sizzenls/Umbrella-HWID-Tool/raw/HEAD/Umbrella/Umbrella.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 14:42:08 UTC", "discovered_at": "2026-10-11T14:42:08.000Z" }, { "id": 157539, "urlhaus_id": "3948054", "url": "https://github.com/jehhlyk/Fluxus-Roblox-Executor/raw/HEAD/Fluxus%20V7.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 14:42:06 UTC", "discovered_at": "2026-10-11T14:42:06.000Z" }, { "id": 157538, "urlhaus_id": "3948053", "url": "https://github.com/feedlixs/Umbrella-HWID-Tool/raw/HEAD/Umbrella/Umbrella.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 14:42:06 UTC", "discovered_at": "2026-10-11T14:42:06.000Z" }, { "id": 157537, "urlhaus_id": "3948052", "url": "https://github.com/hantorrgess/Verox-GTA-Enhanced/raw/HEAD/Verox.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 14:42:06 UTC", "discovered_at": "2026-10-11T14:42:06.000Z" }, { "id": 157540, "urlhaus_id": "3948051", "url": "http://42.59.90.183:54848/i", "host": "42.59.90.183", "host_ip": "42.59.90.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 14:41:14 UTC", "discovered_at": "2026-10-11T14:41:14.000Z" }, { "id": 157541, "urlhaus_id": "3948050", "url": "http://85.137.53.167:24380/bins/dvr/akuma_riscv64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:33:06 UTC", "discovered_at": "2026-10-11T14:33:06.000Z" }, { "id": 157542, "urlhaus_id": "3948049", "url": "http://85.137.53.167:24380/bins/dvr/akuma_sh4", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:32:05 UTC", "discovered_at": "2026-10-11T14:32:05.000Z" }, { "id": 157543, "urlhaus_id": "3948048", "url": "https://fil.immortales.life/Divine.zip", "host": "fil.immortales.life", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-11 14:31:47 UTC", "discovered_at": "2026-10-11T14:31:47.000Z" }, { "id": 157544, "urlhaus_id": "3948047", "url": "https://cdn.discordapp.com/attachments/1557133169877192734/1558848607396823131/bundle.zip?ex=6accee66&is=6acb9ce6&hm=5f09ac9e7e84a62635bc25d32c3cb27f24aa00b0c584fce284d914f93291e8ad&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 14:31:37 UTC", "discovered_at": "2026-10-11T14:31:37.000Z" }, { "id": 157548, "urlhaus_id": "3948046", "url": "http://194.163.178.71:8081/nezha-agent", "host": "194.163.178.71", "host_ip": "194.163.178.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 14:31:22 UTC", "discovered_at": "2026-10-11T14:31:22.000Z" }, { "id": 157547, "urlhaus_id": "3948045", "url": "https://cdn.discordapp.com/attachments/1554903458677653595/1558784934804725800/bundle_3.zip?ex=6accb319&is=6acb6199&hm=3cc7fdd091847c025b03666b4c269e011bbcb4ab462e51e416d0006915821854&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 14:31:22 UTC", "discovered_at": "2026-10-11T14:31:22.000Z" }, { "id": 157546, "urlhaus_id": "3948044", "url": "https://www.eyqw474.com/11load", "host": "www.eyqw474.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilverFox, SilverFox.bm, ValleyRAT", "last_online": null, "first_seen": "2026-10-11 14:31:22 UTC", "discovered_at": "2026-10-11T14:31:22.000Z" }, { "id": 157545, "urlhaus_id": "3948043", "url": "https://cdn.discordapp.com/attachments/1540151072461553724/1558782952987562024/bundle_2.zip?ex=6accb140&is=6acb5fc0&hm=f20958a51ea316ba48d7e2318eba3c39ad98f9af9c223d44fd5c761973af51a0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 14:31:22 UTC", "discovered_at": "2026-10-11T14:31:22.000Z" }, { "id": 157551, "urlhaus_id": "3948042", "url": "http://85.137.53.167:24380/bins/dvr/akuma_mips", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:21 UTC", "discovered_at": "2026-10-11T14:31:21.000Z" }, { "id": 157550, "urlhaus_id": "3948041", "url": "http://85.137.53.167:24380/bins/dvr/akuma_riscv32", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:21 UTC", "discovered_at": "2026-10-11T14:31:21.000Z" }, { "id": 157549, "urlhaus_id": "3948040", "url": "http://85.137.53.167:24380/bins/dvr/akuma_m68k", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:21 UTC", "discovered_at": "2026-10-11T14:31:21.000Z" }, { "id": 157554, "urlhaus_id": "3948039", "url": "http://85.137.53.167:24380/bins/dvr/akuma_i686", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:20 UTC", "discovered_at": "2026-10-11T14:31:20.000Z" }, { "id": 157553, "urlhaus_id": "3948038", "url": "https://mc-modhub.vercel.app/mods/dupemod-26.x.jar", "host": "mc-modhub.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-11 14:31:20 UTC", "discovered_at": "2026-10-11T14:31:20.000Z" }, { "id": 157552, "urlhaus_id": "3948037", "url": "http://85.137.53.167:24380/bins/dvr/akuma_arm64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:20 UTC", "discovered_at": "2026-10-11T14:31:20.000Z" }, { "id": 157555, "urlhaus_id": "3948036", "url": "http://194.163.178.71:8081/enroll.sh", "host": "194.163.178.71", "host_ip": "194.163.178.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-11 14:31:13 UTC", "discovered_at": "2026-10-11T14:31:13.000Z" }, { "id": 157558, "urlhaus_id": "3948035", "url": "https://4k4iard.tupek.store/update.sh", "host": "4k4iard.tupek.store", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "macos, sh, ClickFix, EtherHiding", "last_online": null, "first_seen": "2026-10-11 14:31:07 UTC", "discovered_at": "2026-10-11T14:31:07.000Z" }, { "id": 157557, "urlhaus_id": "3948034", "url": "http://120.28.192.219:39732/bin.sh", "host": "120.28.192.219", "host_ip": "120.28.192.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-11 14:31:07 UTC", "discovered_at": "2026-10-11T14:31:07.000Z" }, { "id": 157556, "urlhaus_id": "3948033", "url": "http://85.137.53.167:24380/bins/dvr/akuma_x64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:07 UTC", "discovered_at": "2026-10-11T14:31:07.000Z" }, { "id": 157563, "urlhaus_id": "3948032", "url": "https://donutdupe.skyblock-qol.com/DonutSmpDupeMod1.21.1-26.2+.jar", "host": "donutdupe.skyblock-qol.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-11 14:31:06 UTC", "discovered_at": "2026-10-11T14:31:06.000Z" }, { "id": 157562, "urlhaus_id": "3948031", "url": "http://85.137.53.167:24380/bins/dvr/akuma_arm7", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:06 UTC", "discovered_at": "2026-10-11T14:31:06.000Z" }, { "id": 157561, "urlhaus_id": "3948030", "url": "http://85.137.53.167:24380/bins/dvr/akuma_ppc", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:06 UTC", "discovered_at": "2026-10-11T14:31:06.000Z" }, { "id": 157560, "urlhaus_id": "3948029", "url": "http://85.137.53.167:24380/bins/dvr/akuma_mps64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:06 UTC", "discovered_at": "2026-10-11T14:31:06.000Z" }, { "id": 157559, "urlhaus_id": "3948028", "url": "http://85.137.53.167:24380/bins/dvr/akuma_mpsl", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "85-137-53-167, cowrie, elf, honeypot", "last_online": null, "first_seen": "2026-10-11 14:31:06 UTC", "discovered_at": "2026-10-11T14:31:06.000Z" }, { "id": 157564, "urlhaus_id": "3948027", "url": "https://onlocity.com/download.php?dl_t=5040be5331da9ad77144d7035ad44d7e&dl_e=1791728811&dl_s=6880545d8ab0d9b712a1206f40203fd50703bc111830d489f33cd79721666a8f", "host": "onlocity.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-2026, stealer", "last_online": null, "first_seen": "2026-10-11 14:31:05 UTC", "discovered_at": "2026-10-11T14:31:05.000Z" }, { "id": 157565, "urlhaus_id": "3948026", "url": "http://112.248.103.215:38282/bin.sh", "host": "112.248.103.215", "host_ip": "112.248.103.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 14:24:18 UTC", "discovered_at": "2026-10-11T14:24:18.000Z" }, { "id": 157566, "urlhaus_id": "3948025", "url": "http://124.234.0.3:46485/bin.sh", "host": "124.234.0.3", "host_ip": "124.234.0.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 14:18:14 UTC", "discovered_at": "2026-10-11T14:18:14.000Z" }, { "id": 157567, "urlhaus_id": "3948024", "url": "http://122.241.137.224:57336/i", "host": "122.241.137.224", "host_ip": "122.241.137.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:17:09 UTC", "discovered_at": "2026-10-11T14:17:09.000Z" }, { "id": 157568, "urlhaus_id": "3948023", "url": "http://27.215.82.47:49476/bin.sh", "host": "27.215.82.47", "host_ip": "27.215.82.47", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:17:07 UTC", "discovered_at": "2026-10-11T14:17:07.000Z" }, { "id": 157569, "urlhaus_id": "3948022", "url": "http://125.44.46.94:50619/bin.sh", "host": "125.44.46.94", "host_ip": "125.44.46.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:17:06 UTC", "discovered_at": "2026-10-11T14:17:06.000Z" }, { "id": 157570, "urlhaus_id": "3948021", "url": "http://182.117.79.167:52750/i", "host": "182.117.79.167", "host_ip": "182.117.79.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 14:06:10 UTC", "discovered_at": "2026-10-11T14:06:10.000Z" }, { "id": 157571, "urlhaus_id": "3948020", "url": "http://117.63.9.109:43512/i", "host": "117.63.9.109", "host_ip": "117.63.9.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:02:07 UTC", "discovered_at": "2026-10-11T14:02:07.000Z" }, { "id": 157572, "urlhaus_id": "3948019", "url": "http://119.108.253.24:48874/i", "host": "119.108.253.24", "host_ip": "119.108.253.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 14:02:06 UTC", "discovered_at": "2026-10-11T14:02:06.000Z" }, { "id": 157573, "urlhaus_id": "3948018", "url": "http://45.135.194.96/bins/arm", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:11 UTC", "discovered_at": "2026-10-11T13:59:11.000Z" }, { "id": 157583, "urlhaus_id": "3948017", "url": "http://45.135.194.96/bins/spc", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157582, "urlhaus_id": "3948016", "url": "http://45.135.194.96/bins/mpsl", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157581, "urlhaus_id": "3948015", "url": "http://45.135.194.96/bins/arm5", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157580, "urlhaus_id": "3948014", "url": "http://45.135.194.96/bins/x86_64", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157579, "urlhaus_id": "3948013", "url": "http://45.135.194.96/bins/arm7", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157578, "urlhaus_id": "3948012", "url": "http://45.135.194.96/bins/mips", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157577, "urlhaus_id": "3948011", "url": "http://45.135.194.96/bins/ppc", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157576, "urlhaus_id": "3948010", "url": "http://45.135.194.96/bins/x86", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157575, "urlhaus_id": "3948009", "url": "http://45.135.194.96/bins/m68k", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157574, "urlhaus_id": "3948008", "url": "http://45.135.194.96/bins/sh4", "host": "45.135.194.96", "host_ip": "45.135.194.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:06 UTC", "discovered_at": "2026-10-11T13:59:06.000Z" }, { "id": 157584, "urlhaus_id": "3948007", "url": "http://176.65.139.209/bins/mpsl", "host": "176.65.139.209", "host_ip": "176.65.139.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 13:59:05 UTC", "discovered_at": "2026-10-11T13:59:05.000Z" }, { "id": 157585, "urlhaus_id": "3948006", "url": "http://27.207.229.93:51766/i", "host": "27.207.229.93", "host_ip": "27.207.229.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 13:47:07 UTC", "discovered_at": "2026-10-11T13:47:07.000Z" }, { "id": 157586, "urlhaus_id": "3948005", "url": "http://182.117.79.167:52750/bin.sh", "host": "182.117.79.167", "host_ip": "182.117.79.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 13:44:15 UTC", "discovered_at": "2026-10-11T13:44:15.000Z" }, { "id": 157587, "urlhaus_id": "3948004", "url": "http://42.228.37.155:42735/bin.sh", "host": "42.228.37.155", "host_ip": "42.228.37.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 13:28:11 UTC", "discovered_at": "2026-10-11T13:28:11.000Z" }, { "id": 157588, "urlhaus_id": "3948003", "url": "http://182.124.205.27:51100/i", "host": "182.124.205.27", "host_ip": "182.124.205.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 13:17:07 UTC", "discovered_at": "2026-10-11T13:17:07.000Z" }, { "id": 157589, "urlhaus_id": "3948002", "url": "http://36.70.140.206:51974/i", "host": "36.70.140.206", "host_ip": "36.70.140.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 13:02:18 UTC", "discovered_at": "2026-10-11T13:02:18.000Z" }, { "id": 157590, "urlhaus_id": "3948001", "url": "http://27.37.231.85:56881/i", "host": "27.37.231.85", "host_ip": "27.37.231.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 13:02:07 UTC", "discovered_at": "2026-10-11T13:02:07.000Z" }, { "id": 157591, "urlhaus_id": "3948000", "url": "http://42.237.253.32:32917/bin.sh", "host": "42.237.253.32", "host_ip": "42.237.253.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 13:01:06 UTC", "discovered_at": "2026-10-11T13:01:06.000Z" }, { "id": 157592, "urlhaus_id": "3947999", "url": "http://115.53.220.37:43200/i", "host": "115.53.220.37", "host_ip": "115.53.220.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 12:52:11 UTC", "discovered_at": "2026-10-11T12:52:11.000Z" }, { "id": 157593, "urlhaus_id": "3947998", "url": "http://91.92.242.236/files-129312398/files/file_4aa3e284d0ae6318.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-11 12:52:08 UTC", "discovered_at": "2026-10-11T12:52:08.000Z" }, { "id": 157594, "urlhaus_id": "3947997", "url": "http://42.176.125.25:55108/i", "host": "42.176.125.25", "host_ip": "42.176.125.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 12:47:07 UTC", "discovered_at": "2026-10-11T12:47:07.000Z" }, { "id": 157595, "urlhaus_id": "3947996", "url": "http://221.235.139.104:57238/bin.sh", "host": "221.235.139.104", "host_ip": "221.235.139.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 12:39:16 UTC", "discovered_at": "2026-10-11T12:39:16.000Z" }, { "id": 157596, "urlhaus_id": "3947995", "url": "http://115.53.220.37:43200/bin.sh", "host": "115.53.220.37", "host_ip": "115.53.220.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 12:29:13 UTC", "discovered_at": "2026-10-11T12:29:13.000Z" }, { "id": 157598, "urlhaus_id": "3947994", "url": "http://123.11.121.151:40677/i", "host": "123.11.121.151", "host_ip": "123.11.121.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 12:17:07 UTC", "discovered_at": "2026-10-11T12:17:07.000Z" }, { "id": 157597, "urlhaus_id": "3947993", "url": "http://42.238.168.152:41810/i", "host": "42.238.168.152", "host_ip": "42.238.168.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 12:17:07 UTC", "discovered_at": "2026-10-11T12:17:07.000Z" }, { "id": 157599, "urlhaus_id": "3947992", "url": "http://123.9.196.5:57018/bin.sh", "host": "123.9.196.5", "host_ip": "123.9.196.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 12:12:14 UTC", "discovered_at": "2026-10-11T12:12:14.000Z" }, { "id": 157600, "urlhaus_id": "3947991", "url": "http://39.79.73.59:48970/i", "host": "39.79.73.59", "host_ip": "39.79.73.59", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 12:02:07 UTC", "discovered_at": "2026-10-11T12:02:07.000Z" }, { "id": 157601, "urlhaus_id": "3947990", "url": "http://125.45.67.66:58929/bin.sh", "host": "125.45.67.66", "host_ip": "125.45.67.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 11:55:08 UTC", "discovered_at": "2026-10-11T11:55:08.000Z" }, { "id": 157602, "urlhaus_id": "3947989", "url": "http://222.137.85.203:48268/bin.sh", "host": "222.137.85.203", "host_ip": "222.137.85.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 11:51:07 UTC", "discovered_at": "2026-10-11T11:51:07.000Z" }, { "id": 157603, "urlhaus_id": "3947988", "url": "http://42.57.184.73:34836/i", "host": "42.57.184.73", "host_ip": "42.57.184.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 11:49:15 UTC", "discovered_at": "2026-10-11T11:49:15.000Z" }, { "id": 157604, "urlhaus_id": "3947987", "url": "http://123.10.69.248:36801/i", "host": "123.10.69.248", "host_ip": "123.10.69.248", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 11:47:07 UTC", "discovered_at": "2026-10-11T11:47:07.000Z" }, { "id": 157605, "urlhaus_id": "3947986", "url": "http://42.6.101.155:34345/i", "host": "42.6.101.155", "host_ip": "42.6.101.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-11 11:42:15 UTC", "discovered_at": "2026-10-11T11:42:15.000Z" }, { "id": 157606, "urlhaus_id": "3947985", "url": "http://27.215.82.47:49476/i", "host": "27.215.82.47", "host_ip": "27.215.82.47", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 11:32:07 UTC", "discovered_at": "2026-10-11T11:32:07.000Z" }, { "id": 157607, "urlhaus_id": "3947984", "url": "http://27.215.122.210:51559/i", "host": "27.215.122.210", "host_ip": "27.215.122.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 11:32:06 UTC", "discovered_at": "2026-10-11T11:32:06.000Z" }, { "id": 157608, "urlhaus_id": "3947983", "url": "http://37.28.177.69:45953/i", "host": "37.28.177.69", "host_ip": "37.28.177.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-11 11:10:54 UTC", "discovered_at": "2026-10-11T11:10:54.000Z" }, { "id": 157609, "urlhaus_id": "3947982", "url": "http://42.239.255.151:32965/i", "host": "42.239.255.151", "host_ip": "42.239.255.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 11:02:07 UTC", "discovered_at": "2026-10-11T11:02:07.000Z" }, { "id": 157610, "urlhaus_id": "3947981", "url": "http://196.190.69.149:39184/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:47:19 UTC", "discovered_at": "2026-10-11T10:47:19.000Z" }, { "id": 157612, "urlhaus_id": "3947980", "url": "http://218.28.150.23:42949/bin.sh", "host": "218.28.150.23", "host_ip": "218.28.150.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:47:06 UTC", "discovered_at": "2026-10-11T10:47:06.000Z" }, { "id": 157611, "urlhaus_id": "3947979", "url": "http://216.249.4.20:51801/i", "host": "216.249.4.20", "host_ip": "216.249.4.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:47:06 UTC", "discovered_at": "2026-10-11T10:47:06.000Z" }, { "id": 157613, "urlhaus_id": "3947978", "url": "http://196.189.96.59:55280/bin.sh", "host": "196.189.96.59", "host_ip": "196.189.96.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 10:46:11 UTC", "discovered_at": "2026-10-11T10:46:11.000Z" }, { "id": 157615, "urlhaus_id": "3947977", "url": "http://42.226.66.182:52853/i", "host": "42.226.66.182", "host_ip": "42.226.66.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:32:07 UTC", "discovered_at": "2026-10-11T10:32:07.000Z" }, { "id": 157614, "urlhaus_id": "3947976", "url": "http://182.121.221.214:42289/i", "host": "182.121.221.214", "host_ip": "182.121.221.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:32:07 UTC", "discovered_at": "2026-10-11T10:32:07.000Z" }, { "id": 157616, "urlhaus_id": "3947975", "url": "http://103.125.31.101:38195/bin.sh", "host": "103.125.31.101", "host_ip": "103.125.31.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 10:21:12 UTC", "discovered_at": "2026-10-11T10:21:12.000Z" }, { "id": 157618, "urlhaus_id": "3947974", "url": "http://182.121.82.228:49112/i", "host": "182.121.82.228", "host_ip": "182.121.82.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:17:06 UTC", "discovered_at": "2026-10-11T10:17:06.000Z" }, { "id": 157617, "urlhaus_id": "3947973", "url": "http://182.121.82.228:49112/bin.sh", "host": "182.121.82.228", "host_ip": "182.121.82.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:17:06 UTC", "discovered_at": "2026-10-11T10:17:06.000Z" }, { "id": 157619, "urlhaus_id": "3947972", "url": "http://42.56.3.241:39536/i", "host": "42.56.3.241", "host_ip": "42.56.3.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:17:05 UTC", "discovered_at": "2026-10-11T10:17:05.000Z" }, { "id": 157620, "urlhaus_id": "3947971", "url": "http://182.119.254.104:43898/i", "host": "182.119.254.104", "host_ip": "182.119.254.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:02:07 UTC", "discovered_at": "2026-10-11T10:02:07.000Z" }, { "id": 157622, "urlhaus_id": "3947970", "url": "http://103.172.186.170:44812/bin.sh", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:02:06 UTC", "discovered_at": "2026-10-11T10:02:06.000Z" }, { "id": 157621, "urlhaus_id": "3947969", "url": "http://182.117.127.133:56821/bin.sh", "host": "182.117.127.133", "host_ip": "182.117.127.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 10:02:06 UTC", "discovered_at": "2026-10-11T10:02:06.000Z" }, { "id": 157623, "urlhaus_id": "3947968", "url": "http://120.84.214.107:42447/i", "host": "120.84.214.107", "host_ip": "120.84.214.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:47:06 UTC", "discovered_at": "2026-10-11T09:47:06.000Z" }, { "id": 157624, "urlhaus_id": "3947967", "url": "http://42.231.111.124:60802/i", "host": "42.231.111.124", "host_ip": "42.231.111.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 09:38:11 UTC", "discovered_at": "2026-10-11T09:38:11.000Z" }, { "id": 157625, "urlhaus_id": "3947966", "url": "http://165.98.243.83:33127/i", "host": "165.98.243.83", "host_ip": "165.98.243.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:32:06 UTC", "discovered_at": "2026-10-11T09:32:06.000Z" }, { "id": 157626, "urlhaus_id": "3947965", "url": "http://182.117.127.133:56821/i", "host": "182.117.127.133", "host_ip": "182.117.127.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:17:08 UTC", "discovered_at": "2026-10-11T09:17:08.000Z" }, { "id": 157629, "urlhaus_id": "3947964", "url": "http://182.113.203.175:59417/i", "host": "182.113.203.175", "host_ip": "182.113.203.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:17:07 UTC", "discovered_at": "2026-10-11T09:17:07.000Z" }, { "id": 157628, "urlhaus_id": "3947963", "url": "http://182.117.76.135:52817/i", "host": "182.117.76.135", "host_ip": "182.117.76.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:17:07 UTC", "discovered_at": "2026-10-11T09:17:07.000Z" }, { "id": 157627, "urlhaus_id": "3947962", "url": "http://179.49.213.85:33153/i", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:17:07 UTC", "discovered_at": "2026-10-11T09:17:07.000Z" }, { "id": 157630, "urlhaus_id": "3947961", "url": "http://115.55.236.179:49862/bin.sh", "host": "115.55.236.179", "host_ip": "115.55.236.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 09:15:10 UTC", "discovered_at": "2026-10-11T09:15:10.000Z" }, { "id": 157631, "urlhaus_id": "3947960", "url": "http://125.47.224.254:60533/bin.sh", "host": "125.47.224.254", "host_ip": "125.47.224.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 09:02:06 UTC", "discovered_at": "2026-10-11T09:02:06.000Z" }, { "id": 157632, "urlhaus_id": "3947959", "url": "http://42.231.111.124:60802/bin.sh", "host": "42.231.111.124", "host_ip": "42.231.111.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 09:01:15 UTC", "discovered_at": "2026-10-11T09:01:15.000Z" }, { "id": 157633, "urlhaus_id": "3947958", "url": "http://123.5.14.37:35948/i", "host": "123.5.14.37", "host_ip": "123.5.14.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:47:05 UTC", "discovered_at": "2026-10-11T08:47:05.000Z" }, { "id": 157634, "urlhaus_id": "3947957", "url": "http://113.230.23.74:47203/bin.sh", "host": "113.230.23.74", "host_ip": "113.230.23.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 08:37:07 UTC", "discovered_at": "2026-10-11T08:37:07.000Z" }, { "id": 157635, "urlhaus_id": "3947956", "url": "http://113.231.217.129:57347/i", "host": "113.231.217.129", "host_ip": "113.231.217.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 08:36:11 UTC", "discovered_at": "2026-10-11T08:36:11.000Z" }, { "id": 157639, "urlhaus_id": "3947955", "url": "http://123.14.122.226:38464/bin.sh", "host": "123.14.122.226", "host_ip": "123.14.122.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:07 UTC", "discovered_at": "2026-10-11T08:32:07.000Z" }, { "id": 157638, "urlhaus_id": "3947954", "url": "http://125.46.173.149:58427/i", "host": "125.46.173.149", "host_ip": "125.46.173.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:07 UTC", "discovered_at": "2026-10-11T08:32:07.000Z" }, { "id": 157637, "urlhaus_id": "3947953", "url": "http://125.40.158.82:42912/i", "host": "125.40.158.82", "host_ip": "125.40.158.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:07 UTC", "discovered_at": "2026-10-11T08:32:07.000Z" }, { "id": 157636, "urlhaus_id": "3947952", "url": "http://123.185.222.129:56156/i", "host": "123.185.222.129", "host_ip": "123.185.222.129", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:07 UTC", "discovered_at": "2026-10-11T08:32:07.000Z" }, { "id": 157641, "urlhaus_id": "3947951", "url": "http://125.47.224.254:60533/i", "host": "125.47.224.254", "host_ip": "125.47.224.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:06 UTC", "discovered_at": "2026-10-11T08:32:06.000Z" }, { "id": 157640, "urlhaus_id": "3947950", "url": "http://125.44.46.94:50619/i", "host": "125.44.46.94", "host_ip": "125.44.46.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:32:06 UTC", "discovered_at": "2026-10-11T08:32:06.000Z" }, { "id": 157642, "urlhaus_id": "3947949", "url": "http://113.231.217.129:57347/bin.sh", "host": "113.231.217.129", "host_ip": "113.231.217.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 08:10:08 UTC", "discovered_at": "2026-10-11T08:10:08.000Z" }, { "id": 157643, "urlhaus_id": "3947948", "url": "http://210.208.111.36:35182/i", "host": "210.208.111.36", "host_ip": "210.208.111.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:02:09 UTC", "discovered_at": "2026-10-11T08:02:09.000Z" }, { "id": 157645, "urlhaus_id": "3947947", "url": "http://202.110.28.103:33133/i", "host": "202.110.28.103", "host_ip": "202.110.28.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:02:07 UTC", "discovered_at": "2026-10-11T08:02:07.000Z" }, { "id": 157644, "urlhaus_id": "3947946", "url": "http://59.97.251.62:47014/i", "host": "59.97.251.62", "host_ip": "59.97.251.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 08:02:07 UTC", "discovered_at": "2026-10-11T08:02:07.000Z" }, { "id": 157646, "urlhaus_id": "3947945", "url": "http://61.53.15.189:56888/i", "host": "61.53.15.189", "host_ip": "61.53.15.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:47:07 UTC", "discovered_at": "2026-10-11T07:47:07.000Z" }, { "id": 157647, "urlhaus_id": "3947944", "url": "http://119.115.164.178:32954/i", "host": "119.115.164.178", "host_ip": "119.115.164.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:47:06 UTC", "discovered_at": "2026-10-11T07:47:06.000Z" }, { "id": 157648, "urlhaus_id": "3947943", "url": "http://222.139.101.75:43968/i", "host": "222.139.101.75", "host_ip": "222.139.101.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 07:41:16 UTC", "discovered_at": "2026-10-11T07:41:16.000Z" }, { "id": 157649, "urlhaus_id": "3947942", "url": "http://42.233.104.85:36775/i", "host": "42.233.104.85", "host_ip": "42.233.104.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 07:38:14 UTC", "discovered_at": "2026-10-11T07:38:14.000Z" }, { "id": 157650, "urlhaus_id": "3947941", "url": "http://38.253.224.56:8080/hiddenbin/arm7", "host": "38.253.224.56", "host_ip": "38.253.224.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf", "last_online": null, "first_seen": "2026-10-11 07:33:16 UTC", "discovered_at": "2026-10-11T07:33:16.000Z" }, { "id": 157651, "urlhaus_id": "3947940", "url": "http://42.224.251.249:49409/bin.sh", "host": "42.224.251.249", "host_ip": "42.224.251.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 07:33:15 UTC", "discovered_at": "2026-10-11T07:33:15.000Z" }, { "id": 157652, "urlhaus_id": "3947939", "url": "http://85.12.205.35:51317/i", "host": "85.12.205.35", "host_ip": "85.12.205.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:33:06 UTC", "discovered_at": "2026-10-11T07:33:06.000Z" }, { "id": 157653, "urlhaus_id": "3947938", "url": "http://85.12.205.35:51317/bin.sh", "host": "85.12.205.35", "host_ip": "85.12.205.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:32:08 UTC", "discovered_at": "2026-10-11T07:32:08.000Z" }, { "id": 157654, "urlhaus_id": "3947937", "url": "http://45.135.194.116/armv5l", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:31:14 UTC", "discovered_at": "2026-10-11T07:31:14.000Z" }, { "id": 157658, "urlhaus_id": "3947936", "url": "http://185.221.222.175/bins/sora.mpsl", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:26 UTC", "discovered_at": "2026-10-11T07:30:26.000Z" }, { "id": 157657, "urlhaus_id": "3947935", "url": "http://185.221.222.175/bins/sora.spc", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:26 UTC", "discovered_at": "2026-10-11T07:30:26.000Z" }, { "id": 157656, "urlhaus_id": "3947934", "url": "http://185.221.222.175/bins/sora.arm5", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:26 UTC", "discovered_at": "2026-10-11T07:30:26.000Z" }, { "id": 157655, "urlhaus_id": "3947933", "url": "http://185.221.222.175/bins/sora.ppc", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:26 UTC", "discovered_at": "2026-10-11T07:30:26.000Z" }, { "id": 157663, "urlhaus_id": "3947932", "url": "http://185.221.222.175/bins/sora.arm6", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:25 UTC", "discovered_at": "2026-10-11T07:30:25.000Z" }, { "id": 157662, "urlhaus_id": "3947931", "url": "http://185.221.222.175/bins/sora.mips", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:25 UTC", "discovered_at": "2026-10-11T07:30:25.000Z" }, { "id": 157661, "urlhaus_id": "3947930", "url": "http://185.221.222.175/bins/sora.sh4", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:25 UTC", "discovered_at": "2026-10-11T07:30:25.000Z" }, { "id": 157660, "urlhaus_id": "3947929", "url": "http://185.221.222.175/bins/sora.m68k", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:25 UTC", "discovered_at": "2026-10-11T07:30:25.000Z" }, { "id": 157659, "urlhaus_id": "3947928", "url": "http://185.221.222.175/bins/sora.arm7", "host": "185.221.222.175", "host_ip": "185.221.222.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:25 UTC", "discovered_at": "2026-10-11T07:30:25.000Z" }, { "id": 157665, "urlhaus_id": "3947927", "url": "http://45.135.194.116/armv6l", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:18 UTC", "discovered_at": "2026-10-11T07:30:18.000Z" }, { "id": 157664, "urlhaus_id": "3947926", "url": "http://45.135.194.116/m68k", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:18 UTC", "discovered_at": "2026-10-11T07:30:18.000Z" }, { "id": 157671, "urlhaus_id": "3947925", "url": "http://45.135.194.116/armv7l", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157670, "urlhaus_id": "3947924", "url": "http://94.154.43.37/bins/mpsl", "host": "94.154.43.37", "host_ip": "94.154.43.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157669, "urlhaus_id": "3947923", "url": "http://45.135.194.116/armv4l", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157668, "urlhaus_id": "3947922", "url": "http://45.135.194.116/mipsel", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157667, "urlhaus_id": "3947921", "url": "http://45.135.194.116/powerpc", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157666, "urlhaus_id": "3947920", "url": "http://115.55.7.254:57618/bin.sh", "host": "115.55.7.254", "host_ip": "115.55.7.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 07:30:17 UTC", "discovered_at": "2026-10-11T07:30:17.000Z" }, { "id": 157672, "urlhaus_id": "3947919", "url": "http://115.49.203.91:54144/bin.sh", "host": "115.49.203.91", "host_ip": "115.49.203.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 07:29:08 UTC", "discovered_at": "2026-10-11T07:29:08.000Z" }, { "id": 157673, "urlhaus_id": "3947918", "url": "http://180.191.16.24:33057/bin.sh", "host": "180.191.16.24", "host_ip": "180.191.16.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 07:25:17 UTC", "discovered_at": "2026-10-11T07:25:17.000Z" }, { "id": 157674, "urlhaus_id": "3947917", "url": "http://119.115.164.178:32954/bin.sh", "host": "119.115.164.178", "host_ip": "119.115.164.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:17:20 UTC", "discovered_at": "2026-10-11T07:17:20.000Z" }, { "id": 157675, "urlhaus_id": "3947916", "url": "http://119.115.254.82:54198/bin.sh", "host": "119.115.254.82", "host_ip": "119.115.254.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:17:10 UTC", "discovered_at": "2026-10-11T07:17:10.000Z" }, { "id": 157676, "urlhaus_id": "3947915", "url": "http://219.155.237.46:34022/bin.sh", "host": "219.155.237.46", "host_ip": "219.155.237.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:17:07 UTC", "discovered_at": "2026-10-11T07:17:07.000Z" }, { "id": 157677, "urlhaus_id": "3947914", "url": "http://5.175.222.237/arm6", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:20 UTC", "discovered_at": "2026-10-11T07:06:20.000Z" }, { "id": 157684, "urlhaus_id": "3947913", "url": "http://154.83.85.63:47991/chisel-amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157683, "urlhaus_id": "3947912", "url": "http://154.83.85.63:47991/s5test", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157682, "urlhaus_id": "3947911", "url": "http://154.83.85.63:47991/reports.json", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157681, "urlhaus_id": "3947910", "url": "http://154.83.85.63:47991/nodetap_amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157680, "urlhaus_id": "3947909", "url": "http://154.83.85.63:47991/svc-helper-arm", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157679, "urlhaus_id": "3947908", "url": "http://154.83.85.63:47991/s5_armv7", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157678, "urlhaus_id": "3947907", "url": "http://154.83.85.63:47991/s5_amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:11 UTC", "discovered_at": "2026-10-11T07:06:11.000Z" }, { "id": 157685, "urlhaus_id": "3947906", "url": "http://154.83.85.63:47991/s5-armv5.gz", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:10 UTC", "discovered_at": "2026-10-11T07:06:10.000Z" }, { "id": 157686, "urlhaus_id": "3947905", "url": "http://154.83.85.63:47991/w8001.json", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:06:06 UTC", "discovered_at": "2026-10-11T07:06:06.000Z" }, { "id": 157690, "urlhaus_id": "3947904", "url": "http://5.175.222.237/ipc", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:32 UTC", "discovered_at": "2026-10-11T07:05:32.000Z" }, { "id": 157689, "urlhaus_id": "3947903", "url": "http://5.175.222.237/zero.arm5", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:32 UTC", "discovered_at": "2026-10-11T07:05:32.000Z" }, { "id": 157688, "urlhaus_id": "3947902", "url": "http://5.175.222.237/ruck", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:32 UTC", "discovered_at": "2026-10-11T07:05:32.000Z" }, { "id": 157687, "urlhaus_id": "3947901", "url": "http://5.175.222.237/zero.mips", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:32 UTC", "discovered_at": "2026-10-11T07:05:32.000Z" }, { "id": 157693, "urlhaus_id": "3947900", "url": "http://5.175.222.237/irz", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:31 UTC", "discovered_at": "2026-10-11T07:05:31.000Z" }, { "id": 157692, "urlhaus_id": "3947899", "url": "http://5.175.222.237/sdt", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:31 UTC", "discovered_at": "2026-10-11T07:05:31.000Z" }, { "id": 157691, "urlhaus_id": "3947898", "url": "http://5.175.222.237/m68k", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:31 UTC", "discovered_at": "2026-10-11T07:05:31.000Z" }, { "id": 157694, "urlhaus_id": "3947897", "url": "http://5.175.222.237/ppc", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:30 UTC", "discovered_at": "2026-10-11T07:05:30.000Z" }, { "id": 157695, "urlhaus_id": "3947896", "url": "http://5.175.222.237/zero.arm7", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:28 UTC", "discovered_at": "2026-10-11T07:05:28.000Z" }, { "id": 157697, "urlhaus_id": "3947895", "url": "http://5.175.222.237/vc", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:27 UTC", "discovered_at": "2026-10-11T07:05:27.000Z" }, { "id": 157696, "urlhaus_id": "3947894", "url": "http://5.175.222.237/sh4", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:27 UTC", "discovered_at": "2026-10-11T07:05:27.000Z" }, { "id": 157698, "urlhaus_id": "3947893", "url": "http://5.175.222.237/spc", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:25 UTC", "discovered_at": "2026-10-11T07:05:25.000Z" }, { "id": 157706, "urlhaus_id": "3947892", "url": "http://5.175.222.237/zz", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157705, "urlhaus_id": "3947891", "url": "http://5.175.222.237/gocl", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157704, "urlhaus_id": "3947890", "url": "http://5.175.222.237/aaa", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157703, "urlhaus_id": "3947889", "url": "http://5.175.222.237/arm7", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157702, "urlhaus_id": "3947888", "url": "http://5.175.222.237/mpsl", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157701, "urlhaus_id": "3947887", "url": "http://5.175.222.237/zero.arm", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157700, "urlhaus_id": "3947886", "url": "http://5.175.222.237/mips", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157699, "urlhaus_id": "3947885", "url": "http://5.175.222.237/fdgsfg", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:22 UTC", "discovered_at": "2026-10-11T07:05:22.000Z" }, { "id": 157709, "urlhaus_id": "3947884", "url": "http://5.175.222.237/arm5", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:21 UTC", "discovered_at": "2026-10-11T07:05:21.000Z" }, { "id": 157708, "urlhaus_id": "3947883", "url": "http://77.90.14.60/boatnet.x86_debug", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:21 UTC", "discovered_at": "2026-10-11T07:05:21.000Z" }, { "id": 157707, "urlhaus_id": "3947882", "url": "http://5.175.222.237/arm", "host": "5.175.222.237", "host_ip": "5.175.222.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:21 UTC", "discovered_at": "2026-10-11T07:05:21.000Z" }, { "id": 157714, "urlhaus_id": "3947881", "url": "http://154.83.85.63:47991/s5_arm64_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:20 UTC", "discovered_at": "2026-10-11T07:05:20.000Z" }, { "id": 157713, "urlhaus_id": "3947880", "url": "http://154.83.85.63:47991/s5_armv5_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:20 UTC", "discovered_at": "2026-10-11T07:05:20.000Z" }, { "id": 157712, "urlhaus_id": "3947879", "url": "http://154.83.85.63:47991/svc-helper-mips", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:20 UTC", "discovered_at": "2026-10-11T07:05:20.000Z" }, { "id": 157711, "urlhaus_id": "3947878", "url": "http://103.170.217.170/bins/sora.sh4", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:20 UTC", "discovered_at": "2026-10-11T07:05:20.000Z" }, { "id": 157710, "urlhaus_id": "3947877", "url": "http://154.83.85.63:47991/s5_arm64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:20 UTC", "discovered_at": "2026-10-11T07:05:20.000Z" }, { "id": 157717, "urlhaus_id": "3947876", "url": "http://154.83.85.63:47991/svc-helper-mipsel", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:19 UTC", "discovered_at": "2026-10-11T07:05:19.000Z" }, { "id": 157716, "urlhaus_id": "3947875", "url": "http://154.83.85.63:47991/klogd_mipsel_static", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:19 UTC", "discovered_at": "2026-10-11T07:05:19.000Z" }, { "id": 157715, "urlhaus_id": "3947874", "url": "http://154.83.85.63:47991/team-ok.json", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:19 UTC", "discovered_at": "2026-10-11T07:05:19.000Z" }, { "id": 157721, "urlhaus_id": "3947873", "url": "http://154.83.85.63:47991/s5_amd64_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:17 UTC", "discovered_at": "2026-10-11T07:05:17.000Z" }, { "id": 157720, "urlhaus_id": "3947872", "url": "http://154.83.85.63:47991/s5_armv5", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:17 UTC", "discovered_at": "2026-10-11T07:05:17.000Z" }, { "id": 157719, "urlhaus_id": "3947871", "url": "http://103.170.217.170/bins/sora.mpsel", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ssh", "last_online": null, "first_seen": "2026-10-11 07:05:17 UTC", "discovered_at": "2026-10-11T07:05:17.000Z" }, { "id": 157718, "urlhaus_id": "3947870", "url": "http://38.253.224.56:8080/hiddenbin/x86_64", "host": "38.253.224.56", "host_ip": "38.253.224.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-11 07:05:17 UTC", "discovered_at": "2026-10-11T07:05:17.000Z" }, { "id": 157731, "urlhaus_id": "3947869", "url": "http://154.83.85.63:47991/s5_mipsle_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157730, "urlhaus_id": "3947868", "url": "http://154.83.85.63:47991/map.json", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157729, "urlhaus_id": "3947867", "url": "http://154.83.85.63:47991/nodetap_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157728, "urlhaus_id": "3947866", "url": "http://154.83.85.63:47991/s5_386_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157727, "urlhaus_id": "3947865", "url": "http://154.83.85.63:47991/svc-helper-x86_64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157726, "urlhaus_id": "3947864", "url": "http://85.137.53.167:24380/bins/telnet/akuma_x64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-bit, akuma, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157725, "urlhaus_id": "3947863", "url": "http://154.83.85.63:47991/s5_mipsle", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157724, "urlhaus_id": "3947862", "url": "http://154.83.85.63:47991/s5-armv7.gz", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157723, "urlhaus_id": "3947861", "url": "http://154.83.85.63:47991/s5_386", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157722, "urlhaus_id": "3947860", "url": "http://38.253.224.56:8080/hiddenbin/bot.x86_64", "host": "38.253.224.56", "host_ip": "38.253.224.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-11 07:05:16 UTC", "discovered_at": "2026-10-11T07:05:16.000Z" }, { "id": 157739, "urlhaus_id": "3947859", "url": "http://154.83.85.63:47991/s5_mips_v2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157738, "urlhaus_id": "3947858", "url": "http://103.170.217.170/bins/sora.ppc", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157737, "urlhaus_id": "3947857", "url": "http://154.83.85.63:47991/s5_mips", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157736, "urlhaus_id": "3947856", "url": "https://fable-shine.com/f/9ksbxnvwoj7pts0uxop4sa/01pemlfd", "host": "fable-shine.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Amos, ClickFix, Foxveil, Loader, Mach-O, macOS, ua-curl", "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157735, "urlhaus_id": "3947855", "url": "http://154.83.85.63:47991/s5-linux-armv7", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157734, "urlhaus_id": "3947854", "url": "http://103.170.217.170/bins/sora.arm6", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157733, "urlhaus_id": "3947853", "url": "http://154.83.85.63:47991/socks5.pl", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157732, "urlhaus_id": "3947852", "url": "http://103.170.217.170/bins/sora.m68k", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:15 UTC", "discovered_at": "2026-10-11T07:05:15.000Z" }, { "id": 157740, "urlhaus_id": "3947851", "url": "http://154.83.85.63:47991/svc-helper-aarch64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:12 UTC", "discovered_at": "2026-10-11T07:05:12.000Z" }, { "id": 157744, "urlhaus_id": "3947850", "url": "http://103.170.217.170/bins/sora.arm4", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:10 UTC", "discovered_at": "2026-10-11T07:05:10.000Z" }, { "id": 157743, "urlhaus_id": "3947849", "url": "http://154.83.85.63:47991/.ch.b64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:10 UTC", "discovered_at": "2026-10-11T07:05:10.000Z" }, { "id": 157742, "urlhaus_id": "3947848", "url": "http://154.83.85.63:47991/es02_key.pub", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:10 UTC", "discovered_at": "2026-10-11T07:05:10.000Z" }, { "id": 157741, "urlhaus_id": "3947847", "url": "http://154.83.85.63:47991/es02_key", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:10 UTC", "discovered_at": "2026-10-11T07:05:10.000Z" }, { "id": 157747, "urlhaus_id": "3947846", "url": "http://103.170.217.170/bins/sora.arm7", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:09 UTC", "discovered_at": "2026-10-11T07:05:09.000Z" }, { "id": 157746, "urlhaus_id": "3947845", "url": "http://103.170.217.170/bins/sora.arm5", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:05:09 UTC", "discovered_at": "2026-10-11T07:05:09.000Z" }, { "id": 157745, "urlhaus_id": "3947844", "url": "http://154.83.85.63:47991/sv2", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:09 UTC", "discovered_at": "2026-10-11T07:05:09.000Z" }, { "id": 157751, "urlhaus_id": "3947843", "url": "http://154.83.85.63:47991/disabled_migrated/", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:08 UTC", "discovered_at": "2026-10-11T07:05:08.000Z" }, { "id": 157750, "urlhaus_id": "3947842", "url": "http://154.83.85.63:47991/s5-linux-amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:08 UTC", "discovered_at": "2026-10-11T07:05:08.000Z" }, { "id": 157749, "urlhaus_id": "3947841", "url": "http://154.83.85.63:47991/PRE_REINSTALL_CHECKLIST.md", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:05:08 UTC", "discovered_at": "2026-10-11T07:05:08.000Z" }, { "id": 157748, "urlhaus_id": "3947840", "url": "https://fable-shine.com/curl/g0xsutkb0/iwsnry04os3w6i7z3ufc.dat", "host": "fable-shine.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, dropper, macOS, ua-curl, zsh", "last_online": null, "first_seen": "2026-10-11 07:05:08 UTC", "discovered_at": "2026-10-11T07:05:08.000Z" }, { "id": 157752, "urlhaus_id": "3947839", "url": "https://cdn.discordapp.com/attachments/1555272738183061585/1558557133245780058/bundle.zip?ex=6acbdef1&is=6aca8d71&hm=8daaf74111ef8826e79aab5a6931905012f0acbe8b1164f6a3209b1474b38780&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 07:04:49 UTC", "discovered_at": "2026-10-11T07:04:49.000Z" }, { "id": 157753, "urlhaus_id": "3947838", "url": "https://www.dropbox.com/scl/fi/ovgcqrqvo601c4xrgrsso/bundle.zip?rlkey=jpo47d62rtkevfrwz5yfsx93x&st=ic2dii77&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-11 07:04:30 UTC", "discovered_at": "2026-10-11T07:04:30.000Z" }, { "id": 157754, "urlhaus_id": "3947837", "url": "http://176.65.139.231:8080/u/x7k9m2/wget.sh", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-11 07:04:20 UTC", "discovered_at": "2026-10-11T07:04:20.000Z" }, { "id": 157756, "urlhaus_id": "3947836", "url": "http://45.2.24.40:59399/Mozi.m", "host": "45.2.24.40", "host_ip": "45.2.24.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-11 07:04:14 UTC", "discovered_at": "2026-10-11T07:04:14.000Z" }, { "id": 157755, "urlhaus_id": "3947835", "url": "http://103.170.217.170/sora.sh", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "downloader, sh", "last_online": null, "first_seen": "2026-10-11 07:04:14 UTC", "discovered_at": "2026-10-11T07:04:14.000Z" }, { "id": 157758, "urlhaus_id": "3947834", "url": "https://65.87.7.90:58282/in", "host": "65.87.7.90", "host_ip": "65.87.7.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:04:13 UTC", "discovered_at": "2026-10-11T07:04:13.000Z" }, { "id": 157757, "urlhaus_id": "3947833", "url": "https://65.87.7.90:58282/ront", "host": "65.87.7.90", "host_ip": "65.87.7.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-11 07:04:13 UTC", "discovered_at": "2026-10-11T07:04:13.000Z" }, { "id": 157762, "urlhaus_id": "3947832", "url": "http://209.99.184.98/sora.sh", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "downloader, sh", "last_online": null, "first_seen": "2026-10-11 07:04:12 UTC", "discovered_at": "2026-10-11T07:04:12.000Z" }, { "id": 157761, "urlhaus_id": "3947831", "url": "https://gitlab.com/SpinRain/warzoneexternalcheat/-/raw/HEAD/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-11 07:04:12 UTC", "discovered_at": "2026-10-11T07:04:12.000Z" }, { "id": 157760, "urlhaus_id": "3947830", "url": "https://blaze-x.com/Brazzers.msi", "host": "blaze-x.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-11 07:04:12 UTC", "discovered_at": "2026-10-11T07:04:12.000Z" }, { "id": 157759, "urlhaus_id": "3947829", "url": "https://videdtp-rus.vercel.app/?download=1", "host": "videdtp-rus.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-11 07:04:12 UTC", "discovered_at": "2026-10-11T07:04:12.000Z" }, { "id": 157764, "urlhaus_id": "3947828", "url": "https://gitlab.com/GrizzleBugg/monotone-hwid-spoofer/-/raw/HEAD/Monotone-HWID-Spoofer-master.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-11 07:04:11 UTC", "discovered_at": "2026-10-11T07:04:11.000Z" }, { "id": 157763, "urlhaus_id": "3947827", "url": "https://gitlab.com/downshifts/valorantexternalcheat/-/raw/HEAD/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-11 07:04:11 UTC", "discovered_at": "2026-10-11T07:04:11.000Z" }, { "id": 157765, "urlhaus_id": "3947826", "url": "http://201.159.91.2:41978/Mozi.m", "host": "201.159.91.2", "host_ip": "201.159.91.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:04:10 UTC", "discovered_at": "2026-10-11T07:04:10.000Z" }, { "id": 157766, "urlhaus_id": "3947825", "url": "https://github.com/aintsmash/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 07:04:09 UTC", "discovered_at": "2026-10-11T07:04:09.000Z" }, { "id": 157770, "urlhaus_id": "3947824", "url": "http://103.170.217.170/bins/sora.mips", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-11 07:04:08 UTC", "discovered_at": "2026-10-11T07:04:08.000Z" }, { "id": 157769, "urlhaus_id": "3947823", "url": "http://103.170.217.170/bins/sora.x86", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-11 07:04:08 UTC", "discovered_at": "2026-10-11T07:04:08.000Z" }, { "id": 157768, "urlhaus_id": "3947822", "url": "http://174.138.21.29/csgo.exe", "host": "174.138.21.29", "host_ip": "174.138.21.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT", "last_online": null, "first_seen": "2026-10-11 07:04:08 UTC", "discovered_at": "2026-10-11T07:04:08.000Z" }, { "id": 157767, "urlhaus_id": "3947821", "url": "http://173.255.247.97:8001/ora23.sh", "host": "173.255.247.97", "host_ip": "173.255.247.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-11 07:04:08 UTC", "discovered_at": "2026-10-11T07:04:08.000Z" }, { "id": 157772, "urlhaus_id": "3947820", "url": "https://github.com/tracc1vs/FortniteExternalCheat/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-11 07:04:07 UTC", "discovered_at": "2026-10-11T07:04:07.000Z" }, { "id": 157771, "urlhaus_id": "3947819", "url": "http://45.135.194.116/x86_64", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "hadoop, web", "last_online": null, "first_seen": "2026-10-11 07:04:07 UTC", "discovered_at": "2026-10-11T07:04:07.000Z" }, { "id": 157777, "urlhaus_id": "3947818", "url": "https://65.87.7.90:58282/fsa.tgz", "host": "65.87.7.90", "host_ip": "65.87.7.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ssh", "last_online": null, "first_seen": "2026-10-11 07:04:05 UTC", "discovered_at": "2026-10-11T07:04:05.000Z" }, { "id": 157776, "urlhaus_id": "3947817", "url": "http://209.99.184.98/bins/sora.mips", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-11 07:04:05 UTC", "discovered_at": "2026-10-11T07:04:05.000Z" }, { "id": 157775, "urlhaus_id": "3947816", "url": "http://212.83.160.70/t/cmd.txt", "host": "212.83.160.70", "host_ip": "212.83.160.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ajax-php, FreePBX, web", "last_online": null, "first_seen": "2026-10-11 07:04:05 UTC", "discovered_at": "2026-10-11T07:04:05.000Z" }, { "id": 157774, "urlhaus_id": "3947815", "url": "https://65.87.7.90:58282/fs.tgz", "host": "65.87.7.90", "host_ip": "65.87.7.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ssh", "last_online": null, "first_seen": "2026-10-11 07:04:05 UTC", "discovered_at": "2026-10-11T07:04:05.000Z" }, { "id": 157773, "urlhaus_id": "3947814", "url": "http://209.99.184.98/bins/sora.x86", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "wraith", "last_online": null, "first_seen": "2026-10-11 07:04:05 UTC", "discovered_at": "2026-10-11T07:04:05.000Z" }, { "id": 157778, "urlhaus_id": "3947813", "url": "http://221.1.246.222:45921/bin.sh", "host": "221.1.246.222", "host_ip": "221.1.246.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 07:02:06 UTC", "discovered_at": "2026-10-11T07:02:06.000Z" }, { "id": 157779, "urlhaus_id": "3947812", "url": "http://119.166.65.199:53016/bin.sh", "host": "119.166.65.199", "host_ip": "119.166.65.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 06:54:07 UTC", "discovered_at": "2026-10-11T06:54:07.000Z" }, { "id": 157781, "urlhaus_id": "3947811", "url": "http://176.65.139.41/armv7-l7", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:12 UTC", "discovered_at": "2026-10-11T06:51:12.000Z" }, { "id": 157780, "urlhaus_id": "3947810", "url": "http://176.65.139.41/x64s-l7", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:12 UTC", "discovered_at": "2026-10-11T06:51:12.000Z" }, { "id": 157786, "urlhaus_id": "3947809", "url": "http://103.170.217.170/bins/sora.mpsl", "host": "103.170.217.170", "host_ip": "103.170.217.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:11 UTC", "discovered_at": "2026-10-11T06:51:11.000Z" }, { "id": 157785, "urlhaus_id": "3947808", "url": "http://209.99.184.98/bins/sora.mpsl", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:11 UTC", "discovered_at": "2026-10-11T06:51:11.000Z" }, { "id": 157784, "urlhaus_id": "3947807", "url": "http://209.99.184.98/bins/sora.arm7", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:11 UTC", "discovered_at": "2026-10-11T06:51:11.000Z" }, { "id": 157783, "urlhaus_id": "3947806", "url": "http://209.99.184.98/bins/sora.arm5", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:11 UTC", "discovered_at": "2026-10-11T06:51:11.000Z" }, { "id": 157782, "urlhaus_id": "3947805", "url": "http://209.99.184.98/bins/sora.arm6", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:11 UTC", "discovered_at": "2026-10-11T06:51:11.000Z" }, { "id": 157790, "urlhaus_id": "3947804", "url": "http://209.99.184.98/bins/sora.arm4", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:10 UTC", "discovered_at": "2026-10-11T06:51:10.000Z" }, { "id": 157789, "urlhaus_id": "3947803", "url": "http://209.99.184.98/bins/sora.sh4", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:10 UTC", "discovered_at": "2026-10-11T06:51:10.000Z" }, { "id": 157788, "urlhaus_id": "3947802", "url": "http://209.99.184.98/bins/sora.m68k", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:10 UTC", "discovered_at": "2026-10-11T06:51:10.000Z" }, { "id": 157787, "urlhaus_id": "3947801", "url": "http://209.99.184.98/bins/sora.ppc", "host": "209.99.184.98", "host_ip": "209.99.184.98", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-11 06:51:10 UTC", "discovered_at": "2026-10-11T06:51:10.000Z" }, { "id": 157792, "urlhaus_id": "3947800", "url": "http://123.10.230.10:37688/bin.sh", "host": "123.10.230.10", "host_ip": "123.10.230.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 06:47:08 UTC", "discovered_at": "2026-10-11T06:47:08.000Z" }, { "id": 157791, "urlhaus_id": "3947799", "url": "http://91.92.242.236/files-129312398/files/file_ae7a11e6661db689.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-11 06:47:08 UTC", "discovered_at": "2026-10-11T06:47:08.000Z" }, { "id": 157793, "urlhaus_id": "3947798", "url": "http://120.28.215.129:38695/i", "host": "120.28.215.129", "host_ip": "120.28.215.129", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 06:47:07 UTC", "discovered_at": "2026-10-11T06:47:07.000Z" }, { "id": 157794, "urlhaus_id": "3947797", "url": "http://42.233.104.85:36775/bin.sh", "host": "42.233.104.85", "host_ip": "42.233.104.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 06:45:17 UTC", "discovered_at": "2026-10-11T06:45:17.000Z" }, { "id": 157795, "urlhaus_id": "3947796", "url": "http://182.121.185.4:51347/i", "host": "182.121.185.4", "host_ip": "182.121.185.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 06:39:09 UTC", "discovered_at": "2026-10-11T06:39:09.000Z" }, { "id": 157796, "urlhaus_id": "3947795", "url": "http://182.121.185.4:51347/bin.sh", "host": "182.121.185.4", "host_ip": "182.121.185.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 06:32:17 UTC", "discovered_at": "2026-10-11T06:32:17.000Z" }, { "id": 157797, "urlhaus_id": "3947794", "url": "http://112.229.207.15:48465/i", "host": "112.229.207.15", "host_ip": "112.229.207.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 06:23:10 UTC", "discovered_at": "2026-10-11T06:23:10.000Z" }, { "id": 157798, "urlhaus_id": "3947793", "url": "http://202.1.26.13:40289/i", "host": "202.1.26.13", "host_ip": "202.1.26.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 06:17:07 UTC", "discovered_at": "2026-10-11T06:17:07.000Z" }, { "id": 157799, "urlhaus_id": "3947792", "url": "http://120.43.54.167:46074/i", "host": "120.43.54.167", "host_ip": "120.43.54.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 06:02:07 UTC", "discovered_at": "2026-10-11T06:02:07.000Z" }, { "id": 157800, "urlhaus_id": "3947791", "url": "http://120.84.212.206:35060/bin.sh", "host": "120.84.212.206", "host_ip": "120.84.212.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:47:07 UTC", "discovered_at": "2026-10-11T05:47:07.000Z" }, { "id": 157801, "urlhaus_id": "3947790", "url": "http://42.231.65.187:33162/i", "host": "42.231.65.187", "host_ip": "42.231.65.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:32:11 UTC", "discovered_at": "2026-10-11T05:32:11.000Z" }, { "id": 157804, "urlhaus_id": "3947789", "url": "http://124.6.169.54:60212/i", "host": "124.6.169.54", "host_ip": "124.6.169.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:02:07 UTC", "discovered_at": "2026-10-11T05:02:07.000Z" }, { "id": 157803, "urlhaus_id": "3947788", "url": "http://125.45.67.66:58929/i", "host": "125.45.67.66", "host_ip": "125.45.67.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:02:07 UTC", "discovered_at": "2026-10-11T05:02:07.000Z" }, { "id": 157802, "urlhaus_id": "3947787", "url": "http://151.234.36.221:38747/i", "host": "151.234.36.221", "host_ip": "151.234.36.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:02:07 UTC", "discovered_at": "2026-10-11T05:02:07.000Z" }, { "id": 157805, "urlhaus_id": "3947786", "url": "http://124.234.246.166:43392/i", "host": "124.234.246.166", "host_ip": "124.234.246.