Indicators of Compromise

URL

TLP:CLEAR

http://www.globalonline2026.shop/en/up1/

OpenPhish: http://www.globalonline2026.shop/en/up1/

80% confidence

Added

2026-08-13

URL

TLP:CLEAR

http://www.binance-global-investment.com/trading/

OpenPhish: http://www.binance-global-investment.com/trading/

80% confidence

Added

2026-08-13

SHA-256 Hash

TLP:CLEAR

d873c2f85b4bc95f639aec333cfc977a89c2ec36d06a545f59a35f16e4c41685

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

SHA-256 Hash

TLP:CLEAR

9688608017f35b48a719f529046172261af1d28a4ab2e80bc119cd1998f9bc6d

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

SHA-256 Hash

TLP:CLEAR

392b8ecce716ff0645d53f8831be46946cf4931f9124469c1f38b7d3e413aaf9

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

SHA-1 Hash

TLP:CLEAR

8d23643838a92177ead29f2516033f79592ad0e6

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

SHA-1 Hash

TLP:CLEAR

7d54b0d2aa4b08244398e93a65eb3c950c5db4fc

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

MD5 Hash

TLP:CLEAR

716bcba8eadd8c57f635a1a6350a5161

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

MD5 Hash

TLP:CLEAR

3be20fa1dd01b13b0663ced02682332c

Striking gold: Inside the GoldDigger Android malware

75% confidence

Added

2026-08-12

Domain

TLP:CLEAR

usps.com-isjjz.top

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

usps.com-posewxts.top

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

dhl.de-yiore.store

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

e-zpass.com-etcha.win

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

icloud.com-remove-device.top

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

irs.gov-tax.cfd

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

kveesh6.il-363.com

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

irs.org.gov-tax.icu

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

michigan.gov-etczhh.cc

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

utah.gov-etcfr.win

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

flde-lity.com-lg.icu

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

anpost.com-pay.online

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

irs.gov

50% confidence

Added

2026-08-12

IPv4 Address

TLP:CLEAR

104.21.0.0

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

irs.gov-addpayment.info

50% confidence

Added

2026-08-12

Filename

TLP:CLEAR

global-dhl.zip

50% confidence

Added

2026-08-12

Domain

TLP:CLEAR

get-content-issue-msg.sh

50% confidence

Added

2026-08-12

Filename

TLP:CLEAR

gpsvc.log

50% confidence

Added

2026-08-12

Filename

TLP:CLEAR

syslog-system.log

50% confidence

Added

2026-08-12

Filename

TLP:CLEAR

mp-monitor.log

50% confidence

Added

2026-08-12

URL

TLP:CLEAR

https://essentialoilroots.com/docs/sbcglobal/

OpenPhish: https://essentialoilroots.com/docs/sbcglobal/

80% confidence

Added

2026-08-11

URL

TLP:CLEAR

http://www.norvathglobal.life/confirmar-saque/

OpenPhish: http://www.norvathglobal.life/confirmar-saque/

80% confidence

Added

2026-08-11

URL

TLP:CLEAR

http://www.norvathglobal.life/resgatar/

OpenPhish: http://www.norvathglobal.life/resgatar/

80% confidence

Added

2026-08-11

Domain

TLP:CLEAR

GlobalSecurity.org

50% confidence

Added

2026-08-10

URL

TLP:CLEAR

http://docusignlogin.globalexshipping.com

TweetFeed: http://docusignlogin.globalexshipping.com

55% confidence

Added

2026-08-10

Domain

TLP:CLEAR

docusignlogin.globalexshipping.com

TweetFeed: docusignlogin.globalexshipping.com

55% confidence

Added

2026-08-10

Domain

TLP:CLEAR

Defacer.id

50% confidence

Added

2026-08-10

Domain

TLP:CLEAR

NXBB.SEC

50% confidence

Added

2026-08-10

Domain

TLP:CLEAR

global.db

50% confidence

Added

2026-08-10

URL

TLP:CLEAR

http://globalskincareid.store/

OpenPhish: http://globalskincareid.store/

80% confidence

Added

2026-08-09

URL

TLP:CLEAR

https://fb.globalty.cn/

OpenPhish: https://fb.globalty.cn/

80% confidence

Added

2026-08-09

Domain

TLP:CLEAR

westnovasuperline.ca

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

vernonwaldrep.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

sinopenergia.com.br

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

portmanfinancegroup.co.uk

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

coldfrontdist.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

novumenergy.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

nourison.com

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://www.torproject.org/download

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cactus47hhktlaclasue3rnkchcy6rgvitxmllv2l6m25gzkgbeyfyad.onion

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

tox.chat

50% confidence

Added

2026-08-09