Indicators of Compromise

Domain

TLP:CLEAR

threatinsight.proofpoint.com

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

nextcloud@mastodon.xyz

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

caseynewton.bsky.social

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

com.apple.macl

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

alphaxiv.org

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

itcsrvup64.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

mirrors.ustc.edu.cn

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

civilbeat.org

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

www.xn--90aguaqgfu.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

russianhckers.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

russianhackers.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

mobilearena.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

www.xn----9sbhgocsfmg4a1kfg.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

www.mobilearena.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

www.loopaai.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

gginfluence.influencesite.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

api.russianhackers.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

zadrot.gg

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

xn--90aguaqgfu.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

xn----9sbhgocsfmg4a1kfg.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://www.loopaai.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

loopaai.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

influencesite.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

ggstandoff.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

bulldrops.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

bulldrops.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

bull-drops.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

bull-drops.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

https://api.russianhackers.online

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

https://212.193.30.29/assets/index-CxeLM22L.js

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://xn--90aguaqgfu.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://www.xn--90aguaqgfu.xn--p1ai

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://n.data??[]

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://noc.social/@menaomi

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

37.252.21.227

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

45.139.78.67

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

46.149.70.18

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

5.129.196.85

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

89.223.71.207

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

90.156.224.57

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

92.51.22.34

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

93.183.80.126

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://bulldrops.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

URL

TLP:CLEAR

http://loopaai.ru

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

217.198.13.211

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

Domain

TLP:CLEAR

server5.trumops.com

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

147.45.183.198

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

147.45.237.23

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

185.247.185.85

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22

IPv4 Address

TLP:CLEAR

188.225.39.252

Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects

75% confidence

Added

2026-07-22