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 05:02:06 UTC", "discovered_at": "2026-10-11T05:02:06.000Z" }, { "id": 157806, "urlhaus_id": "3947785", "url": "http://175.149.67.216:46495/bin.sh", "host": "175.149.67.216", "host_ip": "175.149.67.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 05:00:14 UTC", "discovered_at": "2026-10-11T05:00:14.000Z" }, { "id": 157807, "urlhaus_id": "3947784", "url": "http://182.117.163.106:60149/bin.sh", "host": "182.117.163.106", "host_ip": "182.117.163.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 04:33:13 UTC", "discovered_at": "2026-10-11T04:33:13.000Z" }, { "id": 157808, "urlhaus_id": "3947783", "url": "http://123.11.179.154:53385/i", "host": "123.11.179.154", "host_ip": "123.11.179.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 04:32:06 UTC", "discovered_at": "2026-10-11T04:32:06.000Z" }, { "id": 157809, "urlhaus_id": "3947782", "url": "http://222.139.67.114:59134/bin.sh", "host": "222.139.67.114", "host_ip": "222.139.67.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 04:17:08 UTC", "discovered_at": "2026-10-11T04:17:08.000Z" }, { "id": 157810, "urlhaus_id": "3947781", "url": "http://115.63.14.84:51614/i", "host": "115.63.14.84", "host_ip": "115.63.14.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 04:02:07 UTC", "discovered_at": "2026-10-11T04:02:07.000Z" }, { "id": 157811, "urlhaus_id": "3947780", "url": "http://210.208.110.21:53906/i", "host": "210.208.110.21", "host_ip": "210.208.110.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 04:02:06 UTC", "discovered_at": "2026-10-11T04:02:06.000Z" }, { "id": 157812, "urlhaus_id": "3947779", "url": "http://222.127.71.141:36118/bin.sh", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 03:39:08 UTC", "discovered_at": "2026-10-11T03:39:08.000Z" }, { "id": 157814, "urlhaus_id": "3947778", "url": "http://222.127.53.189:33656/i", "host": "222.127.53.189", "host_ip": "222.127.53.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:32:06 UTC", "discovered_at": "2026-10-11T03:32:06.000Z" }, { "id": 157813, "urlhaus_id": "3947777", "url": "http://119.115.254.82:54198/i", "host": "119.115.254.82", "host_ip": "119.115.254.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:32:06 UTC", "discovered_at": "2026-10-11T03:32:06.000Z" }, { "id": 157815, "urlhaus_id": "3947776", "url": "http://182.117.151.7:55978/bin.sh", "host": "182.117.151.7", "host_ip": "182.117.151.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:17:06 UTC", "discovered_at": "2026-10-11T03:17:06.000Z" }, { "id": 157816, "urlhaus_id": "3947775", "url": "http://182.113.206.103:52681/bin.sh", "host": "182.113.206.103", "host_ip": "182.113.206.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:17:05 UTC", "discovered_at": "2026-10-11T03:17:05.000Z" }, { "id": 157817, "urlhaus_id": "3947774", "url": "http://182.117.163.106:60149/i", "host": "182.117.163.106", "host_ip": "182.117.163.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:02:07 UTC", "discovered_at": "2026-10-11T03:02:07.000Z" }, { "id": 157818, "urlhaus_id": "3947773", "url": "http://182.117.31.73:59387/bin.sh", "host": "182.117.31.73", "host_ip": "182.117.31.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 03:02:06 UTC", "discovered_at": "2026-10-11T03:02:06.000Z" }, { "id": 157819, "urlhaus_id": "3947772", "url": "http://216.126.74.218:33541/i", "host": "216.126.74.218", "host_ip": "216.126.74.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 02:47:17 UTC", "discovered_at": "2026-10-11T02:47:17.000Z" }, { "id": 157820, "urlhaus_id": "3947771", "url": "http://222.141.73.146:57830/i", "host": "222.141.73.146", "host_ip": "222.141.73.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 02:32:06 UTC", "discovered_at": "2026-10-11T02:32:06.000Z" }, { "id": 157821, "urlhaus_id": "3947770", "url": "http://117.63.227.203:44848/i", "host": "117.63.227.203", "host_ip": "117.63.227.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 02:17:07 UTC", "discovered_at": "2026-10-11T02:17:07.000Z" }, { "id": 157822, "urlhaus_id": "3947769", "url": "http://60.19.222.107:49101/i", "host": "60.19.222.107", "host_ip": "60.19.222.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 02:15:17 UTC", "discovered_at": "2026-10-11T02:15:17.000Z" }, { "id": 157823, "urlhaus_id": "3947768", "url": "http://27.204.199.141:42258/i", "host": "27.204.199.141", "host_ip": "27.204.199.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 02:02:06 UTC", "discovered_at": "2026-10-11T02:02:06.000Z" }, { "id": 157824, "urlhaus_id": "3947767", "url": "http://85.185.55.80:56473/i", "host": "85.185.55.80", "host_ip": "85.185.55.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 01:57:13 UTC", "discovered_at": "2026-10-11T01:57:13.000Z" }, { "id": 157825, "urlhaus_id": "3947766", "url": "http://222.137.77.98:37558/bin.sh", "host": "222.137.77.98", "host_ip": "222.137.77.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:47:07 UTC", "discovered_at": "2026-10-11T01:47:07.000Z" }, { "id": 157826, "urlhaus_id": "3947765", "url": "http://85.185.55.80:56473/bin.sh", "host": "85.185.55.80", "host_ip": "85.185.55.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 01:39:14 UTC", "discovered_at": "2026-10-11T01:39:14.000Z" }, { "id": 157827, "urlhaus_id": "3947764", "url": "http://119.166.65.199:53016/i", "host": "119.166.65.199", "host_ip": "119.166.65.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:32:07 UTC", "discovered_at": "2026-10-11T01:32:07.000Z" }, { "id": 157828, "urlhaus_id": "3947763", "url": "http://222.137.97.203:53364/i", "host": "222.137.97.203", "host_ip": "222.137.97.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:32:06 UTC", "discovered_at": "2026-10-11T01:32:06.000Z" }, { "id": 157829, "urlhaus_id": "3947762", "url": "http://123.7.227.193:49853/i", "host": "123.7.227.193", "host_ip": "123.7.227.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 01:26:08 UTC", "discovered_at": "2026-10-11T01:26:08.000Z" }, { "id": 157831, "urlhaus_id": "3947761", "url": "http://182.121.185.230:37370/i", "host": "182.121.185.230", "host_ip": "182.121.185.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:17:07 UTC", "discovered_at": "2026-10-11T01:17:07.000Z" }, { "id": 157830, "urlhaus_id": "3947760", "url": "http://115.57.239.216:55215/i", "host": "115.57.239.216", "host_ip": "115.57.239.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:17:07 UTC", "discovered_at": "2026-10-11T01:17:07.000Z" }, { "id": 157832, "urlhaus_id": "3947759", "url": "http://59.96.138.194:34405/i", "host": "59.96.138.194", "host_ip": "59.96.138.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 01:10:20 UTC", "discovered_at": "2026-10-11T01:10:20.000Z" }, { "id": 157833, "urlhaus_id": "3947758", "url": "http://123.7.227.193:49853/bin.sh", "host": "123.7.227.193", "host_ip": "123.7.227.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 01:05:21 UTC", "discovered_at": "2026-10-11T01:05:21.000Z" }, { "id": 157834, "urlhaus_id": "3947757", "url": "http://59.180.159.4:40334/i", "host": "59.180.159.4", "host_ip": "59.180.159.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:02:21 UTC", "discovered_at": "2026-10-11T01:02:21.000Z" }, { "id": 157835, "urlhaus_id": "3947756", "url": "http://182.113.203.175:59417/bin.sh", "host": "182.113.203.175", "host_ip": "182.113.203.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 01:02:07 UTC", "discovered_at": "2026-10-11T01:02:07.000Z" }, { "id": 157836, "urlhaus_id": "3947755", "url": "http://123.5.190.28:39075/i", "host": "123.5.190.28", "host_ip": "123.5.190.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 01:01:18 UTC", "discovered_at": "2026-10-11T01:01:18.000Z" }, { "id": 157837, "urlhaus_id": "3947754", "url": "http://113.206.97.32:54393/i", "host": "113.206.97.32", "host_ip": "113.206.97.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 00:47:16 UTC", "discovered_at": "2026-10-11T00:47:16.000Z" }, { "id": 157839, "urlhaus_id": "3947753", "url": "http://115.55.236.179:49862/i", "host": "115.55.236.179", "host_ip": "115.55.236.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:47:07 UTC", "discovered_at": "2026-10-11T00:47:07.000Z" }, { "id": 157838, "urlhaus_id": "3947752", "url": "http://115.55.31.152:49253/bin.sh", "host": "115.55.31.152", "host_ip": "115.55.31.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:47:07 UTC", "discovered_at": "2026-10-11T00:47:07.000Z" }, { "id": 157840, "urlhaus_id": "3947751", "url": "http://42.59.247.94:45590/bin.sh", "host": "42.59.247.94", "host_ip": "42.59.247.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 00:42:18 UTC", "discovered_at": "2026-10-11T00:42:18.000Z" }, { "id": 157841, "urlhaus_id": "3947750", "url": "http://218.24.252.208:47504/bin.sh", "host": "218.24.252.208", "host_ip": "218.24.252.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 00:41:16 UTC", "discovered_at": "2026-10-11T00:41:16.000Z" }, { "id": 157842, "urlhaus_id": "3947749", "url": "http://123.5.190.28:39075/bin.sh", "host": "123.5.190.28", "host_ip": "123.5.190.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 00:34:18 UTC", "discovered_at": "2026-10-11T00:34:18.000Z" }, { "id": 157845, "urlhaus_id": "3947748", "url": "http://115.55.31.152:49253/i", "host": "115.55.31.152", "host_ip": "115.55.31.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:32:07 UTC", "discovered_at": "2026-10-11T00:32:07.000Z" }, { "id": 157844, "urlhaus_id": "3947747", "url": "http://180.191.16.24:33057/i", "host": "180.191.16.24", "host_ip": "180.191.16.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:32:07 UTC", "discovered_at": "2026-10-11T00:32:07.000Z" }, { "id": 157843, "urlhaus_id": "3947746", "url": "http://175.151.180.248:33943/i", "host": "175.151.180.248", "host_ip": "175.151.180.248", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:32:07 UTC", "discovered_at": "2026-10-11T00:32:07.000Z" }, { "id": 157846, "urlhaus_id": "3947745", "url": "http://42.239.189.168:41173/i", "host": "42.239.189.168", "host_ip": "42.239.189.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-11 00:16:11 UTC", "discovered_at": "2026-10-11T00:16:11.000Z" }, { "id": 157847, "urlhaus_id": "3947744", "url": "http://182.34.61.7:33687/i", "host": "182.34.61.7", "host_ip": "182.34.61.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-11 00:13:26 UTC", "discovered_at": "2026-10-11T00:13:26.000Z" }, { "id": 157848, "urlhaus_id": "3947743", "url": "http://182.123.208.160:53487/i", "host": "182.123.208.160", "host_ip": "182.123.208.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:02:07 UTC", "discovered_at": "2026-10-11T00:02:07.000Z" }, { "id": 157850, "urlhaus_id": "3947742", "url": "http://115.57.239.216:55215/bin.sh", "host": "115.57.239.216", "host_ip": "115.57.239.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:02:06 UTC", "discovered_at": "2026-10-11T00:02:06.000Z" }, { "id": 157849, "urlhaus_id": "3947741", "url": "http://182.127.125.96:53045/i", "host": "182.127.125.96", "host_ip": "182.127.125.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:02:06 UTC", "discovered_at": "2026-10-11T00:02:06.000Z" }, { "id": 157851, "urlhaus_id": "3947740", "url": "http://182.127.70.192:40331/bin.sh", "host": "182.127.70.192", "host_ip": "182.127.70.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-11 00:02:05 UTC", "discovered_at": "2026-10-11T00:02:05.000Z" }, { "id": 157852, "urlhaus_id": "3947739", "url": "http://115.62.177.67:57569/bin.sh", "host": "115.62.177.67", "host_ip": "115.62.177.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 23:57:15 UTC", "discovered_at": "2026-10-10T23:57:15.000Z" }, { "id": 157853, "urlhaus_id": "3947738", "url": "http://113.206.97.32:54393/bin.sh", "host": "113.206.97.32", "host_ip": "113.206.97.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 23:47:16 UTC", "discovered_at": "2026-10-10T23:47:16.000Z" }, { "id": 157855, "urlhaus_id": "3947737", "url": "http://82.114.178.6:51897/i", "host": "82.114.178.6", "host_ip": "82.114.178.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 23:47:07 UTC", "discovered_at": "2026-10-10T23:47:07.000Z" }, { "id": 157854, "urlhaus_id": "3947736", "url": "http://202.1.26.13:40289/bin.sh", "host": "202.1.26.13", "host_ip": "202.1.26.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 23:47:07 UTC", "discovered_at": "2026-10-10T23:47:07.000Z" }, { "id": 157856, "urlhaus_id": "3947735", "url": "http://95.237.154.159:51303/i", "host": "95.237.154.159", "host_ip": "95.237.154.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 23:32:06 UTC", "discovered_at": "2026-10-10T23:32:06.000Z" }, { "id": 157857, "urlhaus_id": "3947734", "url": "http://60.24.126.151:45260/bin.sh", "host": "60.24.126.151", "host_ip": "60.24.126.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 23:25:13 UTC", "discovered_at": "2026-10-10T23:25:13.000Z" }, { "id": 157858, "urlhaus_id": "3947733", "url": "http://219.157.39.4:49190/i", "host": "219.157.39.4", "host_ip": "219.157.39.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 23:02:07 UTC", "discovered_at": "2026-10-10T23:02:07.000Z" }, { "id": 157859, "urlhaus_id": "3947732", "url": "http://103.125.31.101:38195/i", "host": "103.125.31.101", "host_ip": "103.125.31.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 23:02:06 UTC", "discovered_at": "2026-10-10T23:02:06.000Z" }, { "id": 157860, "urlhaus_id": "3947731", "url": "http://182.126.90.240:41878/i", "host": "182.126.90.240", "host_ip": "182.126.90.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 23:00:08 UTC", "discovered_at": "2026-10-10T23:00:08.000Z" }, { "id": 157861, "urlhaus_id": "3947730", "url": "http://27.215.89.229:49916/bin.sh", "host": "27.215.89.229", "host_ip": "27.215.89.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 22:59:07 UTC", "discovered_at": "2026-10-10T22:59:07.000Z" }, { "id": 157862, "urlhaus_id": "3947729", "url": "http://182.126.90.240:41878/bin.sh", "host": "182.126.90.240", "host_ip": "182.126.90.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:54:09 UTC", "discovered_at": "2026-10-10T22:54:09.000Z" }, { "id": 157863, "urlhaus_id": "3947728", "url": "http://115.49.75.50:51236/i", "host": "115.49.75.50", "host_ip": "115.49.75.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:53:19 UTC", "discovered_at": "2026-10-10T22:53:19.000Z" }, { "id": 157864, "urlhaus_id": "3947727", "url": "http://119.166.241.219:33688/i", "host": "119.166.241.219", "host_ip": "119.166.241.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:51:11 UTC", "discovered_at": "2026-10-10T22:51:11.000Z" }, { "id": 157867, "urlhaus_id": "3947726", "url": "http://196.74.47.206:34746/i", "host": "196.74.47.206", "host_ip": "196.74.47.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:47:07 UTC", "discovered_at": "2026-10-10T22:47:07.000Z" }, { "id": 157866, "urlhaus_id": "3947725", "url": "http://59.96.141.125:52208/i", "host": "59.96.141.125", "host_ip": "59.96.141.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:47:07 UTC", "discovered_at": "2026-10-10T22:47:07.000Z" }, { "id": 157865, "urlhaus_id": "3947724", "url": "http://115.55.7.254:57618/i", "host": "115.55.7.254", "host_ip": "115.55.7.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:47:07 UTC", "discovered_at": "2026-10-10T22:47:07.000Z" }, { "id": 157868, "urlhaus_id": "3947723", "url": "http://196.189.96.59:55280/i", "host": "196.189.96.59", "host_ip": "196.189.96.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:47:05 UTC", "discovered_at": "2026-10-10T22:47:05.000Z" }, { "id": 157869, "urlhaus_id": "3947722", "url": "http://182.116.34.137:46080/bin.sh", "host": "182.116.34.137", "host_ip": "182.116.34.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:40:18 UTC", "discovered_at": "2026-10-10T22:40:18.000Z" }, { "id": 157870, "urlhaus_id": "3947721", "url": "http://115.49.75.50:51236/bin.sh", "host": "115.49.75.50", "host_ip": "115.49.75.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:32:18 UTC", "discovered_at": "2026-10-10T22:32:18.000Z" }, { "id": 157871, "urlhaus_id": "3947720", "url": "http://115.56.181.20:55348/i", "host": "115.56.181.20", "host_ip": "115.56.181.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:32:08 UTC", "discovered_at": "2026-10-10T22:32:08.000Z" }, { "id": 157874, "urlhaus_id": "3947719", "url": "http://201.110.101.29:38216/i", "host": "201.110.101.29", "host_ip": "201.110.101.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:32:07 UTC", "discovered_at": "2026-10-10T22:32:07.000Z" }, { "id": 157873, "urlhaus_id": "3947718", "url": "http://203.177.251.31:45494/i", "host": "203.177.251.31", "host_ip": "203.177.251.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:32:07 UTC", "discovered_at": "2026-10-10T22:32:07.000Z" }, { "id": 157872, "urlhaus_id": "3947717", "url": "http://115.56.157.201:48194/i", "host": "115.56.157.201", "host_ip": "115.56.157.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:32:07 UTC", "discovered_at": "2026-10-10T22:32:07.000Z" }, { "id": 157875, "urlhaus_id": "3947716", "url": "http://119.166.241.219:33688/bin.sh", "host": "119.166.241.219", "host_ip": "119.166.241.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:22:09 UTC", "discovered_at": "2026-10-10T22:22:09.000Z" }, { "id": 157876, "urlhaus_id": "3947715", "url": "http://94.67.152.120:49503/i", "host": "94.67.152.120", "host_ip": "94.67.152.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 22:22:08 UTC", "discovered_at": "2026-10-10T22:22:08.000Z" }, { "id": 157877, "urlhaus_id": "3947714", "url": "http://115.57.194.125:35763/i", "host": "115.57.194.125", "host_ip": "115.57.194.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:17:07 UTC", "discovered_at": "2026-10-10T22:17:07.000Z" }, { "id": 157878, "urlhaus_id": "3947713", "url": "http://94.67.152.120:49503/bin.sh", "host": "94.67.152.120", "host_ip": "94.67.152.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 22:16:16 UTC", "discovered_at": "2026-10-10T22:16:16.000Z" }, { "id": 157879, "urlhaus_id": "3947712", "url": "http://42.52.233.42:57947/bin.sh", "host": "42.52.233.42", "host_ip": "42.52.233.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 22:08:17 UTC", "discovered_at": "2026-10-10T22:08:17.000Z" }, { "id": 157880, "urlhaus_id": "3947711", "url": "http://222.138.150.84:39894/i", "host": "222.138.150.84", "host_ip": "222.138.150.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:03:08 UTC", "discovered_at": "2026-10-10T22:03:08.000Z" }, { "id": 157881, "urlhaus_id": "3947710", "url": "http://221.202.71.212:41190/i", "host": "221.202.71.212", "host_ip": "221.202.71.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:02:07 UTC", "discovered_at": "2026-10-10T22:02:07.000Z" }, { "id": 157882, "urlhaus_id": "3947709", "url": "http://61.54.41.100:59180/i", "host": "61.54.41.100", "host_ip": "61.54.41.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 22:02:06 UTC", "discovered_at": "2026-10-10T22:02:06.000Z" }, { "id": 157883, "urlhaus_id": "3947708", "url": "http://115.58.179.240:40854/bin.sh", "host": "115.58.179.240", "host_ip": "115.58.179.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 21:57:15 UTC", "discovered_at": "2026-10-10T21:57:15.000Z" }, { "id": 157884, "urlhaus_id": "3947707", "url": "http://42.56.140.178:35036/i", "host": "42.56.140.178", "host_ip": "42.56.140.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 21:53:21 UTC", "discovered_at": "2026-10-10T21:53:21.000Z" }, { "id": 157885, "urlhaus_id": "3947706", "url": "http://146.66.249.137:55527/i", "host": "146.66.249.137", "host_ip": "146.66.249.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 21:47:13 UTC", "discovered_at": "2026-10-10T21:47:13.000Z" }, { "id": 157886, "urlhaus_id": "3947705", "url": "http://115.57.60.50:55893/i", "host": "115.57.60.50", "host_ip": "115.57.60.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 21:47:06 UTC", "discovered_at": "2026-10-10T21:47:06.000Z" }, { "id": 157887, "urlhaus_id": "3947704", "url": "http://115.55.129.129:55799/bin.sh", "host": "115.55.129.129", "host_ip": "115.55.129.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 21:45:21 UTC", "discovered_at": "2026-10-10T21:45:21.000Z" }, { "id": 157888, "urlhaus_id": "3947703", "url": "http://222.139.44.122:60548/i", "host": "222.139.44.122", "host_ip": "222.139.44.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 21:32:07 UTC", "discovered_at": "2026-10-10T21:32:07.000Z" }, { "id": 157889, "urlhaus_id": "3947702", "url": "http://115.63.148.118:43590/i", "host": "115.63.148.118", "host_ip": "115.63.148.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 21:00:12 UTC", "discovered_at": "2026-10-10T21:00:12.000Z" }, { "id": 157890, "urlhaus_id": "3947701", "url": "http://27.44.147.91:49005/i", "host": "27.44.147.91", "host_ip": "27.44.147.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:47:08 UTC", "discovered_at": "2026-10-10T20:47:08.000Z" }, { "id": 157891, "urlhaus_id": "3947700", "url": "http://42.224.251.249:49409/i", "host": "42.224.251.249", "host_ip": "42.224.251.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:32:05 UTC", "discovered_at": "2026-10-10T20:32:05.000Z" }, { "id": 157892, "urlhaus_id": "3947699", "url": "http://46.236.65.235:49018/bin.sh", "host": "46.236.65.235", "host_ip": "46.236.65.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 20:27:21 UTC", "discovered_at": "2026-10-10T20:27:21.000Z" }, { "id": 157893, "urlhaus_id": "3947698", "url": "http://42.55.6.11:49652/bin.sh", "host": "42.55.6.11", "host_ip": "42.55.6.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:17:12 UTC", "discovered_at": "2026-10-10T20:17:12.000Z" }, { "id": 157894, "urlhaus_id": "3947697", "url": "http://42.233.253.2:45263/i", "host": "42.233.253.2", "host_ip": "42.233.253.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:17:10 UTC", "discovered_at": "2026-10-10T20:17:10.000Z" }, { "id": 157896, "urlhaus_id": "3947696", "url": "http://115.58.179.240:40854/i", "host": "115.58.179.240", "host_ip": "115.58.179.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:17:08 UTC", "discovered_at": "2026-10-10T20:17:08.000Z" }, { "id": 157895, "urlhaus_id": "3947695", "url": "http://103.70.165.181:49668/bin.sh", "host": "103.70.165.181", "host_ip": "103.70.165.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:17:08 UTC", "discovered_at": "2026-10-10T20:17:08.000Z" }, { "id": 157897, "urlhaus_id": "3947694", "url": "http://175.150.176.206:45980/bin.sh", "host": "175.150.176.206", "host_ip": "175.150.176.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 20:15:23 UTC", "discovered_at": "2026-10-10T20:15:23.000Z" }, { "id": 157898, "urlhaus_id": "3947693", "url": "http://116.207.223.13:59439/i", "host": "116.207.223.13", "host_ip": "116.207.223.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:02:08 UTC", "discovered_at": "2026-10-10T20:02:08.000Z" }, { "id": 157899, "urlhaus_id": "3947692", "url": "http://46.159.162.92:48302/i", "host": "46.159.162.92", "host_ip": "46.159.162.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 20:02:07 UTC", "discovered_at": "2026-10-10T20:02:07.000Z" }, { "id": 157900, "urlhaus_id": "3947691", "url": "http://115.61.115.27:49429/bin.sh", "host": "115.61.115.27", "host_ip": "115.61.115.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 19:44:19 UTC", "discovered_at": "2026-10-10T19:44:19.000Z" }, { "id": 157901, "urlhaus_id": "3947690", "url": "http://123.233.198.83:52155/bin.sh", "host": "123.233.198.83", "host_ip": "123.233.198.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 19:41:20 UTC", "discovered_at": "2026-10-10T19:41:20.000Z" }, { "id": 157902, "urlhaus_id": "3947689", "url": "http://58.22.19.96:48437/i", "host": "58.22.19.96", "host_ip": "58.22.19.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 19:32:21 UTC", "discovered_at": "2026-10-10T19:32:21.000Z" }, { "id": 157903, "urlhaus_id": "3947688", "url": "http://42.6.56.231:34029/i", "host": "42.6.56.231", "host_ip": "42.6.56.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-10 19:22:19 UTC", "discovered_at": "2026-10-10T19:22:19.000Z" }, { "id": 157904, "urlhaus_id": "3947687", "url": "http://182.121.156.64:56808/bin.sh", "host": "182.121.156.64", "host_ip": "182.121.156.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 19:17:18 UTC", "discovered_at": "2026-10-10T19:17:18.000Z" }, { "id": 157906, "urlhaus_id": "3947686", "url": "http://42.57.202.127:52888/i", "host": "42.57.202.127", "host_ip": "42.57.202.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 19:17:07 UTC", "discovered_at": "2026-10-10T19:17:07.000Z" }, { "id": 157905, "urlhaus_id": "3947685", "url": "http://115.99.114.27:52342/i", "host": "115.99.114.27", "host_ip": "115.99.114.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 19:17:07 UTC", "discovered_at": "2026-10-10T19:17:07.000Z" }, { "id": 157907, "urlhaus_id": "3947684", "url": "http://112.248.141.165:40560/bin.sh", "host": "112.248.141.165", "host_ip": "112.248.141.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 19:13:13 UTC", "discovered_at": "2026-10-10T19:13:13.000Z" }, { "id": 157908, "urlhaus_id": "3947683", "url": "http://115.230.23.140:57737/bin.sh", "host": "115.230.23.140", "host_ip": "115.230.23.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 19:09:22 UTC", "discovered_at": "2026-10-10T19:09:22.000Z" }, { "id": 157909, "urlhaus_id": "3947682", "url": "http://123.9.193.142:43559/bin.sh", "host": "123.9.193.142", "host_ip": "123.9.193.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 19:09:18 UTC", "discovered_at": "2026-10-10T19:09:18.000Z" }, { "id": 157910, "urlhaus_id": "3947681", "url": "http://115.99.114.27:52342/bin.sh", "host": "115.99.114.27", "host_ip": "115.99.114.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 19:02:08 UTC", "discovered_at": "2026-10-10T19:02:08.000Z" }, { "id": 156465, "urlhaus_id": "3947680", "url": "http://123.4.178.130:57978/i", "host": "123.4.178.130", "host_ip": "123.4.178.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 18:56:17 UTC", "discovered_at": "2026-10-10T18:56:17.000Z" }, { "id": 156466, "urlhaus_id": "3947679", "url": "http://116.138.218.96:44057/i", "host": "116.138.218.96", "host_ip": "116.138.218.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 18:43:20 UTC", "discovered_at": "2026-10-10T18:43:20.000Z" }, { "id": 156467, "urlhaus_id": "3947678", "url": "http://115.63.14.230:44232/bin.sh", "host": "115.63.14.230", "host_ip": "115.63.14.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 18:39:10 UTC", "discovered_at": "2026-10-10T18:39:10.000Z" }, { "id": 156468, "urlhaus_id": "3947677", "url": "http://115.55.55.172:50045/i", "host": "115.55.55.172", "host_ip": "115.55.55.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 18:36:17 UTC", "discovered_at": "2026-10-10T18:36:17.000Z" }, { "id": 156469, "urlhaus_id": "3947676", "url": "http://123.4.178.130:57978/bin.sh", "host": "123.4.178.130", "host_ip": "123.4.178.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 18:35:26 UTC", "discovered_at": "2026-10-10T18:35:26.000Z" }, { "id": 156473, "urlhaus_id": "3947675", "url": "http://176.239.8.108:64214/i", "host": "176.239.8.108", "host_ip": "176.239.8.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:32:07 UTC", "discovered_at": "2026-10-10T18:32:07.000Z" }, { "id": 156472, "urlhaus_id": "3947674", "url": "http://210.97.100.192:60900/i", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:32:07 UTC", "discovered_at": "2026-10-10T18:32:07.000Z" }, { "id": 156471, "urlhaus_id": "3947673", "url": "http://182.113.206.103:52681/i", "host": "182.113.206.103", "host_ip": "182.113.206.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:32:07 UTC", "discovered_at": "2026-10-10T18:32:07.000Z" }, { "id": 156470, "urlhaus_id": "3947672", "url": "http://176.239.8.108:64214/bin.sh", "host": "176.239.8.108", "host_ip": "176.239.8.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:32:07 UTC", "discovered_at": "2026-10-10T18:32:07.000Z" }, { "id": 156474, "urlhaus_id": "3947671", "url": "http://196.189.35.226:43800/i", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:32:06 UTC", "discovered_at": "2026-10-10T18:32:06.000Z" }, { "id": 156476, "urlhaus_id": "3947670", "url": "http://125.46.215.233:41661/bin.sh", "host": "125.46.215.233", "host_ip": "125.46.215.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:17:08 UTC", "discovered_at": "2026-10-10T18:17:08.000Z" }, { "id": 156475, "urlhaus_id": "3947669", "url": "http://60.19.228.107:57263/i", "host": "60.19.228.107", "host_ip": "60.19.228.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:17:08 UTC", "discovered_at": "2026-10-10T18:17:08.000Z" }, { "id": 156477, "urlhaus_id": "3947668", "url": "http://61.52.230.84:48028/bin.sh", "host": "61.52.230.84", "host_ip": "61.52.230.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 18:17:07 UTC", "discovered_at": "2026-10-10T18:17:07.000Z" }, { "id": 156479, "urlhaus_id": "3947667", "url": "http://120.28.195.161:54301/bin.sh", "host": "120.28.195.161", "host_ip": "120.28.195.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 17:51:20 UTC", "discovered_at": "2026-10-10T17:51:20.000Z" }, { "id": 156478, "urlhaus_id": "3947666", "url": "http://123.5.126.90:51252/bin.sh", "host": "123.5.126.90", "host_ip": "123.5.126.90", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 17:51:20 UTC", "discovered_at": "2026-10-10T17:51:20.000Z" }, { "id": 156481, "urlhaus_id": "3947665", "url": "http://109.97.45.66:34071/i", "host": "109.97.45.66", "host_ip": "109.97.45.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 17:47:06 UTC", "discovered_at": "2026-10-10T17:47:06.000Z" }, { "id": 156480, "urlhaus_id": "3947664", "url": "http://119.179.238.153:48300/bin.sh", "host": "119.179.238.153", "host_ip": "119.179.238.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 17:47:06 UTC", "discovered_at": "2026-10-10T17:47:06.000Z" }, { "id": 156482, "urlhaus_id": "3947663", "url": "http://193.178.158.57/bin/0d96f1b3812d6a4c_build_x64.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-10 17:40:07 UTC", "discovered_at": "2026-10-10T17:40:07.000Z" }, { "id": 156483, "urlhaus_id": "3947662", "url": "http://219.154.155.199:35205/bin.sh", "host": "219.154.155.199", "host_ip": "219.154.155.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 17:39:16 UTC", "discovered_at": "2026-10-10T17:39:16.000Z" }, { "id": 156484, "urlhaus_id": "3947661", "url": "http://190.103.72.185:38837/i", "host": "190.103.72.185", "host_ip": "190.103.72.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 17:24:26 UTC", "discovered_at": "2026-10-10T17:24:26.000Z" }, { "id": 156485, "urlhaus_id": "3947660", "url": "http://115.58.33.104:43613/i", "host": "115.58.33.104", "host_ip": "115.58.33.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 17:17:20 UTC", "discovered_at": "2026-10-10T17:17:20.000Z" }, { "id": 156486, "urlhaus_id": "3947659", "url": "http://60.23.77.13:58315/bin.sh", "host": "60.23.77.13", "host_ip": "60.23.77.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 17:17:07 UTC", "discovered_at": "2026-10-10T17:17:07.000Z" }, { "id": 156487, "urlhaus_id": "3947658", "url": "http://45.135.194.116/i686", "host": "45.135.194.116", "host_ip": "45.135.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, x86-32", "last_online": null, "first_seen": "2026-10-10 17:07:17 UTC", "discovered_at": "2026-10-10T17:07:17.000Z" }, { "id": 156488, "urlhaus_id": "3947657", "url": "http://190.103.72.185:38837/bin.sh", "host": "190.103.72.185", "host_ip": "190.103.72.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 16:55:27 UTC", "discovered_at": "2026-10-10T16:55:27.000Z" }, { "id": 156489, "urlhaus_id": "3947656", "url": "http://105.186.68.166:35551/bin.sh", "host": "105.186.68.166", "host_ip": "105.186.68.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 16:53:11 UTC", "discovered_at": "2026-10-10T16:53:11.000Z" }, { "id": 156490, "urlhaus_id": "3947655", "url": "http://117.245.138.57:51324/i", "host": "117.245.138.57", "host_ip": "117.245.138.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 16:47:07 UTC", "discovered_at": "2026-10-10T16:47:07.000Z" }, { "id": 156491, "urlhaus_id": "3947654", "url": "https://cdn.discordapp.com/attachments/1558100015321317546/1558470943750488164/bundle.zip?ex=6acb8eab&is=6aca3d2b&hm=823d4ec1eb00862e82c5e1faf5a96c73640a9be12593792012549921e2548d60&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 16:40:39 UTC", "discovered_at": "2026-10-10T16:40:39.000Z" }, { "id": 156492, "urlhaus_id": "3947653", "url": "https://github.com/akkcoc521-blip/honeyrobloxx/releases/download/downladoa/dsalkasdkadl.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 16:40:37 UTC", "discovered_at": "2026-10-10T16:40:37.000Z" }, { "id": 156493, "urlhaus_id": "3947652", "url": "http://78.187.104.169:35406/i", "host": "78.187.104.169", "host_ip": "78.187.104.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 16:40:27 UTC", "discovered_at": "2026-10-10T16:40:27.000Z" }, { "id": 156494, "urlhaus_id": "3947651", "url": "https://cdn.discordapp.com/attachments/1519428468599951424/1558507756103663817/bundle.zip?ex=6acbb0f4&is=6aca5f74&hm=19eb8260b081867593529f72653fb354cb2c749336e2a685ec2a240e9c797df3&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 16:40:17 UTC", "discovered_at": "2026-10-10T16:40:17.000Z" }, { "id": 156500, "urlhaus_id": "3947650", "url": "https://niggersmp.net/downloads/Zyphers_Rig_Mod.jar", "host": "niggersmp.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156499, "urlhaus_id": "3947649", "url": "https://niggersmp.net/downloads/4E_Client.jar", "host": "niggersmp.net", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156498, "urlhaus_id": "3947648", "url": "https://download2260.mediafire.com/ad5bv9xw9nmgGRWWuGe6MtiSm3R4qnFN7Ax_nj6Db0gxszdMHdjS0AJZf7KR3fVsDiIXprFAlTD6aBEe_YqZ5Z0R0F5GZK-Y9VQ7w8x1STuYX5tWTPAdOCwsnXQn4S4Q2P644GFWEIVoXNp287FsMfSbnLkQ1JBpZ5bTVgWc5r4/t1rg0bos6coudtl/OverX+LoaderV.5.6.zip", "host": "download2260.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, stealer", "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156497, "urlhaus_id": "3947647", "url": "https://niggersmp.net/downloads/krypton.jar", "host": "niggersmp.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156496, "urlhaus_id": "3947646", "url": "https://xeno-cheats.xyz/XENO.rar", "host": "xeno-cheats.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156495, "urlhaus_id": "3947645", "url": "https://niggersmp.net/downloads/Radium_Client.jar", "host": "niggersmp.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 16:40:09 UTC", "discovered_at": "2026-10-10T16:40:09.000Z" }, { "id": 156501, "urlhaus_id": "3947644", "url": "http://176.65.139.231:8080/tadashi/tadashi.x64", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-10 16:40:08 UTC", "discovered_at": "2026-10-10T16:40:08.000Z" }, { "id": 156502, "urlhaus_id": "3947643", "url": "http://222.137.250.123:48113/bin.sh", "host": "222.137.250.123", "host_ip": "222.137.250.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 16:36:11 UTC", "discovered_at": "2026-10-10T16:36:11.000Z" }, { "id": 156503, "urlhaus_id": "3947642", "url": "http://42.177.163.57:23509/i", "host": "42.177.163.57", "host_ip": "42.177.163.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 16:09:16 UTC", "discovered_at": "2026-10-10T16:09:16.000Z" }, { "id": 156504, "urlhaus_id": "3947641", "url": "http://78.187.104.169:35406/bin.sh", "host": "78.187.104.169", "host_ip": "78.187.104.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 16:09:15 UTC", "discovered_at": "2026-10-10T16:09:15.000Z" }, { "id": 156505, "urlhaus_id": "3947640", "url": "http://123.9.196.5:57018/i", "host": "123.9.196.5", "host_ip": "123.9.196.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 16:02:07 UTC", "discovered_at": "2026-10-10T16:02:07.000Z" }, { "id": 156506, "urlhaus_id": "3947639", "url": "http://222.138.150.224:42834/i", "host": "222.138.150.224", "host_ip": "222.138.150.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 15:48:17 UTC", "discovered_at": "2026-10-10T15:48:17.000Z" }, { "id": 156507, "urlhaus_id": "3947638", "url": "http://124.6.167.113:52683/bin.sh", "host": "124.6.167.113", "host_ip": "124.6.167.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 15:40:10 UTC", "discovered_at": "2026-10-10T15:40:10.000Z" }, { "id": 156508, "urlhaus_id": "3947637", "url": "http://27.44.146.163:33792/i", "host": "27.44.146.163", "host_ip": "27.44.146.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 15:39:10 UTC", "discovered_at": "2026-10-10T15:39:10.000Z" }, { "id": 156509, "urlhaus_id": "3947636", "url": "http://175.9.154.249:55944/i", "host": "175.9.154.249", "host_ip": "175.9.154.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 15:32:07 UTC", "discovered_at": "2026-10-10T15:32:07.000Z" }, { "id": 156510, "urlhaus_id": "3947635", "url": "https://mobiletoolapp.com/app/apk", "host": "mobiletoolapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk", "last_online": null, "first_seen": "2026-10-10 15:31:13 UTC", "discovered_at": "2026-10-10T15:31:13.000Z" }, { "id": 156511, "urlhaus_id": "3947634", "url": "https://coreprotector.org/app/apk", "host": "coreprotector.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk", "last_online": null, "first_seen": "2026-10-10 15:31:08 UTC", "discovered_at": "2026-10-10T15:31:08.000Z" }, { "id": 156512, "urlhaus_id": "3947633", "url": "https://38.180.162.39/app/apk", "host": "38.180.162.39", "host_ip": "38.180.162.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk", "last_online": null, "first_seen": "2026-10-10 15:31:07 UTC", "discovered_at": "2026-10-10T15:31:07.000Z" }, { "id": 156513, "urlhaus_id": "3947632", "url": "http://222.138.150.224:42834/bin.sh", "host": "222.138.150.224", "host_ip": "222.138.150.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 15:28:18 UTC", "discovered_at": "2026-10-10T15:28:18.000Z" }, { "id": 156514, "urlhaus_id": "3947631", "url": "http://91.92.242.236/files-129312398/files/file_d44be89d905978ed.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-10 15:27:06 UTC", "discovered_at": "2026-10-10T15:27:06.000Z" }, { "id": 156515, "urlhaus_id": "3947630", "url": "http://220.164.23.33:49708/bin.sh", "host": "220.164.23.33", "host_ip": "220.164.23.33", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 15:15:24 UTC", "discovered_at": "2026-10-10T15:15:24.000Z" }, { "id": 156516, "urlhaus_id": "3947629", "url": "http://222.127.251.169:32873/i", "host": "222.127.251.169", "host_ip": "222.127.251.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 15:02:09 UTC", "discovered_at": "2026-10-10T15:02:09.000Z" }, { "id": 156517, "urlhaus_id": "3947628", "url": "http://115.52.17.181:40099/i", "host": "115.52.17.181", "host_ip": "115.52.17.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-10 15:02:08 UTC", "discovered_at": "2026-10-10T15:02:08.000Z" }, { "id": 156519, "urlhaus_id": "3947627", "url": "http://182.117.151.7:55978/i", "host": "182.117.151.7", "host_ip": "182.117.151.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:47:09 UTC", "discovered_at": "2026-10-10T14:47:09.000Z" }, { "id": 156518, "urlhaus_id": "3947626", "url": "http://219.155.62.69:49683/i", "host": "219.155.62.69", "host_ip": "219.155.62.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:47:09 UTC", "discovered_at": "2026-10-10T14:47:09.000Z" }, { "id": 156520, "urlhaus_id": "3947625", "url": "http://210.208.106.68:36360/i", "host": "210.208.106.68", "host_ip": "210.208.106.68", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:47:08 UTC", "discovered_at": "2026-10-10T14:47:08.000Z" }, { "id": 156521, "urlhaus_id": "3947624", "url": "http://218.28.150.23:42949/i", "host": "218.28.150.23", "host_ip": "218.28.150.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:47:07 UTC", "discovered_at": "2026-10-10T14:47:07.000Z" }, { "id": 156522, "urlhaus_id": "3947623", "url": "http://182.127.26.104:52057/bin.sh", "host": "182.127.26.104", "host_ip": "182.127.26.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:47:06 UTC", "discovered_at": "2026-10-10T14:47:06.000Z" }, { "id": 156523, "urlhaus_id": "3947622", "url": "http://27.44.146.163:33792/bin.sh", "host": "27.44.146.163", "host_ip": "27.44.146.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 14:40:33 UTC", "discovered_at": "2026-10-10T14:40:33.000Z" }, { "id": 156524, "urlhaus_id": "3947621", "url": "http://42.227.44.40:34648/bin.sh", "host": "42.227.44.40", "host_ip": "42.227.44.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 14:33:16 UTC", "discovered_at": "2026-10-10T14:33:16.000Z" }, { "id": 156525, "urlhaus_id": "3947620", "url": "http://113.239.65.72:38982/i", "host": "113.239.65.72", "host_ip": "113.239.65.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:20 UTC", "discovered_at": "2026-10-10T14:32:20.000Z" }, { "id": 156526, "urlhaus_id": "3947619", "url": "http://123.190.242.241:43839/i", "host": "123.190.242.241", "host_ip": "123.190.242.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:13 UTC", "discovered_at": "2026-10-10T14:32:13.000Z" }, { "id": 156527, "urlhaus_id": "3947618", "url": "http://175.148.152.16:54623/bin.sh", "host": "175.148.152.16", "host_ip": "175.148.152.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:09 UTC", "discovered_at": "2026-10-10T14:32:09.000Z" }, { "id": 156528, "urlhaus_id": "3947617", "url": "http://123.14.185.42:42844/i", "host": "123.14.185.42", "host_ip": "123.14.185.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:08 UTC", "discovered_at": "2026-10-10T14:32:08.000Z" }, { "id": 156530, "urlhaus_id": "3947616", "url": "http://61.52.230.84:48028/i", "host": "61.52.230.84", "host_ip": "61.52.230.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:07 UTC", "discovered_at": "2026-10-10T14:32:07.000Z" }, { "id": 156529, "urlhaus_id": "3947615", "url": "http://170.254.10.219:51354/i", "host": "170.254.10.219", "host_ip": "170.254.10.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:32:07 UTC", "discovered_at": "2026-10-10T14:32:07.000Z" }, { "id": 156531, "urlhaus_id": "3947614", "url": "http://119.117.251.43:56180/i", "host": "119.117.251.43", "host_ip": "119.117.251.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:17:09 UTC", "discovered_at": "2026-10-10T14:17:09.000Z" }, { "id": 156532, "urlhaus_id": "3947613", "url": "http://119.117.251.43:56180/bin.sh", "host": "119.117.251.43", "host_ip": "119.117.251.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:17:08 UTC", "discovered_at": "2026-10-10T14:17:08.000Z" }, { "id": 156535, "urlhaus_id": "3947612", "url": "http://42.224.84.63:33614/i", "host": "42.224.84.63", "host_ip": "42.224.84.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:17:06 UTC", "discovered_at": "2026-10-10T14:17:06.000Z" }, { "id": 156534, "urlhaus_id": "3947611", "url": "http://42.224.84.63:33614/bin.sh", "host": "42.224.84.63", "host_ip": "42.224.84.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:17:06 UTC", "discovered_at": "2026-10-10T14:17:06.000Z" }, { "id": 156533, "urlhaus_id": "3947610", "url": "http://42.230.38.184:40155/bin.sh", "host": "42.230.38.184", "host_ip": "42.230.38.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:17:06 UTC", "discovered_at": "2026-10-10T14:17:06.000Z" }, { "id": 156536, "urlhaus_id": "3947609", "url": "http://42.224.182.247:59352/i", "host": "42.224.182.247", "host_ip": "42.224.182.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 14:05:11 UTC", "discovered_at": "2026-10-10T14:05:11.000Z" }, { "id": 156537, "urlhaus_id": "3947608", "url": "http://27.207.112.61:45686/i", "host": "27.207.112.61", "host_ip": "27.207.112.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:03:08 UTC", "discovered_at": "2026-10-10T14:03:08.000Z" }, { "id": 156539, "urlhaus_id": "3947607", "url": "http://115.49.3.192:54356/i", "host": "115.49.3.192", "host_ip": "115.49.3.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:02:09 UTC", "discovered_at": "2026-10-10T14:02:09.000Z" }, { "id": 156538, "urlhaus_id": "3947606", "url": "http://115.49.129.97:53996/i", "host": "115.49.129.97", "host_ip": "115.49.129.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:02:09 UTC", "discovered_at": "2026-10-10T14:02:09.000Z" }, { "id": 156541, "urlhaus_id": "3947605", "url": "http://27.205.158.224:59061/i", "host": "27.205.158.224", "host_ip": "27.205.158.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:02:08 UTC", "discovered_at": "2026-10-10T14:02:08.000Z" }, { "id": 156540, "urlhaus_id": "3947604", "url": "http://113.239.65.72:38982/bin.sh", "host": "113.239.65.72", "host_ip": "113.239.65.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:02:08 UTC", "discovered_at": "2026-10-10T14:02:08.000Z" }, { "id": 156542, "urlhaus_id": "3947603", "url": "http://221.203.206.182:43811/i", "host": "221.203.206.182", "host_ip": "221.203.206.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 14:02:07 UTC", "discovered_at": "2026-10-10T14:02:07.000Z" }, { "id": 156543, "urlhaus_id": "3947602", "url": "http://123.12.46.185:43498/i", "host": "123.12.46.185", "host_ip": "123.12.46.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 13:57:16 UTC", "discovered_at": "2026-10-10T13:57:16.000Z" }, { "id": 156544, "urlhaus_id": "3947601", "url": "http://125.104.39.108:14081/bin.sh", "host": "125.104.39.108", "host_ip": "125.104.39.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 13:47:24 UTC", "discovered_at": "2026-10-10T13:47:24.000Z" }, { "id": 156546, "urlhaus_id": "3947600", "url": "http://123.11.0.252:47057/i", "host": "123.11.0.252", "host_ip": "123.11.0.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:47:06 UTC", "discovered_at": "2026-10-10T13:47:06.000Z" }, { "id": 156545, "urlhaus_id": "3947599", "url": "http://42.228.37.155:42735/i", "host": "42.228.37.155", "host_ip": "42.228.37.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:47:06 UTC", "discovered_at": "2026-10-10T13:47:06.000Z" }, { "id": 156547, "urlhaus_id": "3947598", "url": "http://42.224.11.100:59961/bin.sh", "host": "42.224.11.100", "host_ip": "42.224.11.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 13:36:20 UTC", "discovered_at": "2026-10-10T13:36:20.000Z" }, { "id": 156548, "urlhaus_id": "3947597", "url": "http://42.86.53.125:43824/i", "host": "42.86.53.125", "host_ip": "42.86.53.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:32:07 UTC", "discovered_at": "2026-10-10T13:32:07.000Z" }, { "id": 156549, "urlhaus_id": "3947596", "url": "http://105.186.118.157:54387/i", "host": "105.186.118.157", "host_ip": "105.186.118.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 13:17:20 UTC", "discovered_at": "2026-10-10T13:17:20.000Z" }, { "id": 156550, "urlhaus_id": "3947595", "url": "http://45.194.88.27:59510/i", "host": "45.194.88.27", "host_ip": "45.194.88.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:17:07 UTC", "discovered_at": "2026-10-10T13:17:07.000Z" }, { "id": 156551, "urlhaus_id": "3947594", "url": "https://144.172.64.22/Bin/ScreenConnect.ClientSetup.exe", "host": "144.172.64.22", "host_ip": "144.172.64.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-64-22, exe, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:14:52 UTC", "discovered_at": "2026-10-10T13:14:52.000Z" }, { "id": 156552, "urlhaus_id": "3947593", "url": "https://144.172.64.22/bin/support.client.exe", "host": "144.172.64.22", "host_ip": "144.172.64.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-64-22, exe, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:14:09 UTC", "discovered_at": "2026-10-10T13:14:09.000Z" }, { "id": 156553, "urlhaus_id": "3947592", "url": "http://123.11.220.74:33455/bin.sh", "host": "123.11.220.74", "host_ip": "123.11.220.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 13:09:19 UTC", "discovered_at": "2026-10-10T13:09:19.000Z" }, { "id": 156554, "urlhaus_id": "3947591", "url": "http://123.12.46.185:43498/bin.sh", "host": "123.12.46.185", "host_ip": "123.12.46.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 13:09:18 UTC", "discovered_at": "2026-10-10T13:09:18.000Z" }, { "id": 156556, "urlhaus_id": "3947590", "url": "http://176.65.139.135/dvr.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:08:18 UTC", "discovered_at": "2026-10-10T13:08:18.000Z" }, { "id": 156555, "urlhaus_id": "3947589", "url": "http://176.65.139.135/bins/telnet.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:08:18 UTC", "discovered_at": "2026-10-10T13:08:18.000Z" }, { "id": 156557, "urlhaus_id": "3947588", "url": "http://swervimgbackj.top/Bin/ScreenConnect.ClientSetup.msi", "host": "swervimgbackj.top", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "connectwise, msi, rmm, screenconnect", "last_online": null, "first_seen": "2026-10-10 13:05:48 UTC", "discovered_at": "2026-10-10T13:05:48.000Z" }, { "id": 156558, "urlhaus_id": "3947587", "url": "https://accessdocu.b-cdn.net/Installer.ps1", "host": "accessdocu.b-cdn.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, connectwise, powershell, ps1, rmm, screenconnect", "last_online": null, "first_seen": "2026-10-10 13:05:08 UTC", "discovered_at": "2026-10-10T13:05:08.000Z" }, { "id": 156561, "urlhaus_id": "3947586", "url": "http://130.12.180.212/t/mips", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:03:11 UTC", "discovered_at": "2026-10-10T13:03:11.000Z" }, { "id": 156560, "urlhaus_id": "3947585", "url": "http://130.12.180.212/x64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:03:11 UTC", "discovered_at": "2026-10-10T13:03:11.000Z" }, { "id": 156559, "urlhaus_id": "3947584", "url": "http://130.12.180.212/x86", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:03:11 UTC", "discovered_at": "2026-10-10T13:03:11.000Z" }, { "id": 156563, "urlhaus_id": "3947583", "url": "http://130.12.180.212/t/mpsl", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:03:10 UTC", "discovered_at": "2026-10-10T13:03:10.000Z" }, { "id": 156562, "urlhaus_id": "3947582", "url": "http://130.12.180.212/x86_32", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:03:10 UTC", "discovered_at": "2026-10-10T13:03:10.000Z" }, { "id": 156565, "urlhaus_id": "3947581", "url": "https://modhollow.netlify.app/files/krypton-client/Krypton%20Client%201.21.11_1.jar", "host": "modhollow.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 13:03:09 UTC", "discovered_at": "2026-10-10T13:03:09.000Z" }, { "id": 156564, "urlhaus_id": "3947580", "url": "https://modhollow.netlify.app/files/meteor-client/meteor-client-1.21.11-86.jar", "host": "modhollow.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 13:03:09 UTC", "discovered_at": "2026-10-10T13:03:09.000Z" }, { "id": 156566, "urlhaus_id": "3947579", "url": "https://modhollow.netlify.app/files/opsec/opsec-1.21.11%2Bv1.1.7.1.jar", "host": "modhollow.netlify.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 13:03:07 UTC", "discovered_at": "2026-10-10T13:03:07.000Z" }, { "id": 156568, "urlhaus_id": "3947578", "url": "https://0807.st/p/7uWn25A.rar", "host": "0807.st", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "0807.st, shrike, SmartLoader, Stealc", "last_online": null, "first_seen": "2026-10-10 13:03:05 UTC", "discovered_at": "2026-10-10T13:03:05.000Z" }, { "id": 156567, "urlhaus_id": "3947577", "url": "https://0807.st/p/IhoaSUb.rar", "host": "0807.st", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "0807.st, shrike, SmartLoader, Stealc", "last_online": null, "first_seen": "2026-10-10 13:03:05 UTC", "discovered_at": "2026-10-10T13:03:05.000Z" }, { "id": 156569, "urlhaus_id": "3947576", "url": "https://rxb.immortales.fun/DivX.zip", "host": "rxb.immortales.fun", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-dvx.to, stealer", "last_online": null, "first_seen": "2026-10-10 13:02:28 UTC", "discovered_at": "2026-10-10T13:02:28.000Z" }, { "id": 156570, "urlhaus_id": "3947575", "url": "https://goobaaclient.com/downloads/GoobaaClient.1.21.11.jar", "host": "goobaaclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-10 13:02:25 UTC", "discovered_at": "2026-10-10T13:02:25.000Z" }, { "id": 156572, "urlhaus_id": "3947574", "url": "http://2.27.14.196:889/champ", "host": "2.27.14.196", "host_ip": "2.27.14.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-10 13:02:21 UTC", "discovered_at": "2026-10-10T13:02:21.000Z" }, { "id": 156571, "urlhaus_id": "3947573", "url": "https://exec-roblox.com/uploads/B%D0%BE%D0%BEts%D0%B5%D1%85%D0%B5c-64.zip", "host": "exec-roblox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "malware, pw-exec, stealer", "last_online": null, "first_seen": "2026-10-10 13:02:21 UTC", "discovered_at": "2026-10-10T13:02:21.000Z" }, { "id": 156574, "urlhaus_id": "3947572", "url": "http://176.65.139.231:8080/wget.sh", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-10 13:02:20 UTC", "discovered_at": "2026-10-10T13:02:20.000Z" }, { "id": 156573, "urlhaus_id": "3947571", "url": "http://176.65.139.231:8080/deploy.sh", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-10 13:02:20 UTC", "discovered_at": "2026-10-10T13:02:20.000Z" }, { "id": 156580, "urlhaus_id": "3947570", "url": "https://cdn.discordapp.com/attachments/1558100015321317546/1558450520358654023/bundle_2.zip?ex=6acb7ba6&is=6aca2a26&hm=e00f5777b997bfc71b50b385a548d80bb293af88436931c918351cf9ac471c15&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156579, "urlhaus_id": "3947569", "url": "http://130.12.180.212/riscv", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156578, "urlhaus_id": "3947568", "url": "http://130.12.180.212/riscv64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156577, "urlhaus_id": "3947567", "url": "http://130.12.180.212/M68K", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156576, "urlhaus_id": "3947566", "url": "https://campus-engine-neural-chorus.trycloudflare.com/svc/u.sh?h=dexec", "host": "campus-engine-neural-chorus.trycloudflare.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156575, "urlhaus_id": "3947565", "url": "http://130.12.180.212/t/arm7", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:19 UTC", "discovered_at": "2026-10-10T13:02:19.000Z" }, { "id": 156588, "urlhaus_id": "3947564", "url": "http://130.12.180.212/mpsl", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156587, "urlhaus_id": "3947563", "url": "http://130.12.180.212/mips64le", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156586, "urlhaus_id": "3947562", "url": "http://130.12.180.212/ppc64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156585, "urlhaus_id": "3947561", "url": "http://130.12.180.212/amd64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156584, "urlhaus_id": "3947560", "url": "http://130.12.180.212/arm64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156583, "urlhaus_id": "3947559", "url": "http://130.12.180.212/I586", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156582, "urlhaus_id": "3947558", "url": "http://130.12.180.212/mips64el", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156581, "urlhaus_id": "3947557", "url": "https://polar.moe/downloads/PolarLoader.jar", "host": "polar.moe", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:02:18 UTC", "discovered_at": "2026-10-10T13:02:18.000Z" }, { "id": 156589, "urlhaus_id": "3947556", "url": "https://hylrukrxwfwbooknmtyx.supabase.co/storage/v1/object/sign/Krypton%20Client%201.21x/Krypton%20Client%201.21x.jar?token=eyJraWQiOiIzODI0ZTg5NS04MjY5LTRmZGEtYWNlZC02M2NhYjY5YWM1MDAiLCJhbGciOiJIUzUxMiJ9.eyJ1cmwiOiJLcnlwdG9uIENsaWVudCAxLjIxeC9LcnlwdG9uIENsaWVudCAxLjIxeC5qYXIiLCJzY29wZSI6ImRvd25sb2FkIiwiaWF0IjoxNzkxNTkyOTkyLCJleHAiOjE4MjMxMjg5OTJ9.7WTbEWdrQ0KLBQ_UMhaHarlOky5CmOTWPQeSGG8J110mPcGm_9PXZeSeoBUdxV99h1ydJeq7cP-nA1QL4vmbTQ", "host": "hylrukrxwfwbooknmtyx.supabase.co", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "funrat", "last_online": null, "first_seen": "2026-10-10 13:02:17 UTC", "discovered_at": "2026-10-10T13:02:17.000Z" }, { "id": 156593, "urlhaus_id": "3947555", "url": "http://130.12.180.212/i386", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:16 UTC", "discovered_at": "2026-10-10T13:02:16.000Z" }, { "id": 156592, "urlhaus_id": "3947554", "url": "http://130.12.180.212/armv7", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:16 UTC", "discovered_at": "2026-10-10T13:02:16.000Z" }, { "id": 156591, "urlhaus_id": "3947553", "url": "http://130.12.180.212/t/mipsel", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:16 UTC", "discovered_at": "2026-10-10T13:02:16.000Z" }, { "id": 156590, "urlhaus_id": "3947552", "url": "https://0807.st/p/Y2Mqku9.dat", "host": "0807.st", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "0807.st, shrike, SmartLoader, Stealc", "last_online": null, "first_seen": "2026-10-10 13:02:16 UTC", "discovered_at": "2026-10-10T13:02:16.000Z" }, { "id": 156597, "urlhaus_id": "3947551", "url": "http://130.12.180.212/s", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:15 UTC", "discovered_at": "2026-10-10T13:02:15.000Z" }, { "id": 156596, "urlhaus_id": "3947550", "url": "http://130.12.180.212/arm7n", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:15 UTC", "discovered_at": "2026-10-10T13:02:15.000Z" }, { "id": 156595, "urlhaus_id": "3947549", "url": "http://130.12.180.212/mipsle", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:15 UTC", "discovered_at": "2026-10-10T13:02:15.000Z" }, { "id": 156594, "urlhaus_id": "3947548", "url": "http://130.12.180.212/powerpc64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:15 UTC", "discovered_at": "2026-10-10T13:02:15.000Z" }, { "id": 156599, "urlhaus_id": "3947547", "url": "http://130.12.180.212/armhf", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:14 UTC", "discovered_at": "2026-10-10T13:02:14.000Z" }, { "id": 156598, "urlhaus_id": "3947546", "url": "https://pole-mother-visiting-trinity.trycloudflare.com/svc/", "host": "pole-mother-visiting-trinity.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker", "last_online": null, "first_seen": "2026-10-10 13:02:14 UTC", "discovered_at": "2026-10-10T13:02:14.000Z" }, { "id": 156600, "urlhaus_id": "3947545", "url": "http://113.53.69.164:57025/i", "host": "113.53.69.164", "host_ip": "113.53.69.164", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:02:09 UTC", "discovered_at": "2026-10-10T13:02:09.000Z" }, { "id": 156603, "urlhaus_id": "3947544", "url": "http://130.12.180.212/SH4", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:07 UTC", "discovered_at": "2026-10-10T13:02:07.000Z" }, { "id": 156602, "urlhaus_id": "3947543", "url": "http://130.12.180.212/sh", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "130-12-180-212, ua-wget", "last_online": null, "first_seen": "2026-10-10 13:02:07 UTC", "discovered_at": "2026-10-10T13:02:07.000Z" }, { "id": 156601, "urlhaus_id": "3947542", "url": "http://120.28.153.108:41321/i", "host": "120.28.153.108", "host_ip": "120.28.153.