Indicators of Compromise

Domain

TLP:CLEAR

16.Mistlberger

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

15.Gunapala

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.physbeh

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

12.Mendoza

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

11.Storch

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

10.Takasu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

9.Pendergast

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

8.Mistlberger

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

7.LeGates

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

6.Welsh

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

4.Takahashi

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

5.Gekakis

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

14.Davidson

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

13.Pendergast

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

LEDwholesalers.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

redpiranha.net.au

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

adsteele@cpp.edu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

1.Ramsey

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

2.Rudic

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

3.Panda

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

RN2015TOYT7LNK682.pdf

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

1D7F3D5A6B5E9ABE240F99D2A60EA1F5

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

BAE868B4781E28FC7ABAB8AF8B440075

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

CE338828149963DCEA4CD26BB86F0363B4CA0BA5

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

onepress@plos.org

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

plosone@plos.org

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

debug.log

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

AcroRd32.exe

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

52df60e4cb9a5926db3e9a69b04ccbade56f6f90b2ec94e0caaa4fa4f613a0a4

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

RdrCEF.exe

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

https://trackingservice.monday.com/tracker/link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vYXZhbnRlc2hpcHBpbmcuY29tL3dwLWFkbWluL21haW50Ly0vbnNrIiwiZW1haWxJZCI6IjMzYTk0ZTEzLTAxZDgtNDY1NC1hM2IzLTZhYzRhYmE4MDliNiIsImlhdCI6MTc3OTk3MDk5NX0.H9kaZcmK2F4qGmfLdXnRz8GD1rueNSqK7S4AgKvkhXk&r=euc1

PhishTank: https://trackingservice.monday.com/tracker/link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmlna...

90% confidence

Added

2026-08-05

URL

TLP:CLEAR

https://intellectual-property-ap-e89f1.web.app/authentication?encrypted_context=AWRy1I9l_R0S5jcWoUrytjVNY-zdqGfgDAGdBj9ijH2opXdMZVIK35aOOCXKBVnqLkEs1cf9QacETWeH9zJk7JL3TviFk5KMrVaLMsv4dAs33ajcJ9qDZ3jbxkAYFoJzPa0jMmOcPgPORWDbBmPezlGanq528Ld-YbZz9oeMEQxBk59s4QD1rhABwyAVC27UCLmNGlBejk-RLHQvqDoPN-TsigbBxTq8WE8Np1gFgtx3CRqGbCRlD_3wBSZaH-5u0oDoLaL_o9NBxLg6JoudC5vCLurrrMYDFyLgVWs25UCiEfVOMYkniHa1_Um6QRBXH3Ml0Mhd9z31xqcdtbr8_Vag9oAjXMLaRJapfAx9Yxlr0YxsHR4XnUIF04nJ6DXBBAOhsivF05TDs-vGDG7tuDiav2cFaI5ePdobKWOsgJQ6idAFasEc3QTYeApxewAgOJJY9iAfks3m-kL_u0MH94IcbJsZnEJw_rf28qv9XPrL7nqDaM84dh-0CtG5fP0KvD-QYezzlICZ1CzhepFDYe4DHNxoG-5r_APJDrnSTrpGqRtBUyYP_m8bvI0UcbR041798ZUA8GoXclHQr7uY85j78aYfXL8C59NhPbkdY1wH4JN6WQVUxzjMPk4Cflm8XgSgpvOA3lyoxnM6aixzaB9CSWg_Zm14KgUVlkgCFSlVQZQV5dRNCsf5PA

PhishTank: https://intellectual-property-ap-e89f1.web.app/authentication?encrypted_context=AWRy1I9l_R0S5jcWoUry...

90% confidence

Added

2026-08-04

URL

TLP:CLEAR

http://allegro-lokalnie.34w2298342.shop/lokalnie?id=7j5k6k2r6b0m2q3d1r5q9z8r3v9x5q5p

PhishTank: http://allegro-lokalnie.34w2298342.shop/lokalnie?id=7j5k6k2r6b0m2q3d1r5q9z8r3v9x5q5p

90% confidence

Added

2026-08-04

Domain

TLP:CLEAR

dirone3rl3vvq64ckcnrvhe2ogrhjrwu5u7hqzrlotu3rfvmqmmbsuqd.onion

ThreatFox: Unknown malware

85% confidence

Added

2026-07-14

Domain

TLP:CLEAR

qd9fgi9ww5vw3s9bjz2d1ri.articletreasures.com

MISP: qd9fgi9ww5vw3s9bjz2d1ri.articletreasures.com

50% confidence

Added

2026-05-06

Domain

TLP:CLEAR

1tfod1r5b9frv9mnae1d3wi.cekmekoyappleteknikservisi.com

MISP: 1tfod1r5b9frv9mnae1d3wi.cekmekoyappleteknikservisi.com

50% confidence

Added

2026-05-06

Domain

TLP:CLEAR

d1rv.social

TA829 first stage domain

70% confidence

Added

2026-05-06