Indicators of Compromise

Domain

TLP:CLEAR

20.Roberts

50% confidence

Added

2026-08-10

Domain

TLP:CLEAR

theregister.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

daubertchemical.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

thecyberthrone.in

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

liberty.co.za

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

EternalLiberty.csv

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

liberty.insights@proton.me

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

Gilbert6704ysw@hotmail.com

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

robert.pena@FirstTrustAdvisorsLP.onmicrosoft.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

albertaseparatist.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

21.Albert

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

45.67.230.121

50% confidence

Added

2026-08-08

IPv4 Address

TLP:CLEAR

144.202.124.56

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

System.Configuration.Install.Installer

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

chisel.exe

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

svcchost.exe

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

edge-cache-sync.com

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

error.aspx.cs

50% confidence

Added

2026-08-08

SHA-256 Hash

TLP:CLEAR

20a3b4df5dfe84ae9481ea5cb7e06fbd94e2d7e1de962f3608ae05c0585fd45f

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

update-center.cloud

50% confidence

Added

2026-08-08

SHA-256 Hash

TLP:CLEAR

e5d0a6c18a2389e315b6cf4e5fca1f8578cbf81e4ea3011983b216cf86d09c87

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

schtasks.exe

50% confidence

Added

2026-08-08

SHA-256 Hash

TLP:CLEAR

0fc134fa7c90d1a67b2d41b20a67c3e4db20ef8e1176500b41ae8b54c62f6c77

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

alberthumanclinic.com

TweetFeed: alberthumanclinic.com

55% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://alberthumanclinic.com

TweetFeed: http://alberthumanclinic.com

55% confidence

Added

2026-08-08

URL

TLP:CLEAR

https://unibertsitateko0ehuelaguntza0zerbitzua0365.weebly.com/

PhishTank: https://unibertsitateko0ehuelaguntza0zerbitzua0365.weebly.com/

90% confidence

Added

2026-08-08

URL

TLP:CLEAR

https://albert.direct-143044.pro/captcha.php

PhishTank: https://albert.direct-143044.pro/captcha.php

90% confidence

Added

2026-08-08

URL

TLP:CLEAR

https://albert.direct-143044.pro/

PhishTank: https://albert.direct-143044.pro/

90% confidence

Added

2026-08-08

URL

TLP:CLEAR

https://albert.suiv-expd002.pro/as.php

PhishTank: https://albert.suiv-expd002.pro/as.php

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://albert.suiv-expd002.pro/

PhishTank: https://albert.suiv-expd002.pro/

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://jaxxliberty.wixstudio.com/en-us

PhishTank: https://jaxxliberty.wixstudio.com/en-us

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://bertran.direct-8812171.pro/

PhishTank: https://bertran.direct-8812171.pro/

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://prime-espacesuivi.com/signin?email=albert.benoit@laposte.net&token=lqbmieq4ws1pguhj6rdjx1s3o8q9o6tb2mcpmdf2hvasgsikm0ywyu6kw3ofk3p2&downdate=19&amount=414.72&identity=albert%20benoit

PhishTank: https://prime-espacesuivi.com/signin?email=albert.benoit@laposte.net&token=lqbmieq4ws1pguhj6rdjx...

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://alberto.ce2661.pro/

PhishTank: https://alberto.ce2661.pro/

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://alberto.ce2661.pro/as.php

PhishTank: https://alberto.ce2661.pro/as.php

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://albert.urge844284.pro/captcha.php

PhishTank: https://albert.urge844284.pro/captcha.php

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://albert.urge844284.pro/

PhishTank: https://albert.urge844284.pro/

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://liberty-university.weebly.com/

PhishTank: https://liberty-university.weebly.com/

90% confidence

Added

2026-08-07

URL

TLP:CLEAR

https://albertjataya.org/BG/

PhishTank: https://albertjataya.org/BG/

90% confidence

Added

2026-08-05

URL

TLP:CLEAR

https://jexliberty.wixstudio.com/us-en

PhishTank: https://jexliberty.wixstudio.com/us-en

90% confidence

Added

2026-08-05

URL

TLP:CLEAR

https://sbc-carid.vpass.smcbnokkiobert1.com/mem1/oshiharai1/index-jsp-dk=hp_006_0021919_hd1

PhishTank: https://sbc-carid.vpass.smcbnokkiobert1.com/mem1/oshiharai1/index-jsp-dk=hp_006_0021919_hd1

90% confidence

Added

2026-08-04

URL

TLP:CLEAR

https://pedencia-em-abertos.vercel.app/up1/index.html

PhishTank: https://pedencia-em-abertos.vercel.app/up1/index.html

90% confidence

Added

2026-08-04

Domain

TLP:CLEAR

rbrkej.liberty--token.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

vlbtbcv.lebertytoken.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

www.smibert.com

ThreatFox: IClickFix

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

0ijrzsc4.liberty--token.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

ekjnnh.lebertytoken.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

cnatia.lebertytoken.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

mmuq9r9o.liberty--token.com

ThreatFox: ClearFake

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

byjm6x7s.liberty--token.com

ThreatFox: ClearFake

85% confidence

Added

2026-07-31