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 13:02:07 UTC", "discovered_at": "2026-10-10T13:02:07.000Z" }, { "id": 156604, "urlhaus_id": "3947541", "url": "https://campus-engine-neural-chorus.trycloudflare.com/svc/r?h=vv", "host": "campus-engine-neural-chorus.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker", "last_online": null, "first_seen": "2026-10-10 13:02:06 UTC", "discovered_at": "2026-10-10T13:02:06.000Z" }, { "id": 156609, "urlhaus_id": "3947540", "url": "http://94.154.43.26/main_ppc", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:21 UTC", "discovered_at": "2026-10-10T12:59:21.000Z" }, { "id": 156608, "urlhaus_id": "3947539", "url": "http://94.154.43.26/main_mips", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:21 UTC", "discovered_at": "2026-10-10T12:59:21.000Z" }, { "id": 156607, "urlhaus_id": "3947538", "url": "http://94.154.43.26/main_m68k", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:21 UTC", "discovered_at": "2026-10-10T12:59:21.000Z" }, { "id": 156606, "urlhaus_id": "3947537", "url": "http://94.154.43.26/main_sh4", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:21 UTC", "discovered_at": "2026-10-10T12:59:21.000Z" }, { "id": 156605, "urlhaus_id": "3947536", "url": "http://94.154.43.26/main_x86_64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:21 UTC", "discovered_at": "2026-10-10T12:59:21.000Z" }, { "id": 156615, "urlhaus_id": "3947535", "url": "http://94.154.43.26/main_arm", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156614, "urlhaus_id": "3947534", "url": "http://94.154.43.26/main_arm6", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156613, "urlhaus_id": "3947533", "url": "http://94.154.43.26/main_arm5", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156612, "urlhaus_id": "3947532", "url": "http://94.154.43.26/main_x86", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156611, "urlhaus_id": "3947531", "url": "http://94.154.43.26/main_mpsl", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156610, "urlhaus_id": "3947530", "url": "http://94.154.43.26/main_arm7", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:59:17 UTC", "discovered_at": "2026-10-10T12:59:17.000Z" }, { "id": 156619, "urlhaus_id": "3947529", "url": "http://176.65.139.41/lol.sh", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:20 UTC", "discovered_at": "2026-10-10T12:58:20.000Z" }, { "id": 156618, "urlhaus_id": "3947528", "url": "http://176.65.139.41/armv5", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:20 UTC", "discovered_at": "2026-10-10T12:58:20.000Z" }, { "id": 156617, "urlhaus_id": "3947527", "url": "http://176.65.139.41/mpsl", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:20 UTC", "discovered_at": "2026-10-10T12:58:20.000Z" }, { "id": 156616, "urlhaus_id": "3947526", "url": "http://176.65.139.41/lel.sh", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:20 UTC", "discovered_at": "2026-10-10T12:58:20.000Z" }, { "id": 156623, "urlhaus_id": "3947525", "url": "http://176.65.139.41/aarch64", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:16 UTC", "discovered_at": "2026-10-10T12:58:16.000Z" }, { "id": 156622, "urlhaus_id": "3947524", "url": "http://176.65.139.41/mips", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:16 UTC", "discovered_at": "2026-10-10T12:58:16.000Z" }, { "id": 156621, "urlhaus_id": "3947523", "url": "http://176.65.139.41/x64s", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:16 UTC", "discovered_at": "2026-10-10T12:58:16.000Z" }, { "id": 156620, "urlhaus_id": "3947522", "url": "http://176.65.139.41/armv7", "host": "176.65.139.41", "host_ip": "176.65.139.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-41, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:58:16 UTC", "discovered_at": "2026-10-10T12:58:16.000Z" }, { "id": 156624, "urlhaus_id": "3947521", "url": "http://42.238.143.132:56801/i", "host": "42.238.143.132", "host_ip": "42.238.143.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 12:47:07 UTC", "discovered_at": "2026-10-10T12:47:07.000Z" }, { "id": 156625, "urlhaus_id": "3947520", "url": "http://118.251.12.82:40560/i", "host": "118.251.12.82", "host_ip": "118.251.12.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 12:31:20 UTC", "discovered_at": "2026-10-10T12:31:20.000Z" }, { "id": 156627, "urlhaus_id": "3947519", "url": "http://123.11.0.252:47057/bin.sh", "host": "123.11.0.252", "host_ip": "123.11.0.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 12:17:08 UTC", "discovered_at": "2026-10-10T12:17:08.000Z" }, { "id": 156626, "urlhaus_id": "3947518", "url": "http://120.84.212.113:55570/i", "host": "120.84.212.113", "host_ip": "120.84.212.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 12:17:08 UTC", "discovered_at": "2026-10-10T12:17:08.000Z" }, { "id": 156629, "urlhaus_id": "3947517", "url": "http://176.65.139.169/s390x", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:12:21 UTC", "discovered_at": "2026-10-10T12:12:21.000Z" }, { "id": 156628, "urlhaus_id": "3947516", "url": "http://176.65.139.169/riscv32", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:12:21 UTC", "discovered_at": "2026-10-10T12:12:21.000Z" }, { "id": 156631, "urlhaus_id": "3947515", "url": "http://176.65.139.169/x86_64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:12:11 UTC", "discovered_at": "2026-10-10T12:12:11.000Z" }, { "id": 156630, "urlhaus_id": "3947514", "url": "http://176.65.139.169/x86", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:12:11 UTC", "discovered_at": "2026-10-10T12:12:11.000Z" }, { "id": 156641, "urlhaus_id": "3947513", "url": "http://176.65.139.169/pid.x86_64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156640, "urlhaus_id": "3947512", "url": "http://176.65.139.169/bot.x86_64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156639, "urlhaus_id": "3947511", "url": "http://176.65.139.169/mips64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156638, "urlhaus_id": "3947510", "url": "http://176.65.139.169/riscv64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156637, "urlhaus_id": "3947509", "url": "http://176.65.139.169/pid.x86", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156636, "urlhaus_id": "3947508", "url": "http://176.65.139.169/android-arm", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156635, "urlhaus_id": "3947507", "url": "http://176.65.139.169/android-arm64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156634, "urlhaus_id": "3947506", "url": "http://176.65.139.169/ppc64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156633, "urlhaus_id": "3947505", "url": "http://176.65.139.169/launch.sh", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-169, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156632, "urlhaus_id": "3947504", "url": "http://176.65.139.169/pid.ppc64", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:25 UTC", "discovered_at": "2026-10-10T12:11:25.000Z" }, { "id": 156651, "urlhaus_id": "3947503", "url": "http://176.65.139.169/pid.mipsel", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156650, "urlhaus_id": "3947502", "url": "http://176.65.139.169/pid.arm", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156649, "urlhaus_id": "3947501", "url": "http://176.65.139.169/bot.arm", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156648, "urlhaus_id": "3947500", "url": "http://176.65.139.169/pid.arm6", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156647, "urlhaus_id": "3947499", "url": "http://176.65.139.169/pid.arm5", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156646, "urlhaus_id": "3947498", "url": "http://176.65.139.169/pid.m68k", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156645, "urlhaus_id": "3947497", "url": "http://176.65.139.169/pid.arm7", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156644, "urlhaus_id": "3947496", "url": "http://176.65.139.169/arm8", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156643, "urlhaus_id": "3947495", "url": "http://176.65.139.169/pid.mips", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156642, "urlhaus_id": "3947494", "url": "http://176.65.139.169/pid.ppc", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:24 UTC", "discovered_at": "2026-10-10T12:11:24.000Z" }, { "id": 156652, "urlhaus_id": "3947493", "url": "http://176.65.139.169/j.sh", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-169, sh, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:20 UTC", "discovered_at": "2026-10-10T12:11:20.000Z" }, { "id": 156654, "urlhaus_id": "3947492", "url": "http://176.65.139.169/mipsel", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:11 UTC", "discovered_at": "2026-10-10T12:11:11.000Z" }, { "id": 156653, "urlhaus_id": "3947491", "url": "http://176.65.139.169/pid.arm8", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-169, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 12:11:11 UTC", "discovered_at": "2026-10-10T12:11:11.000Z" }, { "id": 156655, "urlhaus_id": "3947490", "url": "http://118.251.12.82:40560/bin.sh", "host": "118.251.12.82", "host_ip": "118.251.12.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 12:03:19 UTC", "discovered_at": "2026-10-10T12:03:19.000Z" }, { "id": 156656, "urlhaus_id": "3947489", "url": "http://42.230.38.184:40155/i", "host": "42.230.38.184", "host_ip": "42.230.38.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 12:02:07 UTC", "discovered_at": "2026-10-10T12:02:07.000Z" }, { "id": 156657, "urlhaus_id": "3947488", "url": "http://115.48.152.62:47861/i", "host": "115.48.152.62", "host_ip": "115.48.152.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 12:02:06 UTC", "discovered_at": "2026-10-10T12:02:06.000Z" }, { "id": 156658, "urlhaus_id": "3947487", "url": "http://176.65.139.136/debug", "host": "176.65.139.136", "host_ip": "176.65.139.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-136, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:52:17 UTC", "discovered_at": "2026-10-10T11:52:17.000Z" }, { "id": 156671, "urlhaus_id": "3947486", "url": "http://176.65.139.166:8080/iran.armv5l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156670, "urlhaus_id": "3947485", "url": "http://176.65.139.166:8080/iran.sh4", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156669, "urlhaus_id": "3947484", "url": "http://176.65.139.166:8080/iran.i486", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156668, "urlhaus_id": "3947483", "url": "http://176.65.139.166:8080/iran.armv6l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156667, "urlhaus_id": "3947482", "url": "http://176.65.139.166:8080/iran.mipsel", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156666, "urlhaus_id": "3947481", "url": "http://176.65.139.166:8080/iran.mipsrouter", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156665, "urlhaus_id": "3947480", "url": "http://176.65.139.166:8080/iran.arc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156664, "urlhaus_id": "3947479", "url": "http://176.65.139.166:8080/iran.armv7l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156663, "urlhaus_id": "3947478", "url": "http://176.65.139.166:8080/iran.sparc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156662, "urlhaus_id": "3947477", "url": "http://176.65.139.166:8080/iran.mips", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156661, "urlhaus_id": "3947476", "url": "http://176.65.139.166:8080/iran.powerpc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156660, "urlhaus_id": "3947475", "url": "http://176.65.139.166:8080/iran.m68k", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156659, "urlhaus_id": "3947474", "url": "http://176.65.139.166:8080/iran.armv4l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:21 UTC", "discovered_at": "2026-10-10T11:50:21.000Z" }, { "id": 156672, "urlhaus_id": "3947473", "url": "http://176.65.139.166:8080/iran.aarch64", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-166-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 11:50:15 UTC", "discovered_at": "2026-10-10T11:50:15.000Z" }, { "id": 156673, "urlhaus_id": "3947472", "url": "http://123.10.238.251:55203/i", "host": "123.10.238.251", "host_ip": "123.10.238.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:47:13 UTC", "discovered_at": "2026-10-10T11:47:13.000Z" }, { "id": 156674, "urlhaus_id": "3947471", "url": "http://121.205.208.78:56779/i", "host": "121.205.208.78", "host_ip": "121.205.208.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:47:11 UTC", "discovered_at": "2026-10-10T11:47:11.000Z" }, { "id": 156675, "urlhaus_id": "3947470", "url": "http://112.198.195.40:50762/i", "host": "112.198.195.40", "host_ip": "112.198.195.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:47:07 UTC", "discovered_at": "2026-10-10T11:47:07.000Z" }, { "id": 156676, "urlhaus_id": "3947469", "url": "http://115.48.152.62:47861/bin.sh", "host": "115.48.152.62", "host_ip": "115.48.152.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:47:06 UTC", "discovered_at": "2026-10-10T11:47:06.000Z" }, { "id": 156677, "urlhaus_id": "3947468", "url": "http://105.186.68.166:35551/i", "host": "105.186.68.166", "host_ip": "105.186.68.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:32:08 UTC", "discovered_at": "2026-10-10T11:32:08.000Z" }, { "id": 156678, "urlhaus_id": "3947467", "url": "http://5.167.126.229:59635/i", "host": "5.167.126.229", "host_ip": "5.167.126.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:32:07 UTC", "discovered_at": "2026-10-10T11:32:07.000Z" }, { "id": 156679, "urlhaus_id": "3947466", "url": "http://58.21.122.54:53319/i", "host": "58.21.122.54", "host_ip": "58.21.122.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:17:08 UTC", "discovered_at": "2026-10-10T11:17:08.000Z" }, { "id": 156680, "urlhaus_id": "3947465", "url": "http://151.233.145.221:51986/i", "host": "151.233.145.221", "host_ip": "151.233.145.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:17:07 UTC", "discovered_at": "2026-10-10T11:17:07.000Z" }, { "id": 156681, "urlhaus_id": "3947464", "url": "http://222.141.97.98:39460/i", "host": "222.141.97.98", "host_ip": "222.141.97.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 11:14:21 UTC", "discovered_at": "2026-10-10T11:14:21.000Z" }, { "id": 156682, "urlhaus_id": "3947463", "url": "http://115.207.84.249:33401/i", "host": "115.207.84.249", "host_ip": "115.207.84.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:02:13 UTC", "discovered_at": "2026-10-10T11:02:13.000Z" }, { "id": 156683, "urlhaus_id": "3947462", "url": "http://115.49.203.91:54144/i", "host": "115.49.203.91", "host_ip": "115.49.203.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 11:02:06 UTC", "discovered_at": "2026-10-10T11:02:06.000Z" }, { "id": 156684, "urlhaus_id": "3947461", "url": "http://60.23.239.46:47895/i", "host": "60.23.239.46", "host_ip": "60.23.239.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 11:00:20 UTC", "discovered_at": "2026-10-10T11:00:20.000Z" }, { "id": 156685, "urlhaus_id": "3947460", "url": "http://222.141.97.98:39460/bin.sh", "host": "222.141.97.98", "host_ip": "222.141.97.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 10:51:17 UTC", "discovered_at": "2026-10-10T10:51:17.000Z" }, { "id": 156686, "urlhaus_id": "3947459", "url": "http://77.79.160.210:59889/i", "host": "77.79.160.210", "host_ip": "77.79.160.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:47:06 UTC", "discovered_at": "2026-10-10T10:47:06.000Z" }, { "id": 156687, "urlhaus_id": "3947458", "url": "http://60.23.239.46:47895/bin.sh", "host": "60.23.239.46", "host_ip": "60.23.239.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 10:44:20 UTC", "discovered_at": "2026-10-10T10:44:20.000Z" }, { "id": 156688, "urlhaus_id": "3947457", "url": "http://59.97.250.127:43730/i", "host": "59.97.250.127", "host_ip": "59.97.250.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:17:07 UTC", "discovered_at": "2026-10-10T10:17:07.000Z" }, { "id": 156689, "urlhaus_id": "3947456", "url": "http://116.10.133.42:48435/bin.sh", "host": "116.10.133.42", "host_ip": "116.10.133.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 10:14:17 UTC", "discovered_at": "2026-10-10T10:14:17.000Z" }, { "id": 156690, "urlhaus_id": "3947455", "url": "http://120.28.189.218:59232/bin.sh", "host": "120.28.189.218", "host_ip": "120.28.189.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 10:13:18 UTC", "discovered_at": "2026-10-10T10:13:18.000Z" }, { "id": 156691, "urlhaus_id": "3947454", "url": "http://125.42.81.163:43385/bin.sh", "host": "125.42.81.163", "host_ip": "125.42.81.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 10:13:17 UTC", "discovered_at": "2026-10-10T10:13:17.000Z" }, { "id": 156692, "urlhaus_id": "3947453", "url": "http://61.52.4.108:55939/bin.sh", "host": "61.52.4.108", "host_ip": "61.52.4.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 10:08:15 UTC", "discovered_at": "2026-10-10T10:08:15.000Z" }, { "id": 156693, "urlhaus_id": "3947452", "url": "http://182.114.33.57:43016/bin.sh", "host": "182.114.33.57", "host_ip": "182.114.33.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 10:04:15 UTC", "discovered_at": "2026-10-10T10:04:15.000Z" }, { "id": 156696, "urlhaus_id": "3947451", "url": "http://180.245.62.121:48408/i", "host": "180.245.62.121", "host_ip": "180.245.62.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:02:07 UTC", "discovered_at": "2026-10-10T10:02:07.000Z" }, { "id": 156695, "urlhaus_id": "3947450", "url": "http://63.245.153.71:46253/i", "host": "63.245.153.71", "host_ip": "63.245.153.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:02:07 UTC", "discovered_at": "2026-10-10T10:02:07.000Z" }, { "id": 156694, "urlhaus_id": "3947449", "url": "http://182.126.240.218:54207/i", "host": "182.126.240.218", "host_ip": "182.126.240.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:02:07 UTC", "discovered_at": "2026-10-10T10:02:07.000Z" }, { "id": 156697, "urlhaus_id": "3947448", "url": "http://182.121.156.64:56808/i", "host": "182.121.156.64", "host_ip": "182.121.156.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:02:06 UTC", "discovered_at": "2026-10-10T10:02:06.000Z" }, { "id": 156698, "urlhaus_id": "3947447", "url": "http://47.105.74.195:7047/linux", "host": "47.105.74.195", "host_ip": "47.105.74.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:01:14 UTC", "discovered_at": "2026-10-10T10:01:14.000Z" }, { "id": 156699, "urlhaus_id": "3947446", "url": "http://47.102.102.45:9006/linux", "host": "47.102.102.45", "host_ip": "47.102.102.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:01:08 UTC", "discovered_at": "2026-10-10T10:01:08.000Z" }, { "id": 156701, "urlhaus_id": "3947445", "url": "http://66.116.196.142/ezo", "host": "66.116.196.142", "host_ip": "66.116.196.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:01:06 UTC", "discovered_at": "2026-10-10T10:01:06.000Z" }, { "id": 156700, "urlhaus_id": "3947444", "url": "http://176.65.139.40/tot", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:01:06 UTC", "discovered_at": "2026-10-10T10:01:06.000Z" }, { "id": 156702, "urlhaus_id": "3947443", "url": "http://217.60.196.2/cot", "host": "217.60.196.2", "host_ip": "217.60.196.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 10:01:05 UTC", "discovered_at": "2026-10-10T10:01:05.000Z" }, { "id": 156703, "urlhaus_id": "3947442", "url": "http://42.236.213.139:34169/bin.sh", "host": "42.236.213.139", "host_ip": "42.236.213.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 09:57:08 UTC", "discovered_at": "2026-10-10T09:57:08.000Z" }, { "id": 156707, "urlhaus_id": "3947441", "url": "http://110.136.60.67:37161/bin.sh", "host": "110.136.60.67", "host_ip": "110.136.60.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:47:06 UTC", "discovered_at": "2026-10-10T09:47:06.000Z" }, { "id": 156706, "urlhaus_id": "3947440", "url": "http://175.150.255.147:45190/bin.sh", "host": "175.150.255.147", "host_ip": "175.150.255.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:47:06 UTC", "discovered_at": "2026-10-10T09:47:06.000Z" }, { "id": 156705, "urlhaus_id": "3947439", "url": "http://98.36.141.73:49467/i", "host": "98.36.141.73", "host_ip": "98.36.141.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:47:06 UTC", "discovered_at": "2026-10-10T09:47:06.000Z" }, { "id": 156704, "urlhaus_id": "3947438", "url": "http://96.246.230.97:34605/i", "host": "96.246.230.97", "host_ip": "96.246.230.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:47:06 UTC", "discovered_at": "2026-10-10T09:47:06.000Z" }, { "id": 156708, "urlhaus_id": "3947437", "url": "http://123.14.152.127:46530/bin.sh", "host": "123.14.152.127", "host_ip": "123.14.152.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:47:05 UTC", "discovered_at": "2026-10-10T09:47:05.000Z" }, { "id": 156709, "urlhaus_id": "3947436", "url": "http://125.44.49.37:36624/i", "host": "125.44.49.37", "host_ip": "125.44.49.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:11 UTC", "discovered_at": "2026-10-10T09:32:11.000Z" }, { "id": 156718, "urlhaus_id": "3947435", "url": "http://123.156.81.230:56868/i", "host": "123.156.81.230", "host_ip": "123.156.81.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156717, "urlhaus_id": "3947434", "url": "http://42.227.243.218:45931/i", "host": "42.227.243.218", "host_ip": "42.227.243.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156716, "urlhaus_id": "3947433", "url": "http://125.45.137.35:34953/i", "host": "125.45.137.35", "host_ip": "125.45.137.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156715, "urlhaus_id": "3947432", "url": "http://123.5.126.90:51252/i", "host": "123.5.126.90", "host_ip": "123.5.126.90", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156714, "urlhaus_id": "3947431", "url": "http://42.230.218.97:45408/i", "host": "42.230.218.97", "host_ip": "42.230.218.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156713, "urlhaus_id": "3947430", "url": "http://123.9.193.142:43559/i", "host": "123.9.193.142", "host_ip": "123.9.193.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156712, "urlhaus_id": "3947429", "url": "http://42.236.213.139:34169/i", "host": "42.236.213.139", "host_ip": "42.236.213.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156711, "urlhaus_id": "3947428", "url": "http://175.149.80.109:35787/i", "host": "175.149.80.109", "host_ip": "175.149.80.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156710, "urlhaus_id": "3947427", "url": "http://125.42.81.163:43385/i", "host": "125.42.81.163", "host_ip": "125.42.81.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:09 UTC", "discovered_at": "2026-10-10T09:32:09.000Z" }, { "id": 156719, "urlhaus_id": "3947426", "url": "http://160.176.248.175:58858/i", "host": "160.176.248.175", "host_ip": "160.176.248.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:08 UTC", "discovered_at": "2026-10-10T09:32:08.000Z" }, { "id": 156720, "urlhaus_id": "3947425", "url": "http://123.14.152.127:46530/i", "host": "123.14.152.127", "host_ip": "123.14.152.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:32:07 UTC", "discovered_at": "2026-10-10T09:32:07.000Z" }, { "id": 156721, "urlhaus_id": "3947424", "url": "http://115.61.115.27:49429/i", "host": "115.61.115.27", "host_ip": "115.61.115.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 09:17:20 UTC", "discovered_at": "2026-10-10T09:17:20.000Z" }, { "id": 156722, "urlhaus_id": "3947423", "url": "http://105.225.69.120:46879/i", "host": "105.225.69.120", "host_ip": "105.225.69.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:17:07 UTC", "discovered_at": "2026-10-10T09:17:07.000Z" }, { "id": 156723, "urlhaus_id": "3947422", "url": "http://105.184.8.241:41871/bin.sh", "host": "105.184.8.241", "host_ip": "105.184.8.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 09:17:06 UTC", "discovered_at": "2026-10-10T09:17:06.000Z" }, { "id": 156724, "urlhaus_id": "3947421", "url": "http://115.59.228.174:52120/i", "host": "115.59.228.174", "host_ip": "115.59.228.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:47:06 UTC", "discovered_at": "2026-10-10T08:47:06.000Z" }, { "id": 156726, "urlhaus_id": "3947420", "url": "http://182.239.81.126:51391/i", "host": "182.239.81.126", "host_ip": "182.239.81.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:32:07 UTC", "discovered_at": "2026-10-10T08:32:07.000Z" }, { "id": 156725, "urlhaus_id": "3947419", "url": "http://182.130.230.248:55678/i", "host": "182.130.230.248", "host_ip": "182.130.230.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:32:07 UTC", "discovered_at": "2026-10-10T08:32:07.000Z" }, { "id": 156727, "urlhaus_id": "3947418", "url": "http://182.127.111.22:56903/i", "host": "182.127.111.22", "host_ip": "182.127.111.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:32:06 UTC", "discovered_at": "2026-10-10T08:32:06.000Z" }, { "id": 156728, "urlhaus_id": "3947417", "url": "http://61.53.140.159:52750/bin.sh", "host": "61.53.140.159", "host_ip": "61.53.140.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 08:20:19 UTC", "discovered_at": "2026-10-10T08:20:19.000Z" }, { "id": 156729, "urlhaus_id": "3947416", "url": "http://115.59.228.174:52120/bin.sh", "host": "115.59.228.174", "host_ip": "115.59.228.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:17:20 UTC", "discovered_at": "2026-10-10T08:17:20.000Z" }, { "id": 156732, "urlhaus_id": "3947415", "url": "http://113.53.69.165:38025/i", "host": "113.53.69.165", "host_ip": "113.53.69.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:17:06 UTC", "discovered_at": "2026-10-10T08:17:06.000Z" }, { "id": 156731, "urlhaus_id": "3947414", "url": "http://103.172.186.170:44812/i", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:17:06 UTC", "discovered_at": "2026-10-10T08:17:06.000Z" }, { "id": 156730, "urlhaus_id": "3947413", "url": "http://116.140.7.177:35911/i", "host": "116.140.7.177", "host_ip": "116.140.7.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:17:06 UTC", "discovered_at": "2026-10-10T08:17:06.000Z" }, { "id": 156733, "urlhaus_id": "3947412", "url": "http://193.93.228.160:56974/i", "host": "193.93.228.160", "host_ip": "193.93.228.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:17:05 UTC", "discovered_at": "2026-10-10T08:17:05.000Z" }, { "id": 156734, "urlhaus_id": "3947411", "url": "http://218.90.26.232:42522/bin.sh", "host": "218.90.26.232", "host_ip": "218.90.26.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 08:02:07 UTC", "discovered_at": "2026-10-10T08:02:07.000Z" }, { "id": 156735, "urlhaus_id": "3947410", "url": "http://105.225.86.235:47607/i", "host": "105.225.86.235", "host_ip": "105.225.86.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:47:07 UTC", "discovered_at": "2026-10-10T07:47:07.000Z" }, { "id": 156736, "urlhaus_id": "3947409", "url": "http://109.194.28.77:13422/i", "host": "109.194.28.77", "host_ip": "109.194.28.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:47:06 UTC", "discovered_at": "2026-10-10T07:47:06.000Z" }, { "id": 156737, "urlhaus_id": "3947408", "url": "http://27.37.225.158:33778/i", "host": "27.37.225.158", "host_ip": "27.37.225.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 07:38:11 UTC", "discovered_at": "2026-10-10T07:38:11.000Z" }, { "id": 156738, "urlhaus_id": "3947407", "url": "http://120.28.195.161:54301/i", "host": "120.28.195.161", "host_ip": "120.28.195.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:32:06 UTC", "discovered_at": "2026-10-10T07:32:06.000Z" }, { "id": 156740, "urlhaus_id": "3947406", "url": "http://116.138.107.83:57675/bin.sh", "host": "116.138.107.83", "host_ip": "116.138.107.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:16:06 UTC", "discovered_at": "2026-10-10T07:16:06.000Z" }, { "id": 156739, "urlhaus_id": "3947405", "url": "http://116.140.7.177:35911/bin.sh", "host": "116.140.7.177", "host_ip": "116.140.7.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:16:06 UTC", "discovered_at": "2026-10-10T07:16:06.000Z" }, { "id": 156741, "urlhaus_id": "3947404", "url": "https://situations-clarity-pill-preceding.trycloudflare.com/dl/thwin_ev.exe", "host": "situations-clarity-pill-preceding.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "golang, Loader, rat", "last_online": null, "first_seen": "2026-10-10 07:12:43 UTC", "discovered_at": "2026-10-10T07:12:43.000Z" }, { "id": 156742, "urlhaus_id": "3947403", "url": "http://36.49.52.140:36933/Mozi.m", "host": "36.49.52.140", "host_ip": "36.49.52.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-10 07:10:23 UTC", "discovered_at": "2026-10-10T07:10:23.000Z" }, { "id": 156743, "urlhaus_id": "3947402", "url": "http://217.60.195.187/st_x86_64", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-10 07:10:22 UTC", "discovered_at": "2026-10-10T07:10:22.000Z" }, { "id": 156744, "urlhaus_id": "3947401", "url": "https://cdn.discordapp.com/attachments/1558364083370074233/1558364277403033711/bundle_4.zip?ex=6acb2b54&is=6ac9d9d4&hm=ffd2c51dd209735f2a2ccc8de812c0c0f8854b2babe383cab988e03265f1272f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 07:10:19 UTC", "discovered_at": "2026-10-10T07:10:19.000Z" }, { "id": 156745, "urlhaus_id": "3947400", "url": "http://221.13.151.100:57991/i", "host": "221.13.151.100", "host_ip": "221.13.151.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 07:07:19 UTC", "discovered_at": "2026-10-10T07:07:19.000Z" }, { "id": 156746, "urlhaus_id": "3947399", "url": "http://222.137.77.98:37558/i", "host": "222.137.77.98", "host_ip": "222.137.77.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 07:02:08 UTC", "discovered_at": "2026-10-10T07:02:08.000Z" }, { "id": 156747, "urlhaus_id": "3947398", "url": "http://116.139.186.161:34929/i", "host": "116.139.186.161", "host_ip": "116.139.186.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 06:47:08 UTC", "discovered_at": "2026-10-10T06:47:08.000Z" }, { "id": 156748, "urlhaus_id": "3947397", "url": "http://119.114.134.132:51983/i", "host": "119.114.134.132", "host_ip": "119.114.134.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 06:47:06 UTC", "discovered_at": "2026-10-10T06:47:06.000Z" }, { "id": 156749, "urlhaus_id": "3947396", "url": "http://112.248.113.211:39187/bin.sh", "host": "112.248.113.211", "host_ip": "112.248.113.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 06:47:05 UTC", "discovered_at": "2026-10-10T06:47:05.000Z" }, { "id": 156750, "urlhaus_id": "3947395", "url": "http://42.224.249.51:47421/bin.sh", "host": "42.224.249.51", "host_ip": "42.224.249.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 06:46:20 UTC", "discovered_at": "2026-10-10T06:46:20.000Z" }, { "id": 156751, "urlhaus_id": "3947394", "url": "http://115.57.13.93:40740/i", "host": "115.57.13.93", "host_ip": "115.57.13.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 06:43:20 UTC", "discovered_at": "2026-10-10T06:43:20.000Z" }, { "id": 156752, "urlhaus_id": "3947393", "url": "http://115.50.70.95:60757/i", "host": "115.50.70.95", "host_ip": "115.50.70.95", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 06:35:21 UTC", "discovered_at": "2026-10-10T06:35:21.000Z" }, { "id": 156753, "urlhaus_id": "3947392", "url": "http://120.28.135.4:56775/i", "host": "120.28.135.4", "host_ip": "120.28.135.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 06:17:06 UTC", "discovered_at": "2026-10-10T06:17:06.000Z" }, { "id": 156754, "urlhaus_id": "3947391", "url": "http://60.19.240.170:45399/i", "host": "60.19.240.170", "host_ip": "60.19.240.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 06:15:18 UTC", "discovered_at": "2026-10-10T06:15:18.000Z" }, { "id": 156761, "urlhaus_id": "3947390", "url": "http://85.137.53.167:24380/bins/android/akuma_arm64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156760, "urlhaus_id": "3947389", "url": "http://85.137.53.167:24380/bins/android/akuma_mpsl", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156759, "urlhaus_id": "3947388", "url": "http://85.137.53.167:24380/bins/android/akuma_i486", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156758, "urlhaus_id": "3947387", "url": "http://85.137.53.167:24380/bins/android/akuma_arm6", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156757, "urlhaus_id": "3947386", "url": "http://85.137.53.167:24380/bins/android/akuma_i586", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156756, "urlhaus_id": "3947385", "url": "http://85.137.53.167:24380/bins/android/akuma_arm", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156755, "urlhaus_id": "3947384", "url": "http://85.137.53.167:24380/bins/android/akuma_arc", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:19 UTC", "discovered_at": "2026-10-10T06:08:19.000Z" }, { "id": 156768, "urlhaus_id": "3947383", "url": "http://85.137.53.167:24380/bins/android/akuma_i686", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156767, "urlhaus_id": "3947382", "url": "http://85.137.53.167:24380/bins/android/akuma_m68k", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156766, "urlhaus_id": "3947381", "url": "http://85.137.53.167:24380/bins/android/akuma_riscv32", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156765, "urlhaus_id": "3947380", "url": "http://85.137.53.167:24380/bins/android/akuma_sh4", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156764, "urlhaus_id": "3947379", "url": "http://85.137.53.167:24380/bins/android/akuma_ppc", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156763, "urlhaus_id": "3947378", "url": "http://85.137.53.167:24380/bins/android/akuma_x64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156762, "urlhaus_id": "3947377", "url": "http://85.137.53.167:24380/bins/android/akuma_arm7", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:18 UTC", "discovered_at": "2026-10-10T06:08:18.000Z" }, { "id": 156773, "urlhaus_id": "3947376", "url": "http://85.137.53.167:24380/bins/android/akuma_mips", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:14 UTC", "discovered_at": "2026-10-10T06:08:14.000Z" }, { "id": 156772, "urlhaus_id": "3947375", "url": "http://85.137.53.167:24380/bins/android/akuma_arm5", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:14 UTC", "discovered_at": "2026-10-10T06:08:14.000Z" }, { "id": 156771, "urlhaus_id": "3947374", "url": "http://85.137.53.167:24380/bins/android/akuma_mps64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:14 UTC", "discovered_at": "2026-10-10T06:08:14.000Z" }, { "id": 156770, "urlhaus_id": "3947373", "url": "http://85.137.53.167:24380/bins/android/akuma_spc", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:14 UTC", "discovered_at": "2026-10-10T06:08:14.000Z" }, { "id": 156769, "urlhaus_id": "3947372", "url": "http://85.137.53.167:24380/bins/android/akuma_riscv64", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 06:08:14 UTC", "discovered_at": "2026-10-10T06:08:14.000Z" }, { "id": 156774, "urlhaus_id": "3947371", "url": "https://videosnw-ru.vercel.app/?download=1", "host": "videosnw-ru.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-10 06:07:16 UTC", "discovered_at": "2026-10-10T06:07:16.000Z" }, { "id": 156776, "urlhaus_id": "3947370", "url": "https://gibddru.vercel.app/?download=1", "host": "gibddru.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-10 06:07:10 UTC", "discovered_at": "2026-10-10T06:07:10.000Z" }, { "id": 156775, "urlhaus_id": "3947369", "url": "https://dttjjkkllzbvesjzndtp.vercel.app/?download=1", "host": "dttjjkkllzbvesjzndtp.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-10 06:07:10 UTC", "discovered_at": "2026-10-10T06:07:10.000Z" }, { "id": 156777, "urlhaus_id": "3947368", "url": "http://42.239.168.4:36323/i", "host": "42.239.168.4", "host_ip": "42.239.168.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 06:02:12 UTC", "discovered_at": "2026-10-10T06:02:12.000Z" }, { "id": 156778, "urlhaus_id": "3947367", "url": "http://182.240.194.49:57733/bin.sh", "host": "182.240.194.49", "host_ip": "182.240.194.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 06:02:10 UTC", "discovered_at": "2026-10-10T06:02:10.000Z" }, { "id": 156779, "urlhaus_id": "3947366", "url": "http://113.221.76.194:49812/i", "host": "113.221.76.194", "host_ip": "113.221.76.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 06:00:18 UTC", "discovered_at": "2026-10-10T06:00:18.000Z" }, { "id": 156780, "urlhaus_id": "3947365", "url": "http://60.214.23.166:51568/bin.sh", "host": "60.214.23.166", "host_ip": "60.214.23.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 05:58:18 UTC", "discovered_at": "2026-10-10T05:58:18.000Z" }, { "id": 156781, "urlhaus_id": "3947364", "url": "https://035bc-ff4b-4cab-bca6-2b633b15def0.gorsefield.cc/install.ps1", "host": "035bc-ff4b-4cab-bca6-2b633b15def0.gorsefield.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-10 05:52:06 UTC", "discovered_at": "2026-10-10T05:52:06.000Z" }, { "id": 156782, "urlhaus_id": "3947363", "url": "http://45.198.224.34/0uparm", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-10 05:49:33 UTC", "discovered_at": "2026-10-10T05:49:33.000Z" }, { "id": 156783, "urlhaus_id": "3947362", "url": "http://45.198.224.34/0uparm5", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-10 05:49:27 UTC", "discovered_at": "2026-10-10T05:49:27.000Z" }, { "id": 156787, "urlhaus_id": "3947361", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-loong64", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:22 UTC", "discovered_at": "2026-10-10T05:49:22.000Z" }, { "id": 156786, "urlhaus_id": "3947360", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-mips", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:22 UTC", "discovered_at": "2026-10-10T05:49:22.000Z" }, { "id": 156785, "urlhaus_id": "3947359", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-riscv64", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:22 UTC", "discovered_at": "2026-10-10T05:49:22.000Z" }, { "id": 156784, "urlhaus_id": "3947358", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-mipsle", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:22 UTC", "discovered_at": "2026-10-10T05:49:22.000Z" }, { "id": 156790, "urlhaus_id": "3947357", "url": "http://201.159.91.2:41978/bin.sh", "host": "201.159.91.2", "host_ip": "201.159.91.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-10 05:49:21 UTC", "discovered_at": "2026-10-10T05:49:21.000Z" }, { "id": 156789, "urlhaus_id": "3947356", "url": "http://61.52.92.74:36216/bin.sh", "host": "61.52.92.74", "host_ip": "61.52.92.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 05:49:21 UTC", "discovered_at": "2026-10-10T05:49:21.000Z" }, { "id": 156788, "urlhaus_id": "3947355", "url": "http://191.44.114.74:889/rainii686", "host": "191.44.114.74", "host_ip": "191.44.114.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-10 05:49:21 UTC", "discovered_at": "2026-10-10T05:49:21.000Z" }, { "id": 156791, "urlhaus_id": "3947354", "url": "https://brows-check.codes/api.php", "host": "brows-check.codes", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, EtherHiding, FakeCaptcha, js, Polygon, proliv2929, WordPress", "last_online": null, "first_seen": "2026-10-10 05:49:20 UTC", "discovered_at": "2026-10-10T05:49:20.000Z" }, { "id": 156793, "urlhaus_id": "3947353", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-mips64", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:16 UTC", "discovered_at": "2026-10-10T05:49:16.000Z" }, { "id": 156792, "urlhaus_id": "3947352", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-mips64le", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:16 UTC", "discovered_at": "2026-10-10T05:49:16.000Z" }, { "id": 156794, "urlhaus_id": "3947351", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-ppc64le", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-10 05:49:12 UTC", "discovered_at": "2026-10-10T05:49:12.000Z" }, { "id": 156795, "urlhaus_id": "3947350", "url": "https://OSMB.net/OSMB.jar", "host": "OSMB.net", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, monero, runelure, xmrig", "last_online": null, "first_seen": "2026-10-10 05:49:06 UTC", "discovered_at": "2026-10-10T05:49:06.000Z" }, { "id": 156796, "urlhaus_id": "3947349", "url": "http://176.65.139.169/dl.sh", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 05:49:04 UTC", "discovered_at": "2026-10-10T05:49:04.000Z" }, { "id": 156797, "urlhaus_id": "3947348", "url": "https://www.dropbox.com/scl/fi/vchxh1gexd1y52wjpyqtk/RacingSimulator.zip?rlkey=8bveooct7irzfn71nlpcthfxk&st=xnvu11qh&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "bytenode, discord, Electron, fake-game, HADES, rat, stealer", "last_online": null, "first_seen": "2026-10-10 05:48:31 UTC", "discovered_at": "2026-10-10T05:48:31.000Z" }, { "id": 156798, "urlhaus_id": "3947347", "url": "https://cdn.discordapp.com/attachments/1554373007819014229/1558219073161138186/bundle1.zip?ex=6acaa419&is=6ac95299&hm=fa6648fcec9a979c9d2264ff4bc3876e20722df68a2bcc323ae3486cbeff6f06&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 05:48:19 UTC", "discovered_at": "2026-10-10T05:48:19.000Z" }, { "id": 156800, "urlhaus_id": "3947346", "url": "https://cdn.discordapp.com/attachments/1558076945571512441/1558250513563127869/bundle.zip?ex=6acac161&is=6ac96fe1&hm=79b498e5eacc3b365af817340bee9189c40cc8f81e9918bef84d8302872abc83&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 05:48:17 UTC", "discovered_at": "2026-10-10T05:48:17.000Z" }, { "id": 156799, "urlhaus_id": "3947345", "url": "https://cdn.discordapp.com/attachments/1557133169877192734/1558228090285465730/bundle.zip?ex=6acaac7f&is=6ac95aff&hm=bb44fe8c4acac88ab665d8bc71152b3f45f31e3400264e1c65564af8e85f7d50&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-10 05:48:17 UTC", "discovered_at": "2026-10-10T05:48:17.000Z" }, { "id": 156801, "urlhaus_id": "3947344", "url": "http://45.198.224.34/0upm68k", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:45 UTC", "discovered_at": "2026-10-10T05:47:45.000Z" }, { "id": 156802, "urlhaus_id": "3947343", "url": "http://45.198.224.34/0upmpsl", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:44 UTC", "discovered_at": "2026-10-10T05:47:44.000Z" }, { "id": 156803, "urlhaus_id": "3947342", "url": "http://45.198.224.34/0upx64", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:42 UTC", "discovered_at": "2026-10-10T05:47:42.000Z" }, { "id": 156804, "urlhaus_id": "3947341", "url": "http://45.198.224.34/0upmips", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:40 UTC", "discovered_at": "2026-10-10T05:47:40.000Z" }, { "id": 156805, "urlhaus_id": "3947340", "url": "http://45.198.224.34/0uparm7", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:37 UTC", "discovered_at": "2026-10-10T05:47:37.000Z" }, { "id": 156806, "urlhaus_id": "3947339", "url": "http://45.198.224.34/0uparm6", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:33 UTC", "discovered_at": "2026-10-10T05:47:33.000Z" }, { "id": 156807, "urlhaus_id": "3947338", "url": "http://45.198.224.34/0upsh4", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:32 UTC", "discovered_at": "2026-10-10T05:47:32.000Z" }, { "id": 156808, "urlhaus_id": "3947337", "url": "http://45.198.224.34/0upppc", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:31 UTC", "discovered_at": "2026-10-10T05:47:31.000Z" }, { "id": 156809, "urlhaus_id": "3947336", "url": "http://100.121.51.8:18888/miner_setup.sh", "host": "100.121.51.8", "host_ip": "100.121.51.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-10 05:47:29 UTC", "discovered_at": "2026-10-10T05:47:29.000Z" }, { "id": 156811, "urlhaus_id": "3947335", "url": "http://45.198.224.34/0upspc", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:28 UTC", "discovered_at": "2026-10-10T05:47:28.000Z" }, { "id": 156810, "urlhaus_id": "3947334", "url": "http://45.198.224.34/0upx86", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:28 UTC", "discovered_at": "2026-10-10T05:47:28.000Z" }, { "id": 156812, "urlhaus_id": "3947333", "url": "https://pole-mother-visiting-trinity.trycloudflare.com/svc/u.sh?h=dexec", "host": "pole-mother-visiting-trinity.trycloudflare.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-10 05:47:23 UTC", "discovered_at": "2026-10-10T05:47:23.000Z" }, { "id": 156813, "urlhaus_id": "3947332", "url": "http://176.65.139.217/bins/sora.sparc", "host": "176.65.139.217", "host_ip": "176.65.139.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:18 UTC", "discovered_at": "2026-10-10T05:47:18.000Z" }, { "id": 156814, "urlhaus_id": "3947331", "url": "http://176.65.139.217/bins/sora.x86_64", "host": "176.65.139.217", "host_ip": "176.65.139.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:15 UTC", "discovered_at": "2026-10-10T05:47:15.000Z" }, { "id": 156815, "urlhaus_id": "3947330", "url": "http://176.65.139.217/bins/sora.arc", "host": "176.65.139.217", "host_ip": "176.65.139.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:14 UTC", "discovered_at": "2026-10-10T05:47:14.000Z" }, { "id": 156818, "urlhaus_id": "3947329", "url": "http://85.137.53.167:24380/bins/payloads/c.sh", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "adb, sh", "last_online": null, "first_seen": "2026-10-10 05:47:11 UTC", "discovered_at": "2026-10-10T05:47:11.000Z" }, { "id": 156817, "urlhaus_id": "3947328", "url": "http://85.137.53.167:24380/bins/payloads/w.sh", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "adb, sh", "last_online": null, "first_seen": "2026-10-10 05:47:11 UTC", "discovered_at": "2026-10-10T05:47:11.000Z" }, { "id": 156816, "urlhaus_id": "3947327", "url": "https://campus-engine-neural-chorus.trycloudflare.com/svc/u.sh?h=docker", "host": "campus-engine-neural-chorus.trycloudflare.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-10 05:47:11 UTC", "discovered_at": "2026-10-10T05:47:11.000Z" }, { "id": 156820, "urlhaus_id": "3947326", "url": "http://176.65.139.217/bins/sora.i586", "host": "176.65.139.217", "host_ip": "176.65.139.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:10 UTC", "discovered_at": "2026-10-10T05:47:10.000Z" }, { "id": 156819, "urlhaus_id": "3947325", "url": "http://176.65.139.217/bins/sora.mips64", "host": "176.65.139.217", "host_ip": "176.65.139.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 05:47:10 UTC", "discovered_at": "2026-10-10T05:47:10.000Z" }, { "id": 156821, "urlhaus_id": "3947324", "url": "http://27.193.50.197:42610/i", "host": "27.193.50.197", "host_ip": "27.193.50.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 05:47:08 UTC", "discovered_at": "2026-10-10T05:47:08.000Z" }, { "id": 156822, "urlhaus_id": "3947323", "url": "http://112.198.193.5:43648/bin.sh", "host": "112.198.193.5", "host_ip": "112.198.193.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 05:42:17 UTC", "discovered_at": "2026-10-10T05:42:17.000Z" }, { "id": 156823, "urlhaus_id": "3947322", "url": "http://220.202.91.248:55001/i", "host": "220.202.91.248", "host_ip": "220.202.91.248", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 05:24:12 UTC", "discovered_at": "2026-10-10T05:24:12.000Z" }, { "id": 156824, "urlhaus_id": "3947321", "url": "http://116.10.133.42:48435/i", "host": "116.10.133.42", "host_ip": "116.10.133.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 05:02:18 UTC", "discovered_at": "2026-10-10T05:02:18.000Z" }, { "id": 156825, "urlhaus_id": "3947320", "url": "http://79.40.75.47:38286/i", "host": "79.40.75.47", "host_ip": "79.40.75.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 04:55:29 UTC", "discovered_at": "2026-10-10T04:55:29.000Z" }, { "id": 156826, "urlhaus_id": "3947319", "url": "http://220.202.91.248:55001/bin.sh", "host": "220.202.91.248", "host_ip": "220.202.91.248", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 04:55:17 UTC", "discovered_at": "2026-10-10T04:55:17.000Z" }, { "id": 156827, "urlhaus_id": "3947318", "url": "http://42.57.42.2:38792/i", "host": "42.57.42.2", "host_ip": "42.57.42.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 04:51:18 UTC", "discovered_at": "2026-10-10T04:51:18.000Z" }, { "id": 156828, "urlhaus_id": "3947317", "url": "http://219.155.237.46:34022/i", "host": "219.155.237.46", "host_ip": "219.155.237.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:47:09 UTC", "discovered_at": "2026-10-10T04:47:09.000Z" }, { "id": 156829, "urlhaus_id": "3947316", "url": "http://115.199.56.198:50001/i", "host": "115.199.56.198", "host_ip": "115.199.56.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:47:06 UTC", "discovered_at": "2026-10-10T04:47:06.000Z" }, { "id": 156830, "urlhaus_id": "3947315", "url": "http://117.91.113.150:43659/bin.sh", "host": "117.91.113.150", "host_ip": "117.91.113.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 04:45:12 UTC", "discovered_at": "2026-10-10T04:45:12.000Z" }, { "id": 156831, "urlhaus_id": "3947314", "url": "http://221.14.14.72:58520/i", "host": "221.14.14.72", "host_ip": "221.14.14.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:32:08 UTC", "discovered_at": "2026-10-10T04:32:08.000Z" }, { "id": 156833, "urlhaus_id": "3947313", "url": "http://42.239.190.35:40056/i", "host": "42.239.190.35", "host_ip": "42.239.190.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:32:07 UTC", "discovered_at": "2026-10-10T04:32:07.000Z" }, { "id": 156832, "urlhaus_id": "3947312", "url": "http://42.239.190.35:40056/bin.sh", "host": "42.239.190.35", "host_ip": "42.239.190.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:32:07 UTC", "discovered_at": "2026-10-10T04:32:07.000Z" }, { "id": 156834, "urlhaus_id": "3947311", "url": "http://222.137.158.220:48972/bin.sh", "host": "222.137.158.220", "host_ip": "222.137.158.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:32:06 UTC", "discovered_at": "2026-10-10T04:32:06.000Z" }, { "id": 156835, "urlhaus_id": "3947310", "url": "http://42.57.42.2:38792/bin.sh", "host": "42.57.42.2", "host_ip": "42.57.42.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 04:28:11 UTC", "discovered_at": "2026-10-10T04:28:11.000Z" }, { "id": 156836, "urlhaus_id": "3947309", "url": "http://115.61.1.172:37327/i", "host": "115.61.1.172", "host_ip": "115.61.1.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:20 UTC", "discovered_at": "2026-10-10T04:17:20.000Z" }, { "id": 156837, "urlhaus_id": "3947308", "url": "http://115.199.56.198:50001/bin.sh", "host": "115.199.56.198", "host_ip": "115.199.56.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:08 UTC", "discovered_at": "2026-10-10T04:17:08.000Z" }, { "id": 156840, "urlhaus_id": "3947307", "url": "http://115.62.177.126:54495/i", "host": "115.62.177.126", "host_ip": "115.62.177.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:07 UTC", "discovered_at": "2026-10-10T04:17:07.000Z" }, { "id": 156839, "urlhaus_id": "3947306", "url": "http://182.127.70.192:40331/i", "host": "182.127.70.192", "host_ip": "182.127.70.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:07 UTC", "discovered_at": "2026-10-10T04:17:07.000Z" }, { "id": 156838, "urlhaus_id": "3947305", "url": "http://103.192.204.30:35919/i", "host": "103.192.204.30", "host_ip": "103.192.204.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:07 UTC", "discovered_at": "2026-10-10T04:17:07.000Z" }, { "id": 156842, "urlhaus_id": "3947304", "url": "http://119.118.39.79:41691/i", "host": "119.118.39.79", "host_ip": "119.118.39.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:06 UTC", "discovered_at": "2026-10-10T04:17:06.000Z" }, { "id": 156841, "urlhaus_id": "3947303", "url": "http://119.118.39.79:41691/bin.sh", "host": "119.118.39.79", "host_ip": "119.118.39.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:17:06 UTC", "discovered_at": "2026-10-10T04:17:06.000Z" }, { "id": 156843, "urlhaus_id": "3947302", "url": "http://112.239.20.46:34724/i", "host": "112.239.20.46", "host_ip": "112.239.20.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 04:02:04 UTC", "discovered_at": "2026-10-10T04:02:04.000Z" }, { "id": 156844, "urlhaus_id": "3947301", "url": "http://42.228.41.178:36712/bin.sh", "host": "42.228.41.178", "host_ip": "42.228.41.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 04:00:14 UTC", "discovered_at": "2026-10-10T04:00:14.000Z" }, { "id": 156845, "urlhaus_id": "3947300", "url": "http://42.52.192.164:49983/i", "host": "42.52.192.164", "host_ip": "42.52.192.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:54:11 UTC", "discovered_at": "2026-10-10T03:54:11.000Z" }, { "id": 156846, "urlhaus_id": "3947299", "url": "http://175.150.255.147:45190/i", "host": "175.150.255.147", "host_ip": "175.150.255.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:51:20 UTC", "discovered_at": "2026-10-10T03:51:20.000Z" }, { "id": 156847, "urlhaus_id": "3947298", "url": "http://182.246.159.52:51415/i", "host": "182.246.159.52", "host_ip": "182.246.159.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:26 UTC", "discovered_at": "2026-10-10T03:47:26.000Z" }, { "id": 156848, "urlhaus_id": "3947297", "url": "http://103.192.204.30:35919/bin.sh", "host": "103.192.204.30", "host_ip": "103.192.204.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:08 UTC", "discovered_at": "2026-10-10T03:47:08.000Z" }, { "id": 156850, "urlhaus_id": "3947296", "url": "http://115.62.177.67:57569/i", "host": "115.62.177.67", "host_ip": "115.62.177.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:07 UTC", "discovered_at": "2026-10-10T03:47:07.000Z" }, { "id": 156849, "urlhaus_id": "3947295", "url": "http://115.63.14.230:44232/i", "host": "115.63.14.230", "host_ip": "115.63.14.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:07 UTC", "discovered_at": "2026-10-10T03:47:07.000Z" }, { "id": 156852, "urlhaus_id": "3947294", "url": "http://196.189.98.77:41820/i", "host": "196.189.98.77", "host_ip": "196.189.98.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:06 UTC", "discovered_at": "2026-10-10T03:47:06.000Z" }, { "id": 156851, "urlhaus_id": "3947293", "url": "http://196.189.68.239:57746/i", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:47:06 UTC", "discovered_at": "2026-10-10T03:47:06.000Z" }, { "id": 156854, "urlhaus_id": "3947292", "url": "http://116.209.183.7:51681/i", "host": "116.209.183.7", "host_ip": "116.209.183.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:32:07 UTC", "discovered_at": "2026-10-10T03:32:07.000Z" }, { "id": 156853, "urlhaus_id": "3947291", "url": "http://42.227.44.40:34648/i", "host": "42.227.44.40", "host_ip": "42.227.44.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:32:07 UTC", "discovered_at": "2026-10-10T03:32:07.000Z" }, { "id": 156856, "urlhaus_id": "3947290", "url": "http://39.90.146.150:35293/bin.sh", "host": "39.90.146.150", "host_ip": "39.90.146.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:32:06 UTC", "discovered_at": "2026-10-10T03:32:06.000Z" }, { "id": 156855, "urlhaus_id": "3947289", "url": "http://222.137.190.185:54184/bin.sh", "host": "222.137.190.185", "host_ip": "222.137.190.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:32:06 UTC", "discovered_at": "2026-10-10T03:32:06.000Z" }, { "id": 156857, "urlhaus_id": "3947288", "url": "http://42.52.192.164:49983/bin.sh", "host": "42.52.192.164", "host_ip": "42.52.192.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:30:10 UTC", "discovered_at": "2026-10-10T03:30:10.000Z" }, { "id": 156858, "urlhaus_id": "3947287", "url": "http://112.239.20.46:34724/bin.sh", "host": "112.239.20.46", "host_ip": "112.239.20.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:28:39 UTC", "discovered_at": "2026-10-10T03:28:39.000Z" }, { "id": 156859, "urlhaus_id": "3947286", "url": "http://176.65.139.169/arm6", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:19:07 UTC", "discovered_at": "2026-10-10T03:19:07.000Z" }, { "id": 156865, "urlhaus_id": "3947285", "url": "http://176.65.139.169/arm7", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156864, "urlhaus_id": "3947284", "url": "http://176.65.139.169/m68k", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156863, "urlhaus_id": "3947283", "url": "http://176.65.139.169/arm5", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156862, "urlhaus_id": "3947282", "url": "http://176.65.139.169/mips", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156861, "urlhaus_id": "3947281", "url": "http://176.65.139.169/ppc", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156860, "urlhaus_id": "3947280", "url": "http://176.65.139.169/arm", "host": "176.65.139.169", "host_ip": "176.65.139.169", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-10 03:18:10 UTC", "discovered_at": "2026-10-10T03:18:10.000Z" }, { "id": 156866, "urlhaus_id": "3947279", "url": "http://221.203.206.182:43811/bin.sh", "host": "221.203.206.182", "host_ip": "221.203.206.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:06:21 UTC", "discovered_at": "2026-10-10T03:06:21.000Z" }, { "id": 156867, "urlhaus_id": "3947278", "url": "http://59.180.132.206:45595/bin.sh", "host": "59.180.132.206", "host_ip": "59.180.132.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:02:27 UTC", "discovered_at": "2026-10-10T03:02:27.000Z" }, { "id": 156868, "urlhaus_id": "3947277", "url": "http://117.85.190.91:53554/i", "host": "117.85.190.91", "host_ip": "117.85.190.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 03:02:21 UTC", "discovered_at": "2026-10-10T03:02:21.000Z" }, { "id": 156869, "urlhaus_id": "3947276", "url": "http://222.139.77.4:45368/i", "host": "222.139.77.4", "host_ip": "222.139.77.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 03:02:12 UTC", "discovered_at": "2026-10-10T03:02:12.000Z" }, { "id": 156870, "urlhaus_id": "3947275", "url": "http://101.108.150.73:41727/i", "host": "101.108.150.73", "host_ip": "101.108.150.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:47:08 UTC", "discovered_at": "2026-10-10T02:47:08.000Z" }, { "id": 156872, "urlhaus_id": "3947274", "url": "http://59.97.250.78:53956/i", "host": "59.97.250.78", "host_ip": "59.97.250.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:47:07 UTC", "discovered_at": "2026-10-10T02:47:07.000Z" }, { "id": 156871, "urlhaus_id": "3947273", "url": "http://39.90.146.150:35293/i", "host": "39.90.146.150", "host_ip": "39.90.146.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:47:07 UTC", "discovered_at": "2026-10-10T02:47:07.000Z" }, { "id": 156874, "urlhaus_id": "3947272", "url": "http://60.23.238.187:38638/i", "host": "60.23.238.187", "host_ip": "60.23.238.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:32:06 UTC", "discovered_at": "2026-10-10T02:32:06.000Z" }, { "id": 156873, "urlhaus_id": "3947271", "url": "http://59.97.250.78:53956/bin.sh", "host": "59.97.250.78", "host_ip": "59.97.250.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:32:06 UTC", "discovered_at": "2026-10-10T02:32:06.000Z" }, { "id": 156875, "urlhaus_id": "3947270", "url": "http://96.246.230.97:34605/bin.sh", "host": "96.246.230.97", "host_ip": "96.246.230.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:32:05 UTC", "discovered_at": "2026-10-10T02:32:05.000Z" }, { "id": 156876, "urlhaus_id": "3947269", "url": "http://27.220.245.104:46634/bin.sh", "host": "27.220.245.104", "host_ip": "27.220.245.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 02:31:21 UTC", "discovered_at": "2026-10-10T02:31:21.000Z" }, { "id": 156877, "urlhaus_id": "3947268", "url": "http://118.250.1.203:55215/i", "host": "118.250.1.203", "host_ip": "118.250.1.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 02:27:06 UTC", "discovered_at": "2026-10-10T02:27:06.000Z" }, { "id": 156878, "urlhaus_id": "3947267", "url": "http://115.57.84.137:46458/i", "host": "115.57.84.137", "host_ip": "115.57.84.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 02:25:08 UTC", "discovered_at": "2026-10-10T02:25:08.000Z" }, { "id": 156879, "urlhaus_id": "3947266", "url": "http://115.55.223.246:57050/bin.sh", "host": "115.55.223.246", "host_ip": "115.55.223.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 02:22:18 UTC", "discovered_at": "2026-10-10T02:22:18.000Z" }, { "id": 156880, "urlhaus_id": "3947265", "url": "http://113.230.55.249:33904/i", "host": "113.230.55.249", "host_ip": "113.230.55.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:17:06 UTC", "discovered_at": "2026-10-10T02:17:06.000Z" }, { "id": 156882, "urlhaus_id": "3947264", "url": "http://77.79.160.210:59889/bin.sh", "host": "77.79.160.210", "host_ip": "77.79.160.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:17:05 UTC", "discovered_at": "2026-10-10T02:17:05.000Z" }, { "id": 156881, "urlhaus_id": "3947263", "url": "http://91.190.84.93:15661/i", "host": "91.190.84.93", "host_ip": "91.190.84.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:17:05 UTC", "discovered_at": "2026-10-10T02:17:05.000Z" }, { "id": 156883, "urlhaus_id": "3947262", "url": "http://120.28.135.254:60043/i", "host": "120.28.135.254", "host_ip": "120.28.135.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 02:15:18 UTC", "discovered_at": "2026-10-10T02:15:18.000Z" }, { "id": 156884, "urlhaus_id": "3947261", "url": "http://119.115.163.180:47375/i", "host": "119.115.163.180", "host_ip": "119.115.163.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 02:02:06 UTC", "discovered_at": "2026-10-10T02:02:06.000Z" }, { "id": 156885, "urlhaus_id": "3947260", "url": "http://118.250.1.203:55215/bin.sh", "host": "118.250.1.203", "host_ip": "118.250.1.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 01:49:17 UTC", "discovered_at": "2026-10-10T01:49:17.000Z" }, { "id": 156886, "urlhaus_id": "3947259", "url": "http://61.166.61.44:39284/i", "host": "61.166.61.44", "host_ip": "61.166.61.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:47:09 UTC", "discovered_at": "2026-10-10T01:47:09.000Z" }, { "id": 156887, "urlhaus_id": "3947258", "url": "http://119.179.238.153:48300/i", "host": "119.179.238.153", "host_ip": "119.179.238.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:47:08 UTC", "discovered_at": "2026-10-10T01:47:08.000Z" }, { "id": 156889, "urlhaus_id": "3947257", "url": "http://42.235.51.97:59226/i", "host": "42.235.51.97", "host_ip": "42.235.51.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:47:07 UTC", "discovered_at": "2026-10-10T01:47:07.000Z" }, { "id": 156888, "urlhaus_id": "3947256", "url": "http://119.102.60.44:43236/i", "host": "119.102.60.44", "host_ip": "119.102.60.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:47:07 UTC", "discovered_at": "2026-10-10T01:47:07.000Z" }, { "id": 156890, "urlhaus_id": "3947255", "url": "http://91.190.84.93:15661/bin.sh", "host": "91.190.84.93", "host_ip": "91.190.84.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:47:05 UTC", "discovered_at": "2026-10-10T01:47:05.000Z" }, { "id": 156891, "urlhaus_id": "3947254", "url": "http://113.230.55.249:33904/bin.sh", "host": "113.230.55.249", "host_ip": "113.230.55.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 01:41:23 UTC", "discovered_at": "2026-10-10T01:41:23.000Z" }, { "id": 156894, "urlhaus_id": "3947253", "url": "http://42.239.190.225:55041/bin.sh", "host": "42.239.190.225", "host_ip": "42.239.190.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:32:07 UTC", "discovered_at": "2026-10-10T01:32:07.000Z" }, { "id": 156893, "urlhaus_id": "3947252", "url": "http://42.232.238.114:40830/bin.sh", "host": "42.232.238.114", "host_ip": "42.232.238.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:32:07 UTC", "discovered_at": "2026-10-10T01:32:07.000Z" }, { "id": 156892, "urlhaus_id": "3947251", "url": "http://61.137.202.254:56346/i", "host": "61.137.202.254", "host_ip": "61.137.202.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:32:07 UTC", "discovered_at": "2026-10-10T01:32:07.000Z" }, { "id": 156895, "urlhaus_id": "3947250", "url": "http://115.57.84.137:46458/bin.sh", "host": "115.57.84.137", "host_ip": "115.57.84.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 01:30:14 UTC", "discovered_at": "2026-10-10T01:30:14.000Z" }, { "id": 156896, "urlhaus_id": "3947249", "url": "http://120.28.161.60:60477/i", "host": "120.28.161.60", "host_ip": "120.28.161.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 01:22:17 UTC", "discovered_at": "2026-10-10T01:22:17.000Z" }, { "id": 156897, "urlhaus_id": "3947248", "url": "http://124.161.116.2:54835/i", "host": "124.161.116.2", "host_ip": "124.161.116.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:17:07 UTC", "discovered_at": "2026-10-10T01:17:07.000Z" }, { "id": 156898, "urlhaus_id": "3947247", "url": "http://123.14.36.48:37791/bin.sh", "host": "123.14.36.48", "host_ip": "123.14.36.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:17:06 UTC", "discovered_at": "2026-10-10T01:17:06.000Z" }, { "id": 156900, "urlhaus_id": "3947246", "url": "http://39.90.186.84:35345/bin.sh", "host": "39.90.186.84", "host_ip": "39.90.186.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 01:04:15 UTC", "discovered_at": "2026-10-10T01:04:15.000Z" }, { "id": 156899, "urlhaus_id": "3947245", "url": "http://120.28.161.60:60477/bin.sh", "host": "120.28.161.60", "host_ip": "120.28.161.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 01:04:15 UTC", "discovered_at": "2026-10-10T01:04:15.000Z" }, { "id": 156901, "urlhaus_id": "3947244", "url": "http://180.190.243.27:50849/bin.sh", "host": "180.190.243.27", "host_ip": "180.190.243.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 01:03:10 UTC", "discovered_at": "2026-10-10T01:03:10.000Z" }, { "id": 156902, "urlhaus_id": "3947243", "url": "http://222.127.71.141:36118/i", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:02:08 UTC", "discovered_at": "2026-10-10T01:02:08.000Z" }, { "id": 156903, "urlhaus_id": "3947242", "url": "http://103.172.186.195:59461/i", "host": "103.172.186.195", "host_ip": "103.172.186.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 01:02:06 UTC", "discovered_at": "2026-10-10T01:02:06.000Z" }, { "id": 156904, "urlhaus_id": "3947241", "url": "http://182.240.194.49:57733/i", "host": "182.240.194.49", "host_ip": "182.240.194.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-10 00:56:37 UTC", "discovered_at": "2026-10-10T00:56:37.000Z" }, { "id": 156908, "urlhaus_id": "3947240", "url": "http://60.22.51.222:45629/bin.sh", "host": "60.22.51.222", "host_ip": "60.22.51.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:07 UTC", "discovered_at": "2026-10-10T00:47:07.000Z" }, { "id": 156907, "urlhaus_id": "3947239", "url": "http://119.185.242.157:58261/i", "host": "119.185.242.157", "host_ip": "119.185.242.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:07 UTC", "discovered_at": "2026-10-10T00:47:07.000Z" }, { "id": 156906, "urlhaus_id": "3947238", "url": "http://114.227.61.86:35118/i", "host": "114.227.61.86", "host_ip": "114.227.61.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:07 UTC", "discovered_at": "2026-10-10T00:47:07.000Z" }, { "id": 156905, "urlhaus_id": "3947237", "url": "http://45.5.88.205:51385/i", "host": "45.5.88.205", "host_ip": "45.5.88.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:07 UTC", "discovered_at": "2026-10-10T00:47:07.000Z" }, { "id": 156912, "urlhaus_id": "3947236", "url": "http://45.183.184.74:38533/i", "host": "45.183.184.74", "host_ip": "45.183.184.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:06 UTC", "discovered_at": "2026-10-10T00:47:06.000Z" }, { "id": 156911, "urlhaus_id": "3947235", "url": "http://61.137.202.254:56346/bin.sh", "host": "61.137.202.254", "host_ip": "61.137.202.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:06 UTC", "discovered_at": "2026-10-10T00:47:06.000Z" }, { "id": 156910, "urlhaus_id": "3947234", "url": "http://42.235.92.119:41092/i", "host": "42.235.92.119", "host_ip": "42.235.92.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:06 UTC", "discovered_at": "2026-10-10T00:47:06.000Z" }, { "id": 156909, "urlhaus_id": "3947233", "url": "http://119.185.242.157:58261/bin.sh", "host": "119.185.242.157", "host_ip": "119.185.242.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:47:06 UTC", "discovered_at": "2026-10-10T00:47:06.000Z" }, { "id": 156913, "urlhaus_id": "3947232", "url": "http://39.40.186.7:54127/i", "host": "39.40.186.7", "host_ip": "39.40.186.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 00:44:33 UTC", "discovered_at": "2026-10-10T00:44:33.000Z" }, { "id": 156916, "urlhaus_id": "3947231", "url": "http://27.36.243.82:43173/i", "host": "27.36.243.82", "host_ip": "27.36.243.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:09 UTC", "discovered_at": "2026-10-10T00:32:09.000Z" }, { "id": 156915, "urlhaus_id": "3947230", "url": "http://222.137.85.203:48268/i", "host": "222.137.85.203", "host_ip": "222.137.85.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:09 UTC", "discovered_at": "2026-10-10T00:32:09.000Z" }, { "id": 156914, "urlhaus_id": "3947229", "url": "http://114.227.61.86:35118/bin.sh", "host": "114.227.61.86", "host_ip": "114.227.61.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:09 UTC", "discovered_at": "2026-10-10T00:32:09.000Z" }, { "id": 156925, "urlhaus_id": "3947228", "url": "http://27.207.13.6:39729/bin.sh", "host": "27.207.13.6", "host_ip": "27.207.13.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156924, "urlhaus_id": "3947227", "url": "http://27.207.13.6:39729/i", "host": "27.207.13.6", "host_ip": "27.207.13.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156923, "urlhaus_id": "3947226", "url": "http://120.86.145.22:55411/bin.sh", "host": "120.86.145.22", "host_ip": "120.86.145.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156922, "urlhaus_id": "3947225", "url": "http://120.28.199.24:34811/i", "host": "120.28.199.24", "host_ip": "120.28.199.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156921, "urlhaus_id": "3947224", "url": "http://42.5.16.160:56683/i", "host": "42.5.16.160", "host_ip": "42.5.16.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156920, "urlhaus_id": "3947223", "url": "http://42.235.86.173:33127/i", "host": "42.235.86.173", "host_ip": "42.235.86.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156919, "urlhaus_id": "3947222", "url": "http://120.28.194.92:57851/i", "host": "120.28.194.92", "host_ip": "120.28.194.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156918, "urlhaus_id": "3947221", "url": "http://27.207.38.255:52856/bin.sh", "host": "27.207.38.255", "host_ip": "27.207.38.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156917, "urlhaus_id": "3947220", "url": "http://42.52.233.42:57947/i", "host": "42.52.233.42", "host_ip": "42.52.233.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:32:08 UTC", "discovered_at": "2026-10-10T00:32:08.000Z" }, { "id": 156926, "urlhaus_id": "3947219", "url": "http://27.215.176.193:56630/bin.sh", "host": "27.215.176.193", "host_ip": "27.215.176.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-10 00:28:19 UTC", "discovered_at": "2026-10-10T00:28:19.000Z" }, { "id": 156927, "urlhaus_id": "3947218", "url": "http://42.227.134.163:38324/i", "host": "42.227.134.163", "host_ip": "42.227.134.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:17:11 UTC", "discovered_at": "2026-10-10T00:17:11.000Z" }, { "id": 156928, "urlhaus_id": "3947217", "url": "http://27.42.200.61:39167/i", "host": "27.42.200.61", "host_ip": "27.42.200.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:17:08 UTC", "discovered_at": "2026-10-10T00:17:08.000Z" }, { "id": 156929, "urlhaus_id": "3947216", "url": "http://160.176.254.189:58858/bin.sh", "host": "160.176.254.189", "host_ip": "160.176.254.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:02:07 UTC", "discovered_at": "2026-10-10T00:02:07.000Z" }, { "id": 156930, "urlhaus_id": "3947215", "url": "http://178.141.147.7:33119/i", "host": "178.141.147.7", "host_ip": "178.141.147.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-10 00:02:06 UTC", "discovered_at": "2026-10-10T00:02:06.000Z" }, { "id": 156931, "urlhaus_id": "3947214", "url": "http://59.180.155.243:41296/i", "host": "59.180.155.243", "host_ip": "59.180.155.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:47:25 UTC", "discovered_at": "2026-10-09T23:47:25.000Z" }, { "id": 156932, "urlhaus_id": "3947213", "url": "http://105.184.8.241:41871/i", "host": "105.184.8.241", "host_ip": "105.184.8.241", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 23:40:15 UTC", "discovered_at": "2026-10-09T23:40:15.000Z" }, { "id": 156933, "urlhaus_id": "3947212", "url": "http://182.121.227.48:39490/bin.sh", "host": "182.121.227.48", "host_ip": "182.121.227.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 23:34:12 UTC", "discovered_at": "2026-10-09T23:34:12.000Z" }, { "id": 156935, "urlhaus_id": "3947211", "url": "http://125.104.214.25:53839/bin.sh", "host": "125.104.214.25", "host_ip": "125.104.214.25", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:17:08 UTC", "discovered_at": "2026-10-09T23:17:08.000Z" }, { "id": 156934, "urlhaus_id": "3947210", "url": "http://125.25.109.7:50266/i", "host": "125.25.109.7", "host_ip": "125.25.109.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:17:08 UTC", "discovered_at": "2026-10-09T23:17:08.000Z" }, { "id": 156937, "urlhaus_id": "3947209", "url": "http://42.238.143.132:56801/bin.sh", "host": "42.238.143.132", "host_ip": "42.238.143.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:17:07 UTC", "discovered_at": "2026-10-09T23:17:07.000Z" }, { "id": 156936, "urlhaus_id": "3947208", "url": "http://123.190.162.76:47048/bin.sh", "host": "123.190.162.76", "host_ip": "123.190.162.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:17:07 UTC", "discovered_at": "2026-10-09T23:17:07.000Z" }, { "id": 156938, "urlhaus_id": "3947207", "url": "http://123.4.232.96:49919/bin.sh", "host": "123.4.232.96", "host_ip": "123.4.232.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:17:06 UTC", "discovered_at": "2026-10-09T23:17:06.000Z" }, { "id": 156939, "urlhaus_id": "3947206", "url": "http://182.113.204.7:55754/i", "host": "182.113.204.7", "host_ip": "182.113.204.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 23:09:20 UTC", "discovered_at": "2026-10-09T23:09:20.000Z" }, { "id": 156940, "urlhaus_id": "3947205", "url": "http://123.11.202.220:38521/i", "host": "123.11.202.220", "host_ip": "123.11.202.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 23:08:10 UTC", "discovered_at": "2026-10-09T23:08:10.000Z" }, { "id": 156941, "urlhaus_id": "3947204", "url": "http://59.180.148.16:40334/i", "host": "59.180.148.16", "host_ip": "59.180.148.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:02:25 UTC", "discovered_at": "2026-10-09T23:02:25.000Z" }, { "id": 156945, "urlhaus_id": "3947203", "url": "http://125.43.47.191:34845/i", "host": "125.43.47.191", "host_ip": "125.43.47.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:02:07 UTC", "discovered_at": "2026-10-09T23:02:07.000Z" }, { "id": 156944, "urlhaus_id": "3947202", "url": "http://59.96.139.69:59488/i", "host": "59.96.139.69", "host_ip": "59.96.139.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:02:07 UTC", "discovered_at": "2026-10-09T23:02:07.000Z" }, { "id": 156943, "urlhaus_id": "3947201", "url": "http://60.23.238.1:35418/i", "host": "60.23.238.1", "host_ip": "60.23.238.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:02:07 UTC", "discovered_at": "2026-10-09T23:02:07.000Z" }, { "id": 156942, "urlhaus_id": "3947200", "url": "http://59.96.139.69:59488/bin.sh", "host": "59.96.139.69", "host_ip": "59.96.139.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 23:02:07 UTC", "discovered_at": "2026-10-09T23:02:07.000Z" }, { "id": 156946, "urlhaus_id": "3947199", "url": "http://60.23.238.1:35418/bin.sh", "host": "60.23.238.1", "host_ip": "60.23.238.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:47:21 UTC", "discovered_at": "2026-10-09T22:47:21.000Z" }, { "id": 156948, "urlhaus_id": "3947198", "url": "http://61.52.92.74:36216/i", "host": "61.52.92.74", "host_ip": "61.52.92.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:47:07 UTC", "discovered_at": "2026-10-09T22:47:07.000Z" }, { "id": 156947, "urlhaus_id": "3947197", "url": "http://61.54.57.22:57582/i", "host": "61.54.57.22", "host_ip": "61.54.57.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:47:07 UTC", "discovered_at": "2026-10-09T22:47:07.000Z" }, { "id": 156949, "urlhaus_id": "3947196", "url": "http://182.113.200.213:55754/i", "host": "182.113.200.213", "host_ip": "182.113.200.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 22:38:20 UTC", "discovered_at": "2026-10-09T22:38:20.000Z" }, { "id": 156950, "urlhaus_id": "3947195", "url": "http://101.23.127.18:59328/i", "host": "101.23.127.18", "host_ip": "101.23.127.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:20 UTC", "discovered_at": "2026-10-09T22:32:20.000Z" }, { "id": 156951, "urlhaus_id": "3947194", "url": "http://42.224.148.231:42806/i", "host": "42.224.148.231", "host_ip": "42.224.148.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:13 UTC", "discovered_at": "2026-10-09T22:32:13.000Z" }, { "id": 156953, "urlhaus_id": "3947193", "url": "http://42.224.148.231:42806/bin.sh", "host": "42.224.148.231", "host_ip": "42.224.148.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:08 UTC", "discovered_at": "2026-10-09T22:32:08.000Z" }, { "id": 156952, "urlhaus_id": "3947192", "url": "http://42.231.38.151:56580/bin.sh", "host": "42.231.38.151", "host_ip": "42.231.38.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:08 UTC", "discovered_at": "2026-10-09T22:32:08.000Z" }, { "id": 156960, "urlhaus_id": "3947191", "url": "http://42.228.218.119:58691/i", "host": "42.228.218.119", "host_ip": "42.228.218.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156959, "urlhaus_id": "3947190", "url": "http://42.235.86.173:33127/bin.sh", "host": "42.235.86.173", "host_ip": "42.235.86.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156958, "urlhaus_id": "3947189", "url": "http://42.224.249.51:47421/i", "host": "42.224.249.51", "host_ip": "42.224.249.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156957, "urlhaus_id": "3947188", "url": "http://105.184.69.39:32871/i", "host": "105.184.69.39", "host_ip": "105.184.69.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156956, "urlhaus_id": "3947187", "url": "http://123.11.202.220:38521/bin.sh", "host": "123.11.202.220", "host_ip": "123.11.202.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156955, "urlhaus_id": "3947186", "url": "http://120.28.194.92:57851/bin.sh", "host": "120.28.194.92", "host_ip": "120.28.194.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156954, "urlhaus_id": "3947185", "url": "http://42.239.190.225:55041/i", "host": "42.239.190.225", "host_ip": "42.239.190.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:32:07 UTC", "discovered_at": "2026-10-09T22:32:07.000Z" }, { "id": 156961, "urlhaus_id": "3947184", "url": "http://222.141.127.20:56795/bin.sh", "host": "222.141.127.20", "host_ip": "222.141.127.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 22:29:07 UTC", "discovered_at": "2026-10-09T22:29:07.000Z" }, { "id": 156962, "urlhaus_id": "3947183", "url": "http://91.92.242.236/files-129312398/files/file_4b6b014c4c8f9ec9.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 22:23:07 UTC", "discovered_at": "2026-10-09T22:23:07.000Z" }, { "id": 156963, "urlhaus_id": "3947182", "url": "http://170.238.123.134:35218/i", "host": "170.238.123.134", "host_ip": "170.238.123.134", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 22:20:09 UTC", "discovered_at": "2026-10-09T22:20:09.000Z" }, { "id": 156964, "urlhaus_id": "3947181", "url": "http://170.238.123.134:35218/bin.sh", "host": "170.238.123.134", "host_ip": "170.238.123.134", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 22:19:07 UTC", "discovered_at": "2026-10-09T22:19:07.000Z" }, { "id": 156965, "urlhaus_id": "3947180", "url": "http://59.97.253.212:41398/bin.sh", "host": "59.97.253.212", "host_ip": "59.97.253.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 22:18:19 UTC", "discovered_at": "2026-10-09T22:18:19.000Z" }, { "id": 156970, "urlhaus_id": "3947179", "url": "http://113.221.33.248:48235/i", "host": "113.221.33.248", "host_ip": "113.221.33.248", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:17:06 UTC", "discovered_at": "2026-10-09T22:17:06.000Z" }, { "id": 156969, "urlhaus_id": "3947178", "url": "http://178.141.147.7:33119/bin.sh", "host": "178.141.147.7", "host_ip": "178.141.147.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:17:06 UTC", "discovered_at": "2026-10-09T22:17:06.000Z" }, { "id": 156968, "urlhaus_id": "3947177", "url": "http://42.239.228.53:46459/bin.sh", "host": "42.239.228.53", "host_ip": "42.239.228.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:17:06 UTC", "discovered_at": "2026-10-09T22:17:06.000Z" }, { "id": 156967, "urlhaus_id": "3947176", "url": "http://154.223.128.222:52867/i", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:17:06 UTC", "discovered_at": "2026-10-09T22:17:06.000Z" }, { "id": 156966, "urlhaus_id": "3947175", "url": "http://42.239.228.53:46459/i", "host": "42.239.228.53", "host_ip": "42.239.228.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:17:06 UTC", "discovered_at": "2026-10-09T22:17:06.000Z" }, { "id": 156972, "urlhaus_id": "3947174", "url": "http://110.136.60.67:37161/i", "host": "110.136.60.67", "host_ip": "110.136.60.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:02:08 UTC", "discovered_at": "2026-10-09T22:02:08.000Z" }, { "id": 156971, "urlhaus_id": "3947173", "url": "http://42.59.247.94:45590/i", "host": "42.59.247.94", "host_ip": "42.59.247.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:02:08 UTC", "discovered_at": "2026-10-09T22:02:08.000Z" }, { "id": 156973, "urlhaus_id": "3947172", "url": "http://178.206.171.51:45243/i", "host": "178.206.171.51", "host_ip": "178.206.171.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 22:02:07 UTC", "discovered_at": "2026-10-09T22:02:07.000Z" }, { "id": 156974, "urlhaus_id": "3947171", "url": "http://121.202.142.137:23188/bin.sh", "host": "121.202.142.137", "host_ip": "121.202.142.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 21:54:06 UTC", "discovered_at": "2026-10-09T21:54:06.000Z" }, { "id": 156975, "urlhaus_id": "3947170", "url": "http://59.96.138.25:47776/i", "host": "59.96.138.25", "host_ip": "59.96.138.25", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:47:07 UTC", "discovered_at": "2026-10-09T21:47:07.000Z" }, { "id": 156976, "urlhaus_id": "3947169", "url": "http://123.5.153.79:37201/i", "host": "123.5.153.79", "host_ip": "123.5.153.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:47:06 UTC", "discovered_at": "2026-10-09T21:47:06.000Z" }, { "id": 156978, "urlhaus_id": "3947168", "url": "http://123.5.153.79:37201/bin.sh", "host": "123.5.153.79", "host_ip": "123.5.153.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:32:06 UTC", "discovered_at": "2026-10-09T21:32:06.000Z" }, { "id": 156977, "urlhaus_id": "3947167", "url": "http://175.146.225.101:55108/bin.sh", "host": "175.146.225.101", "host_ip": "175.146.225.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:32:06 UTC", "discovered_at": "2026-10-09T21:32:06.000Z" }, { "id": 156979, "urlhaus_id": "3947166", "url": "http://123.7.222.24:54253/i", "host": "123.7.222.24", "host_ip": "123.7.222.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:18:07 UTC", "discovered_at": "2026-10-09T21:18:07.000Z" }, { "id": 156980, "urlhaus_id": "3947165", "url": "http://110.136.10.85:56212/i", "host": "110.136.10.85", "host_ip": "110.136.10.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:17:07 UTC", "discovered_at": "2026-10-09T21:17:07.000Z" }, { "id": 156981, "urlhaus_id": "3947164", "url": "http://120.86.145.22:55411/i", "host": "120.86.145.22", "host_ip": "120.86.145.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:02:08 UTC", "discovered_at": "2026-10-09T21:02:08.000Z" }, { "id": 156984, "urlhaus_id": "3947163", "url": "http://119.185.150.241:38141/i", "host": "119.185.150.241", "host_ip": "119.185.150.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:02:07 UTC", "discovered_at": "2026-10-09T21:02:07.000Z" }, { "id": 156983, "urlhaus_id": "3947162", "url": "http://175.148.156.89:34417/i", "host": "175.148.156.89", "host_ip": "175.148.156.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:02:07 UTC", "discovered_at": "2026-10-09T21:02:07.000Z" }, { "id": 156982, "urlhaus_id": "3947161", "url": "http://60.22.51.222:45629/i", "host": "60.22.51.222", "host_ip": "60.22.51.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 21:02:07 UTC", "discovered_at": "2026-10-09T21:02:07.000Z" }, { "id": 156985, "urlhaus_id": "3947160", "url": "http://36.89.252.178:58729/i", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 20:55:25 UTC", "discovered_at": "2026-10-09T20:55:25.000Z" }, { "id": 156986, "urlhaus_id": "3947159", "url": "http://36.89.252.178:58729/bin.sh", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 20:49:19 UTC", "discovered_at": "2026-10-09T20:49:19.000Z" }, { "id": 156992, "urlhaus_id": "3947158", "url": "http://36.50.134.86/spc", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156991, "urlhaus_id": "3947157", "url": "http://130.12.180.212/mips64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156990, "urlhaus_id": "3947156", "url": "http://130.12.180.212/mipsel", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156989, "urlhaus_id": "3947155", "url": "http://130.12.180.212/i486", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156988, "urlhaus_id": "3947154", "url": "http://130.12.180.212/arm", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156987, "urlhaus_id": "3947153", "url": "http://130.12.180.212/aarch64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 20:48:07 UTC", "discovered_at": "2026-10-09T20:48:07.000Z" }, { "id": 156994, "urlhaus_id": "3947152", "url": "http://123.11.220.74:33455/i", "host": "123.11.220.74", "host_ip": "123.11.220.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:08 UTC", "discovered_at": "2026-10-09T20:47:08.000Z" }, { "id": 156993, "urlhaus_id": "3947151", "url": "http://123.8.25.70:33893/i", "host": "123.8.25.70", "host_ip": "123.8.25.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:08 UTC", "discovered_at": "2026-10-09T20:47:08.000Z" }, { "id": 156998, "urlhaus_id": "3947150", "url": "http://154.223.128.222:52867/bin.sh", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:07 UTC", "discovered_at": "2026-10-09T20:47:07.000Z" }, { "id": 156997, "urlhaus_id": "3947149", "url": "http://182.112.41.50:41326/i", "host": "182.112.41.50", "host_ip": "182.112.41.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:07 UTC", "discovered_at": "2026-10-09T20:47:07.000Z" }, { "id": 156996, "urlhaus_id": "3947148", "url": "http://180.191.20.148:40643/i", "host": "180.191.20.148", "host_ip": "180.191.20.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:07 UTC", "discovered_at": "2026-10-09T20:47:07.000Z" }, { "id": 156995, "urlhaus_id": "3947147", "url": "http://188.38.158.163:40685/bin.sh", "host": "188.38.158.163", "host_ip": "188.38.158.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:47:07 UTC", "discovered_at": "2026-10-09T20:47:07.000Z" }, { "id": 156999, "urlhaus_id": "3947146", "url": "http://182.127.111.22:56903/bin.sh", "host": "182.127.111.22", "host_ip": "182.127.111.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:32:07 UTC", "discovered_at": "2026-10-09T20:32:07.000Z" }, { "id": 157000, "urlhaus_id": "3947145", "url": "http://182.117.76.135:52817/bin.sh", "host": "182.117.76.135", "host_ip": "182.117.76.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:32:06 UTC", "discovered_at": "2026-10-09T20:32:06.000Z" }, { "id": 157001, "urlhaus_id": "3947144", "url": "http://125.44.215.216:39964/bin.sh", "host": "125.44.215.216", "host_ip": "125.44.215.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:32:05 UTC", "discovered_at": "2026-10-09T20:32:05.000Z" }, { "id": 157002, "urlhaus_id": "3947143", "url": "http://61.53.93.49:38979/bin.sh", "host": "61.53.93.49", "host_ip": "61.53.93.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 20:30:10 UTC", "discovered_at": "2026-10-09T20:30:10.000Z" }, { "id": 157003, "urlhaus_id": "3947142", "url": "http://182.112.41.50:41326/bin.sh", "host": "182.112.41.50", "host_ip": "182.112.41.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:17:06 UTC", "discovered_at": "2026-10-09T20:17:06.000Z" }, { "id": 157004, "urlhaus_id": "3947141", "url": "http://115.61.118.217:37688/i", "host": "115.61.118.217", "host_ip": "115.61.118.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 20:10:18 UTC", "discovered_at": "2026-10-09T20:10:18.000Z" }, { "id": 157005, "urlhaus_id": "3947140", "url": "http://193.178.158.107/bin/6fb78459bea435c0_remus.exe", "host": "193.178.158.107", "host_ip": "193.178.158.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 20:05:07 UTC", "discovered_at": "2026-10-09T20:05:07.000Z" }, { "id": 157007, "urlhaus_id": "3947139", "url": "http://125.43.47.191:34845/bin.sh", "host": "125.43.47.191", "host_ip": "125.43.47.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:02:07 UTC", "discovered_at": "2026-10-09T20:02:07.000Z" }, { "id": 157006, "urlhaus_id": "3947138", "url": "http://180.191.228.88:43751/i", "host": "180.191.228.88", "host_ip": "180.191.228.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 20:02:07 UTC", "discovered_at": "2026-10-09T20:02:07.000Z" }, { "id": 157008, "urlhaus_id": "3947137", "url": "http://115.49.44.200:35391/i", "host": "115.49.44.200", "host_ip": "115.49.44.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 20:00:19 UTC", "discovered_at": "2026-10-09T20:00:19.000Z" }, { "id": 157009, "urlhaus_id": "3947136", "url": "http://91.92.242.236/files-129312398/files/file_b3cc296623105902.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 19:57:14 UTC", "discovered_at": "2026-10-09T19:57:14.000Z" }, { "id": 157010, "urlhaus_id": "3947135", "url": "http://220.168.237.96:60522/i", "host": "220.168.237.96", "host_ip": "220.168.237.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 19:53:24 UTC", "discovered_at": "2026-10-09T19:53:24.000Z" }, { "id": 157011, "urlhaus_id": "3947134", "url": "http://220.168.237.96:60522/bin.sh", "host": "220.168.237.96", "host_ip": "220.168.237.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 19:53:23 UTC", "discovered_at": "2026-10-09T19:53:23.000Z" }, { "id": 157012, "urlhaus_id": "3947133", "url": "http://193.178.158.57/bin/4e984c028b501402_pyinfector.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 19:51:05 UTC", "discovered_at": "2026-10-09T19:51:05.000Z" }, { "id": 157013, "urlhaus_id": "3947132", "url": "http://59.96.142.92:38432/i", "host": "59.96.142.92", "host_ip": "59.96.142.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 19:47:21 UTC", "discovered_at": "2026-10-09T19:47:21.000Z" }, { "id": 157014, "urlhaus_id": "3947131", "url": "http://123.4.232.96:49919/i", "host": "123.4.232.96", "host_ip": "123.4.232.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:47:07 UTC", "discovered_at": "2026-10-09T19:47:07.000Z" }, { "id": 157015, "urlhaus_id": "3947130", "url": "http://193.178.158.107/bin/6cbea551e8cbc1bb_global_8668.3380.0.0_INSTALL.exe", "host": "193.178.158.107", "host_ip": "193.178.158.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 19:45:10 UTC", "discovered_at": "2026-10-09T19:45:10.000Z" }, { "id": 157016, "urlhaus_id": "3947129", "url": "http://193.178.158.57/bin/cc58391f679b5479_CryptoClipper.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 19:45:09 UTC", "discovered_at": "2026-10-09T19:45:09.000Z" }, { "id": 157017, "urlhaus_id": "3947128", "url": "http://115.55.223.246:57050/i", "host": "115.55.223.246", "host_ip": "115.55.223.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 19:44:14 UTC", "discovered_at": "2026-10-09T19:44:14.000Z" }, { "id": 157018, "urlhaus_id": "3947127", "url": "http://182.119.186.189:39523/bin.sh", "host": "182.119.186.189", "host_ip": "182.119.186.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 19:42:12 UTC", "discovered_at": "2026-10-09T19:42:12.000Z" }, { "id": 157019, "urlhaus_id": "3947126", "url": "http://91.92.242.236/files-129312398/files/file_50f8dc1f79af08b7.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 19:34:06 UTC", "discovered_at": "2026-10-09T19:34:06.000Z" }, { "id": 157020, "urlhaus_id": "3947125", "url": "http://59.96.142.92:38432/bin.sh", "host": "59.96.142.92", "host_ip": "59.96.142.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 19:33:18 UTC", "discovered_at": "2026-10-09T19:33:18.000Z" }, { "id": 157021, "urlhaus_id": "3947124", "url": "http://103.81.239.59:55792/i", "host": "103.81.239.59", "host_ip": "103.81.239.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:19 UTC", "discovered_at": "2026-10-09T19:32:19.000Z" }, { "id": 157024, "urlhaus_id": "3947123", "url": "http://170.254.10.219:51354/bin.sh", "host": "170.254.10.219", "host_ip": "170.254.10.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:07 UTC", "discovered_at": "2026-10-09T19:32:07.000Z" }, { "id": 157023, "urlhaus_id": "3947122", "url": "http://125.47.113.53:49300/bin.sh", "host": "125.47.113.53", "host_ip": "125.47.113.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:07 UTC", "discovered_at": "2026-10-09T19:32:07.000Z" }, { "id": 157022, "urlhaus_id": "3947121", "url": "http://180.191.228.88:43751/bin.sh", "host": "180.191.228.88", "host_ip": "180.191.228.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:07 UTC", "discovered_at": "2026-10-09T19:32:07.000Z" }, { "id": 157026, "urlhaus_id": "3947120", "url": "http://182.117.31.73:59387/i", "host": "182.117.31.73", "host_ip": "182.117.31.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:06 UTC", "discovered_at": "2026-10-09T19:32:06.000Z" }, { "id": 157025, "urlhaus_id": "3947119", "url": "http://130.0.43.154:57792/i", "host": "130.0.43.154", "host_ip": "130.0.43.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 19:32:06 UTC", "discovered_at": "2026-10-09T19:32:06.000Z" }, { "id": 157027, "urlhaus_id": "3947118", "url": "http://196.189.197.131:35262/bin.sh", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 19:21:16 UTC", "discovered_at": "2026-10-09T19:21:16.000Z" }, { "id": 157028, "urlhaus_id": "3947117", "url": "http://180.115.65.152:44326/bin.sh", "host": "180.115.65.152", "host_ip": "180.115.65.152", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 19:18:08 UTC", "discovered_at": "2026-10-09T19:18:08.000Z" }, { "id": 157029, "urlhaus_id": "3947116", "url": "https://www.tmcksa.com/phil/pdmjhdk.txt", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, rev-base64-loader", "last_online": null, "first_seen": "2026-10-09 18:59:08 UTC", "discovered_at": "2026-10-09T18:59:08.000Z" }, { "id": 155465, "urlhaus_id": "3947115", "url": "http://114.226.200.81:37474/i", "host": "114.226.200.81", "host_ip": "114.226.200.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 18:57:14 UTC", "discovered_at": "2026-10-09T18:57:14.000Z" }, { "id": 155466, "urlhaus_id": "3947114", "url": "https://www.tmcksa.com/new/odIrrbk.txt", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, Formbook, rev-base64-loader", "last_online": null, "first_seen": "2026-10-09 18:57:11 UTC", "discovered_at": "2026-10-09T18:57:11.000Z" }, { "id": 155467, "urlhaus_id": "3947113", "url": "http://64.224.17.115/img/2.jpg", "host": "64.224.17.115", "host_ip": "64.224.17.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Formbook", "last_online": null, "first_seen": "2026-10-09 18:57:08 UTC", "discovered_at": "2026-10-09T18:57:08.000Z" }, { "id": 155468, "urlhaus_id": "3947112", "url": "http://107.173.227.116/2.jpg", "host": "107.173.227.116", "host_ip": "107.173.227.116", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Formbook", "last_online": null, "first_seen": "2026-10-09 18:57:05 UTC", "discovered_at": "2026-10-09T18:57:05.000Z" }, { "id": 155469, "urlhaus_id": "3947111", "url": "http://216.126.80.56:43357/bin.sh", "host": "216.126.80.56", "host_ip": "216.126.80.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 18:55:15 UTC", "discovered_at": "2026-10-09T18:55:15.000Z" }, { "id": 155470, "urlhaus_id": "3947110", "url": "https://micstndasap.world/img_191633.png", "host": "micstndasap.world", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-09 18:52:11 UTC", "discovered_at": "2026-10-09T18:52:11.000Z" }, { "id": 155471, "urlhaus_id": "3947109", "url": "http://micstndasap.world/uU49yJW5", "host": "micstndasap.world", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-09 18:52:09 UTC", "discovered_at": "2026-10-09T18:52:09.000Z" }, { "id": 155472, "urlhaus_id": "3947108", "url": "https://ficus.in/img/img_194218.png", "host": "ficus.in", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-09 18:47:10 UTC", "discovered_at": "2026-10-09T18:47:10.000Z" }, { "id": 155473, "urlhaus_id": "3947107", "url": "https://drive.google.com/uc?export=download&id=1_UZcQfkdBH4WncF92tW54H57khybkee4", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader", "last_online": null, "first_seen": "2026-10-09 18:47:09 UTC", "discovered_at": "2026-10-09T18:47:09.000Z" }, { "id": 155475, "urlhaus_id": "3947105", "url": "http://182.123.192.144:51851/bin.sh", "host": "182.123.192.144", "host_ip": "182.123.192.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:47:06 UTC", "discovered_at": "2026-10-09T18:47:06.000Z" }, { "id": 155474, "urlhaus_id": "3947106", "url": "http://103.126.201.130:40286/i", "host": "103.126.201.130", "host_ip": "103.126.201.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:47:06 UTC", "discovered_at": "2026-10-09T18:47:06.000Z" }, { "id": 155476, "urlhaus_id": "3947104", "url": "https://cdn.discordapp.com/attachments/588751559681376259/1558186147249922178/bundle_3.zip?ex=6aca856f&is=6ac933ef&hm=caed6be90052bcc12e387eec9349a1d023e94c865e2da5a9964d07bad665b617&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 18:39:12 UTC", "discovered_at": "2026-10-09T18:39:12.000Z" }, { "id": 155478, "urlhaus_id": "3947102", "url": "http://tronzadorasnng.com/3PNXr9P2", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-09 18:38:07 UTC", "discovered_at": "2026-10-09T18:38:07.000Z" }, { "id": 155477, "urlhaus_id": "3947103", "url": "https://tronzadorasnng.com/img_002333.png", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-09 18:38:07 UTC", "discovered_at": "2026-10-09T18:38:07.000Z" }, { "id": 155479, "urlhaus_id": "3947101", "url": "https://tronzadorasnng.com/img_005350.png", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-09 18:37:07 UTC", "discovered_at": "2026-10-09T18:37:07.000Z" }, { "id": 155481, "urlhaus_id": "3947099", "url": "http://tronzadorasnng.com/Q196T8Mz", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-09 18:37:05 UTC", "discovered_at": "2026-10-09T18:37:05.000Z" }, { "id": 155480, "urlhaus_id": "3947100", "url": "http://tronzadorasnng.com/07J45QiL", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-09 18:37:05 UTC", "discovered_at": "2026-10-09T18:37:05.000Z" }, { "id": 155483, "urlhaus_id": "3947097", "url": "https://github.com/Nine23423423/fbi-openup/raw/refs/heads/main/ServiceManager.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-09 18:36:08 UTC", "discovered_at": "2026-10-09T18:36:08.000Z" }, { "id": 155482, "urlhaus_id": "3947098", "url": "https://github.com/Nine23423423/Reload1/raw/refs/heads/main/loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-09 18:36:08 UTC", "discovered_at": "2026-10-09T18:36:08.000Z" }, { "id": 155484, "urlhaus_id": "3947096", "url": "https://github.com/Nine23423423/Reload1/raw/refs/heads/main/RtkAudUService.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-09 18:36:06 UTC", "discovered_at": "2026-10-09T18:36:06.000Z" }, { "id": 155485, "urlhaus_id": "3947095", "url": "http://114.226.200.81:37474/bin.sh", "host": "114.226.200.81", "host_ip": "114.226.200.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 18:35:18 UTC", "discovered_at": "2026-10-09T18:35:18.000Z" }, { "id": 155487, "urlhaus_id": "3947093", "url": "http://tronzadorasnng.com/SzvAZo0M", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-09 18:34:07 UTC", "discovered_at": "2026-10-09T18:34:07.000Z" }, { "id": 155486, "urlhaus_id": "3947094", "url": "https://tronzadorasnng.com/img_010548.png", "host": "tronzadorasnng.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-09 18:34:07 UTC", "discovered_at": "2026-10-09T18:34:07.000Z" }, { "id": 155489, "urlhaus_id": "3947091", "url": "http://219.155.200.85:53694/i", "host": "219.155.200.85", "host_ip": "219.155.200.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:32:08 UTC", "discovered_at": "2026-10-09T18:32:08.000Z" }, { "id": 155488, "urlhaus_id": "3947092", "url": "http://219.155.201.170:46667/bin.sh", "host": "219.155.201.170", "host_ip": "219.155.201.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:32:08 UTC", "discovered_at": "2026-10-09T18:32:08.000Z" }, { "id": 155490, "urlhaus_id": "3947090", "url": "http://42.232.179.113:45539/bin.sh", "host": "42.232.179.113", "host_ip": "42.232.179.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 18:31:15 UTC", "discovered_at": "2026-10-09T18:31:15.000Z" }, { "id": 155491, "urlhaus_id": "3947089", "url": "https://deathboundcraft.com/api/public/download/downloads/1791496929044-DeathBoundCraft.jar", "host": "deathboundcraft.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "fakemod, minecraft, noface, rat, stealer, Supreme", "last_online": null, "first_seen": "2026-10-09 18:31:08 UTC", "discovered_at": "2026-10-09T18:31:08.000Z" }, { "id": 155492, "urlhaus_id": "3947088", "url": "http://156.226.174.251:6677/femboy.sh", "host": "156.226.174.251", "host_ip": "156.226.174.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii", "last_online": null, "first_seen": "2026-10-09 18:31:06 UTC", "discovered_at": "2026-10-09T18:31:06.000Z" }, { "id": 155493, "urlhaus_id": "3947087", "url": "http://85.137.53.167:24380/bins/telnet/wget.sh", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 18:31:05 UTC", "discovered_at": "2026-10-09T18:31:05.000Z" }, { "id": 155494, "urlhaus_id": "3947086", "url": "https://cdn.discordapp.com/attachments/1553488282396926035/1558148289726124083/bundle_4.zip?ex=6aca622d&is=6ac910ad&hm=a29f02ede4160432f5f0b145316bb617b54a372d514d06fa425c725e81f9d366&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 18:30:17 UTC", "discovered_at": "2026-10-09T18:30:17.000Z" }, { "id": 155495, "urlhaus_id": "3947085", "url": "https://filegoat.s3.de.io.cloud.ovh.net/7c961ce9-af0a-499d-ae15-a860978354a0/dupe-mod_1.0.0_0.jar?download=true", "host": "filegoat.s3.de.io.cloud.ovh.net", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "korexnode", "last_online": null, "first_seen": "2026-10-09 18:30:09 UTC", "discovered_at": "2026-10-09T18:30:09.000Z" }, { "id": 155496, "urlhaus_id": "3947084", "url": "https://natashamohan.com/", "host": "natashamohan.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-09 18:30:07 UTC", "discovered_at": "2026-10-09T18:30:07.000Z" }, { "id": 155498, "urlhaus_id": "3947082", "url": "http://85.137.53.167:24380/bins/payloads//wget.sh", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 18:30:06 UTC", "discovered_at": "2026-10-09T18:30:06.000Z" }, { "id": 155497, "urlhaus_id": "3947083", "url": "http://154.83.85.63:47991/dep_kr29.sh", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-09 18:30:06 UTC", "discovered_at": "2026-10-09T18:30:06.000Z" }, { "id": 155500, "urlhaus_id": "3947080", "url": "https://briannacorporation.com/cap/Chored.cur", "host": "briannacorporation.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-09 18:29:08 UTC", "discovered_at": "2026-10-09T18:29:08.000Z" }, { "id": 155499, "urlhaus_id": "3947081", "url": "https://briannacorporation.com/cap/eZlHodoWq46.bin", "host": "briannacorporation.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-09 18:29:08 UTC", "discovered_at": "2026-10-09T18:29:08.000Z" }, { "id": 155501, "urlhaus_id": "3947079", "url": "http://212.54.86.171:51213/bin.sh", "host": "212.54.86.171", "host_ip": "212.54.86.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 18:17:13 UTC", "discovered_at": "2026-10-09T18:17:13.000Z" }, { "id": 155502, "urlhaus_id": "3947078", "url": "http://42.237.2.4:50883/bin.sh", "host": "42.237.2.4", "host_ip": "42.237.2.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:17:06 UTC", "discovered_at": "2026-10-09T18:17:06.000Z" }, { "id": 155503, "urlhaus_id": "3947077", "url": "http://27.202.215.185:51039/i", "host": "27.202.215.185", "host_ip": "27.202.215.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 18:03:11 UTC", "discovered_at": "2026-10-09T18:03:11.000Z" }, { "id": 155504, "urlhaus_id": "3947076", "url": "http://94.28.39.38:43692/i", "host": "94.28.39.38", "host_ip": "94.28.39.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:02:08 UTC", "discovered_at": "2026-10-09T18:02:08.000Z" }, { "id": 155505, "urlhaus_id": "3947075", "url": "http://61.53.88.16:50557/i", "host": "61.53.88.16", "host_ip": "61.53.88.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:02:06 UTC", "discovered_at": "2026-10-09T18:02:06.000Z" }, { "id": 155508, "urlhaus_id": "3947072", "url": "http://78.188.196.206:55677/bin.sh", "host": "78.188.196.206", "host_ip": "78.188.196.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:02:05 UTC", "discovered_at": "2026-10-09T18:02:05.000Z" }, { "id": 155507, "urlhaus_id": "3947073", "url": "http://61.52.4.108:55939/i", "host": "61.52.4.108", "host_ip": "61.52.4.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:02:05 UTC", "discovered_at": "2026-10-09T18:02:05.000Z" }, { "id": 155506, "urlhaus_id": "3947074", "url": "http://61.53.140.159:52750/i", "host": "61.53.140.159", "host_ip": "61.53.140.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 18:02:05 UTC", "discovered_at": "2026-10-09T18:02:05.000Z" }, { "id": 155509, "urlhaus_id": "3947071", "url": "http://41.216.226.217:51974/i", "host": "41.216.226.217", "host_ip": "41.216.226.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:47:09 UTC", "discovered_at": "2026-10-09T17:47:09.000Z" }, { "id": 155510, "urlhaus_id": "3947070", "url": "http://221.15.9.150:47620/i", "host": "221.15.9.150", "host_ip": "221.15.9.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:47:07 UTC", "discovered_at": "2026-10-09T17:47:07.000Z" }, { "id": 155511, "urlhaus_id": "3947069", "url": "http://112.198.238.18:54840/i", "host": "112.198.238.18", "host_ip": "112.198.238.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:32:08 UTC", "discovered_at": "2026-10-09T17:32:08.000Z" }, { "id": 155512, "urlhaus_id": "3947068", "url": "http://188.233.55.80:60312/i", "host": "188.233.55.80", "host_ip": "188.233.55.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:32:07 UTC", "discovered_at": "2026-10-09T17:32:07.000Z" }, { "id": 155513, "urlhaus_id": "3947067", "url": "http://196.190.229.115:49979/i", "host": "196.190.229.115", "host_ip": "196.190.229.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:32:06 UTC", "discovered_at": "2026-10-09T17:32:06.000Z" }, { "id": 155514, "urlhaus_id": "3947066", "url": "http://42.59.115.48:39564/i", "host": "42.59.115.48", "host_ip": "42.59.115.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:18:07 UTC", "discovered_at": "2026-10-09T17:18:07.000Z" }, { "id": 155515, "urlhaus_id": "3947065", "url": "http://220.164.23.33:49708/i", "host": "220.164.23.33", "host_ip": "220.164.23.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:17:10 UTC", "discovered_at": "2026-10-09T17:17:10.000Z" }, { "id": 155517, "urlhaus_id": "3947063", "url": "http://221.1.246.222:45921/i", "host": "221.1.246.222", "host_ip": "221.1.246.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:17:08 UTC", "discovered_at": "2026-10-09T17:17:08.000Z" }, { "id": 155516, "urlhaus_id": "3947064", "url": "http://42.228.41.178:36712/i", "host": "42.228.41.178", "host_ip": "42.228.41.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:17:08 UTC", "discovered_at": "2026-10-09T17:17:08.000Z" }, { "id": 155518, "urlhaus_id": "3947062", "url": "http://27.6.71.251:44076/i", "host": "27.6.71.251", "host_ip": "27.6.71.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:17:07 UTC", "discovered_at": "2026-10-09T17:17:07.000Z" }, { "id": 155520, "urlhaus_id": "3947060", "url": "http://42.232.238.114:40830/i", "host": "42.232.238.114", "host_ip": "42.232.238.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:02:07 UTC", "discovered_at": "2026-10-09T17:02:07.000Z" }, { "id": 155519, "urlhaus_id": "3947061", "url": "http://42.232.179.113:45539/i", "host": "42.232.179.113", "host_ip": "42.232.179.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 17:02:07 UTC", "discovered_at": "2026-10-09T17:02:07.000Z" }, { "id": 155521, "urlhaus_id": "3947059", "url": "http://42.237.253.32:32917/i", "host": "42.237.253.32", "host_ip": "42.237.253.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 16:47:07 UTC", "discovered_at": "2026-10-09T16:47:07.000Z" }, { "id": 155522, "urlhaus_id": "3947058", "url": "http://42.53.2.94:56286/bin.sh", "host": "42.53.2.94", "host_ip": "42.53.2.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 16:47:06 UTC", "discovered_at": "2026-10-09T16:47:06.000Z" }, { "id": 155523, "urlhaus_id": "3947057", "url": "http://112.248.1.204:46560/i", "host": "112.248.1.204", "host_ip": "112.248.1.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 16:17:26 UTC", "discovered_at": "2026-10-09T16:17:26.000Z" }, { "id": 155524, "urlhaus_id": "3947056", "url": "http://218.90.26.232:42522/i", "host": "218.90.26.232", "host_ip": "218.90.26.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 16:17:07 UTC", "discovered_at": "2026-10-09T16:17:07.000Z" }, { "id": 155525, "urlhaus_id": "3947055", "url": "http://59.96.137.214:52408/bin.sh", "host": "59.96.137.214", "host_ip": "59.96.137.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 15:53:06 UTC", "discovered_at": "2026-10-09T15:53:06.000Z" }, { "id": 155529, "urlhaus_id": "3947051", "url": "http://42.179.167.126:50584/i", "host": "42.179.167.126", "host_ip": "42.179.167.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:47:06 UTC", "discovered_at": "2026-10-09T15:47:06.000Z" }, { "id": 155528, "urlhaus_id": "3947052", "url": "http://220.201.171.252:58022/i", "host": "220.201.171.252", "host_ip": "220.201.171.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:47:06 UTC", "discovered_at": "2026-10-09T15:47:06.000Z" }, { "id": 155527, "urlhaus_id": "3947053", "url": "http://27.194.57.63:60305/i", "host": "27.194.57.63", "host_ip": "27.194.57.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:47:06 UTC", "discovered_at": "2026-10-09T15:47:06.000Z" }, { "id": 155526, "urlhaus_id": "3947054", "url": "http://27.194.57.63:60305/bin.sh", "host": "27.194.57.63", "host_ip": "27.194.57.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:47:06 UTC", "discovered_at": "2026-10-09T15:47:06.000Z" }, { "id": 155530, "urlhaus_id": "3947050", "url": "http://109.236.44.237:45227/i", "host": "109.236.44.237", "host_ip": "109.236.44.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:47:04 UTC", "discovered_at": "2026-10-09T15:47:04.000Z" }, { "id": 155531, "urlhaus_id": "3947049", "url": "http://112.248.113.211:39187/i", "host": "112.248.113.211", "host_ip": "112.248.113.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:32:25 UTC", "discovered_at": "2026-10-09T15:32:25.000Z" }, { "id": 155532, "urlhaus_id": "3947048", "url": "http://42.59.115.48:39564/bin.sh", "host": "42.59.115.48", "host_ip": "42.59.115.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 15:31:14 UTC", "discovered_at": "2026-10-09T15:31:14.000Z" }, { "id": 155533, "urlhaus_id": "3947047", "url": "http://109.236.44.237:45227/bin.sh", "host": "109.236.44.237", "host_ip": "109.236.44.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:17:06 UTC", "discovered_at": "2026-10-09T15:17:06.000Z" }, { "id": 155534, "urlhaus_id": "3947046", "url": "http://91.92.242.236/files-129312398/files/file_8dece6c27473f5d2.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 15:11:09 UTC", "discovered_at": "2026-10-09T15:11:09.000Z" }, { "id": 155536, "urlhaus_id": "3947044", "url": "https://downloads.go-xlr.com/GoXLR.zip", "host": "downloads.go-xlr.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoXLR, phishing, rat, SparkStealer, stealer", "last_online": null, "first_seen": "2026-10-09 15:07:44 UTC", "discovered_at": "2026-10-09T15:07:44.000Z" }, { "id": 155535, "urlhaus_id": "3947045", "url": "https://hardwood-studio-obviously-briefing.trycloudflare.com/download/winhost", "host": "hardwood-studio-obviously-briefing.trycloudflare.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "npm, ps1, trycloudflare", "last_online": null, "first_seen": "2026-10-09 15:07:44 UTC", "discovered_at": "2026-10-09T15:07:44.000Z" }, { "id": 155537, "urlhaus_id": "3947043", "url": "http://175.149.88.179:34166/bin.sh", "host": "175.149.88.179", "host_ip": "175.149.88.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 15:07:20 UTC", "discovered_at": "2026-10-09T15:07:20.000Z" }, { "id": 155538, "urlhaus_id": "3947042", "url": "https://github.com/riddents/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:11 UTC", "discovered_at": "2026-10-09T15:07:11.000Z" }, { "id": 155539, "urlhaus_id": "3947041", "url": "https://github.com/wakkaflipps/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:09 UTC", "discovered_at": "2026-10-09T15:07:09.000Z" }, { "id": 155540, "urlhaus_id": "3947040", "url": "https://github.com/skannyraws/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:08 UTC", "discovered_at": "2026-10-09T15:07:08.000Z" }, { "id": 155542, "urlhaus_id": "3947038", "url": "https://github.com/washington0812/FiveM-Spoofer/raw/HEAD/CFXBypass.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:07 UTC", "discovered_at": "2026-10-09T15:07:07.000Z" }, { "id": 155541, "urlhaus_id": "3947039", "url": "https://www.dropbox.com/scl/fi/f9xcikvn08lnp7oscsr8d/bundle.zip?rlkey=jbzk4as9yhesbvbdqaz26u0hz&st=pb9wyr3r&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 15:07:07 UTC", "discovered_at": "2026-10-09T15:07:07.000Z" }, { "id": 155548, "urlhaus_id": "3947032", "url": "https://github.com/stehts/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155547, "urlhaus_id": "3947033", "url": "https://github.com/sfbbbvp9pg-cpu/Swift-Executor/raw/HEAD/Swift.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155546, "urlhaus_id": "3947034", "url": "http://196.189.197.131:35262/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155545, "urlhaus_id": "3947035", "url": "https://github.com/stellacriss/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155544, "urlhaus_id": "3947036", "url": "https://github.com/vall3stecch/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155543, "urlhaus_id": "3947037", "url": "https://github.com/shademilliage/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 15:07:06 UTC", "discovered_at": "2026-10-09T15:07:06.000Z" }, { "id": 155549, "urlhaus_id": "3947031", "url": "https://cdn.discordapp.com/attachments/1558114186817437841/1558114355260948561/bundle.zip?ex=6aca4292&is=6ac8f112&hm=e36aabee94a40f1c93398f5708dd71cd89f70a2b2e4f0233028f00621b5a5f2e&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 14:52:44 UTC", "discovered_at": "2026-10-09T14:52:44.000Z" }, { "id": 155550, "urlhaus_id": "3947030", "url": "https://cdn.discordapp.com/attachments/1558090546633904308/1558090607027683399/bundle.zip?ex=6aca2c74&is=6ac8daf4&hm=f368654270984309f3f052b7969d1fdafb6fb00f448a68614de3746823cc20a4&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 14:52:27 UTC", "discovered_at": "2026-10-09T14:52:27.000Z" }, { "id": 155551, "urlhaus_id": "3947029", "url": "https://github.com/lanferry/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:14 UTC", "discovered_at": "2026-10-09T14:52:14.000Z" }, { "id": 155552, "urlhaus_id": "3947028", "url": "https://github.com/roverles/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:13 UTC", "discovered_at": "2026-10-09T14:52:13.000Z" }, { "id": 155559, "urlhaus_id": "3947021", "url": "https://github.com/archcalls/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155558, "urlhaus_id": "3947022", "url": "https://github.com/hennisle/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155557, "urlhaus_id": "3947023", "url": "https://github.com/chamysooel/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155556, "urlhaus_id": "3947024", "url": "https://github.com/sevv1lsy/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155555, "urlhaus_id": "3947025", "url": "https://github.com/ELCHAPOGTA/redENGINE-FiveM/raw/HEAD/license.dll", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, dll, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155554, "urlhaus_id": "3947026", "url": "https://github.com/blestoff/Monotone-HWID-Spoofer/raw/HEAD/Monotone.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155553, "urlhaus_id": "3947027", "url": "https://github.com/l3mmn1ia/Temp-Spoofer-LifeTime/raw/HEAD/TempSpoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:09 UTC", "discovered_at": "2026-10-09T14:52:09.000Z" }, { "id": 155571, "urlhaus_id": "3947009", "url": "https://github.com/candyblow/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155570, "urlhaus_id": "3947010", "url": "https://github.com/mineslance/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155569, "urlhaus_id": "3947011", "url": "https://github.com/cansiorly/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155568, "urlhaus_id": "3947012", "url": "https://github.com/gratelond/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155567, "urlhaus_id": "3947013", "url": "https://github.com/derrixhan/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155566, "urlhaus_id": "3947014", "url": "https://github.com/archrace/FiveM-Server-Unban/raw/HEAD/Silentum_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155565, "urlhaus_id": "3947015", "url": "https://github.com/deelcis/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155564, "urlhaus_id": "3947016", "url": "https://github.com/clatths/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155563, "urlhaus_id": "3947017", "url": "https://github.com/mentall1s/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155562, "urlhaus_id": "3947018", "url": "https://github.com/lannher/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155561, "urlhaus_id": "3947019", "url": "https://github.com/lierghs/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155560, "urlhaus_id": "3947020", "url": "https://github.com/bonnylith/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:08 UTC", "discovered_at": "2026-10-09T14:52:08.000Z" }, { "id": 155580, "urlhaus_id": "3947000", "url": "https://github.com/aerosteeld/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155579, "urlhaus_id": "3947001", "url": "https://github.com/enzowipe/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155578, "urlhaus_id": "3947002", "url": "https://github.com/limmadays/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155577, "urlhaus_id": "3947003", "url": "https://github.com/adapp1t/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155576, "urlhaus_id": "3947004", "url": "https://github.com/champywiss/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155575, "urlhaus_id": "3947005", "url": "https://github.com/artlims/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155574, "urlhaus_id": "3947006", "url": "https://emphasis-friday-even-administrator.trycloudflare.com/download/epsi", "host": "emphasis-friday-even-administrator.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "npm, ps1, trycloudflare", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155573, "urlhaus_id": "3947007", "url": "https://github.com/cassiefinney/Roblox-Script-Executor/raw/HEAD/Wave.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155572, "urlhaus_id": "3947008", "url": "https://github.com/dirlands/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:07 UTC", "discovered_at": "2026-10-09T14:52:07.000Z" }, { "id": 155583, "urlhaus_id": "3946997", "url": "https://github.com/hannertMAX/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:06 UTC", "discovered_at": "2026-10-09T14:52:06.000Z" }, { "id": 155582, "urlhaus_id": "3946998", "url": "https://github.com/rarr1ve/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:06 UTC", "discovered_at": "2026-10-09T14:52:06.000Z" }, { "id": 155581, "urlhaus_id": "3946999", "url": "https://github.com/fansyhook/EulenCheats/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 14:52:06 UTC", "discovered_at": "2026-10-09T14:52:06.000Z" }, { "id": 155584, "urlhaus_id": "3946996", "url": "https://duo-strengthening-essex-ian.trycloudflare.com/download/winhost", "host": "duo-strengthening-essex-ian.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "npm, ps1, trycloudflare", "last_online": null, "first_seen": "2026-10-09 14:52:04 UTC", "discovered_at": "2026-10-09T14:52:04.000Z" }, { "id": 155586, "urlhaus_id": "3946994", "url": "https://surround-tough-method-zinc.trycloudflare.com/download/rvxupdate", "host": "surround-tough-method-zinc.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "npm, ps1, trycloudflare", "last_online": null, "first_seen": "2026-10-09 14:52:03 UTC", "discovered_at": "2026-10-09T14:52:03.000Z" }, { "id": 155585, "urlhaus_id": "3946995", "url": "https://surround-tough-method-zinc.trycloudflare.com/download/extupdate", "host": "surround-tough-method-zinc.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "npm, ps1, trycloudflare", "last_online": null, "first_seen": "2026-10-09 14:52:03 UTC", "discovered_at": "2026-10-09T14:52:03.000Z" }, { "id": 155588, "urlhaus_id": "3946992", "url": "http://180.115.166.146:58300/i", "host": "180.115.166.146", "host_ip": "180.115.166.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:07 UTC", "discovered_at": "2026-10-09T14:32:07.000Z" }, { "id": 155587, "urlhaus_id": "3946993", "url": "http://61.52.35.140:40669/i", "host": "61.52.35.140", "host_ip": "61.52.35.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:07 UTC", "discovered_at": "2026-10-09T14:32:07.000Z" }, { "id": 155590, "urlhaus_id": "3946990", "url": "http://175.165.237.83:34866/i", "host": "175.165.237.83", "host_ip": "175.165.237.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:06 UTC", "discovered_at": "2026-10-09T14:32:06.000Z" }, { "id": 155589, "urlhaus_id": "3946991", "url": "http://123.14.36.48:37791/i", "host": "123.14.36.48", "host_ip": "123.14.36.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:06 UTC", "discovered_at": "2026-10-09T14:32:06.000Z" }, { "id": 155592, "urlhaus_id": "3946988", "url": "http://95.15.69.204:38775/bin.sh", "host": "95.15.69.204", "host_ip": "95.15.69.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:05 UTC", "discovered_at": "2026-10-09T14:32:05.000Z" }, { "id": 155591, "urlhaus_id": "3946989", "url": "http://95.15.69.204:38775/i", "host": "95.15.69.204", "host_ip": "95.15.69.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:32:05 UTC", "discovered_at": "2026-10-09T14:32:05.000Z" }, { "id": 155593, "urlhaus_id": "3946987", "url": "http://182.126.90.15:59868/bin.sh", "host": "182.126.90.15", "host_ip": "182.126.90.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 14:23:20 UTC", "discovered_at": "2026-10-09T14:23:20.000Z" }, { "id": 155594, "urlhaus_id": "3946986", "url": "http://146.103.43.194/bins/x86", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:29 UTC", "discovered_at": "2026-10-09T14:17:29.000Z" }, { "id": 155595, "urlhaus_id": "3946985", "url": "http://130.12.180.212/mips", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:24 UTC", "discovered_at": "2026-10-09T14:17:24.000Z" }, { "id": 155600, "urlhaus_id": "3946980", "url": "http://146.103.43.194/bins/ppc", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:23 UTC", "discovered_at": "2026-10-09T14:17:23.000Z" }, { "id": 155599, "urlhaus_id": "3946981", "url": "http://146.103.43.194/bins/mips", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:23 UTC", "discovered_at": "2026-10-09T14:17:23.000Z" }, { "id": 155598, "urlhaus_id": "3946982", "url": "http://130.12.180.212/i686", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:23 UTC", "discovered_at": "2026-10-09T14:17:23.000Z" }, { "id": 155597, "urlhaus_id": "3946983", "url": "http://130.12.180.212/armv5l", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:23 UTC", "discovered_at": "2026-10-09T14:17:23.000Z" }, { "id": 155596, "urlhaus_id": "3946984", "url": "http://130.12.180.212/ppc", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:23 UTC", "discovered_at": "2026-10-09T14:17:23.000Z" }, { "id": 155601, "urlhaus_id": "3946979", "url": "http://146.103.43.194/bins/arm6", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:22 UTC", "discovered_at": "2026-10-09T14:17:22.000Z" }, { "id": 155602, "urlhaus_id": "3946978", "url": "http://220.201.171.252:58022/bin.sh", "host": "220.201.171.252", "host_ip": "220.201.171.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:17:20 UTC", "discovered_at": "2026-10-09T14:17:20.000Z" }, { "id": 155605, "urlhaus_id": "3946975", "url": "http://130.12.180.212/arm5", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:17 UTC", "discovered_at": "2026-10-09T14:17:17.000Z" }, { "id": 155604, "urlhaus_id": "3946976", "url": "http://130.12.180.212/x86-64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:17 UTC", "discovered_at": "2026-10-09T14:17:17.000Z" }, { "id": 155603, "urlhaus_id": "3946977", "url": "http://130.12.180.212/powerpc", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:17 UTC", "discovered_at": "2026-10-09T14:17:17.000Z" }, { "id": 155608, "urlhaus_id": "3946972", "url": "http://130.12.180.212/arm6", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:16 UTC", "discovered_at": "2026-10-09T14:17:16.000Z" }, { "id": 155607, "urlhaus_id": "3946973", "url": "http://130.12.180.212/armv6l", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:16 UTC", "discovered_at": "2026-10-09T14:17:16.000Z" }, { "id": 155606, "urlhaus_id": "3946974", "url": "http://130.12.180.212/arm4", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:16 UTC", "discovered_at": "2026-10-09T14:17:16.000Z" }, { "id": 155611, "urlhaus_id": "3946969", "url": "http://130.12.180.212/armv4l", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:11 UTC", "discovered_at": "2026-10-09T14:17:11.000Z" }, { "id": 155610, "urlhaus_id": "3946970", "url": "http://130.12.180.212/arm7", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:11 UTC", "discovered_at": "2026-10-09T14:17:11.000Z" }, { "id": 155609, "urlhaus_id": "3946971", "url": "http://130.12.180.212/armv7l", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 14:17:11 UTC", "discovered_at": "2026-10-09T14:17:11.000Z" }, { "id": 155612, "urlhaus_id": "3946968", "url": "http://222.138.148.198:59417/bin.sh", "host": "222.138.148.198", "host_ip": "222.138.148.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:17:06 UTC", "discovered_at": "2026-10-09T14:17:06.000Z" }, { "id": 155613, "urlhaus_id": "3946967", "url": "https://raw.githubusercontent.com/Karinatt0/file/d5c3219dfcec05e58843f4c4b6e5bd78cbed634d/img_053520.png", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "remcos", "last_online": null, "first_seen": "2026-10-09 14:03:09 UTC", "discovered_at": "2026-10-09T14:03:09.000Z" }, { "id": 155614, "urlhaus_id": "3946966", "url": "https://raw.githubusercontent.com/Karinatt0/file/d5c3219dfcec05e58843f4c4b6e5bd78cbed634d/img_065109.png", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "remcos", "last_online": null, "first_seen": "2026-10-09 14:03:07 UTC", "discovered_at": "2026-10-09T14:03:07.000Z" }, { "id": 155615, "urlhaus_id": "3946965", "url": "http://112.248.185.24:36088/bin.sh", "host": "112.248.185.24", "host_ip": "112.248.185.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 14:02:06 UTC", "discovered_at": "2026-10-09T14:02:06.000Z" }, { "id": 155616, "urlhaus_id": "3946964", "url": "https://raw.githubusercontent.com/Karinatt0/file/d5c3219dfcec05e58843f4c4b6e5bd78cbed634d/img_015611.png", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "975aecec988399717d32b105ecbd7d70, remcos", "last_online": null, "first_seen": "2026-10-09 14:00:10 UTC", "discovered_at": "2026-10-09T14:00:10.000Z" }, { "id": 155617, "urlhaus_id": "3946963", "url": "https://rough-truth-e072.publicftpresend.workers.dev/dxnobk", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "remcos", "last_online": null, "first_seen": "2026-10-09 14:00:09 UTC", "discovered_at": "2026-10-09T14:00:09.000Z" }, { "id": 155618, "urlhaus_id": "3946962", "url": "http://196.190.69.149:54152/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:47:19 UTC", "discovered_at": "2026-10-09T13:47:19.000Z" }, { "id": 155620, "urlhaus_id": "3946960", "url": "http://182.121.81.61:40929/bin.sh", "host": "182.121.81.61", "host_ip": "182.121.81.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:47:07 UTC", "discovered_at": "2026-10-09T13:47:07.000Z" }, { "id": 155619, "urlhaus_id": "3946961", "url": "http://182.239.81.126:58041/i", "host": "182.239.81.126", "host_ip": "182.239.81.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:47:07 UTC", "discovered_at": "2026-10-09T13:47:07.000Z" }, { "id": 155621, "urlhaus_id": "3946959", "url": "http://182.117.76.136:45205/i", "host": "182.117.76.136", "host_ip": "182.117.76.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 13:41:17 UTC", "discovered_at": "2026-10-09T13:41:17.000Z" }, { "id": 155622, "urlhaus_id": "3946958", "url": "http://196.189.96.59:50231/i", "host": "196.189.96.59", "host_ip": "196.189.96.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:32:06 UTC", "discovered_at": "2026-10-09T13:32:06.000Z" }, { "id": 155623, "urlhaus_id": "3946957", "url": "http://196.206.139.244:56583/i", "host": "196.206.139.244", "host_ip": "196.206.139.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:17:09 UTC", "discovered_at": "2026-10-09T13:17:09.000Z" }, { "id": 155624, "urlhaus_id": "3946956", "url": "https://www.dropbox.com/scl/fi/osoxrcdabdbir95t2nroe/bundle.zip?rlkey=1yutmbqxcbs1xrqzqgvcxiu3j&st=xwbjhv80&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:07:27 UTC", "discovered_at": "2026-10-09T13:07:27.000Z" }, { "id": 155625, "urlhaus_id": "3946955", "url": "https://www.dropbox.com/scl/fi/sxgw5icz1z9uybznqkrys/bundle.zip?rlkey=5h9pn4ve617fzmcyzogt45xtx&st=kvy82hgi&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:07:26 UTC", "discovered_at": "2026-10-09T13:07:26.000Z" }, { "id": 155626, "urlhaus_id": "3946954", "url": "https://www.dropbox.com/scl/fi/73j5kqqa8g7karyf1pl2f/bundle.zip?rlkey=jj0d9efhorrjzys39jw7nuz2t&st=3yj3q2ti&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:07:25 UTC", "discovered_at": "2026-10-09T13:07:25.000Z" }, { "id": 155627, "urlhaus_id": "3946953", "url": "https://cdn.discordapp.com/attachments/1557133169877192734/1557824344401387601/bundle.zip?ex=6ac9347a&is=6ac7e2fa&hm=2a5f26806d9c70a78cb91291d892ac9e9bc378a37ecbe88088c3af02e6eac519&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:07:14 UTC", "discovered_at": "2026-10-09T13:07:14.000Z" }, { "id": 155629, "urlhaus_id": "3946951", "url": "https://www.osmb.net/OSMB.jar", "host": "www.osmb.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CoinMiner, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-09 13:06:31 UTC", "discovered_at": "2026-10-09T13:06:31.000Z" }, { "id": 155628, "urlhaus_id": "3946952", "url": "https://cdn.discordapp.com/attachments/1557944891575762984/1557945395277996133/bundle_2.zip?ex=6ac9a537&is=6ac853b7&hm=6437d45cffc49ae16bc731d5aa1a09e76f71e006877171928c5be1ab33ccb6a5&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:31 UTC", "discovered_at": "2026-10-09T13:06:31.000Z" }, { "id": 155632, "urlhaus_id": "3946948", "url": "https://cdn.discordapp.com/attachments/1555273446441881600/1558075552412344351/bundle_1.zip?ex=6aca1e6f&is=6ac8ccef&hm=c693cad9ae038f0226317909a6df51d7dc5c389429612a19c970e648b9d18a57&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:28 UTC", "discovered_at": "2026-10-09T13:06:28.000Z" }, { "id": 155631, "urlhaus_id": "3946949", "url": "https://gitlab.com/mindgone/eulencheats-fivem/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-09 13:06:28 UTC", "discovered_at": "2026-10-09T13:06:28.000Z" }, { "id": 155630, "urlhaus_id": "3946950", "url": "https://gitlab.com/MysteryBless/fortnite-ragdoll-v2-privcheat-including-softaim-esp-wallhack-triggerbot-and-more/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-09 13:06:28 UTC", "discovered_at": "2026-10-09T13:06:28.000Z" }, { "id": 155633, "urlhaus_id": "3946947", "url": "http://58.47.66.250:44683/bin.sh", "host": "58.47.66.250", "host_ip": "58.47.66.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 13:06:24 UTC", "discovered_at": "2026-10-09T13:06:24.000Z" }, { "id": 155637, "urlhaus_id": "3946943", "url": "http://151.235.22.106:50012/Mozi.m", "host": "151.235.22.106", "host_ip": "151.235.22.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-09 13:06:22 UTC", "discovered_at": "2026-10-09T13:06:22.000Z" }, { "id": 155636, "urlhaus_id": "3946944", "url": "https://gitlab.com/Devilsprite/xeno-executor/-/raw/main/XenoExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-09 13:06:22 UTC", "discovered_at": "2026-10-09T13:06:22.000Z" }, { "id": 155635, "urlhaus_id": "3946945", "url": "https://gitlab.com/AmillyRow/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-09 13:06:22 UTC", "discovered_at": "2026-10-09T13:06:22.000Z" }, { "id": 155634, "urlhaus_id": "3946946", "url": "https://qq.kipsharijan.cfd/prsur", "host": "qq.kipsharijan.cfd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:06:22 UTC", "discovered_at": "2026-10-09T13:06:22.000Z" }, { "id": 155638, "urlhaus_id": "3946942", "url": "https://cdn.discordapp.com/attachments/1519428468599951424/1558057878890221588/bundle.zip?ex=6aca0df9&is=6ac8bc79&hm=c778990da8edb87cc9953a1997b9b988223e71f0dfb4c2aba8061880522c9145&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:16 UTC", "discovered_at": "2026-10-09T13:06:16.000Z" }, { "id": 155640, "urlhaus_id": "3946940", "url": "https://osbot.net/OSBot.jar", "host": "osbot.net", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-09 13:06:15 UTC", "discovered_at": "2026-10-09T13:06:15.000Z" }, { "id": 155639, "urlhaus_id": "3946941", "url": "https://github.com/stylyshconc/Swift-Executor/raw/HEAD/Swift.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:15 UTC", "discovered_at": "2026-10-09T13:06:15.000Z" }, { "id": 155644, "urlhaus_id": "3946936", "url": "https://gitlab.com/Spazedurk/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-09 13:06:14 UTC", "discovered_at": "2026-10-09T13:06:14.000Z" }, { "id": 155643, "urlhaus_id": "3946937", "url": "http://27.215.55.107:33268/bin.sh", "host": "27.215.55.107", "host_ip": "27.215.55.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 13:06:14 UTC", "discovered_at": "2026-10-09T13:06:14.000Z" }, { "id": 155642, "urlhaus_id": "3946938", "url": "https://github.com/voicesinari/Warzone-Dominator/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:14 UTC", "discovered_at": "2026-10-09T13:06:14.000Z" }, { "id": 155641, "urlhaus_id": "3946939", "url": "https://github.com/hallermsy/Exodus-Larp-Tool/raw/HEAD/Exodus.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:14 UTC", "discovered_at": "2026-10-09T13:06:14.000Z" }, { "id": 155646, "urlhaus_id": "3946934", "url": "https://github.com/shellmadys/DMA-Spoofer/raw/HEAD/DMA_Spoofer.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:13 UTC", "discovered_at": "2026-10-09T13:06:13.000Z" }, { "id": 155645, "urlhaus_id": "3946935", "url": "https://cdn.discordapp.com/attachments/1557151123666763786/1557507870440947742/bundle4.zip?backend=b2&ex=6ac80dbd&is=6ac6bc3d&hm=9d9216ccb4b0698324afcbda3711d2f532ca976e1175c12edcde0fa068066530&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:13 UTC", "discovered_at": "2026-10-09T13:06:13.000Z" }, { "id": 155650, "urlhaus_id": "3946930", "url": "https://cdn.discordapp.com/attachments/1555611683316305982/1555632019642515546/bundle.zip?ex=6ac13ab7&is=6abfe937&hm=f78314b38fb572c2ace948cb0068c4d71cd7493b505d47672174a69bbf272fb7&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:11 UTC", "discovered_at": "2026-10-09T13:06:11.000Z" }, { "id": 155649, "urlhaus_id": "3946931", "url": "https://cdn.discordapp.com/attachments/1553488282396926035/1556771267728638023/bundle_3.zip?ex=6ac55fb9&is=6ac40e39&hm=efa2b25ba5e817917e130e8f8c8c8a8ca7bcce83e035074538c4aaafa4e32461&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:11 UTC", "discovered_at": "2026-10-09T13:06:11.000Z" }, { "id": 155648, "urlhaus_id": "3946932", "url": "https://cdn.discordapp.com/attachments/1557151123666763786/1557506286818689064/bundle3.zip?backend=b2&ex=6ac80c43&is=6ac6bac3&hm=9eb18ad120f69df8b9c032049a833bd4d50ef669d2dd08aef02bd98b364960f4&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:11 UTC", "discovered_at": "2026-10-09T13:06:11.000Z" }, { "id": 155647, "urlhaus_id": "3946933", "url": "https://github.com/redhenns/Xeno-Executor/raw/HEAD/Xeno.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:11 UTC", "discovered_at": "2026-10-09T13:06:11.000Z" }, { "id": 155652, "urlhaus_id": "3946928", "url": "https://cdn.discordapp.com/attachments/993236836841422971/1557641602426478682/bundle.zip?ex=6ac88a49&is=6ac738c9&hm=8151c0d825b59b075c4eef4a239d409cd405aed1c4d3d1fa6b5ca015822e7ebc&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:07 UTC", "discovered_at": "2026-10-09T13:06:07.000Z" }, { "id": 155651, "urlhaus_id": "3946929", "url": "https://cdn.discordapp.com/attachments/1303859286715269124/1555998705453371482/bundle.zip?ex=6ac29038&is=6ac13eb8&hm=e6fb2b369bb78799a75be531a2c6c500f194ac5c31d5b46f4441e4ceff52219d&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:07 UTC", "discovered_at": "2026-10-09T13:06:07.000Z" }, { "id": 155657, "urlhaus_id": "3946923", "url": "https://github.com/channYl9/FiveM-External-Cheat/raw/HEAD/Loader.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:06 UTC", "discovered_at": "2026-10-09T13:06:06.000Z" }, { "id": 155656, "urlhaus_id": "3946924", "url": "https://github.com/B3at1z/Umbrella-HWID-Tool/raw/HEAD/Umbrella/Umbrella.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:06 UTC", "discovered_at": "2026-10-09T13:06:06.000Z" }, { "id": 155655, "urlhaus_id": "3946925", "url": "https://cdn.discordapp.com/attachments/1554540331729428512/1554540941933813840/bundle.zip?ex=6abd4292&is=6abbf112&hm=0982d18aca5a6a5abe4f1a55e15681e17db3f66655954508c0c3f0d79c2c9ff8&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:06 UTC", "discovered_at": "2026-10-09T13:06:06.000Z" }, { "id": 155654, "urlhaus_id": "3946926", "url": "https://cdn.discordapp.com/attachments/1557540794322255916/1557547273469304852/DocSend.exe?ex=6ac8326f&is=6ac6e0ef&hm=a63457051c583761f1cec716699654537fd53498bb136ce8a68644779594d09a&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:06 UTC", "discovered_at": "2026-10-09T13:06:06.000Z" }, { "id": 155653, "urlhaus_id": "3946927", "url": "https://cdn.discordapp.com/attachments/752745910659842148/1557611729121312829/bundle_2.zip?ex=6ac86e77&is=6ac71cf7&hm=0f48e7d8f63791c99c8fdfabde15419c91e5e5741110a3a362d68fa7639748b0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:06 UTC", "discovered_at": "2026-10-09T13:06:06.000Z" }, { "id": 155659, "urlhaus_id": "3946921", "url": "https://www.dropbox.com/scl/fi/gya8fwl2yikrrmfhvwc8g/bundle-7.zip?rlkey=l7t8znbg4rgmv33z87ztomvnc&st=pa02mzfs&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:05 UTC", "discovered_at": "2026-10-09T13:06:05.000Z" }, { "id": 155658, "urlhaus_id": "3946922", "url": "https://github.com/jehhn1l/FiveM-Spoofer/raw/HEAD/CFXBypass.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-09 13:06:05 UTC", "discovered_at": "2026-10-09T13:06:05.000Z" }, { "id": 155662, "urlhaus_id": "3946918", "url": "https://cdn.discordapp.com/attachments/447108878963048458/1556697211415568496/bundle.zip?ex=6ac51ac1&is=6ac3c941&hm=d582c4a45d48757252452c2d9050d0cf82209b833f1915a3d912056a63588578&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:04 UTC", "discovered_at": "2026-10-09T13:06:04.000Z" }, { "id": 155661, "urlhaus_id": "3946919", "url": "https://cdn.discordapp.com/attachments/1554681741015392331/1554985138352562306/bundle.zip?ex=6abee043&is=6abd8ec3&hm=56c329e3ff2f1efec739365225dedb588e208d1c7016d5bd7ff3aaecb7b35495&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:04 UTC", "discovered_at": "2026-10-09T13:06:04.000Z" }, { "id": 155660, "urlhaus_id": "3946920", "url": "https://cdn.discordapp.com/attachments/1557035542208712774/1557698845453058160/bundle.zip?ex=6ac8bf99&is=6ac76e19&hm=9fcc0058789315b7cea328c7d341ba2e05fe16aaa8d1d524f2acb68c3e507fe4&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-09 13:06:04 UTC", "discovered_at": "2026-10-09T13:06:04.000Z" }, { "id": 155664, "urlhaus_id": "3946916", "url": "http://115.42.71.239:54178/i", "host": "115.42.71.239", "host_ip": "115.42.71.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:02:06 UTC", "discovered_at": "2026-10-09T13:02:06.000Z" }, { "id": 155663, "urlhaus_id": "3946917", "url": "http://182.239.81.126:58041/bin.sh", "host": "182.239.81.126", "host_ip": "182.239.81.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 13:02:06 UTC", "discovered_at": "2026-10-09T13:02:06.000Z" }, { "id": 155666, "urlhaus_id": "3946914", "url": "http://222.140.156.6:45408/i", "host": "222.140.156.6", "host_ip": "222.140.156.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 12:47:07 UTC", "discovered_at": "2026-10-09T12:47:07.000Z" }, { "id": 155665, "urlhaus_id": "3946915", "url": "http://222.140.156.6:45408/bin.sh", "host": "222.140.156.6", "host_ip": "222.140.156.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 12:47:07 UTC", "discovered_at": "2026-10-09T12:47:07.000Z" }, { "id": 155667, "urlhaus_id": "3946913", "url": "http://115.51.129.41:50321/i", "host": "115.51.129.41", "host_ip": "115.51.129.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 12:30:12 UTC", "discovered_at": "2026-10-09T12:30:12.000Z" }, { "id": 155668, "urlhaus_id": "3946912", "url": "http://42.177.29.94:45783/i", "host": "42.177.29.94", "host_ip": "42.177.29.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 12:08:20 UTC", "discovered_at": "2026-10-09T12:08:20.000Z" }, { "id": 155669, "urlhaus_id": "3946911", "url": "http://115.51.129.41:50321/bin.sh", "host": "115.51.129.41", "host_ip": "115.51.129.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 12:02:19 UTC", "discovered_at": "2026-10-09T12:02:19.000Z" }, { "id": 155670, "urlhaus_id": "3946910", "url": "http://218.16.164.2:36531/i", "host": "218.16.164.2", "host_ip": "218.16.164.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 11:53:20 UTC", "discovered_at": "2026-10-09T11:53:20.000Z" }, { "id": 155671, "urlhaus_id": "3946909", "url": "http://42.57.180.68:33329/i", "host": "42.57.180.68", "host_ip": "42.57.180.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 11:48:18 UTC", "discovered_at": "2026-10-09T11:48:18.000Z" }, { "id": 155672, "urlhaus_id": "3946908", "url": "http://112.240.255.10:44529/bin.sh", "host": "112.240.255.10", "host_ip": "112.240.255.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 11:47:26 UTC", "discovered_at": "2026-10-09T11:47:26.000Z" }, { "id": 155673, "urlhaus_id": "3946907", "url": "http://219.157.2.171:43933/i", "host": "219.157.2.171", "host_ip": "219.157.2.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 11:47:07 UTC", "discovered_at": "2026-10-09T11:47:07.000Z" }, { "id": 155674, "urlhaus_id": "3946906", "url": "http://218.16.164.2:36531/bin.sh", "host": "218.16.164.2", "host_ip": "218.16.164.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 11:26:21 UTC", "discovered_at": "2026-10-09T11:26:21.000Z" }, { "id": 155675, "urlhaus_id": "3946905", "url": "http://182.113.191.78:59405/i", "host": "182.113.191.78", "host_ip": "182.113.191.78", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 11:17:27 UTC", "discovered_at": "2026-10-09T11:17:27.000Z" }, { "id": 155676, "urlhaus_id": "3946904", "url": "http://27.219.118.7:41917/i", "host": "27.219.118.7", "host_ip": "27.219.118.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 11:17:07 UTC", "discovered_at": "2026-10-09T11:17:07.000Z" }, { "id": 155677, "urlhaus_id": "3946903", "url": "http://39.90.186.84:35345/i", "host": "39.90.186.84", "host_ip": "39.90.186.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 11:17:06 UTC", "discovered_at": "2026-10-09T11:17:06.000Z" }, { "id": 155678, "urlhaus_id": "3946902", "url": "http://219.154.155.199:35205/i", "host": "219.154.155.199", "host_ip": "219.154.155.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 11:05:24 UTC", "discovered_at": "2026-10-09T11:05:24.000Z" }, { "id": 155679, "urlhaus_id": "3946901", "url": "http://222.141.142.185:60846/i", "host": "222.141.142.185", "host_ip": "222.141.142.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 11:02:06 UTC", "discovered_at": "2026-10-09T11:02:06.000Z" }, { "id": 155680, "urlhaus_id": "3946900", "url": "https://1rvrental.com/g.php", "host": "1rvrental.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Electron, zip", "last_online": null, "first_seen": "2026-10-09 10:50:20 UTC", "discovered_at": "2026-10-09T10:50:20.000Z" }, { "id": 155681, "urlhaus_id": "3946899", "url": "http://196.189.68.239:57746/Mozi.a", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:49:18 UTC", "discovered_at": "2026-10-09T10:49:18.000Z" }, { "id": 155682, "urlhaus_id": "3946898", "url": "http://5.83.134.80:24331/tadashi.arm7", "host": "5.83.134.80", "host_ip": "5.83.134.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 10:49:05 UTC", "discovered_at": "2026-10-09T10:49:05.000Z" }, { "id": 155683, "urlhaus_id": "3946897", "url": "https://1rvrental.com/r", "host": "1rvrental.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Loader, ps1, stager", "last_online": null, "first_seen": "2026-10-09 10:49:03 UTC", "discovered_at": "2026-10-09T10:49:03.000Z" }, { "id": 155684, "urlhaus_id": "3946896", "url": "http://222.141.142.185:60846/bin.sh", "host": "222.141.142.185", "host_ip": "222.141.142.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:47:12 UTC", "discovered_at": "2026-10-09T10:47:12.000Z" }, { "id": 155685, "urlhaus_id": "3946895", "url": "http://216.126.80.56:43357/i", "host": "216.126.80.56", "host_ip": "216.126.80.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:18 UTC", "discovered_at": "2026-10-09T10:32:18.000Z" }, { "id": 155689, "urlhaus_id": "3946891", "url": "http://218.24.252.208:47504/i", "host": "218.24.252.208", "host_ip": "218.24.252.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:08 UTC", "discovered_at": "2026-10-09T10:32:08.000Z" }, { "id": 155688, "urlhaus_id": "3946892", "url": "http://222.137.146.217:54924/i", "host": "222.137.146.217", "host_ip": "222.137.146.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:08 UTC", "discovered_at": "2026-10-09T10:32:08.000Z" }, { "id": 155687, "urlhaus_id": "3946893", "url": "http://182.121.227.48:39490/i", "host": "182.121.227.48", "host_ip": "182.121.227.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:08 UTC", "discovered_at": "2026-10-09T10:32:08.000Z" }, { "id": 155686, "urlhaus_id": "3946894", "url": "http://222.137.190.185:54184/i", "host": "222.137.190.185", "host_ip": "222.137.190.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:08 UTC", "discovered_at": "2026-10-09T10:32:08.000Z" }, { "id": 155696, "urlhaus_id": "3946884", "url": "http://196.221.145.214:57517/i", "host": "196.221.145.214", "host_ip": "196.221.145.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155695, "urlhaus_id": "3946885", "url": "http://196.189.130.28:35644/i", "host": "196.189.130.28", "host_ip": "196.189.130.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155694, "urlhaus_id": "3946886", "url": "http://182.126.241.26:42073/i", "host": "182.126.241.26", "host_ip": "182.126.241.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155693, "urlhaus_id": "3946887", "url": "http://196.188.75.58:52115/i", "host": "196.188.75.58", "host_ip": "196.188.75.58", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155692, "urlhaus_id": "3946888", "url": "http://196.188.75.58:52115/bin.sh", "host": "196.188.75.58", "host_ip": "196.188.75.58", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155691, "urlhaus_id": "3946889", "url": "http://201.159.91.2:41978/i", "host": "201.159.91.2", "host_ip": "201.159.91.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155690, "urlhaus_id": "3946890", "url": "http://203.204.193.202:59232/i", "host": "203.204.193.202", "host_ip": "203.204.193.202", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:07 UTC", "discovered_at": "2026-10-09T10:32:07.000Z" }, { "id": 155697, "urlhaus_id": "3946883", "url": "http://45.148.148.31:51458/bin.sh", "host": "45.148.148.31", "host_ip": "45.148.148.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:32:05 UTC", "discovered_at": "2026-10-09T10:32:05.000Z" }, { "id": 155698, "urlhaus_id": "3946882", "url": "http://39.65.211.9:41473/bin.sh", "host": "39.65.211.9", "host_ip": "39.65.211.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 10:22:18 UTC", "discovered_at": "2026-10-09T10:22:18.000Z" }, { "id": 155699, "urlhaus_id": "3946881", "url": "http://42.224.11.100:59961/i", "host": "42.224.11.100", "host_ip": "42.224.11.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:17:07 UTC", "discovered_at": "2026-10-09T10:17:07.000Z" }, { "id": 155700, "urlhaus_id": "3946880", "url": "http://175.148.87.105:37309/i", "host": "175.148.87.105", "host_ip": "175.148.87.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 10:02:06 UTC", "discovered_at": "2026-10-09T10:02:06.000Z" }, { "id": 155701, "urlhaus_id": "3946879", "url": "http://42.224.31.7:57893/bin.sh", "host": "42.224.31.7", "host_ip": "42.224.31.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 09:56:08 UTC", "discovered_at": "2026-10-09T09:56:08.000Z" }, { "id": 155702, "urlhaus_id": "3946878", "url": "http://125.40.130.70:57426/i", "host": "125.40.130.70", "host_ip": "125.40.130.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 09:47:12 UTC", "discovered_at": "2026-10-09T09:47:12.000Z" }, { "id": 155704, "urlhaus_id": "3946876", "url": "http://112.248.185.24:36088/i", "host": "112.248.185.24", "host_ip": "112.248.185.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 09:47:06 UTC", "discovered_at": "2026-10-09T09:47:06.000Z" }, { "id": 155703, "urlhaus_id": "3946877", "url": "http://42.230.34.172:50944/bin.sh", "host": "42.230.34.172", "host_ip": "42.230.34.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 09:47:06 UTC", "discovered_at": "2026-10-09T09:47:06.000Z" }, { "id": 155705, "urlhaus_id": "3946875", "url": "http://175.148.87.105:37309/bin.sh", "host": "175.148.87.105", "host_ip": "175.148.87.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 09:36:10 UTC", "discovered_at": "2026-10-09T09:36:10.000Z" }, { "id": 155707, "urlhaus_id": "3946873", "url": "http://42.237.2.4:50883/i", "host": "42.237.2.4", "host_ip": "42.237.2.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 09:32:07 UTC", "discovered_at": "2026-10-09T09:32:07.000Z" }, { "id": 155706, "urlhaus_id": "3946874", "url": "http://125.43.241.16:51611/i", "host": "125.43.241.16", "host_ip": "125.43.241.16", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 09:32:07 UTC", "discovered_at": "2026-10-09T09:32:07.000Z" }, { "id": 155708, "urlhaus_id": "3946872", "url": "http://42.224.31.7:57893/i", "host": "42.224.31.7", "host_ip": "42.224.31.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 09:30:22 UTC", "discovered_at": "2026-10-09T09:30:22.000Z" }, { "id": 155709, "urlhaus_id": "3946871", "url": "http://42.227.190.233:35825/i", "host": "42.227.190.233", "host_ip": "42.227.190.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 09:07:13 UTC", "discovered_at": "2026-10-09T09:07:13.000Z" }, { "id": 155710, "urlhaus_id": "3946870", "url": "http://115.55.32.63:55594/bin.sh", "host": "115.55.32.63", "host_ip": "115.55.32.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 09:01:14 UTC", "discovered_at": "2026-10-09T09:01:14.000Z" }, { "id": 155711, "urlhaus_id": "3946869", "url": "http://119.179.253.121:44046/bin.sh", "host": "119.179.253.121", "host_ip": "119.179.253.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:54:16 UTC", "discovered_at": "2026-10-09T08:54:16.000Z" }, { "id": 155712, "urlhaus_id": "3946868", "url": "http://42.238.170.69:41810/bin.sh", "host": "42.238.170.69", "host_ip": "42.238.170.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:50:22 UTC", "discovered_at": "2026-10-09T08:50:22.000Z" }, { "id": 155713, "urlhaus_id": "3946867", "url": "http://175.165.87.230:58417/i", "host": "175.165.87.230", "host_ip": "175.165.87.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:47:06 UTC", "discovered_at": "2026-10-09T08:47:06.000Z" }, { "id": 155714, "urlhaus_id": "3946866", "url": "http://109.194.28.77:29192/bin.sh", "host": "109.194.28.77", "host_ip": "109.194.28.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:46:08 UTC", "discovered_at": "2026-10-09T08:46:08.000Z" }, { "id": 155715, "urlhaus_id": "3946865", "url": "http://42.227.190.233:35825/bin.sh", "host": "42.227.190.233", "host_ip": "42.227.190.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:40:17 UTC", "discovered_at": "2026-10-09T08:40:17.000Z" }, { "id": 155716, "urlhaus_id": "3946864", "url": "http://172.245.106.144/bins/x86", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, hadoop, web", "last_online": null, "first_seen": "2026-10-09 08:36:22 UTC", "discovered_at": "2026-10-09T08:36:22.000Z" }, { "id": 155717, "urlhaus_id": "3946863", "url": "http://195.178.110.29/d/432936b3a0439572/o/nnnnnede/init.sh2", "host": "195.178.110.29", "host_ip": "195.178.110.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CouchDB, sh", "last_online": null, "first_seen": "2026-10-09 08:36:13 UTC", "discovered_at": "2026-10-09T08:36:13.000Z" }, { "id": 155718, "urlhaus_id": "3946862", "url": "http://195.178.110.29/d/432936b3a0439572/o/nnnnnede/init.sh", "host": "195.178.110.29", "host_ip": "195.178.110.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CouchDB, sh", "last_online": null, "first_seen": "2026-10-09 08:36:12 UTC", "discovered_at": "2026-10-09T08:36:12.000Z" }, { "id": 155719, "urlhaus_id": "3946861", "url": "http://115.48.145.92:32791/i", "host": "115.48.145.92", "host_ip": "115.48.145.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:31:10 UTC", "discovered_at": "2026-10-09T08:31:10.000Z" }, { "id": 155720, "urlhaus_id": "3946860", "url": "http://103.31.103.204:40803/i", "host": "103.31.103.204", "host_ip": "103.31.103.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:17:06 UTC", "discovered_at": "2026-10-09T08:17:06.000Z" }, { "id": 155721, "urlhaus_id": "3946859", "url": "http://117.88.227.121:34379/bin.sh", "host": "117.88.227.121", "host_ip": "117.88.227.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 08:15:19 UTC", "discovered_at": "2026-10-09T08:15:19.000Z" }, { "id": 155722, "urlhaus_id": "3946858", "url": "http://115.48.145.92:32791/bin.sh", "host": "115.48.145.92", "host_ip": "115.48.145.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 08:13:19 UTC", "discovered_at": "2026-10-09T08:13:19.000Z" }, { "id": 155724, "urlhaus_id": "3946856", "url": "http://60.214.23.166:51568/i", "host": "60.214.23.166", "host_ip": "60.214.23.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:02:08 UTC", "discovered_at": "2026-10-09T08:02:08.000Z" }, { "id": 155723, "urlhaus_id": "3946857", "url": "http://105.225.159.210:59819/i", "host": "105.225.159.210", "host_ip": "105.225.159.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:02:08 UTC", "discovered_at": "2026-10-09T08:02:08.000Z" }, { "id": 155727, "urlhaus_id": "3946853", "url": "http://103.31.103.204:40803/bin.sh", "host": "103.31.103.204", "host_ip": "103.31.103.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:02:07 UTC", "discovered_at": "2026-10-09T08:02:07.000Z" }, { "id": 155726, "urlhaus_id": "3946854", "url": "http://125.44.215.216:39964/i", "host": "125.44.215.216", "host_ip": "125.44.215.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:02:07 UTC", "discovered_at": "2026-10-09T08:02:07.000Z" }, { "id": 155725, "urlhaus_id": "3946855", "url": "http://124.6.167.113:52683/i", "host": "124.6.167.113", "host_ip": "124.6.167.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 08:02:07 UTC", "discovered_at": "2026-10-09T08:02:07.000Z" }, { "id": 155728, "urlhaus_id": "3946852", "url": "http://103.238.235.250:9999/wj0s.sh4", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:52:24 UTC", "discovered_at": "2026-10-09T07:52:24.000Z" }, { "id": 155730, "urlhaus_id": "3946850", "url": "http://103.238.235.250:9999/wj0s.arm64", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:52:23 UTC", "discovered_at": "2026-10-09T07:52:23.000Z" }, { "id": 155729, "urlhaus_id": "3946851", "url": "http://103.238.235.250:9999/wj0s.arm7", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:52:23 UTC", "discovered_at": "2026-10-09T07:52:23.000Z" }, { "id": 155733, "urlhaus_id": "3946847", "url": "http://103.238.235.250:9999/wj0s.i686", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:51:20 UTC", "discovered_at": "2026-10-09T07:51:20.000Z" }, { "id": 155732, "urlhaus_id": "3946848", "url": "http://103.238.235.250:9999/wj0s.x86_64", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:51:20 UTC", "discovered_at": "2026-10-09T07:51:20.000Z" }, { "id": 155731, "urlhaus_id": "3946849", "url": "http://103.238.235.250:9999/wj0s.mips", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:51:20 UTC", "discovered_at": "2026-10-09T07:51:20.000Z" }, { "id": 155738, "urlhaus_id": "3946842", "url": "http://146.103.43.194/bins/sh4", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:17 UTC", "discovered_at": "2026-10-09T07:49:17.000Z" }, { "id": 155737, "urlhaus_id": "3946843", "url": "http://146.103.43.194/bins/arm", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:17 UTC", "discovered_at": "2026-10-09T07:49:17.000Z" }, { "id": 155736, "urlhaus_id": "3946844", "url": "http://146.103.43.194/bins/m68k", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:17 UTC", "discovered_at": "2026-10-09T07:49:17.000Z" }, { "id": 155735, "urlhaus_id": "3946845", "url": "http://146.103.43.194/bins/spc", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:17 UTC", "discovered_at": "2026-10-09T07:49:17.000Z" }, { "id": 155734, "urlhaus_id": "3946846", "url": "http://146.103.43.194/bins/arm7", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:17 UTC", "discovered_at": "2026-10-09T07:49:17.000Z" }, { "id": 155739, "urlhaus_id": "3946841", "url": "http://146.103.43.194/bins/mpsl", "host": "146.103.43.194", "host_ip": "146.103.43.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 07:49:15 UTC", "discovered_at": "2026-10-09T07:49:15.000Z" }, { "id": 155740, "urlhaus_id": "3946840", "url": "http://182.119.186.189:39523/i", "host": "182.119.186.189", "host_ip": "182.119.186.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:47:07 UTC", "discovered_at": "2026-10-09T07:47:07.000Z" }, { "id": 155741, "urlhaus_id": "3946839", "url": "http://182.116.122.168:50444/i", "host": "182.116.122.168", "host_ip": "182.116.122.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:47:06 UTC", "discovered_at": "2026-10-09T07:47:06.000Z" }, { "id": 155742, "urlhaus_id": "3946838", "url": "http://101.59.79.119:45459/i", "host": "101.59.79.119", "host_ip": "101.59.79.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:47:05 UTC", "discovered_at": "2026-10-09T07:47:05.000Z" }, { "id": 155743, "urlhaus_id": "3946837", "url": "http://60.18.101.216:57302/i", "host": "60.18.101.216", "host_ip": "60.18.101.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 07:38:19 UTC", "discovered_at": "2026-10-09T07:38:19.000Z" }, { "id": 155744, "urlhaus_id": "3946836", "url": "http://60.18.101.216:57302/bin.sh", "host": "60.18.101.216", "host_ip": "60.18.101.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 07:36:20 UTC", "discovered_at": "2026-10-09T07:36:20.000Z" }, { "id": 155745, "urlhaus_id": "3946835", "url": "http://113.221.98.30:39278/i", "host": "113.221.98.30", "host_ip": "113.221.98.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:32:07 UTC", "discovered_at": "2026-10-09T07:32:07.000Z" }, { "id": 155748, "urlhaus_id": "3946832", "url": "http://60.23.236.49:35040/i", "host": "60.23.236.49", "host_ip": "60.23.236.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:17:07 UTC", "discovered_at": "2026-10-09T07:17:07.000Z" }, { "id": 155747, "urlhaus_id": "3946833", "url": "http://165.98.243.83:57055/i", "host": "165.98.243.83", "host_ip": "165.98.243.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:17:07 UTC", "discovered_at": "2026-10-09T07:17:07.000Z" }, { "id": 155746, "urlhaus_id": "3946834", "url": "http://164.163.26.124:52516/i", "host": "164.163.26.124", "host_ip": "164.163.26.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:17:07 UTC", "discovered_at": "2026-10-09T07:17:07.000Z" }, { "id": 155749, "urlhaus_id": "3946831", "url": "http://89.43.223.227:37974/i", "host": "89.43.223.227", "host_ip": "89.43.223.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 07:17:06 UTC", "discovered_at": "2026-10-09T07:17:06.000Z" }, { "id": 155750, "urlhaus_id": "3946830", "url": "http://91.92.242.236/files-129312398/files/file_146f8720a4894bd8.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 07:10:09 UTC", "discovered_at": "2026-10-09T07:10:09.000Z" }, { "id": 155751, "urlhaus_id": "3946829", "url": "http://130.12.180.212/x86_64", "host": "130.12.180.212", "host_ip": "130.12.180.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 06:40:08 UTC", "discovered_at": "2026-10-09T06:40:08.000Z" }, { "id": 155752, "urlhaus_id": "3946828", "url": "http://109.236.46.199:59235/Mozi.m", "host": "109.236.46.199", "host_ip": "109.236.46.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:40:07 UTC", "discovered_at": "2026-10-09T06:40:07.000Z" }, { "id": 155753, "urlhaus_id": "3946827", "url": "http://182.116.122.168:50444/bin.sh", "host": "182.116.122.168", "host_ip": "182.116.122.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:17:08 UTC", "discovered_at": "2026-10-09T06:17:08.000Z" }, { "id": 155754, "urlhaus_id": "3946826", "url": "http://113.230.51.234:35025/i", "host": "113.230.51.234", "host_ip": "113.230.51.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:17:07 UTC", "discovered_at": "2026-10-09T06:17:07.000Z" }, { "id": 155755, "urlhaus_id": "3946825", "url": "https://drive.google.com/uc?export=download&id=1L_cku7GNkFeUfFiU2VEsvHDZJbSvzJMx", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-09 06:14:14 UTC", "discovered_at": "2026-10-09T06:14:14.000Z" }, { "id": 155756, "urlhaus_id": "3946824", "url": "https://drive.google.com/uc?export=download&id=14oEkhhftO_xx6X0Db-qpZwUl_arXfhIO", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-09 06:10:11 UTC", "discovered_at": "2026-10-09T06:10:11.000Z" }, { "id": 155757, "urlhaus_id": "3946823", "url": "http://stanarcservice.com/asset/update.dat", "host": "stanarcservice.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:10:08 UTC", "discovered_at": "2026-10-09T06:10:08.000Z" }, { "id": 155758, "urlhaus_id": "3946822", "url": "https://stanarcservice.com:8443/payload/18d92fc0860cc33a.bin", "host": "stanarcservice.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:10:07 UTC", "discovered_at": "2026-10-09T06:10:07.000Z" }, { "id": 155759, "urlhaus_id": "3946821", "url": "http://115.58.177.21:40854/bin.sh", "host": "115.58.177.21", "host_ip": "115.58.177.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 06:09:23 UTC", "discovered_at": "2026-10-09T06:09:23.000Z" }, { "id": 155760, "urlhaus_id": "3946820", "url": "http://115.63.78.29:58952/bin.sh", "host": "115.63.78.29", "host_ip": "115.63.78.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 06:06:32 UTC", "discovered_at": "2026-10-09T06:06:32.000Z" }, { "id": 155761, "urlhaus_id": "3946819", "url": "http://219.157.242.174:60770/bin.sh", "host": "219.157.242.174", "host_ip": "219.157.242.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 06:06:26 UTC", "discovered_at": "2026-10-09T06:06:26.000Z" }, { "id": 155762, "urlhaus_id": "3946818", "url": "http://178.128.125.255/bins/mpsl", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:21 UTC", "discovered_at": "2026-10-09T06:06:21.000Z" }, { "id": 155776, "urlhaus_id": "3946804", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/agent-install.sh", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155775, "urlhaus_id": "3946805", "url": "http://203.177.28.149:41726/Mozi.m", "host": "203.177.28.149", "host_ip": "203.177.28.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155774, "urlhaus_id": "3946806", "url": "http://178.128.125.255/bins/x86_64", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155773, "urlhaus_id": "3946807", "url": "http://178.128.125.255/bins/mips", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155772, "urlhaus_id": "3946808", "url": "http://178.128.125.255/bins/arm5", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155771, "urlhaus_id": "3946809", "url": "http://178.128.125.255/bins/arm7", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155770, "urlhaus_id": "3946810", "url": "http://178.128.125.255/bins/ppc", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155769, "urlhaus_id": "3946811", "url": "http://178.128.125.255/bins/x86", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155768, "urlhaus_id": "3946812", "url": "http://178.128.125.255/bins/i686", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155767, "urlhaus_id": "3946813", "url": "http://178.128.125.255/bins/spc", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155766, "urlhaus_id": "3946814", "url": "http://178.128.125.255/bins/arm", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155765, "urlhaus_id": "3946815", "url": "http://178.128.125.255/bins/sh4", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155764, "urlhaus_id": "3946816", "url": "http://178.128.125.255/bins/m68k", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155763, "urlhaus_id": "3946817", "url": "http://178.128.125.255/bins/arm6", "host": "178.128.125.255", "host_ip": "178.128.125.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:20 UTC", "discovered_at": "2026-10-09T06:06:20.000Z" }, { "id": 155777, "urlhaus_id": "3946803", "url": "http://103.249.199.5:53439/bin.sh", "host": "103.249.199.5", "host_ip": "103.249.199.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 06:06:17 UTC", "discovered_at": "2026-10-09T06:06:17.000Z" }, { "id": 155778, "urlhaus_id": "3946802", "url": "http://83.168.110.123:8080/payload/1ay0eknhal4o/6lpiz8.sh", "host": "83.168.110.123", "host_ip": "83.168.110.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "83-168-110-123, cowrie, honeypot, sh", "last_online": null, "first_seen": "2026-10-09 06:06:16 UTC", "discovered_at": "2026-10-09T06:06:16.000Z" }, { "id": 155785, "urlhaus_id": "3946795", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/collector-linux-arm64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155784, "urlhaus_id": "3946796", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/collector-linux-x64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155783, "urlhaus_id": "3946797", "url": "https://gitlab.com/mogh739/static-assets/-/raw/main/collector-linux-arm64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155782, "urlhaus_id": "3946798", "url": "https://gitlab.com/mogh739/static-assets/-/raw/main/agentd-linux-arm64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155781, "urlhaus_id": "3946799", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/agentd-linux-x64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155780, "urlhaus_id": "3946800", "url": "https://gitlab.com/mogh739/static-assets/-/raw/main/agent-install.sh", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155779, "urlhaus_id": "3946801", "url": "https://gitlab.com/mogh739/static-assets/-/raw/main/collector-linux-x64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:15 UTC", "discovered_at": "2026-10-09T06:06:15.000Z" }, { "id": 155786, "urlhaus_id": "3946794", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/agentd-linux-arm64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:13 UTC", "discovered_at": "2026-10-09T06:06:13.000Z" }, { "id": 155787, "urlhaus_id": "3946793", "url": "http://111.14.169.186:63698/Mozi.m", "host": "111.14.169.186", "host_ip": "111.14.169.186", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:11 UTC", "discovered_at": "2026-10-09T06:06:11.000Z" }, { "id": 155789, "urlhaus_id": "3946791", "url": "https://gitlab.com/mogh739/static-assets/-/raw/main/agentd-linux-x64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:09 UTC", "discovered_at": "2026-10-09T06:06:09.000Z" }, { "id": 155788, "urlhaus_id": "3946792", "url": "http://103.238.235.250:9999/wj0s.arm", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 06:06:09 UTC", "discovered_at": "2026-10-09T06:06:09.000Z" }, { "id": 155790, "urlhaus_id": "3946790", "url": "https://gitlab.com/mogh739/metrics-agents/-/raw/main/collector-legacy-linux-x64", "host": "gitlab.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-09 06:06:08 UTC", "discovered_at": "2026-10-09T06:06:08.000Z" }, { "id": 155793, "urlhaus_id": "3946787", "url": "http://109.123.243.121/payload.sh", "host": "109.123.243.121", "host_ip": "109.123.243.121", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot, nsvps-soc", "last_online": null, "first_seen": "2026-10-09 06:06:07 UTC", "discovered_at": "2026-10-09T06:06:07.000Z" }, { "id": 155792, "urlhaus_id": "3946788", "url": "http://112.198.179.93:56538/Mozi.m", "host": "112.198.179.93", "host_ip": "112.198.179.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:07 UTC", "discovered_at": "2026-10-09T06:06:07.000Z" }, { "id": 155791, "urlhaus_id": "3946789", "url": "http://103.238.235.250:9999/lol.sh", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 06:06:07 UTC", "discovered_at": "2026-10-09T06:06:07.000Z" }, { "id": 155795, "urlhaus_id": "3946785", "url": "https://media.discordapp.net/attachments/1557973486176043018/1557974426660905030/BetterSurvival.jar?ex=6ac9c041&is=6ac86ec1&hm=9436b20ab3fc47cc6db0eb41943bc7cf49a68f1bf0b10e89fa539b3aa9e38e55&", "host": "media.discordapp.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 06:06:06 UTC", "discovered_at": "2026-10-09T06:06:06.000Z" }, { "id": 155794, "urlhaus_id": "3946786", "url": "http://w5q.eu/eclipse.mips", "host": "w5q.eu", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 06:06:06 UTC", "discovered_at": "2026-10-09T06:06:06.000Z" }, { "id": 155796, "urlhaus_id": "3946784", "url": "http://182.116.115.77:46115/bin.sh", "host": "182.116.115.77", "host_ip": "182.116.115.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-09 06:05:20 UTC", "discovered_at": "2026-10-09T06:05:20.000Z" }, { "id": 155797, "urlhaus_id": "3946783", "url": "https://qwfwhg4.lol/api/download.php", "host": "qwfwhg4.lol", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "android, apk", "last_online": null, "first_seen": "2026-10-09 06:05:13 UTC", "discovered_at": "2026-10-09T06:05:13.000Z" }, { "id": 155798, "urlhaus_id": "3946782", "url": "http://103.238.235.250:9999/telnet.sh", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-09 06:05:08 UTC", "discovered_at": "2026-10-09T06:05:08.000Z" }, { "id": 155799, "urlhaus_id": "3946781", "url": "http://182.120.3.227:56821/i", "host": "182.120.3.227", "host_ip": "182.120.3.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 06:04:22 UTC", "discovered_at": "2026-10-09T06:04:22.000Z" }, { "id": 155800, "urlhaus_id": "3946780", "url": "http://27.215.89.229:49916/i", "host": "27.215.89.229", "host_ip": "27.215.89.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 05:51:17 UTC", "discovered_at": "2026-10-09T05:51:17.000Z" }, { "id": 155801, "urlhaus_id": "3946779", "url": "http://113.230.51.234:35025/bin.sh", "host": "113.230.51.234", "host_ip": "113.230.51.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:47:20 UTC", "discovered_at": "2026-10-09T05:47:20.000Z" }, { "id": 155802, "urlhaus_id": "3946778", "url": "http://105.225.46.193:36959/bin.sh", "host": "105.225.46.193", "host_ip": "105.225.46.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 05:42:21 UTC", "discovered_at": "2026-10-09T05:42:21.000Z" }, { "id": 155803, "urlhaus_id": "3946777", "url": "http://182.123.192.144:51851/i", "host": "182.123.192.144", "host_ip": "182.123.192.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:32:07 UTC", "discovered_at": "2026-10-09T05:32:07.000Z" }, { "id": 155804, "urlhaus_id": "3946776", "url": "http://182.120.3.227:56821/bin.sh", "host": "182.120.3.227", "host_ip": "182.120.3.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 05:31:12 UTC", "discovered_at": "2026-10-09T05:31:12.000Z" }, { "id": 155805, "urlhaus_id": "3946775", "url": "http://222.141.112.238:57491/bin.sh", "host": "222.141.112.238", "host_ip": "222.141.112.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 05:28:16 UTC", "discovered_at": "2026-10-09T05:28:16.000Z" }, { "id": 155806, "urlhaus_id": "3946774", "url": "http://42.238.210.76:52727/bin.sh", "host": "42.238.210.76", "host_ip": "42.238.210.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:17:08 UTC", "discovered_at": "2026-10-09T05:17:08.000Z" }, { "id": 155808, "urlhaus_id": "3946772", "url": "http://42.230.54.79:40150/i", "host": "42.230.54.79", "host_ip": "42.230.54.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:17:07 UTC", "discovered_at": "2026-10-09T05:17:07.000Z" }, { "id": 155807, "urlhaus_id": "3946773", "url": "http://42.238.210.76:52727/i", "host": "42.238.210.76", "host_ip": "42.238.210.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:17:07 UTC", "discovered_at": "2026-10-09T05:17:07.000Z" }, { "id": 155809, "urlhaus_id": "3946771", "url": "http://123.9.203.45:54662/i", "host": "123.9.203.45", "host_ip": "123.9.203.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 05:14:13 UTC", "discovered_at": "2026-10-09T05:14:13.000Z" }, { "id": 155810, "urlhaus_id": "3946770", "url": "http://123.11.75.204:38495/i", "host": "123.11.75.204", "host_ip": "123.11.75.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 05:05:16 UTC", "discovered_at": "2026-10-09T05:05:16.000Z" }, { "id": 155811, "urlhaus_id": "3946769", "url": "http://180.103.174.195:47196/i", "host": "180.103.174.195", "host_ip": "180.103.174.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 05:02:06 UTC", "discovered_at": "2026-10-09T05:02:06.000Z" }, { "id": 155812, "urlhaus_id": "3946768", "url": "http://116.140.187.113:44269/bin.sh", "host": "116.140.187.113", "host_ip": "116.140.187.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 05:01:22 UTC", "discovered_at": "2026-10-09T05:01:22.000Z" }, { "id": 155813, "urlhaus_id": "3946767", "url": "http://196.191.104.40:46981/i", "host": "196.191.104.40", "host_ip": "196.191.104.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:47:06 UTC", "discovered_at": "2026-10-09T04:47:06.000Z" }, { "id": 155814, "urlhaus_id": "3946766", "url": "http://123.9.203.45:54662/bin.sh", "host": "123.9.203.45", "host_ip": "123.9.203.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 04:45:24 UTC", "discovered_at": "2026-10-09T04:45:24.000Z" }, { "id": 155815, "urlhaus_id": "3946765", "url": "http://91.92.242.236/files-129312398/files/file_27539cb69c52484f.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-09 04:25:06 UTC", "discovered_at": "2026-10-09T04:25:06.000Z" }, { "id": 155816, "urlhaus_id": "3946764", "url": "http://27.215.215.163:37611/i", "host": "27.215.215.163", "host_ip": "27.215.215.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:17:05 UTC", "discovered_at": "2026-10-09T04:17:05.000Z" }, { "id": 155817, "urlhaus_id": "3946763", "url": "http://42.4.127.9:48434/bin.sh", "host": "42.4.127.9", "host_ip": "42.4.127.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:02:20 UTC", "discovered_at": "2026-10-09T04:02:20.000Z" }, { "id": 155818, "urlhaus_id": "3946762", "url": "http://37.48.148.108:60557/i", "host": "37.48.148.108", "host_ip": "37.48.148.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:02:09 UTC", "discovered_at": "2026-10-09T04:02:09.000Z" }, { "id": 155820, "urlhaus_id": "3946760", "url": "http://105.186.181.226:43697/i", "host": "105.186.181.226", "host_ip": "105.186.181.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:02:07 UTC", "discovered_at": "2026-10-09T04:02:07.000Z" }, { "id": 155819, "urlhaus_id": "3946761", "url": "http://219.156.119.243:37129/i", "host": "219.156.119.243", "host_ip": "219.156.119.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:02:07 UTC", "discovered_at": "2026-10-09T04:02:07.000Z" }, { "id": 155821, "urlhaus_id": "3946759", "url": "http://42.177.29.94:45783/bin.sh", "host": "42.177.29.94", "host_ip": "42.177.29.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 04:02:06 UTC", "discovered_at": "2026-10-09T04:02:06.000Z" }, { "id": 155822, "urlhaus_id": "3946758", "url": "http://222.138.216.248:49409/i", "host": "222.138.216.248", "host_ip": "222.138.216.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 03:57:19 UTC", "discovered_at": "2026-10-09T03:57:19.000Z" }, { "id": 155823, "urlhaus_id": "3946757", "url": "http://182.127.120.193:37721/bin.sh", "host": "182.127.120.193", "host_ip": "182.127.120.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 03:54:06 UTC", "discovered_at": "2026-10-09T03:54:06.000Z" }, { "id": 155824, "urlhaus_id": "3946756", "url": "http://103.249.199.5:53439/i", "host": "103.249.199.5", "host_ip": "103.249.199.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:47:09 UTC", "discovered_at": "2026-10-09T03:47:09.000Z" }, { "id": 155827, "urlhaus_id": "3946753", "url": "http://151.237.28.235:18623/i", "host": "151.237.28.235", "host_ip": "151.237.28.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:47:07 UTC", "discovered_at": "2026-10-09T03:47:07.000Z" }, { "id": 155826, "urlhaus_id": "3946754", "url": "http://196.191.104.40:46981/bin.sh", "host": "196.191.104.40", "host_ip": "196.191.104.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:47:07 UTC", "discovered_at": "2026-10-09T03:47:07.000Z" }, { "id": 155825, "urlhaus_id": "3946755", "url": "http://175.165.86.250:39489/bin.sh", "host": "175.165.86.250", "host_ip": "175.165.86.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:47:07 UTC", "discovered_at": "2026-10-09T03:47:07.000Z" }, { "id": 155830, "urlhaus_id": "3946750", "url": "http://160.176.170.101:36032/i", "host": "160.176.170.101", "host_ip": "160.176.170.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:32:07 UTC", "discovered_at": "2026-10-09T03:32:07.000Z" }, { "id": 155829, "urlhaus_id": "3946751", "url": "http://210.97.100.192:51555/i", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:32:07 UTC", "discovered_at": "2026-10-09T03:32:07.000Z" }, { "id": 155828, "urlhaus_id": "3946752", "url": "http://182.117.146.213:35245/i", "host": "182.117.146.213", "host_ip": "182.117.146.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:32:07 UTC", "discovered_at": "2026-10-09T03:32:07.000Z" }, { "id": 155831, "urlhaus_id": "3946749", "url": "http://125.45.65.12:34395/i", "host": "125.45.65.12", "host_ip": "125.45.65.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 03:31:20 UTC", "discovered_at": "2026-10-09T03:31:20.000Z" }, { "id": 155832, "urlhaus_id": "3946748", "url": "http://60.22.8.194:38407/i", "host": "60.22.8.194", "host_ip": "60.22.8.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 03:27:12 UTC", "discovered_at": "2026-10-09T03:27:12.000Z" }, { "id": 155834, "urlhaus_id": "3946746", "url": "http://42.224.67.128:57018/i", "host": "42.224.67.128", "host_ip": "42.224.67.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:17:07 UTC", "discovered_at": "2026-10-09T03:17:07.000Z" }, { "id": 155833, "urlhaus_id": "3946747", "url": "http://27.215.176.193:56630/i", "host": "27.215.176.193", "host_ip": "27.215.176.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:17:07 UTC", "discovered_at": "2026-10-09T03:17:07.000Z" }, { "id": 155837, "urlhaus_id": "3946743", "url": "http://27.215.215.163:37611/bin.sh", "host": "27.215.215.163", "host_ip": "27.215.215.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:17:06 UTC", "discovered_at": "2026-10-09T03:17:06.000Z" }, { "id": 155836, "urlhaus_id": "3946744", "url": "http://42.7.122.114:58373/i", "host": "42.7.122.114", "host_ip": "42.7.122.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:17:06 UTC", "discovered_at": "2026-10-09T03:17:06.000Z" }, { "id": 155835, "urlhaus_id": "3946745", "url": "http://42.52.173.208:41569/bin.sh", "host": "42.52.173.208", "host_ip": "42.52.173.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:17:06 UTC", "discovered_at": "2026-10-09T03:17:06.000Z" }, { "id": 155838, "urlhaus_id": "3946742", "url": "http://125.45.65.12:34395/bin.sh", "host": "125.45.65.12", "host_ip": "125.45.65.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 03:14:11 UTC", "discovered_at": "2026-10-09T03:14:11.000Z" }, { "id": 155839, "urlhaus_id": "3946741", "url": "http://59.58.106.125:59098/bin.sh", "host": "59.58.106.125", "host_ip": "59.58.106.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 03:12:11 UTC", "discovered_at": "2026-10-09T03:12:11.000Z" }, { "id": 155840, "urlhaus_id": "3946740", "url": "http://175.146.225.101:55108/i", "host": "175.146.225.101", "host_ip": "175.146.225.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:02:08 UTC", "discovered_at": "2026-10-09T03:02:08.000Z" }, { "id": 155844, "urlhaus_id": "3946736", "url": "http://105.225.46.193:36959/i", "host": "105.225.46.193", "host_ip": "105.225.46.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:02:07 UTC", "discovered_at": "2026-10-09T03:02:07.000Z" }, { "id": 155843, "urlhaus_id": "3946737", "url": "http://114.198.242.174:39288/i", "host": "114.198.242.174", "host_ip": "114.198.242.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:02:07 UTC", "discovered_at": "2026-10-09T03:02:07.000Z" }, { "id": 155842, "urlhaus_id": "3946738", "url": "http://164.163.25.203:58731/i", "host": "164.163.25.203", "host_ip": "164.163.25.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:02:07 UTC", "discovered_at": "2026-10-09T03:02:07.000Z" }, { "id": 155841, "urlhaus_id": "3946739", "url": "http://175.11.133.35:55834/i", "host": "175.11.133.35", "host_ip": "175.11.133.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 03:02:07 UTC", "discovered_at": "2026-10-09T03:02:07.000Z" }, { "id": 155845, "urlhaus_id": "3946735", "url": "http://2.85.58.246:49503/bin.sh", "host": "2.85.58.246", "host_ip": "2.85.58.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 03:00:19 UTC", "discovered_at": "2026-10-09T03:00:19.000Z" }, { "id": 155846, "urlhaus_id": "3946734", "url": "http://115.56.152.220:41316/i", "host": "115.56.152.220", "host_ip": "115.56.152.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 02:51:08 UTC", "discovered_at": "2026-10-09T02:51:08.000Z" }, { "id": 155847, "urlhaus_id": "3946733", "url": "http://182.112.28.160:37630/i", "host": "182.112.28.160", "host_ip": "182.112.28.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:47:08 UTC", "discovered_at": "2026-10-09T02:47:08.000Z" }, { "id": 155848, "urlhaus_id": "3946732", "url": "http://182.121.81.61:40929/i", "host": "182.121.81.61", "host_ip": "182.121.81.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:47:07 UTC", "discovered_at": "2026-10-09T02:47:07.000Z" }, { "id": 155851, "urlhaus_id": "3946729", "url": "http://196.151.248.162:47591/i", "host": "196.151.248.162", "host_ip": "196.151.248.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:47:06 UTC", "discovered_at": "2026-10-09T02:47:06.000Z" }, { "id": 155850, "urlhaus_id": "3946730", "url": "http://103.190.23.91:38586/bin.sh", "host": "103.190.23.91", "host_ip": "103.190.23.91", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:47:06 UTC", "discovered_at": "2026-10-09T02:47:06.000Z" }, { "id": 155849, "urlhaus_id": "3946731", "url": "http://182.114.33.57:43016/i", "host": "182.114.33.57", "host_ip": "182.114.33.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:47:06 UTC", "discovered_at": "2026-10-09T02:47:06.000Z" }, { "id": 155852, "urlhaus_id": "3946728", "url": "http://116.209.183.7:51681/bin.sh", "host": "116.209.183.7", "host_ip": "116.209.183.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 02:44:18 UTC", "discovered_at": "2026-10-09T02:44:18.000Z" }, { "id": 155854, "urlhaus_id": "3946726", "url": "http://196.151.248.162:47591/bin.sh", "host": "196.151.248.162", "host_ip": "196.151.248.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:32:06 UTC", "discovered_at": "2026-10-09T02:32:06.000Z" }, { "id": 155853, "urlhaus_id": "3946727", "url": "http://182.127.120.193:37721/i", "host": "182.127.120.193", "host_ip": "182.127.120.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:32:06 UTC", "discovered_at": "2026-10-09T02:32:06.000Z" }, { "id": 155855, "urlhaus_id": "3946725", "url": "http://115.56.152.220:41316/bin.sh", "host": "115.56.152.220", "host_ip": "115.56.152.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 02:24:09 UTC", "discovered_at": "2026-10-09T02:24:09.000Z" }, { "id": 155857, "urlhaus_id": "3946723", "url": "http://42.6.56.231:34029/bin.sh", "host": "42.6.56.231", "host_ip": "42.6.56.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:18:07 UTC", "discovered_at": "2026-10-09T02:18:07.000Z" }, { "id": 155856, "urlhaus_id": "3946724", "url": "http://42.85.162.250:52853/i", "host": "42.85.162.250", "host_ip": "42.85.162.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:18:07 UTC", "discovered_at": "2026-10-09T02:18:07.000Z" }, { "id": 155858, "urlhaus_id": "3946722", "url": "http://42.7.84.109:37440/i", "host": "42.7.84.109", "host_ip": "42.7.84.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:17:08 UTC", "discovered_at": "2026-10-09T02:17:08.000Z" }, { "id": 155859, "urlhaus_id": "3946721", "url": "http://42.7.84.109:37440/bin.sh", "host": "42.7.84.109", "host_ip": "42.7.84.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:17:07 UTC", "discovered_at": "2026-10-09T02:17:07.000Z" }, { "id": 155860, "urlhaus_id": "3946720", "url": "http://42.224.67.128:57018/bin.sh", "host": "42.224.67.128", "host_ip": "42.224.67.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:17:06 UTC", "discovered_at": "2026-10-09T02:17:06.000Z" }, { "id": 155861, "urlhaus_id": "3946719", "url": "http://115.63.51.182:33921/i", "host": "115.63.51.182", "host_ip": "115.63.51.182", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 02:03:18 UTC", "discovered_at": "2026-10-09T02:03:18.000Z" }, { "id": 155862, "urlhaus_id": "3946718", "url": "http://183.35.50.185:40190/i", "host": "183.35.50.185", "host_ip": "183.35.50.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:02:20 UTC", "discovered_at": "2026-10-09T02:02:20.000Z" }, { "id": 155863, "urlhaus_id": "3946717", "url": "http://182.127.26.104:52057/i", "host": "182.127.26.104", "host_ip": "182.127.26.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:02:07 UTC", "discovered_at": "2026-10-09T02:02:07.000Z" }, { "id": 155864, "urlhaus_id": "3946716", "url": "http://196.191.233.24:49000/bin.sh", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 02:02:06 UTC", "discovered_at": "2026-10-09T02:02:06.000Z" }, { "id": 155865, "urlhaus_id": "3946715", "url": "http://220.161.100.72:39073/i", "host": "220.161.100.72", "host_ip": "220.161.100.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:47:10 UTC", "discovered_at": "2026-10-09T01:47:10.000Z" }, { "id": 155866, "urlhaus_id": "3946714", "url": "http://219.156.63.39:37547/bin.sh", "host": "219.156.63.39", "host_ip": "219.156.63.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:47:08 UTC", "discovered_at": "2026-10-09T01:47:08.000Z" }, { "id": 155867, "urlhaus_id": "3946713", "url": "http://219.156.63.39:37547/i", "host": "219.156.63.39", "host_ip": "219.156.63.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:47:07 UTC", "discovered_at": "2026-10-09T01:47:07.000Z" }, { "id": 155869, "urlhaus_id": "3946711", "url": "http://196.191.233.24:49000/i", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:47:06 UTC", "discovered_at": "2026-10-09T01:47:06.000Z" }, { "id": 155868, "urlhaus_id": "3946712", "url": "http://103.111.23.12:49200/bin.sh", "host": "103.111.23.12", "host_ip": "103.111.23.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:47:06 UTC", "discovered_at": "2026-10-09T01:47:06.000Z" }, { "id": 155870, "urlhaus_id": "3946710", "url": "http://218.16.164.236:37269/i", "host": "218.16.164.236", "host_ip": "218.16.164.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 01:45:20 UTC", "discovered_at": "2026-10-09T01:45:20.000Z" }, { "id": 155871, "urlhaus_id": "3946709", "url": "http://125.47.218.42:37337/bin.sh", "host": "125.47.218.42", "host_ip": "125.47.218.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 01:33:13 UTC", "discovered_at": "2026-10-09T01:33:13.000Z" }, { "id": 155875, "urlhaus_id": "3946705", "url": "http://176.65.139.231/bins/morte.m68k", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:21 UTC", "discovered_at": "2026-10-09T01:21:21.000Z" }, { "id": 155874, "urlhaus_id": "3946706", "url": "http://176.65.139.231/bins/morte.ppc", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:21 UTC", "discovered_at": "2026-10-09T01:21:21.000Z" }, { "id": 155873, "urlhaus_id": "3946707", "url": "http://176.65.139.231/mirai.mips", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:21 UTC", "discovered_at": "2026-10-09T01:21:21.000Z" }, { "id": 155872, "urlhaus_id": "3946708", "url": "http://176.65.139.231/bins/morte.sh4", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:21 UTC", "discovered_at": "2026-10-09T01:21:21.000Z" }, { "id": 155879, "urlhaus_id": "3946701", "url": "http://176.65.139.231/bins/morte.x86", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:17 UTC", "discovered_at": "2026-10-09T01:21:17.000Z" }, { "id": 155878, "urlhaus_id": "3946702", "url": "http://176.65.139.231/bins/morte.arc", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:17 UTC", "discovered_at": "2026-10-09T01:21:17.000Z" }, { "id": 155877, "urlhaus_id": "3946703", "url": "http://176.65.139.231/bins/morte.mpsl", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:17 UTC", "discovered_at": "2026-10-09T01:21:17.000Z" }, { "id": 155876, "urlhaus_id": "3946704", "url": "http://176.65.139.231/bins/morte.mips", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:17 UTC", "discovered_at": "2026-10-09T01:21:17.000Z" }, { "id": 155887, "urlhaus_id": "3946693", "url": "http://176.65.139.231/mirai.arm5n", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155886, "urlhaus_id": "3946694", "url": "http://176.65.139.231/bins/morte.arm", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155885, "urlhaus_id": "3946695", "url": "http://176.65.139.231/mirai.arm", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155884, "urlhaus_id": "3946696", "url": "http://176.65.139.231/bins/morte.arm5", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155883, "urlhaus_id": "3946697", "url": "http://176.65.139.231/bins/morte.i686", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155882, "urlhaus_id": "3946698", "url": "http://176.65.139.231/bins/morte.arm7", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155881, "urlhaus_id": "3946699", "url": "http://176.65.139.231/bins/morte.spc", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155880, "urlhaus_id": "3946700", "url": "http://176.65.139.231/mirai.x86", "host": "176.65.139.231", "host_ip": "176.65.139.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-09 01:21:16 UTC", "discovered_at": "2026-10-09T01:21:16.000Z" }, { "id": 155888, "urlhaus_id": "3946692", "url": "http://218.16.164.236:37269/bin.sh", "host": "218.16.164.236", "host_ip": "218.16.164.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 01:19:20 UTC", "discovered_at": "2026-10-09T01:19:20.000Z" }, { "id": 155889, "urlhaus_id": "3946691", "url": "http://41.216.226.77:51974/bin.sh", "host": "41.216.226.77", "host_ip": "41.216.226.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:17:09 UTC", "discovered_at": "2026-10-09T01:17:09.000Z" }, { "id": 155891, "urlhaus_id": "3946689", "url": "http://222.127.50.108:41701/i", "host": "222.127.50.108", "host_ip": "222.127.50.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:17:07 UTC", "discovered_at": "2026-10-09T01:17:07.000Z" }, { "id": 155890, "urlhaus_id": "3946690", "url": "http://222.127.76.40:53819/bin.sh", "host": "222.127.76.40", "host_ip": "222.127.76.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:17:07 UTC", "discovered_at": "2026-10-09T01:17:07.000Z" }, { "id": 155892, "urlhaus_id": "3946688", "url": "http://60.186.138.183:49835/i", "host": "60.186.138.183", "host_ip": "60.186.138.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 01:12:14 UTC", "discovered_at": "2026-10-09T01:12:14.000Z" }, { "id": 155893, "urlhaus_id": "3946687", "url": "http://115.196.0.230:36365/i", "host": "115.196.0.230", "host_ip": "115.196.0.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:03:07 UTC", "discovered_at": "2026-10-09T01:03:07.000Z" }, { "id": 155894, "urlhaus_id": "3946686", "url": "http://222.127.251.163:45969/i", "host": "222.127.251.163", "host_ip": "222.127.251.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:02:08 UTC", "discovered_at": "2026-10-09T01:02:08.000Z" }, { "id": 155895, "urlhaus_id": "3946685", "url": "http://222.127.254.114:34922/i", "host": "222.127.254.114", "host_ip": "222.127.254.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 01:02:07 UTC", "discovered_at": "2026-10-09T01:02:07.000Z" }, { "id": 155896, "urlhaus_id": "3946684", "url": "http://42.230.18.23:47822/bin.sh", "host": "42.230.18.23", "host_ip": "42.230.18.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-09 00:47:32 UTC", "discovered_at": "2026-10-09T00:47:32.000Z" }, { "id": 155897, "urlhaus_id": "3946683", "url": "http://39.63.157.145:33041/i", "host": "39.63.157.145", "host_ip": "39.63.157.145", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:47:18 UTC", "discovered_at": "2026-10-09T00:47:18.000Z" }, { "id": 155898, "urlhaus_id": "3946682", "url": "http://222.141.133.202:47343/i", "host": "222.141.133.202", "host_ip": "222.141.133.202", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:47:08 UTC", "discovered_at": "2026-10-09T00:47:08.000Z" }, { "id": 155899, "urlhaus_id": "3946681", "url": "http://42.228.247.173:33303/i", "host": "42.228.247.173", "host_ip": "42.228.247.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:47:07 UTC", "discovered_at": "2026-10-09T00:47:07.000Z" }, { "id": 155900, "urlhaus_id": "3946680", "url": "http://42.235.92.138:40407/i", "host": "42.235.92.138", "host_ip": "42.235.92.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:32:06 UTC", "discovered_at": "2026-10-09T00:32:06.000Z" }, { "id": 155901, "urlhaus_id": "3946679", "url": "http://125.46.198.140:35535/bin.sh", "host": "125.46.198.140", "host_ip": "125.46.198.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 00:29:16 UTC", "discovered_at": "2026-10-09T00:29:16.000Z" }, { "id": 155902, "urlhaus_id": "3946678", "url": "http://42.238.170.69:41810/i", "host": "42.238.170.69", "host_ip": "42.238.170.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:17:09 UTC", "discovered_at": "2026-10-09T00:17:09.000Z" }, { "id": 155903, "urlhaus_id": "3946677", "url": "http://42.57.164.151:60901/i", "host": "42.57.164.151", "host_ip": "42.57.164.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-09 00:17:06 UTC", "discovered_at": "2026-10-09T00:17:06.000Z" }, { "id": 155904, "urlhaus_id": "3946676", "url": "http://60.186.138.183:49835/bin.sh", "host": "60.186.138.183", "host_ip": "60.186.138.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 00:15:19 UTC", "discovered_at": "2026-10-09T00:15:19.000Z" }, { "id": 155905, "urlhaus_id": "3946675", "url": "http://193.163.187.224:41355/bin.sh", "host": "193.163.187.224", "host_ip": "193.163.187.224", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-09 00:02:17 UTC", "discovered_at": "2026-10-09T00:02:17.000Z" }, { "id": 155906, "urlhaus_id": "3946674", "url": "http://59.180.141.251:37929/i", "host": "59.180.141.251", "host_ip": "59.180.141.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 23:47:26 UTC", "discovered_at": "2026-10-08T23:47:26.000Z" }, { "id": 155908, "urlhaus_id": "3946672", "url": "http://60.23.77.13:58315/i", "host": "60.23.77.13", "host_ip": "60.23.77.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 23:47:08 UTC", "discovered_at": "2026-10-08T23:47:08.000Z" }, { "id": 155907, "urlhaus_id": "3946673", "url": "http://60.214.58.89:53884/i", "host": "60.214.58.89", "host_ip": "60.214.58.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 23:47:08 UTC", "discovered_at": "2026-10-08T23:47:08.000Z" }, { "id": 155909, "urlhaus_id": "3946671", "url": "http://180.190.238.89:57500/bin.sh", "host": "180.190.238.89", "host_ip": "180.190.238.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 23:44:15 UTC", "discovered_at": "2026-10-08T23:44:15.000Z" }, { "id": 155910, "urlhaus_id": "3946670", "url": "http://62.60.226.140/files/7782139129/sQrGIjN.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 23:39:04 UTC", "discovered_at": "2026-10-08T23:39:04.000Z" }, { "id": 155911, "urlhaus_id": "3946669", "url": "http://180.191.49.27:39520/bin.sh", "host": "180.191.49.27", "host_ip": "180.191.49.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 23:25:09 UTC", "discovered_at": "2026-10-08T23:25:09.000Z" }, { "id": 155912, "urlhaus_id": "3946668", "url": "http://108.170.136.155:50255/bin.sh", "host": "108.170.136.155", "host_ip": "108.170.136.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 23:12:21 UTC", "discovered_at": "2026-10-08T23:12:21.000Z" }, { "id": 155913, "urlhaus_id": "3946667", "url": "http://42.52.20.56:49690/i", "host": "42.52.20.56", "host_ip": "42.52.20.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 22:59:16 UTC", "discovered_at": "2026-10-08T22:59:16.000Z" }, { "id": 155914, "urlhaus_id": "3946666", "url": "http://91.92.242.236/files-129312398/files/file_7d6e0a8ed54f5bd4.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 22:54:12 UTC", "discovered_at": "2026-10-08T22:54:12.000Z" }, { "id": 155915, "urlhaus_id": "3946665", "url": "http://112.238.27.166:50497/bin.sh", "host": "112.238.27.166", "host_ip": "112.238.27.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 22:29:18 UTC", "discovered_at": "2026-10-08T22:29:18.000Z" }, { "id": 155916, "urlhaus_id": "3946664", "url": "http://123.189.157.12:46490/bin.sh", "host": "123.189.157.12", "host_ip": "123.189.157.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 22:24:09 UTC", "discovered_at": "2026-10-08T22:24:09.000Z" }, { "id": 155917, "urlhaus_id": "3946663", "url": "http://123.9.84.231:39954/i", "host": "123.9.84.231", "host_ip": "123.9.84.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-08 22:10:17 UTC", "discovered_at": "2026-10-08T22:10:17.000Z" }, { "id": 155918, "urlhaus_id": "3946662", "url": "http://123.189.176.51:48431/bin.sh", "host": "123.189.176.51", "host_ip": "123.189.176.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 22:04:16 UTC", "discovered_at": "2026-10-08T22:04:16.000Z" }, { "id": 155919, "urlhaus_id": "3946661", "url": "http://42.85.134.36:39290/i", "host": "42.85.134.36", "host_ip": "42.85.134.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 21:23:17 UTC", "discovered_at": "2026-10-08T21:23:17.000Z" }, { "id": 155920, "urlhaus_id": "3946660", "url": "http://193.187.101.209:55899/bin.sh", "host": "193.187.101.209", "host_ip": "193.187.101.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 21:14:16 UTC", "discovered_at": "2026-10-08T21:14:16.000Z" }, { "id": 155921, "urlhaus_id": "3946659", "url": "http://42.229.175.66:55978/bin.sh", "host": "42.229.175.66", "host_ip": "42.229.175.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 20:33:17 UTC", "discovered_at": "2026-10-08T20:33:17.000Z" }, { "id": 155922, "urlhaus_id": "3946658", "url": "http://115.48.144.79:58929/i", "host": "115.48.144.79", "host_ip": "115.48.144.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 20:19:08 UTC", "discovered_at": "2026-10-08T20:19:08.000Z" }, { "id": 155923, "urlhaus_id": "3946657", "url": "http://103.111.23.12:49200/i", "host": "103.111.23.12", "host_ip": "103.111.23.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 20:17:06 UTC", "discovered_at": "2026-10-08T20:17:06.000Z" }, { "id": 155924, "urlhaus_id": "3946656", "url": "http://182.116.115.77:46115/i", "host": "182.116.115.77", "host_ip": "182.116.115.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-08 20:14:10 UTC", "discovered_at": "2026-10-08T20:14:10.000Z" }, { "id": 155925, "urlhaus_id": "3946655", "url": "http://182.127.179.145:57484/bin.sh", "host": "182.127.179.145", "host_ip": "182.127.179.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 20:10:18 UTC", "discovered_at": "2026-10-08T20:10:18.000Z" }, { "id": 155926, "urlhaus_id": "3946654", "url": "http://115.48.144.79:58929/bin.sh", "host": "115.48.144.79", "host_ip": "115.48.144.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 19:55:17 UTC", "discovered_at": "2026-10-08T19:55:17.000Z" }, { "id": 155927, "urlhaus_id": "3946653", "url": "http://222.137.158.220:48972/i", "host": "222.137.158.220", "host_ip": "222.137.158.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 19:47:08 UTC", "discovered_at": "2026-10-08T19:47:08.000Z" }, { "id": 155928, "urlhaus_id": "3946652", "url": "http://109.236.46.199:59235/bin.sh", "host": "109.236.46.199", "host_ip": "109.236.46.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 19:35:19 UTC", "discovered_at": "2026-10-08T19:35:19.000Z" }, { "id": 155929, "urlhaus_id": "3946651", "url": "http://219.157.242.174:60770/i", "host": "219.157.242.174", "host_ip": "219.157.242.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 19:17:08 UTC", "discovered_at": "2026-10-08T19:17:08.000Z" }, { "id": 155932, "urlhaus_id": "3946648", "url": "http://123.14.222.197:43365/bin.sh", "host": "123.14.222.197", "host_ip": "123.14.222.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 19:17:07 UTC", "discovered_at": "2026-10-08T19:17:07.000Z" }, { "id": 155931, "urlhaus_id": "3946649", "url": "http://222.141.120.45:40118/i", "host": "222.141.120.45", "host_ip": "222.141.120.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 19:17:07 UTC", "discovered_at": "2026-10-08T19:17:07.000Z" }, { "id": 155930, "urlhaus_id": "3946650", "url": "http://27.219.118.7:41917/bin.sh", "host": "27.219.118.7", "host_ip": "27.219.118.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 19:17:07 UTC", "discovered_at": "2026-10-08T19:17:07.000Z" }, { "id": 155933, "urlhaus_id": "3946647", "url": "http://180.190.202.146:57951/bin.sh", "host": "180.190.202.146", "host_ip": "180.190.202.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-08 19:07:10 UTC", "discovered_at": "2026-10-08T19:07:10.000Z" }, { "id": 155934, "urlhaus_id": "3946646", "url": "http://104.64.0.199/hiddenbin/Space.sh4", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:21 UTC", "discovered_at": "2026-10-08T19:02:21.000Z" }, { "id": 155942, "urlhaus_id": "3946638", "url": "http://104.64.0.199/hiddenbin/Space.mips", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155941, "urlhaus_id": "3946639", "url": "http://172.245.106.144//violet.x86", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155940, "urlhaus_id": "3946640", "url": "http://104.64.0.199/hiddenbin/Space.mpsl", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155939, "urlhaus_id": "3946641", "url": "http://104.64.0.199/hiddenbin/Space.ppc", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155938, "urlhaus_id": "3946642", "url": "http://172.245.106.144//violet.ppc", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155937, "urlhaus_id": "3946643", "url": "http://104.64.0.199/hiddenbin/Space.arm5", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155936, "urlhaus_id": "3946644", "url": "http://104.64.0.199/hiddenbin/Space.arm7", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155935, "urlhaus_id": "3946645", "url": "http://104.64.0.199/hiddenbin/Space.x86_64", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:18 UTC", "discovered_at": "2026-10-08T19:02:18.000Z" }, { "id": 155951, "urlhaus_id": "3946629", "url": "http://172.245.106.144//violet.mpsl", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155950, "urlhaus_id": "3946630", "url": "http://172.245.106.144//violet.m68k", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155949, "urlhaus_id": "3946631", "url": "http://172.245.106.144//violet.arm6", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155948, "urlhaus_id": "3946632", "url": "http://172.245.106.144//violet.arm", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155947, "urlhaus_id": "3946633", "url": "http://104.64.0.199/hiddenbin/Space.arm", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155946, "urlhaus_id": "3946634", "url": "http://104.64.0.199/hiddenbin/Space.i686", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155945, "urlhaus_id": "3946635", "url": "http://104.64.0.199/hiddenbin/Space.m68k", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155944, "urlhaus_id": "3946636", "url": "http://172.245.106.144//violet.mips", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155943, "urlhaus_id": "3946637", "url": "http://104.64.0.199/hiddenbin/Space.arm6", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:17 UTC", "discovered_at": "2026-10-08T19:02:17.000Z" }, { "id": 155953, "urlhaus_id": "3946627", "url": "http://172.245.106.144//violet.arm7", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:16 UTC", "discovered_at": "2026-10-08T19:02:16.000Z" }, { "id": 155952, "urlhaus_id": "3946628", "url": "http://172.245.106.144//violet.i586", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:16 UTC", "discovered_at": "2026-10-08T19:02:16.000Z" }, { "id": 155956, "urlhaus_id": "3946624", "url": "http://172.245.106.144//violet.sparc", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:15 UTC", "discovered_at": "2026-10-08T19:02:15.000Z" }, { "id": 155955, "urlhaus_id": "3946625", "url": "http://172.245.106.144//violet.sh4", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:15 UTC", "discovered_at": "2026-10-08T19:02:15.000Z" }, { "id": 155954, "urlhaus_id": "3946626", "url": "http://104.64.0.199/hiddenbin/Space.sparc", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:15 UTC", "discovered_at": "2026-10-08T19:02:15.000Z" }, { "id": 155960, "urlhaus_id": "3946620", "url": "http://172.245.106.144//violet.arc", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:14 UTC", "discovered_at": "2026-10-08T19:02:14.000Z" }, { "id": 155959, "urlhaus_id": "3946621", "url": "http://172.245.106.144//violet.x86_64", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:14 UTC", "discovered_at": "2026-10-08T19:02:14.000Z" }, { "id": 155958, "urlhaus_id": "3946622", "url": "http://172.245.106.144//violet.mips64", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:14 UTC", "discovered_at": "2026-10-08T19:02:14.000Z" }, { "id": 155957, "urlhaus_id": "3946623", "url": "http://104.64.0.199/hiddenbin/Space.mips64", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:14 UTC", "discovered_at": "2026-10-08T19:02:14.000Z" }, { "id": 155961, "urlhaus_id": "3946619", "url": "http://172.245.106.144//violet.arm5", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 19:02:11 UTC", "discovered_at": "2026-10-08T19:02:11.000Z" }, { "id": 154465, "urlhaus_id": "3946618", "url": "http://23.132.164.15/FAST/putty.exe", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "opendir", "last_online": null, "first_seen": "2026-10-08 18:55:08 UTC", "discovered_at": "2026-10-08T18:55:08.000Z" }, { "id": 154467, "urlhaus_id": "3946616", "url": "http://94.154.43.203/bins/px86", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 18:53:16 UTC", "discovered_at": "2026-10-08T18:53:16.000Z" }, { "id": 154466, "urlhaus_id": "3946617", "url": "http://94.154.43.203/bins/mpsl", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 18:53:16 UTC", "discovered_at": "2026-10-08T18:53:16.000Z" }, { "id": 154468, "urlhaus_id": "3946615", "url": "http://222.220.145.39:43434/i", "host": "222.220.145.39", "host_ip": "222.220.145.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:47:07 UTC", "discovered_at": "2026-10-08T18:47:07.000Z" }, { "id": 154469, "urlhaus_id": "3946614", "url": "https://www.mediafire.com/file/5zdr3wzj48j8odd/SETUP_PACKAGE_(KEY=2088).zip/file", "host": "www.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Password-protected, ValetiStealer, zip", "last_online": null, "first_seen": "2026-10-08 18:34:05 UTC", "discovered_at": "2026-10-08T18:34:05.000Z" }, { "id": 154471, "urlhaus_id": "3946612", "url": "http://115.49.193.168:43695/i", "host": "115.49.193.168", "host_ip": "115.49.193.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:32:07 UTC", "discovered_at": "2026-10-08T18:32:07.000Z" }, { "id": 154470, "urlhaus_id": "3946613", "url": "http://36.89.252.178:45257/bin.sh", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:32:07 UTC", "discovered_at": "2026-10-08T18:32:07.000Z" }, { "id": 154472, "urlhaus_id": "3946611", "url": "http://222.220.145.39:43434/bin.sh", "host": "222.220.145.39", "host_ip": "222.220.145.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:17:20 UTC", "discovered_at": "2026-10-08T18:17:20.000Z" }, { "id": 154473, "urlhaus_id": "3946610", "url": "http://42.224.199.236:41233/i", "host": "42.224.199.236", "host_ip": "42.224.199.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:17:09 UTC", "discovered_at": "2026-10-08T18:17:09.000Z" }, { "id": 154474, "urlhaus_id": "3946609", "url": "http://113.230.23.74:47203/i", "host": "113.230.23.74", "host_ip": "113.230.23.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:17:08 UTC", "discovered_at": "2026-10-08T18:17:08.000Z" }, { "id": 154475, "urlhaus_id": "3946608", "url": "http://180.103.174.195:47196/bin.sh", "host": "180.103.174.195", "host_ip": "180.103.174.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:17:07 UTC", "discovered_at": "2026-10-08T18:17:07.000Z" }, { "id": 154476, "urlhaus_id": "3946607", "url": "http://125.40.86.102:53452/i", "host": "125.40.86.102", "host_ip": "125.40.86.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:17:06 UTC", "discovered_at": "2026-10-08T18:17:06.000Z" }, { "id": 154483, "urlhaus_id": "3946600", "url": "http://15.207.188.221:8080/bot_x86_64", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154482, "urlhaus_id": "3946601", "url": "http://77.90.14.60/boatnet.ppc", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154481, "urlhaus_id": "3946602", "url": "http://77.90.14.60/boatnet.arm7", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154480, "urlhaus_id": "3946603", "url": "http://77.90.14.60/boatnet.mpsl", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154479, "urlhaus_id": "3946604", "url": "http://176.65.132.207/boatnet.arm", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154478, "urlhaus_id": "3946605", "url": "http://77.90.14.60/boatnet.arc", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154477, "urlhaus_id": "3946606", "url": "http://77.90.14.60/boatnet.m68k", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:21 UTC", "discovered_at": "2026-10-08T18:10:21.000Z" }, { "id": 154506, "urlhaus_id": "3946577", "url": "http://219.157.52.153:49181/bin.sh", "host": "219.157.52.153", "host_ip": "219.157.52.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154505, "urlhaus_id": "3946578", "url": "http://176.65.132.207/boatnet.ppc", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154504, "urlhaus_id": "3946579", "url": "http://176.65.132.207/boatnet.arm7", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154503, "urlhaus_id": "3946580", "url": "http://176.65.132.207/boatnet.sh4", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154502, "urlhaus_id": "3946581", "url": "http://176.65.132.207/boatnet.mpsl", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154501, "urlhaus_id": "3946582", "url": "http://176.65.132.207/boatnet.i686", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154500, "urlhaus_id": "3946583", "url": "http://94.154.43.211/main_arm5", "host": "94.154.43.211", "host_ip": "94.154.43.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154499, "urlhaus_id": "3946584", "url": "http://176.65.132.207/boatnet.arc", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154498, "urlhaus_id": "3946585", "url": "http://176.65.132.207/boatnet.x86", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154497, "urlhaus_id": "3946586", "url": "http://94.154.43.211/main_m68k", "host": "94.154.43.211", "host_ip": "94.154.43.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154496, "urlhaus_id": "3946587", "url": "http://176.65.132.207/boatnet.mips", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154495, "urlhaus_id": "3946588", "url": "http://176.65.132.207/boatnet.arm5", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154494, "urlhaus_id": "3946589", "url": "http://176.65.132.207/boatnet.i486", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154493, "urlhaus_id": "3946590", "url": "http://176.65.132.207/boatnet.arm6", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154492, "urlhaus_id": "3946591", "url": "http://176.65.132.207/boatnet.x86_64", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154491, "urlhaus_id": "3946592", "url": "http://176.65.132.207/boatnet.spc", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154490, "urlhaus_id": "3946593", "url": "http://176.65.132.207/boatnet.m68k", "host": "176.65.132.207", "host_ip": "176.65.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154489, "urlhaus_id": "3946594", "url": "http://77.90.14.60/boatnet.x86", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154488, "urlhaus_id": "3946595", "url": "http://77.90.14.60/boatnet.sh4", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154487, "urlhaus_id": "3946596", "url": "http://77.90.14.60/boatnet.arm6", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154486, "urlhaus_id": "3946597", "url": "http://77.90.14.60/boatnet.arm", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154485, "urlhaus_id": "3946598", "url": "http://77.90.14.60/boatnet.arm5", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154484, "urlhaus_id": "3946599", "url": "http://77.90.14.60/boatnet.mips", "host": "77.90.14.60", "host_ip": "77.90.14.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:20 UTC", "discovered_at": "2026-10-08T18:10:20.000Z" }, { "id": 154517, "urlhaus_id": "3946566", "url": "http://123.56.0.201:8080/bot_lite_arm8", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154516, "urlhaus_id": "3946567", "url": "http://123.56.0.201:8080/bot_lite_x86-64", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154515, "urlhaus_id": "3946568", "url": "http://123.56.0.201:8080/bot_agent_x86_64", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154514, "urlhaus_id": "3946569", "url": "http://123.56.0.201:8080/bot_agent_mips64le", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154513, "urlhaus_id": "3946570", "url": "http://123.56.0.201:8080/bot_agent_mipsle", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154512, "urlhaus_id": "3946571", "url": "http://123.56.0.201:8080/bot_agent_arm64", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154511, "urlhaus_id": "3946572", "url": "http://123.56.0.201:8080/bot_lite_arm", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154510, "urlhaus_id": "3946573", "url": "http://123.56.0.201:8080/bot_agent_c.c", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154509, "urlhaus_id": "3946574", "url": "http://123.56.0.201:8080/bot_lite_mips", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154508, "urlhaus_id": "3946575", "url": "http://123.56.0.201:8080/bot_lite_armv7l", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154507, "urlhaus_id": "3946576", "url": "http://123.56.0.201:8080/bot_lite_arm64", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:06 UTC", "discovered_at": "2026-10-08T18:10:06.000Z" }, { "id": 154519, "urlhaus_id": "3946564", "url": "http://123.56.0.201:8080/bot_lite.c", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:05 UTC", "discovered_at": "2026-10-08T18:10:05.000Z" }, { "id": 154518, "urlhaus_id": "3946565", "url": "http://123.56.0.201:8080/bot_agent_armv7", "host": "123.56.0.201", "host_ip": "123.56.0.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:10:05 UTC", "discovered_at": "2026-10-08T18:10:05.000Z" }, { "id": 154529, "urlhaus_id": "3946554", "url": "http://79.238.78.248:8080/zhr_debug_mips", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154528, "urlhaus_id": "3946555", "url": "http://46.247.108.103:8080/boat_agent_i686", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154527, "urlhaus_id": "3946556", "url": "http://79.238.78.248:8080/z3hir.mpsl", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154526, "urlhaus_id": "3946557", "url": "http://170.64.142.108:8081/bot_armv6", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154525, "urlhaus_id": "3946558", "url": "http://79.238.78.248:8080/z3hir.x86_64", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154524, "urlhaus_id": "3946559", "url": "http://46.247.108.103:8080/boat_agent", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154523, "urlhaus_id": "3946560", "url": "http://217.60.241.5/bot.x86_64", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154522, "urlhaus_id": "3946561", "url": "http://170.64.142.108:8081/bot_mipsel", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154521, "urlhaus_id": "3946562", "url": "http://46.247.108.103:8080/boat_agent_i686.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154520, "urlhaus_id": "3946563", "url": "http://217.60.241.5/bot.i386", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:50 UTC", "discovered_at": "2026-10-08T18:09:50.000Z" }, { "id": 154537, "urlhaus_id": "3946546", "url": "http://170.64.142.108:8081/bot_mips64el", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154536, "urlhaus_id": "3946547", "url": "http://79.238.78.248:8080/z3hir.mipsel", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154535, "urlhaus_id": "3946548", "url": "http://46.247.108.103:8080/boat_agent_mipsel.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154534, "urlhaus_id": "3946549", "url": "http://13.140.176.180:8911/tadashi.x86", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154533, "urlhaus_id": "3946550", "url": "http://46.247.108.103:8080/boat_agent_armel.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154532, "urlhaus_id": "3946551", "url": "http://13.140.176.180:8911/tadashi.ppc", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154531, "urlhaus_id": "3946552", "url": "http://46.247.108.103:8080/boat_agent_arm64.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154530, "urlhaus_id": "3946553", "url": "http://46.247.108.103:8080/boat_agent_armv5tel", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:49 UTC", "discovered_at": "2026-10-08T18:09:49.000Z" }, { "id": 154538, "urlhaus_id": "3946545", "url": "http://170.64.142.108:8081/bot_powerpc", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:43 UTC", "discovered_at": "2026-10-08T18:09:43.000Z" }, { "id": 154539, "urlhaus_id": "3946544", "url": "http://170.64.142.108:8081/bot_m68k", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:38 UTC", "discovered_at": "2026-10-08T18:09:38.000Z" }, { "id": 154546, "urlhaus_id": "3946537", "url": "http://170.64.142.108:8081/bot_i486", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154545, "urlhaus_id": "3946538", "url": "http://170.64.142.108:8081/bot_i686", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154544, "urlhaus_id": "3946539", "url": "http://46.247.108.103:8080/boat_agent_np.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154543, "urlhaus_id": "3946540", "url": "http://15.207.188.221:8080/bot_riscv64", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154542, "urlhaus_id": "3946541", "url": "http://13.140.176.180:8911/tadashi.android.arm64", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154541, "urlhaus_id": "3946542", "url": "http://46.247.108.103:8080/boat_agent_i386", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154540, "urlhaus_id": "3946543", "url": "http://46.247.108.103:8080/boat_agent_armhf.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:35 UTC", "discovered_at": "2026-10-08T18:09:35.000Z" }, { "id": 154577, "urlhaus_id": "3946506", "url": "http://13.140.176.180:8911/tadashi.arm8", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154576, "urlhaus_id": "3946507", "url": "http://46.247.108.103:8080/boat_agent_i386.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154575, "urlhaus_id": "3946508", "url": "http://46.247.108.103:8080/boat_agent_armv5tel.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154574, "urlhaus_id": "3946509", "url": "http://46.247.108.103:8080/boat_agent_armv6l.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154573, "urlhaus_id": "3946510", "url": "http://15.207.188.221:8080/bot_arm", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154572, "urlhaus_id": "3946511", "url": "http://79.238.78.248:8080/z3hir.arm", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154571, "urlhaus_id": "3946512", "url": "http://79.238.78.248:8080/z3hir.armv7l", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154570, "urlhaus_id": "3946513", "url": "http://79.238.78.248:8080/z3hir.sh4", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154569, "urlhaus_id": "3946514", "url": "http://217.60.241.5/bot.mipsel", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154568, "urlhaus_id": "3946515", "url": "http://46.247.108.103:8080/boat_agent_aarch64", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154567, "urlhaus_id": "3946516", "url": "http://46.247.108.103:8080/boat_agent.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154566, "urlhaus_id": "3946517", "url": "http://79.238.78.248:8080/z3hir.i686", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154565, "urlhaus_id": "3946518", "url": "http://46.247.108.103:8080/boat_agent_aarch64.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154564, "urlhaus_id": "3946519", "url": "http://79.238.78.248:8080/z3hir.mips", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154563, "urlhaus_id": "3946520", "url": "http://46.247.108.103:8080/boat_agent_arm", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154562, "urlhaus_id": "3946521", "url": "http://46.247.108.103:8080/boat_agent_armv7", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154561, "urlhaus_id": "3946522", "url": "http://79.238.78.248:8080/z3hir.m68k", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154560, "urlhaus_id": "3946523", "url": "http://79.238.78.248:8080/zhr_debug", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154559, "urlhaus_id": "3946524", "url": "http://15.207.188.221:8080/bot_mipsel", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154558, "urlhaus_id": "3946525", "url": "http://79.238.78.248:8080/z3hir.x86", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154557, "urlhaus_id": "3946526", "url": "http://170.64.142.108:8081/bot_armv5l", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154556, "urlhaus_id": "3946527", "url": "http://170.64.142.108:8081/bot_mips64", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154555, "urlhaus_id": "3946528", "url": "http://13.140.176.180:8911/tadashi.android.arm", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154554, "urlhaus_id": "3946529", "url": "http://46.247.108.103:8080/boat_agent.tar", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154553, "urlhaus_id": "3946530", "url": "http://15.207.188.221:8080/bot_mips64", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154552, "urlhaus_id": "3946531", "url": "http://46.247.108.103:8080/boat_agent_armv6l", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154551, "urlhaus_id": "3946532", "url": "http://217.60.241.5/bot.mips", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154550, "urlhaus_id": "3946533", "url": "http://15.207.188.221:8080/bot_aarch64", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154549, "urlhaus_id": "3946534", "url": "http://217.60.241.5/bot.arm64", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154548, "urlhaus_id": "3946535", "url": "http://46.247.108.103:8080/boat_agent_amd64", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154547, "urlhaus_id": "3946536", "url": "http://79.238.78.248:8080/z3hir.aarch64", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:34 UTC", "discovered_at": "2026-10-08T18:09:34.000Z" }, { "id": 154578, "urlhaus_id": "3946505", "url": "http://108.137.82.100:9999/frps", "host": "108.137.82.100", "host_ip": "108.137.82.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:27 UTC", "discovered_at": "2026-10-08T18:09:27.000Z" }, { "id": 154579, "urlhaus_id": "3946504", "url": "http://108.137.82.100:9999/frpc_linux_arm", "host": "108.137.82.100", "host_ip": "108.137.82.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:22 UTC", "discovered_at": "2026-10-08T18:09:22.000Z" }, { "id": 154615, "urlhaus_id": "3946468", "url": "http://13.140.176.180:8911/tadashi.arm7", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154614, "urlhaus_id": "3946469", "url": "http://13.140.176.180:8911/tadashi.arm64", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154613, "urlhaus_id": "3946470", "url": "http://170.64.142.108:8081/bot_aarch64", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154612, "urlhaus_id": "3946471", "url": "http://170.64.142.108:8081/bot_arm", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154611, "urlhaus_id": "3946472", "url": "http://79.238.78.248:8080/z3hir.amd64", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154610, "urlhaus_id": "3946473", "url": "http://79.238.78.248:8080/z3hir.i586", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154609, "urlhaus_id": "3946474", "url": "http://46.247.108.103:8080/boat_agent_amd64.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154608, "urlhaus_id": "3946475", "url": "http://15.207.188.221:8080/bot_powerpc64le", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154607, "urlhaus_id": "3946476", "url": "http://46.247.108.103:8080/boat_agent_np", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154606, "urlhaus_id": "3946477", "url": "http://15.207.188.221:8080/bot_powerpc", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154605, "urlhaus_id": "3946478", "url": "http://15.207.188.221:8080/bot_m68k", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154604, "urlhaus_id": "3946479", "url": "http://15.207.188.221:8080/bot_mips", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154603, "urlhaus_id": "3946480", "url": "http://46.247.108.103:8080/boat_agent_armv6", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154602, "urlhaus_id": "3946481", "url": "http://46.247.108.103:8080/boat_agent_armv6.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154601, "urlhaus_id": "3946482", "url": "http://46.247.108.103:8080/boat_agent_arm64", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154600, "urlhaus_id": "3946483", "url": "http://217.60.241.5/bot.x86", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154599, "urlhaus_id": "3946484", "url": "http://46.247.108.103:8080/boat_agent_mips", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154598, "urlhaus_id": "3946485", "url": "http://46.247.108.103:8080/boat_agent_mipsel", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154597, "urlhaus_id": "3946486", "url": "http://46.247.108.103:8080/boat_agent_x86_64.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154596, "urlhaus_id": "3946487", "url": "http://79.238.78.248:8080/z3hir.i386", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154595, "urlhaus_id": "3946488", "url": "http://79.238.78.248:8080/z3hir.ppc", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154594, "urlhaus_id": "3946489", "url": "http://170.64.142.108:8081/bot_armv7l", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154593, "urlhaus_id": "3946490", "url": "http://46.247.108.103:8080/boat_agent_armhf", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154592, "urlhaus_id": "3946491", "url": "http://46.247.108.103:8080/boat_agent_armv7.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154591, "urlhaus_id": "3946492", "url": "http://46.247.108.103:8080/boat_agent_armel", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154590, "urlhaus_id": "3946493", "url": "http://46.247.108.103:8080/boat_agent_armv7l.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154589, "urlhaus_id": "3946494", "url": "http://46.247.108.103:8080/boat_agent_arm.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154588, "urlhaus_id": "3946495", "url": "http://46.247.108.103:8080/boat_agent_mips.gz", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154587, "urlhaus_id": "3946496", "url": "http://46.247.108.103:8080/boat_agent_x86_64", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154586, "urlhaus_id": "3946497", "url": "http://15.207.188.221:8080/bot_sh4", "host": "15.207.188.221", "host_ip": "15.207.188.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154585, "urlhaus_id": "3946498", "url": "http://79.238.78.248:8080/z3hir.x64", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154584, "urlhaus_id": "3946499", "url": "http://79.238.78.248:8080/z3hir.arm7", "host": "79.238.78.248", "host_ip": "79.238.78.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154583, "urlhaus_id": "3946500", "url": "http://13.140.176.180:8911/tadashi.arm4", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154582, "urlhaus_id": "3946501", "url": "http://217.60.241.5/bot.arm", "host": "217.60.241.5", "host_ip": "217.60.241.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154581, "urlhaus_id": "3946502", "url": "http://13.140.176.180:8911/tadashi.mpsl", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154580, "urlhaus_id": "3946503", "url": "http://46.247.108.103:8080/boat_agent_armv7l", "host": "46.247.108.103", "host_ip": "46.247.108.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:19 UTC", "discovered_at": "2026-10-08T18:09:19.000Z" }, { "id": 154618, "urlhaus_id": "3946465", "url": "http://13.140.176.180:8911/tadashi.arm6", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:18 UTC", "discovered_at": "2026-10-08T18:09:18.000Z" }, { "id": 154617, "urlhaus_id": "3946466", "url": "http://170.64.142.108:8081/bot_mips", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:18 UTC", "discovered_at": "2026-10-08T18:09:18.000Z" }, { "id": 154616, "urlhaus_id": "3946467", "url": "http://170.64.142.108:8081/bot_x86_64", "host": "170.64.142.108", "host_ip": "170.64.142.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:18 UTC", "discovered_at": "2026-10-08T18:09:18.000Z" }, { "id": 154619, "urlhaus_id": "3946464", "url": "http://108.137.82.100:9999/frpc_mips", "host": "108.137.82.100", "host_ip": "108.137.82.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:09:14 UTC", "discovered_at": "2026-10-08T18:09:14.000Z" }, { "id": 154620, "urlhaus_id": "3946463", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.arm", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:43 UTC", "discovered_at": "2026-10-08T18:08:43.000Z" }, { "id": 154621, "urlhaus_id": "3946462", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.mips", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:40 UTC", "discovered_at": "2026-10-08T18:08:40.000Z" }, { "id": 154622, "urlhaus_id": "3946461", "url": "http://154.83.85.63:47991/klogd-x64-musl", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:39 UTC", "discovered_at": "2026-10-08T18:08:39.000Z" }, { "id": 154624, "urlhaus_id": "3946459", "url": "http://66.29.151.122/boatnet.ppc", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:37 UTC", "discovered_at": "2026-10-08T18:08:37.000Z" }, { "id": 154623, "urlhaus_id": "3946460", "url": "http://66.29.151.122/boatnet.arm7", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:37 UTC", "discovered_at": "2026-10-08T18:08:37.000Z" }, { "id": 154626, "urlhaus_id": "3946457", "url": "http://66.29.151.122/boatnet.mips", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:36 UTC", "discovered_at": "2026-10-08T18:08:36.000Z" }, { "id": 154625, "urlhaus_id": "3946458", "url": "http://66.29.151.122/boatnet.arm5", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:36 UTC", "discovered_at": "2026-10-08T18:08:36.000Z" }, { "id": 154629, "urlhaus_id": "3946454", "url": "http://66.29.151.122/boatnet.sh4", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:35 UTC", "discovered_at": "2026-10-08T18:08:35.000Z" }, { "id": 154628, "urlhaus_id": "3946455", "url": "http://154.83.85.63:47991/klogd-ppc-603f", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:35 UTC", "discovered_at": "2026-10-08T18:08:35.000Z" }, { "id": 154627, "urlhaus_id": "3946456", "url": "http://108.137.82.100:9999/frpc", "host": "108.137.82.100", "host_ip": "108.137.82.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:35 UTC", "discovered_at": "2026-10-08T18:08:35.000Z" }, { "id": 154630, "urlhaus_id": "3946453", "url": "http://154.83.85.63:47991/rathole-164-v5te", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:34 UTC", "discovered_at": "2026-10-08T18:08:34.000Z" }, { "id": 154632, "urlhaus_id": "3946451", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.i486", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:31 UTC", "discovered_at": "2026-10-08T18:08:31.000Z" }, { "id": 154631, "urlhaus_id": "3946452", "url": "http://154.83.85.63:47991/klogd-v048-x64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:31 UTC", "discovered_at": "2026-10-08T18:08:31.000Z" }, { "id": 154633, "urlhaus_id": "3946450", "url": "http://154.83.85.63:47991/klogd-freebsd", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:30 UTC", "discovered_at": "2026-10-08T18:08:30.000Z" }, { "id": 154634, "urlhaus_id": "3946449", "url": "http://66.29.151.122/boatnet.arm6", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:28 UTC", "discovered_at": "2026-10-08T18:08:28.000Z" }, { "id": 154639, "urlhaus_id": "3946444", "url": "http://154.83.85.63:47991/klogd-164-v5te", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:27 UTC", "discovered_at": "2026-10-08T18:08:27.000Z" }, { "id": 154638, "urlhaus_id": "3946445", "url": "http://66.29.151.122/boatnet.mpsl", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:27 UTC", "discovered_at": "2026-10-08T18:08:27.000Z" }, { "id": 154637, "urlhaus_id": "3946446", "url": "http://66.29.151.122/boatnet.arm", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:27 UTC", "discovered_at": "2026-10-08T18:08:27.000Z" }, { "id": 154636, "urlhaus_id": "3946447", "url": "http://154.83.85.63:47991/klogd-ppc-final", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:27 UTC", "discovered_at": "2026-10-08T18:08:27.000Z" }, { "id": 154635, "urlhaus_id": "3946448", "url": "http://23.254.195.48:8099/bx_arm5.p", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:27 UTC", "discovered_at": "2026-10-08T18:08:27.000Z" }, { "id": 154640, "urlhaus_id": "3946443", "url": "http://23.254.195.48:8099/beacon_windows_amd64.exe", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AdaptixC2", "last_online": null, "first_seen": "2026-10-08 18:08:26 UTC", "discovered_at": "2026-10-08T18:08:26.000Z" }, { "id": 154645, "urlhaus_id": "3946438", "url": "http://66.29.151.122/boatnet.m68k", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:25 UTC", "discovered_at": "2026-10-08T18:08:25.000Z" }, { "id": 154644, "urlhaus_id": "3946439", "url": "http://154.83.85.63:47991/klogd-ppc603", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:25 UTC", "discovered_at": "2026-10-08T18:08:25.000Z" }, { "id": 154643, "urlhaus_id": "3946440", "url": "http://23.254.195.48:8099/t_arm5.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:25 UTC", "discovered_at": "2026-10-08T18:08:25.000Z" }, { "id": 154642, "urlhaus_id": "3946441", "url": "http://154.83.85.63:47991/klogd-ppc", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:25 UTC", "discovered_at": "2026-10-08T18:08:25.000Z" }, { "id": 154641, "urlhaus_id": "3946442", "url": "http://23.254.195.48:8099/bx_mipsle.p", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:25 UTC", "discovered_at": "2026-10-08T18:08:25.000Z" }, { "id": 154647, "urlhaus_id": "3946436", "url": "http://154.83.85.63:47991/rathole-v048-amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:24 UTC", "discovered_at": "2026-10-08T18:08:24.000Z" }, { "id": 154646, "urlhaus_id": "3946437", "url": "http://172.245.106.144/ohshit.sh", "host": "172.245.106.144", "host_ip": "172.245.106.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:24 UTC", "discovered_at": "2026-10-08T18:08:24.000Z" }, { "id": 154651, "urlhaus_id": "3946432", "url": "http://40.160.135.244:9091/titanjr.arm7", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:23 UTC", "discovered_at": "2026-10-08T18:08:23.000Z" }, { "id": 154650, "urlhaus_id": "3946433", "url": "http://40.160.135.244:9091/titanjr.mips", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:23 UTC", "discovered_at": "2026-10-08T18:08:23.000Z" }, { "id": 154649, "urlhaus_id": "3946434", "url": "http://40.160.135.244:9091/titanjr.sh4", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:23 UTC", "discovered_at": "2026-10-08T18:08:23.000Z" }, { "id": 154648, "urlhaus_id": "3946435", "url": "http://40.160.135.244:9091/titanjr.ppc", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:23 UTC", "discovered_at": "2026-10-08T18:08:23.000Z" }, { "id": 154658, "urlhaus_id": "3946425", "url": "http://154.12.83.188:33196/mips", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154657, "urlhaus_id": "3946426", "url": "http://23.254.195.48:8099/beacon_linux_amd64", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154656, "urlhaus_id": "3946427", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.arm7", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154655, "urlhaus_id": "3946428", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.x86_64", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154654, "urlhaus_id": "3946429", "url": "http://154.12.83.188:33196/riscv64", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154653, "urlhaus_id": "3946430", "url": "http://176.65.139.72/KKveTTgaAAsecNNaaaa.mpsl", "host": "176.65.139.72", "host_ip": "176.65.139.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hadoop, web", "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154652, "urlhaus_id": "3946431", "url": "http://108.137.82.100:9999/frpc_arm", "host": "108.137.82.100", "host_ip": "108.137.82.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:22 UTC", "discovered_at": "2026-10-08T18:08:22.000Z" }, { "id": 154663, "urlhaus_id": "3946420", "url": "http://66.29.151.122/boatnet.arc", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:21 UTC", "discovered_at": "2026-10-08T18:08:21.000Z" }, { "id": 154662, "urlhaus_id": "3946421", "url": "http://66.29.151.122/boatnet.x86_debug", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:21 UTC", "discovered_at": "2026-10-08T18:08:21.000Z" }, { "id": 154661, "urlhaus_id": "3946422", "url": "http://66.29.151.122/shitassbotttt.sh", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:21 UTC", "discovered_at": "2026-10-08T18:08:21.000Z" }, { "id": 154660, "urlhaus_id": "3946423", "url": "http://66.29.151.122/boatnet.x86", "host": "66.29.151.122", "host_ip": "66.29.151.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:21 UTC", "discovered_at": "2026-10-08T18:08:21.000Z" }, { "id": 154659, "urlhaus_id": "3946424", "url": "http://23.254.195.48:8099/t_armhf.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:21 UTC", "discovered_at": "2026-10-08T18:08:21.000Z" }, { "id": 154669, "urlhaus_id": "3946414", "url": "http://23.254.195.48:8099/bx_mipsle", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154668, "urlhaus_id": "3946415", "url": "http://40.160.135.244:9091/titanjr.x86_64", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154667, "urlhaus_id": "3946416", "url": "http://154.12.83.188:33196/comm.sh", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154666, "urlhaus_id": "3946417", "url": "http://154.12.83.188:33196/patch.sh", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154665, "urlhaus_id": "3946418", "url": "http://154.12.83.188:33196/arm5", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154664, "urlhaus_id": "3946419", "url": "http://154.12.83.188:33196/x86_64", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:20 UTC", "discovered_at": "2026-10-08T18:08:20.000Z" }, { "id": 154675, "urlhaus_id": "3946408", "url": "http://23.254.195.48:8099/bx_arm5", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154674, "urlhaus_id": "3946409", "url": "http://40.160.135.244:9091/titanjr.spc", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154673, "urlhaus_id": "3946410", "url": "http://40.160.135.244:9091/titanjr.mipsl", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154672, "urlhaus_id": "3946411", "url": "http://23.254.195.48:8099/t5c.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154671, "urlhaus_id": "3946412", "url": "http://154.83.85.63:47991/klogd-ppc-musl", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154670, "urlhaus_id": "3946413", "url": "http://40.160.135.244:9091/titanjr.arm6", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:19 UTC", "discovered_at": "2026-10-08T18:08:19.000Z" }, { "id": 154679, "urlhaus_id": "3946404", "url": "http://40.160.135.244:9091/titanjr.x86_32", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:18 UTC", "discovered_at": "2026-10-08T18:08:18.000Z" }, { "id": 154678, "urlhaus_id": "3946405", "url": "http://23.254.195.48:8099/beacon_rn", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:18 UTC", "discovered_at": "2026-10-08T18:08:18.000Z" }, { "id": 154677, "urlhaus_id": "3946406", "url": "http://23.254.195.48:8099/bx_mips", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:18 UTC", "discovered_at": "2026-10-08T18:08:18.000Z" }, { "id": 154676, "urlhaus_id": "3946407", "url": "http://23.254.195.48:8099/bx_arm", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:18 UTC", "discovered_at": "2026-10-08T18:08:18.000Z" }, { "id": 154682, "urlhaus_id": "3946401", "url": "http://154.12.83.188:33196/arm6", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:17 UTC", "discovered_at": "2026-10-08T18:08:17.000Z" }, { "id": 154681, "urlhaus_id": "3946402", "url": "http://23.254.195.48:8099/ga_armhfb.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:17 UTC", "discovered_at": "2026-10-08T18:08:17.000Z" }, { "id": 154680, "urlhaus_id": "3946403", "url": "http://23.254.195.48:8099/ga_mipsel.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:17 UTC", "discovered_at": "2026-10-08T18:08:17.000Z" }, { "id": 154683, "urlhaus_id": "3946400", "url": "http://154.12.83.188:33196/alte.sh", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:16 UTC", "discovered_at": "2026-10-08T18:08:16.000Z" }, { "id": 154684, "urlhaus_id": "3946399", "url": "http://154.83.85.63:47991/rathole-v048-armv7", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:15 UTC", "discovered_at": "2026-10-08T18:08:15.000Z" }, { "id": 154685, "urlhaus_id": "3946398", "url": "http://154.12.83.188:33196/arm7", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:14 UTC", "discovered_at": "2026-10-08T18:08:14.000Z" }, { "id": 154687, "urlhaus_id": "3946396", "url": "http://154.12.83.188:33196/x86", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:13 UTC", "discovered_at": "2026-10-08T18:08:13.000Z" }, { "id": 154686, "urlhaus_id": "3946397", "url": "http://154.83.85.63:47991/rathole_amd64", "host": "154.83.85.63", "host_ip": "154.83.85.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:13 UTC", "discovered_at": "2026-10-08T18:08:13.000Z" }, { "id": 154689, "urlhaus_id": "3946394", "url": "http://154.12.83.188:33196/arm64", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:12 UTC", "discovered_at": "2026-10-08T18:08:12.000Z" }, { "id": 154688, "urlhaus_id": "3946395", "url": "http://154.12.83.188:33196/mpsl", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:12 UTC", "discovered_at": "2026-10-08T18:08:12.000Z" }, { "id": 154704, "urlhaus_id": "3946379", "url": "http://23.254.195.48:8099/ga_arm.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154703, "urlhaus_id": "3946380", "url": "http://23.254.195.48:8099/ga_mips.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154702, "urlhaus_id": "3946381", "url": "http://40.160.135.244:9091/titanjr.i486", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154701, "urlhaus_id": "3946382", "url": "http://23.254.195.48:8099/ga2_mips.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154700, "urlhaus_id": "3946383", "url": "http://23.254.195.48:8099/ga_armb.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154699, "urlhaus_id": "3946384", "url": "http://40.160.135.244:9091/titanjr.arc", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154698, "urlhaus_id": "3946385", "url": "http://40.160.135.244:9091/titanjr.arm5", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154697, "urlhaus_id": "3946386", "url": "http://40.160.135.244:9091/titanjr.ppc440", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154696, "urlhaus_id": "3946387", "url": "http://40.160.135.244:9091/titanjr.i686", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154695, "urlhaus_id": "3946388", "url": "http://154.12.83.188:33196/arm", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154694, "urlhaus_id": "3946389", "url": "http://23.254.195.48:8099/t5b.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154693, "urlhaus_id": "3946390", "url": "http://40.160.135.244:9091/all.sh", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154692, "urlhaus_id": "3946391", "url": "http://40.160.135.244:9091/titanjr.m68k", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154691, "urlhaus_id": "3946392", "url": "http://23.254.195.48:8099/ga_armhf.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154690, "urlhaus_id": "3946393", "url": "http://40.160.135.244:9091/titanjr.arm", "host": "40.160.135.244", "host_ip": "40.160.135.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:08:11 UTC", "discovered_at": "2026-10-08T18:08:11.000Z" }, { "id": 154705, "urlhaus_id": "3946378", "url": "http://23.254.195.48:8099/ga2_mipsel.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:10 UTC", "discovered_at": "2026-10-08T18:08:10.000Z" }, { "id": 154707, "urlhaus_id": "3946376", "url": "http://154.12.83.188:33196/emp.sh", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:08 UTC", "discovered_at": "2026-10-08T18:08:08.000Z" }, { "id": 154706, "urlhaus_id": "3946377", "url": "http://154.12.83.188:33196/wrd.sh", "host": "154.12.83.188", "host_ip": "154.12.83.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:08 UTC", "discovered_at": "2026-10-08T18:08:08.000Z" }, { "id": 154708, "urlhaus_id": "3946375", "url": "http://38.55.99.215:8080/bot.sh", "host": "38.55.99.215", "host_ip": "38.55.99.215", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:08:07 UTC", "discovered_at": "2026-10-08T18:08:07.000Z" }, { "id": 154709, "urlhaus_id": "3946374", "url": "http://42.225.228.19:48883/i", "host": "42.225.228.19", "host_ip": "42.225.228.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:03:15 UTC", "discovered_at": "2026-10-08T18:03:15.000Z" }, { "id": 154710, "urlhaus_id": "3946373", "url": "http://118.253.80.15:35077/i", "host": "118.253.80.15", "host_ip": "118.253.80.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 18:02:19 UTC", "discovered_at": "2026-10-08T18:02:19.000Z" }, { "id": 154711, "urlhaus_id": "3946372", "url": "http://115.49.193.168:43695/bin.sh", "host": "115.49.193.168", "host_ip": "115.49.193.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:02:07 UTC", "discovered_at": "2026-10-08T18:02:07.000Z" }, { "id": 154713, "urlhaus_id": "3946370", "url": "http://105.184.69.68:42333/i", "host": "105.184.69.68", "host_ip": "105.184.69.68", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 18:02:06 UTC", "discovered_at": "2026-10-08T18:02:06.000Z" }, { "id": 154712, "urlhaus_id": "3946371", "url": "http://125.40.86.102:53452/bin.sh", "host": "125.40.86.102", "host_ip": "125.40.86.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 18:02:06 UTC", "discovered_at": "2026-10-08T18:02:06.000Z" }, { "id": 154717, "urlhaus_id": "3946366", "url": "http://113.236.36.200:50471/i", "host": "113.236.36.200", "host_ip": "113.236.36.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 17:47:08 UTC", "discovered_at": "2026-10-08T17:47:08.000Z" }, { "id": 154716, "urlhaus_id": "3946367", "url": "http://42.224.199.236:41233/bin.sh", "host": "42.224.199.236", "host_ip": "42.224.199.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:47:08 UTC", "discovered_at": "2026-10-08T17:47:08.000Z" }, { "id": 154715, "urlhaus_id": "3946368", "url": "http://125.43.34.132:36892/bin.sh", "host": "125.43.34.132", "host_ip": "125.43.34.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:47:08 UTC", "discovered_at": "2026-10-08T17:47:08.000Z" }, { "id": 154714, "urlhaus_id": "3946369", "url": "http://120.28.189.218:59232/i", "host": "120.28.189.218", "host_ip": "120.28.189.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 17:47:08 UTC", "discovered_at": "2026-10-08T17:47:08.000Z" }, { "id": 154718, "urlhaus_id": "3946365", "url": "http://221.14.84.60:35948/bin.sh", "host": "221.14.84.60", "host_ip": "221.14.84.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:47:07 UTC", "discovered_at": "2026-10-08T17:47:07.000Z" }, { "id": 154719, "urlhaus_id": "3946364", "url": "http://125.47.113.29:42844/i", "host": "125.47.113.29", "host_ip": "125.47.113.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 17:33:22 UTC", "discovered_at": "2026-10-08T17:33:22.000Z" }, { "id": 154720, "urlhaus_id": "3946363", "url": "http://105.184.69.68:42333/bin.sh", "host": "105.184.69.68", "host_ip": "105.184.69.68", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 17:33:08 UTC", "discovered_at": "2026-10-08T17:33:08.000Z" }, { "id": 154722, "urlhaus_id": "3946361", "url": "http://37.48.146.38:60557/i", "host": "37.48.146.38", "host_ip": "37.48.146.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:32:15 UTC", "discovered_at": "2026-10-08T17:32:15.000Z" }, { "id": 154721, "urlhaus_id": "3946362", "url": "http://118.253.80.15:35077/bin.sh", "host": "118.253.80.15", "host_ip": "118.253.80.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 17:32:15 UTC", "discovered_at": "2026-10-08T17:32:15.000Z" }, { "id": 154723, "urlhaus_id": "3946360", "url": "http://103.125.174.116:53120/i", "host": "103.125.174.116", "host_ip": "103.125.174.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:32:07 UTC", "discovered_at": "2026-10-08T17:32:07.000Z" }, { "id": 154724, "urlhaus_id": "3946359", "url": "http://203.196.41.11:45206/i", "host": "203.196.41.11", "host_ip": "203.196.41.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:32:06 UTC", "discovered_at": "2026-10-08T17:32:06.000Z" }, { "id": 154725, "urlhaus_id": "3946358", "url": "http://120.28.215.36:37672/bin.sh", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 17:25:20 UTC", "discovered_at": "2026-10-08T17:25:20.000Z" }, { "id": 154726, "urlhaus_id": "3946357", "url": "http://182.127.34.173:57928/bin.sh", "host": "182.127.34.173", "host_ip": "182.127.34.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:18:07 UTC", "discovered_at": "2026-10-08T17:18:07.000Z" }, { "id": 154729, "urlhaus_id": "3946354", "url": "http://113.236.36.200:50471/bin.sh", "host": "113.236.36.200", "host_ip": "113.236.36.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 17:17:07 UTC", "discovered_at": "2026-10-08T17:17:07.000Z" }, { "id": 154728, "urlhaus_id": "3946355", "url": "http://115.55.32.63:55594/i", "host": "115.55.32.63", "host_ip": "115.55.32.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:17:07 UTC", "discovered_at": "2026-10-08T17:17:07.000Z" }, { "id": 154727, "urlhaus_id": "3946356", "url": "http://59.96.136.187:54403/bin.sh", "host": "59.96.136.187", "host_ip": "59.96.136.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:17:07 UTC", "discovered_at": "2026-10-08T17:17:07.000Z" }, { "id": 154731, "urlhaus_id": "3946352", "url": "http://78.38.120.12:33332/i", "host": "78.38.120.12", "host_ip": "78.38.120.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:17:06 UTC", "discovered_at": "2026-10-08T17:17:06.000Z" }, { "id": 154730, "urlhaus_id": "3946353", "url": "http://223.10.5.93:34533/i", "host": "223.10.5.93", "host_ip": "223.10.5.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 17:17:06 UTC", "discovered_at": "2026-10-08T17:17:06.000Z" }, { "id": 154732, "urlhaus_id": "3946351", "url": "http://37.48.146.38:60557/bin.sh", "host": "37.48.146.38", "host_ip": "37.48.146.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:02:09 UTC", "discovered_at": "2026-10-08T17:02:09.000Z" }, { "id": 154734, "urlhaus_id": "3946349", "url": "http://27.44.145.224:34472/i", "host": "27.44.145.224", "host_ip": "27.44.145.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 17:02:07 UTC", "discovered_at": "2026-10-08T17:02:07.000Z" }, { "id": 154733, "urlhaus_id": "3946350", "url": "http://178.205.204.128:35972/i", "host": "178.205.204.128", "host_ip": "178.205.204.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:02:07 UTC", "discovered_at": "2026-10-08T17:02:07.000Z" }, { "id": 154737, "urlhaus_id": "3946346", "url": "http://115.206.110.121:47845/i", "host": "115.206.110.121", "host_ip": "115.206.110.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 17:02:06 UTC", "discovered_at": "2026-10-08T17:02:06.000Z" }, { "id": 154736, "urlhaus_id": "3946347", "url": "http://27.44.145.224:34472/bin.sh", "host": "27.44.145.224", "host_ip": "27.44.145.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 17:02:06 UTC", "discovered_at": "2026-10-08T17:02:06.000Z" }, { "id": 154735, "urlhaus_id": "3946348", "url": "http://219.157.52.153:49181/i", "host": "219.157.52.153", "host_ip": "219.157.52.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 17:02:06 UTC", "discovered_at": "2026-10-08T17:02:06.000Z" }, { "id": 154739, "urlhaus_id": "3946344", "url": "https://cdn.discordapp.com/attachments/1553507397694267543/1555954495924473926/Goobaclient-CrackedByDexter.jar?backend=b2&ex=6ac8fe8c&is=6ac7ad0c&hm=30490a5f62bada0ce835ed0448d0c50f22e598bf29d409d1392a080ca82d3798&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:21 UTC", "discovered_at": "2026-10-08T16:54:21.000Z" }, { "id": 154738, "urlhaus_id": "3946345", "url": "https://cdn.discordapp.com/attachments/1556991568970256465/1556992019174395924/CorzCracked.jar?backend=b2&ex=6ac8d050&is=6ac77ed0&hm=3364e8b8209bda9ecad64fa88559296c84ab8d8b0d598c13387100c0489f4e88&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:21 UTC", "discovered_at": "2026-10-08T16:54:21.000Z" }, { "id": 154740, "urlhaus_id": "3946343", "url": "https://cdn.discordapp.com/attachments/1552081896521990165/1555955699362697216/KryptonClient-CrackedByDexter.jar?backend=b2&ex=6ac8ffaa&is=6ac7ae2a&hm=32b960a4bf540c7fd00431a7ec304ddd1479175f7be2a9b58e6863530f0fb8ba&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:18 UTC", "discovered_at": "2026-10-08T16:54:18.000Z" }, { "id": 154744, "urlhaus_id": "3946339", "url": "https://cdn.discordapp.com/attachments/1554893100869230603/1555954067048763453/Zenns-Addon-V4-crackedbyDexter.jar?backend=b2&ex=6ac8fe25&is=6ac7aca5&hm=d4e0c6b375fa4a495ca11fbd00bca4c21ac78349d84321e29c5a878b1eca76b0&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:10 UTC", "discovered_at": "2026-10-08T16:54:10.000Z" }, { "id": 154743, "urlhaus_id": "3946340", "url": "https://cdn.discordapp.com/attachments/1548811185716068484/1555955351206105219/Zenns-Addon-V4-crackedbyDexter.jar?backend=b2&ex=6ac8ff57&is=6ac7add7&hm=30ee7fe8b95274195e39d69d6e7cb98ba63a847928ffd36d4a10117f56ece837&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:10 UTC", "discovered_at": "2026-10-08T16:54:10.000Z" }, { "id": 154742, "urlhaus_id": "3946341", "url": "https://cdn.discordapp.com/attachments/1549548390751272981/1555954988667113542/opsec-1.21.11-CrackedByDexter.jar?backend=b2&ex=6ac8ff01&is=6ac7ad81&hm=495621443a4b2ffeaee152ecdd0e6db99a74077c550043c0f6653cda754039a9&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:10 UTC", "discovered_at": "2026-10-08T16:54:10.000Z" }, { "id": 154741, "urlhaus_id": "3946342", "url": "https://cdn.discordapp.com/attachments/1552082475117715466/1555956021954875493/GambleRig-ByDexter.jar?backend=b2&ex=6ac8fff7&is=6ac7ae77&hm=60a51d0b7812f7feb59b405104fc25e80f9895b97a3c48a55c9aee5a442ae792&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:10 UTC", "discovered_at": "2026-10-08T16:54:10.000Z" }, { "id": 154746, "urlhaus_id": "3946337", "url": "https://cdn.discordapp.com/attachments/1553507058844696606/1555956170961854504/DupemodV2-ByDexter.jar?backend=b2&ex=6ac9001b&is=6ac7ae9b&hm=3fa2bf9e9d1e2e1a2f0922f42e35eae758a67f45aaa2a85fea120ceecf68609a&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:09 UTC", "discovered_at": "2026-10-08T16:54:09.000Z" }, { "id": 154745, "urlhaus_id": "3946338", "url": "https://cdn.discordapp.com/attachments/1548811292536610887/1555955159287201872/67client-CrackedByDexter.jar?backend=b2&ex=6ac8ff2a&is=6ac7adaa&hm=9a556ee8f2a04bb6bf7b6e0d48dd9f70c6c11e1956a9c12895ffd3d2051a835f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:09 UTC", "discovered_at": "2026-10-08T16:54:09.000Z" }, { "id": 154747, "urlhaus_id": "3946336", "url": "https://cdn.discordapp.com/attachments/1552081896521990165/1555955699362697216/KryptonClient-CrackedByDexter.jar?backend=b2&ex=6ac8ffaa&is=6ac7ae2a&hm=32b960a4bf540c7fd00431a7ec304ddd1479175f7be2a9b58e6863530f0fb8ba&https://cdn.discordapp.com/attachments/1552380411219288175/1555954669157621871/Ikea_Client-CrackedByDexter.jar?backend=b2&ex=6ac8feb5&is=6ac7ad35&hm=bfdcbbaa3aee72faa061c2ccfa23c4b5d3f4c6640b5e5dd8c3e6d1f0c029d7b6&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:08 UTC", "discovered_at": "2026-10-08T16:54:08.000Z" }, { "id": 154750, "urlhaus_id": "3946333", "url": "https://cdn.discordapp.com/attachments/1550498309259657247/1555954844391575632/MVADDON-CrackedByDexter.jar?backend=b2&ex=6ac8fedf&is=6ac7ad5f&hm=040eabcf0360361a39cf6cea01fba5a346c592fcc725489f3112f3ca3f8b284e&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:07 UTC", "discovered_at": "2026-10-08T16:54:07.000Z" }, { "id": 154749, "urlhaus_id": "3946334", "url": "https://cdn.discordapp.com/attachments/1553507130621825175/1555956345495228558/DupeModV1-ByDexter.jar?backend=b2&ex=6ac90045&is=6ac7aec5&hm=d109270946e3f8e1f5c6de54f3c7f5bfed7c79c00c564f28ad2919761c2857eb&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:07 UTC", "discovered_at": "2026-10-08T16:54:07.000Z" }, { "id": 154748, "urlhaus_id": "3946335", "url": "https://cdn.discordapp.com/attachments/1552380411219288175/1555954669157621871/Ikea_Client-CrackedByDexter.jar?backend=b2&ex=6ac8feb5&is=6ac7ad35&hm=bfdcbbaa3aee72faa061c2ccfa23c4b5d3f4c6640b5e5dd8c3e6d1f0c029d7b6&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, SilentNet", "last_online": null, "first_seen": "2026-10-08 16:54:07 UTC", "discovered_at": "2026-10-08T16:54:07.000Z" }, { "id": 154751, "urlhaus_id": "3946332", "url": "http://196.189.68.239:57928/i", "host": "196.189.68.239", "host_ip": "196.189.68.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 16:53:13 UTC", "discovered_at": "2026-10-08T16:53:13.000Z" }, { "id": 154752, "urlhaus_id": "3946331", "url": "http://42.85.162.250:52853/bin.sh", "host": "42.85.162.250", "host_ip": "42.85.162.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 16:48:27 UTC", "discovered_at": "2026-10-08T16:48:27.000Z" }, { "id": 154753, "urlhaus_id": "3946330", "url": "http://60.24.126.151:45260/i", "host": "60.24.126.151", "host_ip": "60.24.126.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 16:47:40 UTC", "discovered_at": "2026-10-08T16:47:40.000Z" }, { "id": 154754, "urlhaus_id": "3946329", "url": "http://117.223.141.168:52742/i", "host": "117.223.141.168", "host_ip": "117.223.141.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 16:47:29 UTC", "discovered_at": "2026-10-08T16:47:29.000Z" }, { "id": 154755, "urlhaus_id": "3946328", "url": "http://223.10.5.93:34533/bin.sh", "host": "223.10.5.93", "host_ip": "223.10.5.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:47:06 UTC", "discovered_at": "2026-10-08T16:47:06.000Z" }, { "id": 154756, "urlhaus_id": "3946327", "url": "http://36.89.252.178:45257/i", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:32:06 UTC", "discovered_at": "2026-10-08T16:32:06.000Z" }, { "id": 154757, "urlhaus_id": "3946326", "url": "https://donutclientsmods.xyz/downloads/enjoyer-addon-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:59 UTC", "discovered_at": "2026-10-08T16:28:59.000Z" }, { "id": 154758, "urlhaus_id": "3946325", "url": "https://donutclientsmods.xyz/downloads/wimpy-client-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:41 UTC", "discovered_at": "2026-10-08T16:28:41.000Z" }, { "id": 154759, "urlhaus_id": "3946324", "url": "https://donutclientsmods.xyz/downloads/corz-client-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:34 UTC", "discovered_at": "2026-10-08T16:28:34.000Z" }, { "id": 154760, "urlhaus_id": "3946323", "url": "https://donutclientsmods.xyz/downloads/shared-client-macro-tool.exe", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:20 UTC", "discovered_at": "2026-10-08T16:28:20.000Z" }, { "id": 154761, "urlhaus_id": "3946322", "url": "https://donutclientsmods.xyz/downloads/krypton-avengers-addon-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:18 UTC", "discovered_at": "2026-10-08T16:28:18.000Z" }, { "id": 154762, "urlhaus_id": "3946321", "url": "http://36.50.134.86/arm7", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:28:16 UTC", "discovered_at": "2026-10-08T16:28:16.000Z" }, { "id": 154763, "urlhaus_id": "3946320", "url": "http://36.50.134.86/debug.dbg", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:28:15 UTC", "discovered_at": "2026-10-08T16:28:15.000Z" }, { "id": 154765, "urlhaus_id": "3946318", "url": "https://donutclientsmods.xyz/downloads/babo-debug-addon-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:13 UTC", "discovered_at": "2026-10-08T16:28:13.000Z" }, { "id": 154764, "urlhaus_id": "3946319", "url": "https://donutclientsmods.xyz/downloads/fake-skelly-and-elytra-mod-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:13 UTC", "discovered_at": "2026-10-08T16:28:13.000Z" }, { "id": 154767, "urlhaus_id": "3946316", "url": "https://donutclientsmods.xyz/downloads/krypton-client-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:11 UTC", "discovered_at": "2026-10-08T16:28:11.000Z" }, { "id": 154766, "urlhaus_id": "3946317", "url": "https://donutclientsmods.xyz/downloads/larp-addon-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:11 UTC", "discovered_at": "2026-10-08T16:28:11.000Z" }, { "id": 154768, "urlhaus_id": "3946315", "url": "https://donutclientsmods.xyz/5f55f63f-4335-4413-a67f-64c697161d58", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:08 UTC", "discovered_at": "2026-10-08T16:28:08.000Z" }, { "id": 154770, "urlhaus_id": "3946313", "url": "http://36.50.134.86/sh4", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:28:07 UTC", "discovered_at": "2026-10-08T16:28:07.000Z" }, { "id": 154769, "urlhaus_id": "3946314", "url": "https://donutclientsmods.xyz/downloads/bassa-addon-1.21.11.jar", "host": "donutclientsmods.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-08 16:28:07 UTC", "discovered_at": "2026-10-08T16:28:07.000Z" }, { "id": 154771, "urlhaus_id": "3946312", "url": "http://113.239.103.119:41737/i", "host": "113.239.103.119", "host_ip": "113.239.103.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 16:27:17 UTC", "discovered_at": "2026-10-08T16:27:17.000Z" }, { "id": 154772, "urlhaus_id": "3946311", "url": "http://91.92.242.236/files-129312398/files/file_9771925585841dc0.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "9d2ca3, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 16:20:08 UTC", "discovered_at": "2026-10-08T16:20:08.000Z" }, { "id": 154773, "urlhaus_id": "3946310", "url": "http://117.223.141.168:52742/bin.sh", "host": "117.223.141.168", "host_ip": "117.223.141.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 16:17:28 UTC", "discovered_at": "2026-10-08T16:17:28.000Z" }, { "id": 154774, "urlhaus_id": "3946309", "url": "http://221.14.84.60:35948/i", "host": "221.14.84.60", "host_ip": "221.14.84.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 16:17:16 UTC", "discovered_at": "2026-10-08T16:17:16.000Z" }, { "id": 154775, "urlhaus_id": "3946308", "url": "http://27.208.164.251:43217/i", "host": "27.208.164.251", "host_ip": "27.208.164.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:17:09 UTC", "discovered_at": "2026-10-08T16:17:09.000Z" }, { "id": 154776, "urlhaus_id": "3946307", "url": "http://42.86.117.7:34873/bin.sh", "host": "42.86.117.7", "host_ip": "42.86.117.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 16:17:08 UTC", "discovered_at": "2026-10-08T16:17:08.000Z" }, { "id": 154777, "urlhaus_id": "3946306", "url": "http://113.239.103.119:41737/bin.sh", "host": "113.239.103.119", "host_ip": "113.239.103.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 16:03:10 UTC", "discovered_at": "2026-10-08T16:03:10.000Z" }, { "id": 154778, "urlhaus_id": "3946305", "url": "http://123.233.198.83:52155/i", "host": "123.233.198.83", "host_ip": "123.233.198.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 16:02:27 UTC", "discovered_at": "2026-10-08T16:02:27.000Z" }, { "id": 154779, "urlhaus_id": "3946304", "url": "http://59.180.132.133:40334/i", "host": "59.180.132.133", "host_ip": "59.180.132.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:33 UTC", "discovered_at": "2026-10-08T15:47:33.000Z" }, { "id": 154780, "urlhaus_id": "3946303", "url": "http://60.214.58.83:44401/bin.sh", "host": "60.214.58.83", "host_ip": "60.214.58.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:15 UTC", "discovered_at": "2026-10-08T15:47:15.000Z" }, { "id": 154782, "urlhaus_id": "3946301", "url": "http://182.121.146.105:47916/bin.sh", "host": "182.121.146.105", "host_ip": "182.121.146.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:13 UTC", "discovered_at": "2026-10-08T15:47:13.000Z" }, { "id": 154781, "urlhaus_id": "3946302", "url": "http://42.5.65.221:43199/bin.sh", "host": "42.5.65.221", "host_ip": "42.5.65.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 15:47:13 UTC", "discovered_at": "2026-10-08T15:47:13.000Z" }, { "id": 154784, "urlhaus_id": "3946299", "url": "http://182.121.146.105:47916/i", "host": "182.121.146.105", "host_ip": "182.121.146.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:10 UTC", "discovered_at": "2026-10-08T15:47:10.000Z" }, { "id": 154783, "urlhaus_id": "3946300", "url": "http://27.208.164.251:43217/bin.sh", "host": "27.208.164.251", "host_ip": "27.208.164.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 15:47:10 UTC", "discovered_at": "2026-10-08T15:47:10.000Z" }, { "id": 154786, "urlhaus_id": "3946297", "url": "http://115.49.201.133:39894/bin.sh", "host": "115.49.201.133", "host_ip": "115.49.201.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 15:47:08 UTC", "discovered_at": "2026-10-08T15:47:08.000Z" }, { "id": 154785, "urlhaus_id": "3946298", "url": "http://115.57.62.230:55893/bin.sh", "host": "115.57.62.230", "host_ip": "115.57.62.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:08 UTC", "discovered_at": "2026-10-08T15:47:08.000Z" }, { "id": 154787, "urlhaus_id": "3946296", "url": "http://2.187.251.80:42747/i", "host": "2.187.251.80", "host_ip": "2.187.251.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:47:07 UTC", "discovered_at": "2026-10-08T15:47:07.000Z" }, { "id": 154788, "urlhaus_id": "3946295", "url": "https://www.mediafire.com/file/w1aqh6dqcft06ip/file", "host": "www.mediafire.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "zip", "last_online": null, "first_seen": "2026-10-08 15:43:07 UTC", "discovered_at": "2026-10-08T15:43:07.000Z" }, { "id": 154789, "urlhaus_id": "3946294", "url": "http://87.5.64.246:38286/i", "host": "87.5.64.246", "host_ip": "87.5.64.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 15:40:26 UTC", "discovered_at": "2026-10-08T15:40:26.000Z" }, { "id": 154790, "urlhaus_id": "3946293", "url": "http://91.92.242.236/files-129312398/files/file_9fc392f279df529c.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, CoinMiner, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 15:40:08 UTC", "discovered_at": "2026-10-08T15:40:08.000Z" }, { "id": 154791, "urlhaus_id": "3946292", "url": "http://210.208.110.147:47846/bin.sh", "host": "210.208.110.147", "host_ip": "210.208.110.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 15:27:15 UTC", "discovered_at": "2026-10-08T15:27:15.000Z" }, { "id": 154793, "urlhaus_id": "3946290", "url": "http://115.52.197.166:50949/bin.sh", "host": "115.52.197.166", "host_ip": "115.52.197.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:17:05 UTC", "discovered_at": "2026-10-08T15:17:05.000Z" }, { "id": 154792, "urlhaus_id": "3946291", "url": "http://222.137.72.136:54589/i", "host": "222.137.72.136", "host_ip": "222.137.72.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:17:05 UTC", "discovered_at": "2026-10-08T15:17:05.000Z" }, { "id": 154794, "urlhaus_id": "3946289", "url": "https://download1472.mediafire.com/svlromhuu0fgbeT1VDGW6vzmExzvuu304WFLhbLzLpXwokLP17DRHd-b4tNEswcE4dOgSSeiz3hW-yKZXQh44ZZcjX3Qn40p-khBAo574f5PdKPCSLkRhm4RRa6eznKORrHCGpB1jxFHQY-pqlyo-XwcFmXiqyK8hQPFklc/b9htoqy9l9sgfdx/bfeegNota1Q9TL2.95789.40552Copia.zip", "host": "download1472.mediafire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "zip", "last_online": null, "first_seen": "2026-10-08 15:05:11 UTC", "discovered_at": "2026-10-08T15:05:11.000Z" }, { "id": 154795, "urlhaus_id": "3946288", "url": "http://60.22.8.194:38407/bin.sh", "host": "60.22.8.194", "host_ip": "60.22.8.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 15:02:20 UTC", "discovered_at": "2026-10-08T15:02:20.000Z" }, { "id": 154796, "urlhaus_id": "3946287", "url": "http://103.70.87.32:44964/i", "host": "103.70.87.32", "host_ip": "103.70.87.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:02:10 UTC", "discovered_at": "2026-10-08T15:02:10.000Z" }, { "id": 154799, "urlhaus_id": "3946284", "url": "http://123.10.234.172:60533/i", "host": "123.10.234.172", "host_ip": "123.10.234.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:02:07 UTC", "discovered_at": "2026-10-08T15:02:07.000Z" }, { "id": 154798, "urlhaus_id": "3946285", "url": "http://115.50.168.193:42845/i", "host": "115.50.168.193", "host_ip": "115.50.168.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:02:07 UTC", "discovered_at": "2026-10-08T15:02:07.000Z" }, { "id": 154797, "urlhaus_id": "3946286", "url": "http://27.215.55.107:33268/i", "host": "27.215.55.107", "host_ip": "27.215.55.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 15:02:07 UTC", "discovered_at": "2026-10-08T15:02:07.000Z" }, { "id": 154800, "urlhaus_id": "3946283", "url": "http://58.98.230.152:50741/i", "host": "58.98.230.152", "host_ip": "58.98.230.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 14:55:13 UTC", "discovered_at": "2026-10-08T14:55:13.000Z" }, { "id": 154801, "urlhaus_id": "3946282", "url": "http://222.137.72.136:54589/bin.sh", "host": "222.137.72.136", "host_ip": "222.137.72.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 14:47:07 UTC", "discovered_at": "2026-10-08T14:47:07.000Z" }, { "id": 154803, "urlhaus_id": "3946280", "url": "http://196.190.105.170:60312/i", "host": "196.190.105.170", "host_ip": "196.190.105.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 14:47:06 UTC", "discovered_at": "2026-10-08T14:47:06.000Z" }, { "id": 154802, "urlhaus_id": "3946281", "url": "http://222.138.78.101:43006/bin.sh", "host": "222.138.78.101", "host_ip": "222.138.78.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 14:47:06 UTC", "discovered_at": "2026-10-08T14:47:06.000Z" }, { "id": 154804, "urlhaus_id": "3946279", "url": "http://91.92.242.236/files-129312398/files/file_127db278893126d7.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 14:45:09 UTC", "discovered_at": "2026-10-08T14:45:09.000Z" }, { "id": 154805, "urlhaus_id": "3946278", "url": "http://91.92.242.236/files-129312398/files/file_d7bf7d92c202104a.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 14:45:08 UTC", "discovered_at": "2026-10-08T14:45:08.000Z" }, { "id": 154806, "urlhaus_id": "3946277", "url": "http://91.240.118.10/ycl", "host": "91.240.118.10", "host_ip": "91.240.118.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2, dropped-by-GCleaner, S", "last_online": null, "first_seen": "2026-10-08 14:38:05 UTC", "discovered_at": "2026-10-08T14:38:05.000Z" }, { "id": 154807, "urlhaus_id": "3946276", "url": "http://91.240.118.10/service", "host": "91.240.118.10", "host_ip": "91.240.118.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "a, c2, dropped-by-GCleaner", "last_online": null, "first_seen": "2026-10-08 14:33:04 UTC", "discovered_at": "2026-10-08T14:33:04.000Z" }, { "id": 154809, "urlhaus_id": "3946274", "url": "http://115.50.168.193:42845/bin.sh", "host": "115.50.168.193", "host_ip": "115.50.168.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 14:32:06 UTC", "discovered_at": "2026-10-08T14:32:06.000Z" }, { "id": 154808, "urlhaus_id": "3946275", "url": "http://125.162.15.66:41829/bin.sh", "host": "125.162.15.66", "host_ip": "125.162.15.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 14:32:06 UTC", "discovered_at": "2026-10-08T14:32:06.000Z" }, { "id": 154810, "urlhaus_id": "3946273", "url": "http://91.240.118.10/update", "host": "91.240.118.10", "host_ip": "91.240.118.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "1, c2, dropped-by-GCleaner", "last_online": null, "first_seen": "2026-10-08 14:32:05 UTC", "discovered_at": "2026-10-08T14:32:05.000Z" }, { "id": 154811, "urlhaus_id": "3946272", "url": "http://58.98.230.152:50741/bin.sh", "host": "58.98.230.152", "host_ip": "58.98.230.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 14:28:18 UTC", "discovered_at": "2026-10-08T14:28:18.000Z" }, { "id": 154812, "urlhaus_id": "3946271", "url": "http://62.60.226.140/files/8351821253/OCnvpm7.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 14:26:04 UTC", "discovered_at": "2026-10-08T14:26:04.000Z" }, { "id": 154813, "urlhaus_id": "3946270", "url": "http://123.11.8.211:43830/bin.sh", "host": "123.11.8.211", "host_ip": "123.11.8.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 14:07:22 UTC", "discovered_at": "2026-10-08T14:07:22.000Z" }, { "id": 154814, "urlhaus_id": "3946269", "url": "http://217.60.195.187/", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-08 14:07:13 UTC", "discovered_at": "2026-10-08T14:07:13.000Z" }, { "id": 154815, "urlhaus_id": "3946268", "url": "https://c23c1b-fa77-48e0-8272-692b579a574c.gorsefield.cc/cinstall.ps1", "host": "c23c1b-fa77-48e0-8272-692b579a574c.gorsefield.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ACR Stealer, ClearFake", "last_online": null, "first_seen": "2026-10-08 14:07:11 UTC", "discovered_at": "2026-10-08T14:07:11.000Z" }, { "id": 154816, "urlhaus_id": "3946267", "url": "https://sayosay.cc/", "host": "sayosay.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AppleScript, EtherHiding, macOS", "last_online": null, "first_seen": "2026-10-08 14:07:10 UTC", "discovered_at": "2026-10-08T14:07:10.000Z" }, { "id": 154817, "urlhaus_id": "3946266", "url": "http://104.64.0.199/hiddenbin/Space.arc", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-08 14:07:07 UTC", "discovered_at": "2026-10-08T14:07:07.000Z" }, { "id": 154820, "urlhaus_id": "3946263", "url": "http://217.60.195.187/LjEZs/Services.apk", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "adb, apk", "last_online": null, "first_seen": "2026-10-08 14:07:06 UTC", "discovered_at": "2026-10-08T14:07:06.000Z" }, { "id": 154819, "urlhaus_id": "3946264", "url": "http://104.64.0.199/hiddenbin/Space.x86", "host": "104.64.0.199", "host_ip": "104.64.0.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-08 14:07:06 UTC", "discovered_at": "2026-10-08T14:07:06.000Z" }, { "id": 154818, "urlhaus_id": "3946265", "url": "http://108.165.95.17/Services.apk", "host": "108.165.95.17", "host_ip": "108.165.95.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "adb, apk", "last_online": null, "first_seen": "2026-10-08 14:07:06 UTC", "discovered_at": "2026-10-08T14:07:06.000Z" }, { "id": 154821, "urlhaus_id": "3946262", "url": "http://125.47.72.15:47861/bin.sh", "host": "125.47.72.15", "host_ip": "125.47.72.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 14:02:10 UTC", "discovered_at": "2026-10-08T14:02:10.000Z" }, { "id": 154823, "urlhaus_id": "3946260", "url": "http://119.154.105.47:52212/i", "host": "119.154.105.47", "host_ip": "119.154.105.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 14:02:08 UTC", "discovered_at": "2026-10-08T14:02:08.000Z" }, { "id": 154822, "urlhaus_id": "3946261", "url": "http://123.10.234.172:60533/bin.sh", "host": "123.10.234.172", "host_ip": "123.10.234.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 14:02:08 UTC", "discovered_at": "2026-10-08T14:02:08.000Z" }, { "id": 154824, "urlhaus_id": "3946259", "url": "http://60.13.84.124:42261/bin.sh", "host": "60.13.84.124", "host_ip": "60.13.84.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 13:58:16 UTC", "discovered_at": "2026-10-08T13:58:16.000Z" }, { "id": 154825, "urlhaus_id": "3946258", "url": "http://2.187.248.206:52598/i", "host": "2.187.248.206", "host_ip": "2.187.248.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 13:50:10 UTC", "discovered_at": "2026-10-08T13:50:10.000Z" }, { "id": 154826, "urlhaus_id": "3946257", "url": "http://42.230.34.172:50944/i", "host": "42.230.34.172", "host_ip": "42.230.34.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:47:07 UTC", "discovered_at": "2026-10-08T13:47:07.000Z" }, { "id": 154827, "urlhaus_id": "3946256", "url": "http://27.202.215.185:51039/bin.sh", "host": "27.202.215.185", "host_ip": "27.202.215.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:47:06 UTC", "discovered_at": "2026-10-08T13:47:06.000Z" }, { "id": 154828, "urlhaus_id": "3946255", "url": "http://36.70.101.43:45958/i", "host": "36.70.101.43", "host_ip": "36.70.101.43", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 13:32:20 UTC", "discovered_at": "2026-10-08T13:32:20.000Z" }, { "id": 154829, "urlhaus_id": "3946254", "url": "http://119.154.105.47:52212/bin.sh", "host": "119.154.105.47", "host_ip": "119.154.105.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 13:32:09 UTC", "discovered_at": "2026-10-08T13:32:09.000Z" }, { "id": 154832, "urlhaus_id": "3946251", "url": "http://61.136.85.234:34744/bin.sh", "host": "61.136.85.234", "host_ip": "61.136.85.234", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:32:08 UTC", "discovered_at": "2026-10-08T13:32:08.000Z" }, { "id": 154831, "urlhaus_id": "3946252", "url": "http://123.189.176.51:48431/i", "host": "123.189.176.51", "host_ip": "123.189.176.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 13:32:08 UTC", "discovered_at": "2026-10-08T13:32:08.000Z" }, { "id": 154830, "urlhaus_id": "3946253", "url": "http://105.184.182.169:60155/i", "host": "105.184.182.169", "host_ip": "105.184.182.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 13:32:08 UTC", "discovered_at": "2026-10-08T13:32:08.000Z" }, { "id": 154833, "urlhaus_id": "3946250", "url": "http://222.142.202.93:37228/i", "host": "222.142.202.93", "host_ip": "222.142.202.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:32:06 UTC", "discovered_at": "2026-10-08T13:32:06.000Z" }, { "id": 154835, "urlhaus_id": "3946248", "url": "http://103.172.186.194:60007/i", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 13:17:06 UTC", "discovered_at": "2026-10-08T13:17:06.000Z" }, { "id": 154834, "urlhaus_id": "3946249", "url": "http://123.11.8.211:43830/i", "host": "123.11.8.211", "host_ip": "123.11.8.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:17:06 UTC", "discovered_at": "2026-10-08T13:17:06.000Z" }, { "id": 154836, "urlhaus_id": "3946247", "url": "http://42.227.202.230:40615/i", "host": "42.227.202.230", "host_ip": "42.227.202.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 13:17:05 UTC", "discovered_at": "2026-10-08T13:17:05.000Z" }, { "id": 154838, "urlhaus_id": "3946245", "url": "http://222.142.202.93:37228/bin.sh", "host": "222.142.202.93", "host_ip": "222.142.202.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:02:08 UTC", "discovered_at": "2026-10-08T13:02:08.000Z" }, { "id": 154837, "urlhaus_id": "3946246", "url": "http://115.196.0.230:36365/bin.sh", "host": "115.196.0.230", "host_ip": "115.196.0.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 13:02:08 UTC", "discovered_at": "2026-10-08T13:02:08.000Z" }, { "id": 154841, "urlhaus_id": "3946242", "url": "http://125.45.10.115:48133/bin.sh", "host": "125.45.10.115", "host_ip": "125.45.10.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 13:02:07 UTC", "discovered_at": "2026-10-08T13:02:07.000Z" }, { "id": 154840, "urlhaus_id": "3946243", "url": "http://123.11.7.18:47057/bin.sh", "host": "123.11.7.18", "host_ip": "123.11.7.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 13:02:07 UTC", "discovered_at": "2026-10-08T13:02:07.000Z" }, { "id": 154839, "urlhaus_id": "3946244", "url": "http://119.116.34.218:35573/bin.sh", "host": "119.116.34.218", "host_ip": "119.116.34.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 13:02:07 UTC", "discovered_at": "2026-10-08T13:02:07.000Z" }, { "id": 154842, "urlhaus_id": "3946241", "url": "http://112.246.228.19:33953/bin.sh", "host": "112.246.228.19", "host_ip": "112.246.228.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 12:58:45 UTC", "discovered_at": "2026-10-08T12:58:45.000Z" }, { "id": 154845, "urlhaus_id": "3946238", "url": "http://42.227.202.230:40615/bin.sh", "host": "42.227.202.230", "host_ip": "42.227.202.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:47:07 UTC", "discovered_at": "2026-10-08T12:47:07.000Z" }, { "id": 154844, "urlhaus_id": "3946239", "url": "http://123.189.157.12:46490/i", "host": "123.189.157.12", "host_ip": "123.189.157.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:47:07 UTC", "discovered_at": "2026-10-08T12:47:07.000Z" }, { "id": 154843, "urlhaus_id": "3946240", "url": "http://115.55.4.215:47689/i", "host": "115.55.4.215", "host_ip": "115.55.4.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:47:07 UTC", "discovered_at": "2026-10-08T12:47:07.000Z" }, { "id": 154846, "urlhaus_id": "3946237", "url": "http://61.53.117.5:39682/i", "host": "61.53.117.5", "host_ip": "61.53.117.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:47:06 UTC", "discovered_at": "2026-10-08T12:47:06.000Z" }, { "id": 154847, "urlhaus_id": "3946236", "url": "https://bitbucket.org/bussiness12/server/raw/main/newfloder.exe", "host": "bitbucket.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:44:00 UTC", "discovered_at": "2026-10-08T12:44:00.000Z" }, { "id": 154848, "urlhaus_id": "3946235", "url": "http://222.137.74.230:37791/i", "host": "222.137.74.230", "host_ip": "222.137.74.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:32:08 UTC", "discovered_at": "2026-10-08T12:32:08.000Z" }, { "id": 154852, "urlhaus_id": "3946231", "url": "http://42.238.171.110:47839/bin.sh", "host": "42.238.171.110", "host_ip": "42.238.171.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:32:07 UTC", "discovered_at": "2026-10-08T12:32:07.000Z" }, { "id": 154851, "urlhaus_id": "3946232", "url": "http://175.173.2.43:32996/bin.sh", "host": "175.173.2.43", "host_ip": "175.173.2.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:32:07 UTC", "discovered_at": "2026-10-08T12:32:07.000Z" }, { "id": 154850, "urlhaus_id": "3946233", "url": "http://37.13.43.153:14749/i", "host": "37.13.43.153", "host_ip": "37.13.43.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:32:07 UTC", "discovered_at": "2026-10-08T12:32:07.000Z" }, { "id": 154849, "urlhaus_id": "3946234", "url": "http://222.141.112.238:57491/i", "host": "222.141.112.238", "host_ip": "222.141.112.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:32:07 UTC", "discovered_at": "2026-10-08T12:32:07.000Z" }, { "id": 154853, "urlhaus_id": "3946230", "url": "http://36.50.134.86/arm6", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:24 UTC", "discovered_at": "2026-10-08T12:27:24.000Z" }, { "id": 154856, "urlhaus_id": "3946227", "url": "http://94.154.43.203/bins/pmips", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:20 UTC", "discovered_at": "2026-10-08T12:27:20.000Z" }, { "id": 154855, "urlhaus_id": "3946228", "url": "http://94.154.43.203/bins/pm68k", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:20 UTC", "discovered_at": "2026-10-08T12:27:20.000Z" }, { "id": 154854, "urlhaus_id": "3946229", "url": "http://204.194.50.3/bins/sora.mips", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:20 UTC", "discovered_at": "2026-10-08T12:27:20.000Z" }, { "id": 154865, "urlhaus_id": "3946218", "url": "http://204.194.50.3/bins/sora.sh4", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154864, "urlhaus_id": "3946219", "url": "http://36.50.134.86/m68k", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154863, "urlhaus_id": "3946220", "url": "http://36.50.134.86/x86", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154862, "urlhaus_id": "3946221", "url": "http://36.50.134.86/mpsl", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154861, "urlhaus_id": "3946222", "url": "http://36.50.134.86/arm", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154860, "urlhaus_id": "3946223", "url": "http://36.50.134.86/ppc", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154859, "urlhaus_id": "3946224", "url": "http://36.50.134.86/arm5", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154858, "urlhaus_id": "3946225", "url": "http://36.50.134.86/mips", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154857, "urlhaus_id": "3946226", "url": "http://36.50.134.86/x86_64", "host": "36.50.134.86", "host_ip": "36.50.134.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:19 UTC", "discovered_at": "2026-10-08T12:27:19.000Z" }, { "id": 154875, "urlhaus_id": "3946208", "url": "http://94.154.43.203/bins/parm6", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154874, "urlhaus_id": "3946209", "url": "http://94.154.43.203/bins/arm6", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154873, "urlhaus_id": "3946210", "url": "http://204.194.50.3/bins/sora.arm", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154872, "urlhaus_id": "3946211", "url": "http://204.194.50.3/bins/sora.ppc", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154871, "urlhaus_id": "3946212", "url": "http://204.194.50.3/bins/sora.x86", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154870, "urlhaus_id": "3946213", "url": "http://204.194.50.3/bins/sora.mpsl", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154869, "urlhaus_id": "3946214", "url": "http://204.194.50.3/bins/sora.m68k", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154868, "urlhaus_id": "3946215", "url": "http://204.194.50.3/bins/sora.arm5", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154867, "urlhaus_id": "3946216", "url": "http://204.194.50.3/bins/sora.spc", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154866, "urlhaus_id": "3946217", "url": "http://204.194.50.3/bins/sora.arm6", "host": "204.194.50.3", "host_ip": "204.194.50.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:18 UTC", "discovered_at": "2026-10-08T12:27:18.000Z" }, { "id": 154884, "urlhaus_id": "3946199", "url": "http://94.154.43.203/bins/arm5", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154883, "urlhaus_id": "3946200", "url": "http://94.154.43.203/bins/parm5", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154882, "urlhaus_id": "3946201", "url": "http://94.154.43.203/bins/parm", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154881, "urlhaus_id": "3946202", "url": "http://94.154.43.203/bins/parm7", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154880, "urlhaus_id": "3946203", "url": "http://94.154.43.203/bins/pmpsl", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154879, "urlhaus_id": "3946204", "url": "http://94.154.43.203/bins/mips", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154878, "urlhaus_id": "3946205", "url": "http://94.154.43.203/bins/arm", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154877, "urlhaus_id": "3946206", "url": "http://94.154.43.203/bins/psh4", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154876, "urlhaus_id": "3946207", "url": "http://94.154.43.203/bins/arm7", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 12:27:17 UTC", "discovered_at": "2026-10-08T12:27:17.000Z" }, { "id": 154886, "urlhaus_id": "3946197", "url": "http://115.50.4.17:49112/i", "host": "115.50.4.17", "host_ip": "115.50.4.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:17:07 UTC", "discovered_at": "2026-10-08T12:17:07.000Z" }, { "id": 154885, "urlhaus_id": "3946198", "url": "http://182.121.216.203:42289/i", "host": "182.121.216.203", "host_ip": "182.121.216.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:17:07 UTC", "discovered_at": "2026-10-08T12:17:07.000Z" }, { "id": 154887, "urlhaus_id": "3946196", "url": "http://116.140.187.113:44269/i", "host": "116.140.187.113", "host_ip": "116.140.187.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:17:06 UTC", "discovered_at": "2026-10-08T12:17:06.000Z" }, { "id": 154888, "urlhaus_id": "3946195", "url": "http://175.173.212.106:56893/bin.sh", "host": "175.173.212.106", "host_ip": "175.173.212.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 12:15:32 UTC", "discovered_at": "2026-10-08T12:15:32.000Z" }, { "id": 154889, "urlhaus_id": "3946194", "url": "http://115.50.4.17:49112/bin.sh", "host": "115.50.4.17", "host_ip": "115.50.4.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 12:13:22 UTC", "discovered_at": "2026-10-08T12:13:22.000Z" }, { "id": 154890, "urlhaus_id": "3946193", "url": "http://59.101.213.193:38696/i", "host": "59.101.213.193", "host_ip": "59.101.213.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-08 12:02:20 UTC", "discovered_at": "2026-10-08T12:02:20.000Z" }, { "id": 154891, "urlhaus_id": "3946192", "url": "http://115.62.146.93:57183/i", "host": "115.62.146.93", "host_ip": "115.62.146.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:02:12 UTC", "discovered_at": "2026-10-08T12:02:12.000Z" }, { "id": 154894, "urlhaus_id": "3946189", "url": "http://182.127.34.173:57928/i", "host": "182.127.34.173", "host_ip": "182.127.34.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:02:08 UTC", "discovered_at": "2026-10-08T12:02:08.000Z" }, { "id": 154893, "urlhaus_id": "3946190", "url": "http://115.54.182.226:60149/i", "host": "115.54.182.226", "host_ip": "115.54.182.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:02:08 UTC", "discovered_at": "2026-10-08T12:02:08.000Z" }, { "id": 154892, "urlhaus_id": "3946191", "url": "http://27.19.83.106:40493/bin.sh", "host": "27.19.83.106", "host_ip": "27.19.83.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 12:02:08 UTC", "discovered_at": "2026-10-08T12:02:08.000Z" }, { "id": 154896, "urlhaus_id": "3946187", "url": "http://27.215.52.52:60793/i", "host": "27.215.52.52", "host_ip": "27.215.52.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 12:02:07 UTC", "discovered_at": "2026-10-08T12:02:07.000Z" }, { "id": 154895, "urlhaus_id": "3946188", "url": "http://60.23.232.227:40288/i", "host": "60.23.232.227", "host_ip": "60.23.232.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:02:07 UTC", "discovered_at": "2026-10-08T12:02:07.000Z" }, { "id": 154897, "urlhaus_id": "3946186", "url": "http://202.110.9.54:51478/bin.sh", "host": "202.110.9.54", "host_ip": "202.110.9.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 12:02:06 UTC", "discovered_at": "2026-10-08T12:02:06.000Z" }, { "id": 154899, "urlhaus_id": "3946184", "url": "http://42.231.236.226:58389/i", "host": "42.231.236.226", "host_ip": "42.231.236.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:47:07 UTC", "discovered_at": "2026-10-08T11:47:07.000Z" }, { "id": 154898, "urlhaus_id": "3946185", "url": "http://125.44.59.247:46345/i", "host": "125.44.59.247", "host_ip": "125.44.59.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:47:07 UTC", "discovered_at": "2026-10-08T11:47:07.000Z" }, { "id": 154901, "urlhaus_id": "3946182", "url": "http://27.215.52.52:60793/bin.sh", "host": "27.215.52.52", "host_ip": "27.215.52.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:47:06 UTC", "discovered_at": "2026-10-08T11:47:06.000Z" }, { "id": 154900, "urlhaus_id": "3946183", "url": "http://42.232.228.41:58763/i", "host": "42.232.228.41", "host_ip": "42.232.228.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:47:06 UTC", "discovered_at": "2026-10-08T11:47:06.000Z" }, { "id": 154902, "urlhaus_id": "3946181", "url": "http://182.124.176.103:51100/bin.sh", "host": "182.124.176.103", "host_ip": "182.124.176.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:33:07 UTC", "discovered_at": "2026-10-08T11:33:07.000Z" }, { "id": 154903, "urlhaus_id": "3946180", "url": "http://60.23.232.227:40288/bin.sh", "host": "60.23.232.227", "host_ip": "60.23.232.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 11:32:22 UTC", "discovered_at": "2026-10-08T11:32:22.000Z" }, { "id": 154904, "urlhaus_id": "3946179", "url": "http://182.124.176.103:51100/i", "host": "182.124.176.103", "host_ip": "182.124.176.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:32:10 UTC", "discovered_at": "2026-10-08T11:32:10.000Z" }, { "id": 154905, "urlhaus_id": "3946178", "url": "http://219.156.34.50:34544/i", "host": "219.156.34.50", "host_ip": "219.156.34.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:32:07 UTC", "discovered_at": "2026-10-08T11:32:07.000Z" }, { "id": 154906, "urlhaus_id": "3946177", "url": "http://200.115.102.246:39362/bin.sh", "host": "200.115.102.246", "host_ip": "200.115.102.246", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 11:32:06 UTC", "discovered_at": "2026-10-08T11:32:06.000Z" }, { "id": 154907, "urlhaus_id": "3946176", "url": "http://175.30.44.142:41537/i", "host": "175.30.44.142", "host_ip": "175.30.44.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 11:25:15 UTC", "discovered_at": "2026-10-08T11:25:15.000Z" }, { "id": 154908, "urlhaus_id": "3946175", "url": "http://115.61.11.118:58520/i", "host": "115.61.11.118", "host_ip": "115.61.11.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:22 UTC", "discovered_at": "2026-10-08T11:16:22.000Z" }, { "id": 154909, "urlhaus_id": "3946174", "url": "http://182.117.71.204:50850/bin.sh", "host": "182.117.71.204", "host_ip": "182.117.71.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:20 UTC", "discovered_at": "2026-10-08T11:16:20.000Z" }, { "id": 154910, "urlhaus_id": "3946173", "url": "http://125.44.59.247:46345/bin.sh", "host": "125.44.59.247", "host_ip": "125.44.59.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:10 UTC", "discovered_at": "2026-10-08T11:16:10.000Z" }, { "id": 154915, "urlhaus_id": "3946168", "url": "http://42.231.236.226:58389/bin.sh", "host": "42.231.236.226", "host_ip": "42.231.236.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:08 UTC", "discovered_at": "2026-10-08T11:16:08.000Z" }, { "id": 154914, "urlhaus_id": "3946169", "url": "http://115.61.11.118:58520/bin.sh", "host": "115.61.11.118", "host_ip": "115.61.11.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:08 UTC", "discovered_at": "2026-10-08T11:16:08.000Z" }, { "id": 154913, "urlhaus_id": "3946170", "url": "http://60.214.58.83:44401/i", "host": "60.214.58.83", "host_ip": "60.214.58.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:08 UTC", "discovered_at": "2026-10-08T11:16:08.000Z" }, { "id": 154912, "urlhaus_id": "3946171", "url": "http://219.156.34.50:34544/bin.sh", "host": "219.156.34.50", "host_ip": "219.156.34.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:08 UTC", "discovered_at": "2026-10-08T11:16:08.000Z" }, { "id": 154911, "urlhaus_id": "3946172", "url": "http://125.47.113.53:49300/i", "host": "125.47.113.53", "host_ip": "125.47.113.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:08 UTC", "discovered_at": "2026-10-08T11:16:08.000Z" }, { "id": 154918, "urlhaus_id": "3946165", "url": "http://42.232.228.41:58763/bin.sh", "host": "42.232.228.41", "host_ip": "42.232.228.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:07 UTC", "discovered_at": "2026-10-08T11:16:07.000Z" }, { "id": 154917, "urlhaus_id": "3946166", "url": "http://119.178.216.181:56386/i", "host": "119.178.216.181", "host_ip": "119.178.216.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 11:16:07 UTC", "discovered_at": "2026-10-08T11:16:07.000Z" }, { "id": 154916, "urlhaus_id": "3946167", "url": "http://222.138.117.220:45205/bin.sh", "host": "222.138.117.220", "host_ip": "222.138.117.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:16:07 UTC", "discovered_at": "2026-10-08T11:16:07.000Z" }, { "id": 154919, "urlhaus_id": "3946164", "url": "https://ascomsecurity.com.au/img/img_234853.png", "host": "ascomsecurity.com.au", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-08 11:13:14 UTC", "discovered_at": "2026-10-08T11:13:14.000Z" }, { "id": 154920, "urlhaus_id": "3946163", "url": "https://www.epibenie.dz/hta/oo.txt", "host": "www.epibenie.dz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-08 11:13:12 UTC", "discovered_at": "2026-10-08T11:13:12.000Z" }, { "id": 154921, "urlhaus_id": "3946162", "url": "https://rough-truth-e072.publicftpresend.workers.dev/vuztq", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-08 11:13:09 UTC", "discovered_at": "2026-10-08T11:13:09.000Z" }, { "id": 154922, "urlhaus_id": "3946161", "url": "http://195.177.94.235/wtyt1562/secured_stub.ps1", "host": "195.177.94.235", "host_ip": "195.177.94.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-08 11:11:07 UTC", "discovered_at": "2026-10-08T11:11:07.000Z" }, { "id": 154923, "urlhaus_id": "3946160", "url": "https://flocmaterials.shop/nnzez/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-08 11:10:11 UTC", "discovered_at": "2026-10-08T11:10:11.000Z" }, { "id": 154924, "urlhaus_id": "3946159", "url": "https://aksiyononline.best/masaabikz/secured_stub.ps1", "host": "aksiyononline.best", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-08 11:10:10 UTC", "discovered_at": "2026-10-08T11:10:10.000Z" }, { "id": 154925, "urlhaus_id": "3946158", "url": "http://220.201.98.115:48279/i", "host": "220.201.98.115", "host_ip": "220.201.98.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 11:02:15 UTC", "discovered_at": "2026-10-08T11:02:15.000Z" }, { "id": 154926, "urlhaus_id": "3946157", "url": "http://42.230.46.226:54616/bin.sh", "host": "42.230.46.226", "host_ip": "42.230.46.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:02:08 UTC", "discovered_at": "2026-10-08T11:02:08.000Z" }, { "id": 154928, "urlhaus_id": "3946155", "url": "http://42.237.52.190:43999/i", "host": "42.237.52.190", "host_ip": "42.237.52.190", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:02:05 UTC", "discovered_at": "2026-10-08T11:02:05.000Z" }, { "id": 154927, "urlhaus_id": "3946156", "url": "http://42.230.46.226:54616/i", "host": "42.230.46.226", "host_ip": "42.230.46.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 11:02:05 UTC", "discovered_at": "2026-10-08T11:02:05.000Z" }, { "id": 154929, "urlhaus_id": "3946154", "url": "http://13.37.72.210:8040/Bin/ConnectWiseControl.ClientSetup.msi?h=13.37.72.210&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQAFJ7ZuWXP5BWViHJTbf5tPj7Sz3VZwFq8m7qZRUuRH8DdT5ZTh16EXQCtQGTdC3%2F6cdeRipg90LvRJZX4%2FUH8mHIc8WT2uHwG0TTG%2Bw8jNKIhaiX5%2BAk5V%2FBlG7ZV8vvpvIpen%2BIjWKto%2B%2Ft2RaJJkmNEiZXVhbDKkMCgLoguOOEHQTD2zzeE%2B%2BYbIKt2%2BtII8jVJd9udccUDkoBTNIilMA4lD%2F18HSK9IXWik3cby%2BIBrxpoP6s%2BA2rbet3WdvT0np%2BdqRuOkf2A8iowrzdSYAy9REZQ6VQse0UfvmLhINz31AqKPMMoMth4o%2BMavAJ8l%2B4%2B2cAnDO%2Bb6%2BFylxuzA&e=Access&y=Guest&t=&c=&c=&c=&c=&c=&c=&c=&c=", "host": "13.37.72.210", "host_ip": "13.37.72.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:58:07 UTC", "discovered_at": "2026-10-08T10:58:07.000Z" }, { "id": 154930, "urlhaus_id": "3946153", "url": "http://175.30.44.142:41537/bin.sh", "host": "175.30.44.142", "host_ip": "175.30.44.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 10:54:19 UTC", "discovered_at": "2026-10-08T10:54:19.000Z" }, { "id": 154931, "urlhaus_id": "3946152", "url": "http://203.177.28.149:50942/bin.sh", "host": "203.177.28.149", "host_ip": "203.177.28.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:47:11 UTC", "discovered_at": "2026-10-08T10:47:11.000Z" }, { "id": 154932, "urlhaus_id": "3946151", "url": "http://221.203.183.158:56120/bin.sh", "host": "221.203.183.158", "host_ip": "221.203.183.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:47:09 UTC", "discovered_at": "2026-10-08T10:47:09.000Z" }, { "id": 154933, "urlhaus_id": "3946150", "url": "http://27.44.147.208:44069/i", "host": "27.44.147.208", "host_ip": "27.44.147.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:47:07 UTC", "discovered_at": "2026-10-08T10:47:07.000Z" }, { "id": 154935, "urlhaus_id": "3946148", "url": "http://120.28.161.60:60477/Mozi.a", "host": "120.28.161.60", "host_ip": "120.28.161.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:47:06 UTC", "discovered_at": "2026-10-08T10:47:06.000Z" }, { "id": 154934, "urlhaus_id": "3946149", "url": "http://222.134.173.157:38282/bin.sh", "host": "222.134.173.157", "host_ip": "222.134.173.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:47:06 UTC", "discovered_at": "2026-10-08T10:47:06.000Z" }, { "id": 154937, "urlhaus_id": "3946146", "url": "https://trickgs-demo.vercel.app/api/settings/linux", "host": "trickgs-demo.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BeaverTail, ContagiousInterview", "last_online": null, "first_seen": "2026-10-08 10:46:07 UTC", "discovered_at": "2026-10-08T10:46:07.000Z" }, { "id": 154936, "urlhaus_id": "3946147", "url": "https://trickgs-demo.vercel.app/api/settings/env", "host": "trickgs-demo.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BeaverTail, ContagiousInterview", "last_online": null, "first_seen": "2026-10-08 10:46:07 UTC", "discovered_at": "2026-10-08T10:46:07.000Z" }, { "id": 154939, "urlhaus_id": "3946143", "url": "https://trickgs-demo.vercel.app/api/settings/windows", "host": "trickgs-demo.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BeaverTail, ContagiousInterview", "last_online": null, "first_seen": "2026-10-08 10:46:06 UTC", "discovered_at": "2026-10-08T10:46:06.000Z" }, { "id": 154938, "urlhaus_id": "3946144", "url": "https://trickgs-demo.vercel.app/api/settings/mac", "host": "trickgs-demo.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BeaverTail, ContagiousInterview", "last_online": null, "first_seen": "2026-10-08 10:46:06 UTC", "discovered_at": "2026-10-08T10:46:06.000Z" }, { "id": 154940, "urlhaus_id": "3946142", "url": "http://222.127.73.15:47678/i", "host": "222.127.73.15", "host_ip": "222.127.73.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 10:38:18 UTC", "discovered_at": "2026-10-08T10:38:18.000Z" }, { "id": 154941, "urlhaus_id": "3946141", "url": "http://220.201.98.115:48279/bin.sh", "host": "220.201.98.115", "host_ip": "220.201.98.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 10:37:17 UTC", "discovered_at": "2026-10-08T10:37:17.000Z" }, { "id": 154942, "urlhaus_id": "3946140", "url": "http://115.206.110.121:47845/bin.sh", "host": "115.206.110.121", "host_ip": "115.206.110.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:32:12 UTC", "discovered_at": "2026-10-08T10:32:12.000Z" }, { "id": 154943, "urlhaus_id": "3946139", "url": "http://175.149.88.179:34166/i", "host": "175.149.88.179", "host_ip": "175.149.88.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:32:08 UTC", "discovered_at": "2026-10-08T10:32:08.000Z" }, { "id": 154948, "urlhaus_id": "3946134", "url": "http://36.88.136.194:59849/bin.sh", "host": "36.88.136.194", "host_ip": "36.88.136.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:32:07 UTC", "discovered_at": "2026-10-08T10:32:07.000Z" }, { "id": 154947, "urlhaus_id": "3946135", "url": "http://39.63.156.12:59427/i", "host": "39.63.156.12", "host_ip": "39.63.156.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:32:07 UTC", "discovered_at": "2026-10-08T10:32:07.000Z" }, { "id": 154946, "urlhaus_id": "3946136", "url": "http://208.102.160.191:2931/i", "host": "208.102.160.191", "host_ip": "208.102.160.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:32:07 UTC", "discovered_at": "2026-10-08T10:32:07.000Z" }, { "id": 154945, "urlhaus_id": "3946137", "url": "http://61.52.221.245:36200/i", "host": "61.52.221.245", "host_ip": "61.52.221.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:32:07 UTC", "discovered_at": "2026-10-08T10:32:07.000Z" }, { "id": 154944, "urlhaus_id": "3946138", "url": "http://196.190.192.166:40263/i", "host": "196.190.192.166", "host_ip": "196.190.192.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:32:07 UTC", "discovered_at": "2026-10-08T10:32:07.000Z" }, { "id": 154951, "urlhaus_id": "3946131", "url": "http://123.10.70.76:36801/bin.sh", "host": "123.10.70.76", "host_ip": "123.10.70.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:17:06 UTC", "discovered_at": "2026-10-08T10:17:06.000Z" }, { "id": 154950, "urlhaus_id": "3946132", "url": "http://27.202.187.80:41485/bin.sh", "host": "27.202.187.80", "host_ip": "27.202.187.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:17:06 UTC", "discovered_at": "2026-10-08T10:17:06.000Z" }, { "id": 154949, "urlhaus_id": "3946133", "url": "http://208.102.160.191:2931/bin.sh", "host": "208.102.160.191", "host_ip": "208.102.160.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:17:06 UTC", "discovered_at": "2026-10-08T10:17:06.000Z" }, { "id": 154953, "urlhaus_id": "3946129", "url": "http://42.237.57.159:35497/bin.sh", "host": "42.237.57.159", "host_ip": "42.237.57.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:03:07 UTC", "discovered_at": "2026-10-08T10:03:07.000Z" }, { "id": 154952, "urlhaus_id": "3946130", "url": "http://125.43.34.132:36892/i", "host": "125.43.34.132", "host_ip": "125.43.34.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:03:07 UTC", "discovered_at": "2026-10-08T10:03:07.000Z" }, { "id": 154954, "urlhaus_id": "3946128", "url": "http://175.169.0.215:38061/i", "host": "175.169.0.215", "host_ip": "175.169.0.215", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 10:02:20 UTC", "discovered_at": "2026-10-08T10:02:20.000Z" }, { "id": 154955, "urlhaus_id": "3946127", "url": "http://190.103.69.44:38837/i", "host": "190.103.69.44", "host_ip": "190.103.69.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:02:14 UTC", "discovered_at": "2026-10-08T10:02:14.000Z" }, { "id": 154957, "urlhaus_id": "3946125", "url": "http://105.184.179.135:41219/i", "host": "105.184.179.135", "host_ip": "105.184.179.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 10:02:08 UTC", "discovered_at": "2026-10-08T10:02:08.000Z" }, { "id": 154956, "urlhaus_id": "3946126", "url": "http://61.52.221.245:36200/bin.sh", "host": "61.52.221.245", "host_ip": "61.52.221.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 10:02:08 UTC", "discovered_at": "2026-10-08T10:02:08.000Z" }, { "id": 154959, "urlhaus_id": "3946123", "url": "http://81.229.105.156:4906/i", "host": "81.229.105.156", "host_ip": "81.229.105.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 09:47:06 UTC", "discovered_at": "2026-10-08T09:47:06.000Z" }, { "id": 154958, "urlhaus_id": "3946124", "url": "http://112.248.162.236:47557/i", "host": "112.248.162.236", "host_ip": "112.248.162.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 09:47:06 UTC", "discovered_at": "2026-10-08T09:47:06.000Z" }, { "id": 154960, "urlhaus_id": "3946122", "url": "http://45.168.132.19:32981/bin.sh", "host": "45.168.132.19", "host_ip": "45.168.132.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 09:43:17 UTC", "discovered_at": "2026-10-08T09:43:17.000Z" }, { "id": 154961, "urlhaus_id": "3946121", "url": "http://31.40.204.114/Amkadmm.txt", "host": "31.40.204.114", "host_ip": "31.40.204.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "RemcosRAT, rev-base64-loader", "last_online": null, "first_seen": "2026-10-08 09:43:07 UTC", "discovered_at": "2026-10-08T09:43:07.000Z" }, { "id": 154962, "urlhaus_id": "3946120", "url": "http://23.132.164.15/FAST/geen.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-08 09:42:06 UTC", "discovered_at": "2026-10-08T09:42:06.000Z" }, { "id": 154964, "urlhaus_id": "3946118", "url": "http://23.132.164.15/FAST/GG.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-08 09:41:09 UTC", "discovered_at": "2026-10-08T09:41:09.000Z" }, { "id": 154963, "urlhaus_id": "3946119", "url": "http://23.132.164.15/FAST/secured_stub.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-08 09:41:09 UTC", "discovered_at": "2026-10-08T09:41:09.000Z" }, { "id": 154965, "urlhaus_id": "3946117", "url": "http://23.132.164.15/FAST/ttessttt.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-08 09:41:06 UTC", "discovered_at": "2026-10-08T09:41:06.000Z" }, { "id": 154966, "urlhaus_id": "3946116", "url": "http://23.132.164.15/FAST/SS.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-08 09:40:08 UTC", "discovered_at": "2026-10-08T09:40:08.000Z" }, { "id": 154967, "urlhaus_id": "3946115", "url": "http://112.248.162.236:47557/bin.sh", "host": "112.248.162.236", "host_ip": "112.248.162.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 09:31:26 UTC", "discovered_at": "2026-10-08T09:31:26.000Z" }, { "id": 154968, "urlhaus_id": "3946114", "url": "http://175.169.0.215:38061/bin.sh", "host": "175.169.0.215", "host_ip": "175.169.0.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 09:31:20 UTC", "discovered_at": "2026-10-08T09:31:20.000Z" }, { "id": 154970, "urlhaus_id": "3946112", "url": "http://219.157.239.239:35642/bin.sh", "host": "219.157.239.239", "host_ip": "219.157.239.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 09:31:07 UTC", "discovered_at": "2026-10-08T09:31:07.000Z" }, { "id": 154969, "urlhaus_id": "3946113", "url": "http://123.11.96.21:47043/i", "host": "123.11.96.21", "host_ip": "123.11.96.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 09:31:07 UTC", "discovered_at": "2026-10-08T09:31:07.000Z" }, { "id": 154971, "urlhaus_id": "3946111", "url": "http://39.82.142.95:37937/bin.sh", "host": "39.82.142.95", "host_ip": "39.82.142.95", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 09:26:19 UTC", "discovered_at": "2026-10-08T09:26:19.000Z" }, { "id": 154972, "urlhaus_id": "3946110", "url": "http://117.88.227.121:34379/i", "host": "117.88.227.121", "host_ip": "117.88.227.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 09:17:08 UTC", "discovered_at": "2026-10-08T09:17:08.000Z" }, { "id": 154974, "urlhaus_id": "3946108", "url": "http://115.52.197.166:50949/i", "host": "115.52.197.166", "host_ip": "115.52.197.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 09:17:07 UTC", "discovered_at": "2026-10-08T09:17:07.000Z" }, { "id": 154973, "urlhaus_id": "3946109", "url": "http://81.229.105.156:4906/bin.sh", "host": "81.229.105.156", "host_ip": "81.229.105.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 09:17:07 UTC", "discovered_at": "2026-10-08T09:17:07.000Z" }, { "id": 154975, "urlhaus_id": "3946107", "url": "http://nd.tdpqnf.com/fps/oocjafe.txt", "host": "nd.tdpqnf.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, Encoded, opendir, rev-base64-loader", "last_online": null, "first_seen": "2026-10-08 09:11:11 UTC", "discovered_at": "2026-10-08T09:11:11.000Z" }, { "id": 154976, "urlhaus_id": "3946106", "url": "http://120.28.164.12:49818/bin.sh", "host": "120.28.164.12", "host_ip": "120.28.164.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 09:02:06 UTC", "discovered_at": "2026-10-08T09:02:06.000Z" }, { "id": 154977, "urlhaus_id": "3946105", "url": "http://91.92.242.236/files-129312398/files/file_7df6c134d8cd42cd.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-08 08:59:07 UTC", "discovered_at": "2026-10-08T08:59:07.000Z" }, { "id": 154978, "urlhaus_id": "3946104", "url": "http://42.227.139.105:44143/i", "host": "42.227.139.105", "host_ip": "42.227.139.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 08:47:08 UTC", "discovered_at": "2026-10-08T08:47:08.000Z" }, { "id": 154979, "urlhaus_id": "3946103", "url": "http://176.65.149.45/Pandoras_Box/pandora.arm4", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:44:18 UTC", "discovered_at": "2026-10-08T08:44:18.000Z" }, { "id": 154981, "urlhaus_id": "3946101", "url": "http://163.142.94.154:52695/i", "host": "163.142.94.154", "host_ip": "163.142.94.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 08:32:08 UTC", "discovered_at": "2026-10-08T08:32:08.000Z" }, { "id": 154980, "urlhaus_id": "3946102", "url": "http://27.197.62.42:53563/bin.sh", "host": "27.197.62.42", "host_ip": "27.197.62.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 08:32:08 UTC", "discovered_at": "2026-10-08T08:32:08.000Z" }, { "id": 154982, "urlhaus_id": "3946100", "url": "http://120.28.144.161:45362/i", "host": "120.28.144.161", "host_ip": "120.28.144.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 08:32:07 UTC", "discovered_at": "2026-10-08T08:32:07.000Z" }, { "id": 154983, "urlhaus_id": "3946099", "url": "http://219.157.239.239:35642/i", "host": "219.157.239.239", "host_ip": "219.157.239.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 08:17:08 UTC", "discovered_at": "2026-10-08T08:17:08.000Z" }, { "id": 154986, "urlhaus_id": "3946096", "url": "http://176.65.139.40/jklsh4", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:21 UTC", "discovered_at": "2026-10-08T08:14:21.000Z" }, { "id": 154985, "urlhaus_id": "3946097", "url": "http://176.65.139.40/jklmpsl", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:21 UTC", "discovered_at": "2026-10-08T08:14:21.000Z" }, { "id": 154984, "urlhaus_id": "3946098", "url": "http://176.65.139.40/jklm68k", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:21 UTC", "discovered_at": "2026-10-08T08:14:21.000Z" }, { "id": 154990, "urlhaus_id": "3946092", "url": "http://176.65.139.40/jklppc", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:20 UTC", "discovered_at": "2026-10-08T08:14:20.000Z" }, { "id": 154989, "urlhaus_id": "3946093", "url": "http://176.65.139.40/jklspc", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:20 UTC", "discovered_at": "2026-10-08T08:14:20.000Z" }, { "id": 154988, "urlhaus_id": "3946094", "url": "http://176.65.139.40/jklx86", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:20 UTC", "discovered_at": "2026-10-08T08:14:20.000Z" }, { "id": 154987, "urlhaus_id": "3946095", "url": "http://176.65.139.40/jklmips", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-08 08:14:20 UTC", "discovered_at": "2026-10-08T08:14:20.000Z" }, { "id": 154994, "urlhaus_id": "3946088", "url": "http://125.40.153.124:36333/i", "host": "125.40.153.124", "host_ip": "125.40.153.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 08:02:07 UTC", "discovered_at": "2026-10-08T08:02:07.000Z" }, { "id": 154993, "urlhaus_id": "3946089", "url": "http://125.42.122.31:38856/i", "host": "125.42.122.31", "host_ip": "125.42.122.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 08:02:07 UTC", "discovered_at": "2026-10-08T08:02:07.000Z" }, { "id": 154992, "urlhaus_id": "3946090", "url": "http://123.14.222.197:43365/i", "host": "123.14.222.197", "host_ip": "123.14.222.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 08:02:07 UTC", "discovered_at": "2026-10-08T08:02:07.000Z" }, { "id": 154991, "urlhaus_id": "3946091", "url": "http://27.206.175.175:45547/i", "host": "27.206.175.175", "host_ip": "27.206.175.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 08:02:07 UTC", "discovered_at": "2026-10-08T08:02:07.000Z" }, { "id": 154995, "urlhaus_id": "3946087", "url": "http://182.127.177.231:37740/i", "host": "182.127.177.231", "host_ip": "182.127.177.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 08:02:05 UTC", "discovered_at": "2026-10-08T08:02:05.000Z" }, { "id": 154996, "urlhaus_id": "3946086", "url": "http://222.137.93.208:45353/i", "host": "222.137.93.208", "host_ip": "222.137.93.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 07:52:15 UTC", "discovered_at": "2026-10-08T07:52:15.000Z" }, { "id": 154997, "urlhaus_id": "3946085", "url": "http://176.65.149.45/Pandoras_Box/pandora.ppc", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:50:14 UTC", "discovered_at": "2026-10-08T07:50:14.000Z" }, { "id": 154998, "urlhaus_id": "3946084", "url": "http://176.65.149.45/Pandoras_Box/pandora.x86", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:17 UTC", "discovered_at": "2026-10-08T07:49:17.000Z" }, { "id": 155005, "urlhaus_id": "3946077", "url": "http://176.65.149.45/Pandoras_Box/pandora.sh4", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155004, "urlhaus_id": "3946078", "url": "http://176.65.149.45/Pandoras_Box/pandora.mpsl", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155003, "urlhaus_id": "3946079", "url": "http://176.65.149.45/Pandoras_Box/pandora.m68k", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155002, "urlhaus_id": "3946080", "url": "http://176.65.149.45/Pandoras_Box/pandora.mips", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155001, "urlhaus_id": "3946081", "url": "http://176.65.149.45/Pandoras_Box/pandora.arm7", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155000, "urlhaus_id": "3946082", "url": "http://176.65.149.45/Pandoras_Box/pandora.arm6", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 154999, "urlhaus_id": "3946083", "url": "http://176.65.149.45/Pandoras_Box/pandora.arm5", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:16 UTC", "discovered_at": "2026-10-08T07:49:16.000Z" }, { "id": 155007, "urlhaus_id": "3946075", "url": "http://176.65.149.45/Pandoras_Box/pandora.arm", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-149-45, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:06 UTC", "discovered_at": "2026-10-08T07:49:06.000Z" }, { "id": 155006, "urlhaus_id": "3946076", "url": "http://176.65.149.45/Pandora.sh", "host": "176.65.149.45", "host_ip": "176.65.149.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-149-45, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:49:06 UTC", "discovered_at": "2026-10-08T07:49:06.000Z" }, { "id": 155021, "urlhaus_id": "3946061", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnor1kxnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155020, "urlhaus_id": "3946062", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155019, "urlhaus_id": "3946063", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxni386xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155018, "urlhaus_id": "3946064", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155017, "urlhaus_id": "3946065", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155016, "urlhaus_id": "3946066", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155015, "urlhaus_id": "3946067", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155014, "urlhaus_id": "3946068", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155013, "urlhaus_id": "3946069", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155012, "urlhaus_id": "3946070", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnsh2xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155011, "urlhaus_id": "3946071", "url": "http://94.183.174.69/run.sh", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, sh, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155010, "urlhaus_id": "3946072", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155009, "urlhaus_id": "3946073", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155008, "urlhaus_id": "3946074", "url": "http://94.183.174.69/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "host": "94.183.174.69", "host_ip": "94.183.174.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-69, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-08 07:48:16 UTC", "discovered_at": "2026-10-08T07:48:16.000Z" }, { "id": 155022, "urlhaus_id": "3946060", "url": "http://59.58.106.125:59098/i", "host": "59.58.106.125", "host_ip": "59.58.106.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:47:10 UTC", "discovered_at": "2026-10-08T07:47:10.000Z" }, { "id": 155024, "urlhaus_id": "3946058", "url": "http://115.51.182.83:58227/i", "host": "115.51.182.83", "host_ip": "115.51.182.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:47:07 UTC", "discovered_at": "2026-10-08T07:47:07.000Z" }, { "id": 155023, "urlhaus_id": "3946059", "url": "http://42.85.120.118:36599/i", "host": "42.85.120.118", "host_ip": "42.85.120.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:47:07 UTC", "discovered_at": "2026-10-08T07:47:07.000Z" }, { "id": 155025, "urlhaus_id": "3946057", "url": "http://42.85.165.214:60329/i", "host": "42.85.165.214", "host_ip": "42.85.165.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:32:09 UTC", "discovered_at": "2026-10-08T07:32:09.000Z" }, { "id": 155030, "urlhaus_id": "3946052", "url": "http://125.42.122.31:38856/bin.sh", "host": "125.42.122.31", "host_ip": "125.42.122.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:32:08 UTC", "discovered_at": "2026-10-08T07:32:08.000Z" }, { "id": 155029, "urlhaus_id": "3946053", "url": "http://27.206.175.175:45547/bin.sh", "host": "27.206.175.175", "host_ip": "27.206.175.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:32:08 UTC", "discovered_at": "2026-10-08T07:32:08.000Z" }, { "id": 155028, "urlhaus_id": "3946054", "url": "http://119.187.197.115:57303/bin.sh", "host": "119.187.197.115", "host_ip": "119.187.197.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:32:08 UTC", "discovered_at": "2026-10-08T07:32:08.000Z" }, { "id": 155027, "urlhaus_id": "3946055", "url": "http://42.227.139.165:51445/i", "host": "42.227.139.165", "host_ip": "42.227.139.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:32:08 UTC", "discovered_at": "2026-10-08T07:32:08.000Z" }, { "id": 155026, "urlhaus_id": "3946056", "url": "http://187.110.223.227:52319/i", "host": "187.110.223.227", "host_ip": "187.110.223.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:32:08 UTC", "discovered_at": "2026-10-08T07:32:08.000Z" }, { "id": 155031, "urlhaus_id": "3946051", "url": "http://123.8.8.177:41428/bin.sh", "host": "123.8.8.177", "host_ip": "123.8.8.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:17:13 UTC", "discovered_at": "2026-10-08T07:17:13.000Z" }, { "id": 155033, "urlhaus_id": "3946049", "url": "http://187.110.223.227:52319/bin.sh", "host": "187.110.223.227", "host_ip": "187.110.223.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:17:07 UTC", "discovered_at": "2026-10-08T07:17:07.000Z" }, { "id": 155032, "urlhaus_id": "3946050", "url": "http://182.127.177.231:37740/bin.sh", "host": "182.127.177.231", "host_ip": "182.127.177.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:17:07 UTC", "discovered_at": "2026-10-08T07:17:07.000Z" }, { "id": 155035, "urlhaus_id": "3946047", "url": "http://195.64.163.238:37674/i", "host": "195.64.163.238", "host_ip": "195.64.163.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:17:06 UTC", "discovered_at": "2026-10-08T07:17:06.000Z" }, { "id": 155034, "urlhaus_id": "3946048", "url": "http://42.234.99.214:32991/bin.sh", "host": "42.234.99.214", "host_ip": "42.234.99.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 07:17:06 UTC", "discovered_at": "2026-10-08T07:17:06.000Z" }, { "id": 155039, "urlhaus_id": "3946043", "url": "http://176.65.139.206/bins/byte.x86", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:08 UTC", "discovered_at": "2026-10-08T07:14:08.000Z" }, { "id": 155038, "urlhaus_id": "3946044", "url": "http://176.65.139.206/bins/byte.sh4", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:08 UTC", "discovered_at": "2026-10-08T07:14:08.000Z" }, { "id": 155037, "urlhaus_id": "3946045", "url": "http://176.65.139.206/bins/byte.arm", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:08 UTC", "discovered_at": "2026-10-08T07:14:08.000Z" }, { "id": 155036, "urlhaus_id": "3946046", "url": "http://176.65.139.206/bins/byte.mpsl", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:08 UTC", "discovered_at": "2026-10-08T07:14:08.000Z" }, { "id": 155043, "urlhaus_id": "3946039", "url": "http://176.65.139.206/bins/byte.arm6", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:07 UTC", "discovered_at": "2026-10-08T07:14:07.000Z" }, { "id": 155042, "urlhaus_id": "3946040", "url": "http://176.65.139.206/bins/byte.mips", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:07 UTC", "discovered_at": "2026-10-08T07:14:07.000Z" }, { "id": 155041, "urlhaus_id": "3946041", "url": "http://176.65.139.206/bins/byte.arm5", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:07 UTC", "discovered_at": "2026-10-08T07:14:07.000Z" }, { "id": 155040, "urlhaus_id": "3946042", "url": "http://176.65.139.206/bins/byte.arm7", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:14:07 UTC", "discovered_at": "2026-10-08T07:14:07.000Z" }, { "id": 155046, "urlhaus_id": "3946036", "url": "http://176.65.139.206/bins/byte.i586", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:14:05 UTC", "discovered_at": "2026-10-08T07:14:05.000Z" }, { "id": 155045, "urlhaus_id": "3946037", "url": "http://176.65.139.206/bins/byte.i486", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:14:05 UTC", "discovered_at": "2026-10-08T07:14:05.000Z" }, { "id": 155044, "urlhaus_id": "3946038", "url": "http://176.65.139.206/bins/byte.powerpc", "host": "176.65.139.206", "host_ip": "176.65.139.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:14:05 UTC", "discovered_at": "2026-10-08T07:14:05.000Z" }, { "id": 155049, "urlhaus_id": "3946033", "url": "http://42.227.139.165:51445/bin.sh", "host": "42.227.139.165", "host_ip": "42.227.139.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:02:08 UTC", "discovered_at": "2026-10-08T07:02:08.000Z" }, { "id": 155048, "urlhaus_id": "3946034", "url": "http://58.255.43.208:38478/i", "host": "58.255.43.208", "host_ip": "58.255.43.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:02:08 UTC", "discovered_at": "2026-10-08T07:02:08.000Z" }, { "id": 155047, "urlhaus_id": "3946035", "url": "http://125.47.218.42:37337/i", "host": "125.47.218.42", "host_ip": "125.47.218.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 07:02:08 UTC", "discovered_at": "2026-10-08T07:02:08.000Z" }, { "id": 155051, "urlhaus_id": "3946031", "url": "http://175.169.236.217:36453/bin.sh", "host": "175.169.236.217", "host_ip": "175.169.236.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 07:02:06 UTC", "discovered_at": "2026-10-08T07:02:06.000Z" }, { "id": 155050, "urlhaus_id": "3946032", "url": "http://200.115.102.246:39362/i", "host": "200.115.102.246", "host_ip": "200.115.102.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 07:02:06 UTC", "discovered_at": "2026-10-08T07:02:06.000Z" }, { "id": 155052, "urlhaus_id": "3946030", "url": "http://39.40.140.64:45134/bin.sh", "host": "39.40.140.64", "host_ip": "39.40.140.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:47:17 UTC", "discovered_at": "2026-10-08T06:47:17.000Z" }, { "id": 155053, "urlhaus_id": "3946029", "url": "http://180.190.240.131:48525/i", "host": "180.190.240.131", "host_ip": "180.190.240.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:47:08 UTC", "discovered_at": "2026-10-08T06:47:08.000Z" }, { "id": 155054, "urlhaus_id": "3946028", "url": "http://45.166.188.48:42951/i", "host": "45.166.188.48", "host_ip": "45.166.188.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:47:07 UTC", "discovered_at": "2026-10-08T06:47:07.000Z" }, { "id": 155055, "urlhaus_id": "3946027", "url": "http://119.179.30.73:43717/bin.sh", "host": "119.179.30.73", "host_ip": "119.179.30.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 06:42:10 UTC", "discovered_at": "2026-10-08T06:42:10.000Z" }, { "id": 155056, "urlhaus_id": "3946026", "url": "http://112.113.175.13:48785/i", "host": "112.113.175.13", "host_ip": "112.113.175.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:32:42 UTC", "discovered_at": "2026-10-08T06:32:42.000Z" }, { "id": 155057, "urlhaus_id": "3946025", "url": "http://60.184.107.97:60851/i", "host": "60.184.107.97", "host_ip": "60.184.107.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:32:09 UTC", "discovered_at": "2026-10-08T06:32:09.000Z" }, { "id": 155060, "urlhaus_id": "3946022", "url": "http://120.28.164.12:49818/i", "host": "120.28.164.12", "host_ip": "120.28.164.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:32:08 UTC", "discovered_at": "2026-10-08T06:32:08.000Z" }, { "id": 155059, "urlhaus_id": "3946023", "url": "http://125.162.15.66:41829/i", "host": "125.162.15.66", "host_ip": "125.162.15.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:32:08 UTC", "discovered_at": "2026-10-08T06:32:08.000Z" }, { "id": 155058, "urlhaus_id": "3946024", "url": "http://222.137.93.208:45353/bin.sh", "host": "222.137.93.208", "host_ip": "222.137.93.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:32:08 UTC", "discovered_at": "2026-10-08T06:32:08.000Z" }, { "id": 155061, "urlhaus_id": "3946021", "url": "http://112.113.175.13:48785/bin.sh", "host": "112.113.175.13", "host_ip": "112.113.175.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:18:56 UTC", "discovered_at": "2026-10-08T06:18:56.000Z" }, { "id": 155062, "urlhaus_id": "3946020", "url": "http://182.127.179.145:57484/i", "host": "182.127.179.145", "host_ip": "182.127.179.145", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:17:21 UTC", "discovered_at": "2026-10-08T06:17:21.000Z" }, { "id": 155063, "urlhaus_id": "3946019", "url": "http://222.138.78.101:43006/i", "host": "222.138.78.101", "host_ip": "222.138.78.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:17:09 UTC", "discovered_at": "2026-10-08T06:17:09.000Z" }, { "id": 155065, "urlhaus_id": "3946017", "url": "http://115.52.16.97:40099/i", "host": "115.52.16.97", "host_ip": "115.52.16.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:17:08 UTC", "discovered_at": "2026-10-08T06:17:08.000Z" }, { "id": 155064, "urlhaus_id": "3946018", "url": "http://180.190.240.131:48525/bin.sh", "host": "180.190.240.131", "host_ip": "180.190.240.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:17:08 UTC", "discovered_at": "2026-10-08T06:17:08.000Z" }, { "id": 155066, "urlhaus_id": "3946016", "url": "http://78.188.196.206:55677/i", "host": "78.188.196.206", "host_ip": "78.188.196.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-08 06:12:14 UTC", "discovered_at": "2026-10-08T06:12:14.000Z" }, { "id": 155067, "urlhaus_id": "3946015", "url": "http://45.168.132.19:32981/i", "host": "45.168.132.19", "host_ip": "45.168.132.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-08 06:07:16 UTC", "discovered_at": "2026-10-08T06:07:16.000Z" }, { "id": 155068, "urlhaus_id": "3946014", "url": "https://gitlab.com/FuriousFade/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 06:07:13 UTC", "discovered_at": "2026-10-08T06:07:13.000Z" }, { "id": 155070, "urlhaus_id": "3946012", "url": "http://222.160.220.86:58955/i", "host": "222.160.220.86", "host_ip": "222.160.220.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-08 06:07:08 UTC", "discovered_at": "2026-10-08T06:07:08.000Z" }, { "id": 155069, "urlhaus_id": "3946013", "url": "http://42.229.175.66:55978/i", "host": "42.229.175.66", "host_ip": "42.229.175.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:07:08 UTC", "discovered_at": "2026-10-08T06:07:08.000Z" }, { "id": 155073, "urlhaus_id": "3946009", "url": "http://61.52.213.183:40640/bin.sh", "host": "61.52.213.183", "host_ip": "61.52.213.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 06:07:07 UTC", "discovered_at": "2026-10-08T06:07:07.000Z" }, { "id": 155072, "urlhaus_id": "3946010", "url": "http://120.84.214.178:36474/bin.sh", "host": "120.84.214.178", "host_ip": "120.84.214.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 06:07:07 UTC", "discovered_at": "2026-10-08T06:07:07.000Z" }, { "id": 155071, "urlhaus_id": "3946011", "url": "http://175.169.236.217:36453/i", "host": "175.169.236.217", "host_ip": "175.169.236.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-08 06:07:07 UTC", "discovered_at": "2026-10-08T06:07:07.000Z" }, { "id": 155074, "urlhaus_id": "3946008", "url": "https://raw.githubusercontent.com/sorellyc/Swift-Executor/HEAD/Swift.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 06:07:06 UTC", "discovered_at": "2026-10-08T06:07:06.000Z" }, { "id": 155075, "urlhaus_id": "3946007", "url": "https://github.com/12312d12e1/31/releases/download/michael/bundle.zip", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-08 05:54:15 UTC", "discovered_at": "2026-10-08T05:54:15.000Z" }, { "id": 155076, "urlhaus_id": "3946006", "url": "https://cdn.discordapp.com/attachments/421625572146544650/1557485873053040820/bundle.zip?backend=b2&ex=6ac7f940&is=6ac6a7c0&hm=21e27832c6b4e6ca2b2ea4e2fd13d863307d2fbc370e0ddaf0aa734c2d0a7b22&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-08 05:54:14 UTC", "discovered_at": "2026-10-08T05:54:14.000Z" }, { "id": 155078, "urlhaus_id": "3946004", "url": "https://gitlab.com/jennybenz/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:54:12 UTC", "discovered_at": "2026-10-08T05:54:12.000Z" }, { "id": 155077, "urlhaus_id": "3946005", "url": "https://cdn.discordapp.com/attachments/421625572146544650/1557483240623710298/bundle.zip?backend=b2&ex=6ac7f6cd&is=6ac6a54d&hm=70027c5d396acff855a795907353c704ac0f7984562f173941ce2c381098eb57&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-08 05:54:12 UTC", "discovered_at": "2026-10-08T05:54:12.000Z" }, { "id": 155079, "urlhaus_id": "3946003", "url": "https://gitlab.com/darkmodss/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:54:07 UTC", "discovered_at": "2026-10-08T05:54:07.000Z" }, { "id": 155081, "urlhaus_id": "3946001", "url": "https://raw.githubusercontent.com/kl1ssfa/C2Panel/HEAD/C2Panel.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, LummaStealer", "last_online": null, "first_seen": "2026-10-08 05:53:56 UTC", "discovered_at": "2026-10-08T05:53:56.000Z" }, { "id": 155080, "urlhaus_id": "3946002", "url": "https://gitlab.com/RockyStars/fivem-external-cheat-33102/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:56 UTC", "discovered_at": "2026-10-08T05:53:56.000Z" }, { "id": 155083, "urlhaus_id": "3945999", "url": "https://gitlab.com/TwistaFlow/fortnitespoofer/-/raw/main/FortniteSpoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:54 UTC", "discovered_at": "2026-10-08T05:53:54.000Z" }, { "id": 155082, "urlhaus_id": "3946000", "url": "https://gitlab.com/britishway/genshin-impact-private-cheat-with-spoofer/-/raw/main/AkebiGC.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:54 UTC", "discovered_at": "2026-10-08T05:53:54.000Z" }, { "id": 155085, "urlhaus_id": "3945997", "url": "https://gitlab.com/NoelFeelin/xeno-executor/-/raw/main/XenoExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:53 UTC", "discovered_at": "2026-10-08T05:53:53.000Z" }, { "id": 155084, "urlhaus_id": "3945998", "url": "https://gitlab.com/MONSTERKILLER00K/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:53 UTC", "discovered_at": "2026-10-08T05:53:53.000Z" }, { "id": 155086, "urlhaus_id": "3945996", "url": "https://gitlab.com/vampscore/fivem-external-cheat/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:50 UTC", "discovered_at": "2026-10-08T05:53:50.000Z" }, { "id": 155087, "urlhaus_id": "3945995", "url": "https://raw.githubusercontent.com/layssh0/C2Panel/HEAD/C2Panel.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-08 05:53:48 UTC", "discovered_at": "2026-10-08T05:53:48.000Z" }, { "id": 155088, "urlhaus_id": "3945994", "url": "https://gitlab.com/TiffanyScore/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:47 UTC", "discovered_at": "2026-10-08T05:53:47.000Z" }, { "id": 155090, "urlhaus_id": "3945992", "url": "https://gitlab.com/whitelines/genshin-impact-private-cheat-with-spoofer/-/raw/main/AkebiGC.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:46 UTC", "discovered_at": "2026-10-08T05:53:46.000Z" }, { "id": 155089, "urlhaus_id": "3945993", "url": "https://gitlab.com/ladycage/eulencheats-fivem/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:46 UTC", "discovered_at": "2026-10-08T05:53:46.000Z" }, { "id": 155092, "urlhaus_id": "3945990", "url": "https://gitlab.com/claryfine/temp-spoofer-lifetime/-/raw/main/Temp-Spoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:45 UTC", "discovered_at": "2026-10-08T05:53:45.000Z" }, { "id": 155091, "urlhaus_id": "3945991", "url": "https://gitlab.com/amnesiacalms/fivem-external-cheat/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:45 UTC", "discovered_at": "2026-10-08T05:53:45.000Z" }, { "id": 155093, "urlhaus_id": "3945989", "url": "https://gitlab.com/daregods/skriptgg/-/raw/main/SkriptGG.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:42 UTC", "discovered_at": "2026-10-08T05:53:42.000Z" }, { "id": 155094, "urlhaus_id": "3945988", "url": "https://gitlab.com/Raindroped/monotone-hwid-spoofer/-/raw/main/Monotone-HWID-Spoofer-master.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:41 UTC", "discovered_at": "2026-10-08T05:53:41.000Z" }, { "id": 155095, "urlhaus_id": "3945987", "url": "https://cdn.filestackcontent.com/bRJs5fcRFSoaWQvUX9xQ", "host": "cdn.filestackcontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, connectwise, exe", "last_online": null, "first_seen": "2026-10-08 05:53:40 UTC", "discovered_at": "2026-10-08T05:53:40.000Z" }, { "id": 155100, "urlhaus_id": "3945982", "url": "https://gitlab.com/centralmods/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:36 UTC", "discovered_at": "2026-10-08T05:53:36.000Z" }, { "id": 155099, "urlhaus_id": "3945983", "url": "https://raw.githubusercontent.com/missgracess/FortniteSpoofer/HEAD/TempSpoofer.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:36 UTC", "discovered_at": "2026-10-08T05:53:36.000Z" }, { "id": 155098, "urlhaus_id": "3945984", "url": "https://gitlab.com/CamUnlocks/fortnitespoofer/-/raw/main/FortniteSpoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:36 UTC", "discovered_at": "2026-10-08T05:53:36.000Z" }, { "id": 155097, "urlhaus_id": "3945985", "url": "https://gitlab.com/AndyRolls/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:36 UTC", "discovered_at": "2026-10-08T05:53:36.000Z" }, { "id": 155096, "urlhaus_id": "3945986", "url": "https://gitlab.com/bodycat/solaraexecutor/-/raw/main/SolaraExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:36 UTC", "discovered_at": "2026-10-08T05:53:36.000Z" }, { "id": 155101, "urlhaus_id": "3945981", "url": "http://176.65.139.40/curl.sh", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-08 05:53:35 UTC", "discovered_at": "2026-10-08T05:53:35.000Z" }, { "id": 155102, "urlhaus_id": "3945980", "url": "https://gitlab.com/SouthHood/quantv-sp-fivem-ragemp-altv/-/raw/main/QuantV_Latest_2026.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:34 UTC", "discovered_at": "2026-10-08T05:53:34.000Z" }, { "id": 155104, "urlhaus_id": "3945978", "url": "https://raw.githubusercontent.com/lampage3/FIVEM-Cheat-with-Lua-Executor-and-dumper/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:31 UTC", "discovered_at": "2026-10-08T05:53:31.000Z" }, { "id": 155103, "urlhaus_id": "3945979", "url": "https://gitlab.com/fireplane/redengine-fivem/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:31 UTC", "discovered_at": "2026-10-08T05:53:31.000Z" }, { "id": 155106, "urlhaus_id": "3945976", "url": "https://gitlab.com/enginedevs/redengine-fivem/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:26 UTC", "discovered_at": "2026-10-08T05:53:26.000Z" }, { "id": 155105, "urlhaus_id": "3945977", "url": "https://raw.githubusercontent.com/ericknutty/Temp-Spoofer-LifeTime/HEAD/TempSpoofer.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:26 UTC", "discovered_at": "2026-10-08T05:53:26.000Z" }, { "id": 155107, "urlhaus_id": "3945975", "url": "https://raw.githubusercontent.com/eversply/FortniteSpoofer/HEAD/TempSpoofer.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:24 UTC", "discovered_at": "2026-10-08T05:53:24.000Z" }, { "id": 155115, "urlhaus_id": "3945967", "url": "https://gitlab.com/lapurtk1n/fluxusexecutor/-/raw/main/FluxusExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155114, "urlhaus_id": "3945968", "url": "https://gitlab.com/recklessstyle/fortnitespoofer/-/raw/main/FortniteSpoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155113, "urlhaus_id": "3945969", "url": "https://gitlab.com/madglint/temp-spoofer-lifetime/-/raw/main/Temp-Spoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155112, "urlhaus_id": "3945970", "url": "https://gitlab.com/salivaenergy/genshin-impact-private-cheat-with-spoofer/-/raw/main/AkebiGC.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155111, "urlhaus_id": "3945971", "url": "https://gitlab.com/r3tard3dn1gg3r/hwid-spoofer/-/raw/main/UniversalSpoofer.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155110, "urlhaus_id": "3945972", "url": "https://raw.githubusercontent.com/shan1al/C2Panel/HEAD/C2Panel.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, LummaStealer", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155109, "urlhaus_id": "3945973", "url": "https://gitlab.com/brandonhills/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155108, "urlhaus_id": "3945974", "url": "https://gitlab.com/graymid/tinnylieh/-/raw/main/79K5P6K67H63.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab, rustystealer, stealer", "last_online": null, "first_seen": "2026-10-08 05:53:23 UTC", "discovered_at": "2026-10-08T05:53:23.000Z" }, { "id": 155120, "urlhaus_id": "3945962", "url": "https://gitlab.com/shanecall/synapsex/-/raw/main/SynapseX.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:22 UTC", "discovered_at": "2026-10-08T05:53:22.000Z" }, { "id": 155119, "urlhaus_id": "3945963", "url": "https://raw.githubusercontent.com/m1ramme/FiveM-External-Cheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-08 05:53:22 UTC", "discovered_at": "2026-10-08T05:53:22.000Z" }, { "id": 155118, "urlhaus_id": "3945964", "url": "https://raw.githubusercontent.com/huntyexiles/Pubg-DESYNC-Menu/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:22 UTC", "discovered_at": "2026-10-08T05:53:22.000Z" }, { "id": 155117, "urlhaus_id": "3945965", "url": "https://gitlab.com/BritneySpears/escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more/-/raw/main/eft_hack.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:22 UTC", "discovered_at": "2026-10-08T05:53:22.000Z" }, { "id": 155116, "urlhaus_id": "3945966", "url": "https://gitlab.com/lordfall/warzoneexternalcheat-42512/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:22 UTC", "discovered_at": "2026-10-08T05:53:22.000Z" }, { "id": 155121, "urlhaus_id": "3945961", "url": "https://raw.githubusercontent.com/flizzlebeep/ValorantExternalCheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:15 UTC", "discovered_at": "2026-10-08T05:53:15.000Z" }, { "id": 155122, "urlhaus_id": "3945960", "url": "https://gitlab.com/akKIL1fe/temp-spoofer-lifetime/-/raw/main/Temp-Spoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:10 UTC", "discovered_at": "2026-10-08T05:53:10.000Z" }, { "id": 155123, "urlhaus_id": "3945959", "url": "https://raw.githubusercontent.com/renn1chls/Temp-Spoofer-LifeTime/HEAD/TempSpoofer.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:09 UTC", "discovered_at": "2026-10-08T05:53:09.000Z" }, { "id": 155126, "urlhaus_id": "3945956", "url": "https://raw.githubusercontent.com/vvHSA/PhoenixC2/HEAD/PhoenixC2.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, LummaStealer", "last_online": null, "first_seen": "2026-10-08 05:53:08 UTC", "discovered_at": "2026-10-08T05:53:08.000Z" }, { "id": 155125, "urlhaus_id": "3945957", "url": "https://gitlab.com/mobydevs/genshin-impact-private-cheat-with-spoofer/-/raw/main/AkebiGC.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:08 UTC", "discovered_at": "2026-10-08T05:53:08.000Z" }, { "id": 155124, "urlhaus_id": "3945958", "url": "https://gitlab.com/beyondstyle/fivem-tz-project/-/raw/main/TZ_Project.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:08 UTC", "discovered_at": "2026-10-08T05:53:08.000Z" }, { "id": 155132, "urlhaus_id": "3945950", "url": "http://115.56.147.183:48194/i", "host": "115.56.147.183", "host_ip": "115.56.147.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155131, "urlhaus_id": "3945951", "url": "https://raw.githubusercontent.com/prittery/FiveM-External-Cheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155130, "urlhaus_id": "3945952", "url": "http://182.117.71.204:50850/i", "host": "182.117.71.204", "host_ip": "182.117.71.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155129, "urlhaus_id": "3945953", "url": "http://176.65.139.40/jklarm5", "host": "176.65.139.40", "host_ip": "176.65.139.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155128, "urlhaus_id": "3945954", "url": "https://raw.githubusercontent.com/draggelons/FortniteExternalCheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155127, "urlhaus_id": "3945955", "url": "https://raw.githubusercontent.com/vaitrex/FIVEM-Cheat-with-Lua-Executor-and-dumper/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:07 UTC", "discovered_at": "2026-10-08T05:53:07.000Z" }, { "id": 155133, "urlhaus_id": "3945949", "url": "https://raw.githubusercontent.com/r0undshann/PhoenixC2/HEAD/PhoenixC2.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, LummaStealer", "last_online": null, "first_seen": "2026-10-08 05:53:06 UTC", "discovered_at": "2026-10-08T05:53:06.000Z" }, { "id": 155135, "urlhaus_id": "3945947", "url": "https://gitlab.com/darkobenz/fivem-spoofer/-/raw/main/FiveMSpoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:05 UTC", "discovered_at": "2026-10-08T05:53:05.000Z" }, { "id": 155134, "urlhaus_id": "3945948", "url": "https://raw.githubusercontent.com/limmaplessh/ValorantExternalCheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:05 UTC", "discovered_at": "2026-10-08T05:53:05.000Z" }, { "id": 155136, "urlhaus_id": "3945946", "url": "https://raw.githubusercontent.com/conzully/Pubg-DESYNC-Menu/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:04 UTC", "discovered_at": "2026-10-08T05:53:04.000Z" }, { "id": 155139, "urlhaus_id": "3945943", "url": "https://gitlab.com/AlterBridge/lunaexecutor/-/raw/main/LunaExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:03 UTC", "discovered_at": "2026-10-08T05:53:03.000Z" }, { "id": 155138, "urlhaus_id": "3945944", "url": "https://gitlab.com/hiddenflows/silentum-spoofer/-/raw/main/SilentumSpoofer.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:03 UTC", "discovered_at": "2026-10-08T05:53:03.000Z" }, { "id": 155137, "urlhaus_id": "3945945", "url": "https://gitlab.com/louiremble/fivem-mod-menu/-/raw/main/Loader.exe", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, gitlab", "last_online": null, "first_seen": "2026-10-08 05:53:03 UTC", "discovered_at": "2026-10-08T05:53:03.000Z" }, { "id": 155141, "urlhaus_id": "3945941", "url": "https://raw.githubusercontent.com/ainnessceth/ROBLOX-MACRO-V3.0.0/HEAD/Spencer%20Macro%20Client.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github", "last_online": null, "first_seen": "2026-10-08 05:53:02 UTC", "discovered_at": "2026-10-08T05:53:02.000Z" }, { "id": 155140, "urlhaus_id": "3945942", "url": "https://raw.githubusercontent.com/barriels/FiveM-Mod-Menu/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:02 UTC", "discovered_at": "2026-10-08T05:53:02.000Z" }, { "id": 155142, "urlhaus_id": "3945940", "url": "https://raw.githubusercontent.com/escaless/SkriptGG/HEAD/SkriptGG.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:01 UTC", "discovered_at": "2026-10-08T05:53:01.000Z" }, { "id": 155144, "urlhaus_id": "3945938", "url": "https://gitlab.com/duntees/fluxus-executor/-/raw/main/FluxusExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:53:00 UTC", "discovered_at": "2026-10-08T05:53:00.000Z" }, { "id": 155143, "urlhaus_id": "3945939", "url": "https://raw.githubusercontent.com/alennciruous/ValorantExternalCheat/HEAD/Loader.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, exe, github, rustystealer", "last_online": null, "first_seen": "2026-10-08 05:53:00 UTC", "discovered_at": "2026-10-08T05:53:00.000Z" }, { "id": 155146, "urlhaus_id": "3945936", "url": "https://gitlab.com/realness/solaraexecutor/-/raw/main/SolaraExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:52:58 UTC", "discovered_at": "2026-10-08T05:52:58.000Z" }, { "id": 155145, "urlhaus_id": "3945937", "url": "https://gitlab.com/snaffl3k/solaraexecutor/-/raw/main/SolaraExecutor.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:52:58 UTC", "discovered_at": "2026-10-08T05:52:58.000Z" }, { "id": 155150, "urlhaus_id": "3945932", "url": "https://gitlab.com/ChrisRule/fivem-tz-project/-/raw/main/TZ_Project.zip", "host": "gitlab.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CheatSheet, gitlab, zip", "last_online": null, "first_seen": "2026-10-08 05:52:57 UTC", "discovered_at": "2026-10-08T05:52:57.000Z" } ]