# ThreatCluster public IOC feed
# Generated: 2026-09-03T07:56:52Z UTC
# All high-confidence malicious domains since Nov 2025. FULL HISTORY — hunt/retrospective dataset, NOT a blocklist. Indicators age: infrastructure here may since have been reallocated to innocent parties. For blocking use the 30-day feed at /api/iocs/public/feed.txt
# Source: https://threatcluster.io/iocs
# False-positive reports: hello@threatcluster.io
# Count: 332
#
idoej.com
advancedplacyncement.vu
arandasoftzfdware.vu
avisoretentiunionllc.vu
capitalflwxinancialpartners.vu
certififiycationedge.vu
connectivnqzityltd.vu
digitaltrafwwrficsystems.vu
exceltecbusinessbwpsolutions.vu
genamewwgdiamarketing.vu
globaieflsoftinc.vu
globalmixeucbdmodetechnologyinc.vu
globalprojectspvtltd.vu
joinbusinessmanagementconsdjeulting.vu
kentmanqhfufacturingcompany.vu
kleepxrnlinecorporation.vu
knsinternacshtional.vu
monttmmlrustcompany.vu
mtprormtductions.vu
realestatecotblrp.vu
summitcapitaltrapojininggroup.vu
techcompositnkoes.vu
techromixsolutionlonsinc.vu
pc-razerzone.com.cn
veruisuealx.xyz
us05.org
co1nbase.com
coinbase-security.com
dosportal.app
js-mirror.com
npm-cache.com
pypi-get.com
fine-work-team.com
timelevel12.com
san-sid.com
infect.online
mychart-epic.com
my-chart.org
nuihuw.top
exessupdate.info
greezupdto.info
hillisolutions.info
makerolleds.info
programgreedz.info
reggyupdated.info
crpx0.su
flash-token.shop
instantmessagehub.tech
jump.qt-proxy.org
mq-result-qt-team.com
mq-task-qt-team.com
datewithmealways.online
datewithmealways.site
digitaladstracking.com
qt-proxy.org
qtproxy.xyz
qt-team.com
cryptoprice.pw
databreach.space
socialposter.org
lkvb06fkzsjv.org
ver.bandhiem.com
browser-app.com
browsify.co
cleankits.co
devplugs.co
extlab.co
extlab.org
acrobatreaderonline.com
case-apple.com
chat-apple.com
malicious-miner.com
securestore.tv
drive.google.verify-drive.com
miov2iaiaoubqosiqoiajwowiwjso.online
spyroid.net
lockwall.xyz
gigapaper.ir
megapaper.ir
msfconfig.icu
bookcheckarrival-gueststayhotel.com
ramimac.me
msupdate.updatemicfosoft.com
ccleanerwind.top
m.studiotikva.com
login.microsoft-secure-portal.com
tommysbakescodes.ws
www1.planetink.com
www2.planetink.com
zimbra.planetink.com
zmail.vetstarts.com
coldcardteamnews.com
deltaode.com
microsoft-login.secure-verify.net
totally-legit-invoices.com
xfconnect.com
login.trees4sale.net
businessmixture.com
re2.filesdwnload.top
re8.dowlfles.online
update19.upldf.online
xeds.geranteeg.online
hodlsofltd.com
googie.us-gmeet.com
corepack.org
claude.ai.download-app.us
a.zhblz.com
docs.goog1e.com
goog1e.com
zhblz.com
claude-pro.com
find-help.info
mariamchurch.com
techzenspace.com
8e8a88f8fc968996eed0d7ddd.6ceca998199c18f8d968889898896899789978997.westurn.in
testewin.com
mskmde.com
tracking.adsafety.net
downloading-api.it
dwbud.vilaribit.com
pubstorm.com
pubstorm.net
exampl3.com
gobf.mx
evil.com
my-salesforce-cms.com
2fa.valoufroo.in
werkbit.app
api.goautolink.com
aussiecleaningservices.com
tronracing.com
uti98.com
abwxjp5.me
brackusi0n.live
emezonhe.me
gouvn.me
pickupweb.me
pr0fu5a.me
q74vn.live
servgate.me
skycloudcenter.com
zamstats.me
zrheblirsy.me
giftshop.club
vniir-avia.space
careldutoit-el.co
eqfit.co
xlkconsulting.co
jsonkeeper.com
api.jt2x.com
dealctr.com
gmzdaily.com
jt2x.com
liveupdt.com
muo.cc
zhuayuya.com
kav-certificates.info
lab52.io
apintiative.org
evilwebsite.com
cloaked.gg
de-fra.i3storage.com
8fb29c57162d4e1c.com
attacker-db.com
nimblecapture.com
cdnexpress.cc
cloudaxis.cc
smveo.com
putdrive.com
gs.thc.org
market0day.com
spoxy.us
nnapp.app
dybic.ajb8.com
opi7.com
clearmic.net
meeting-invite.com
electric-marinade.com
api.cmsplughub.com
cmsplughub.com
safetybis.com
tracksystem.info
random-site-login.xyz
hosting-wordpress-services.com
ps.andreagahuvrauvin.com
stablewindowsapp.com
toppaperservices.com
webmanufacturers.com
fresicrto.top
killav.at
killav.de
followfromapps.icu
celuweb.com
cl.distritovagas.com
50statesoflie.cc
acrosstheline.cc
artichoc.cc
mail.shadowwatch.co
mail.warfareinsider.cc
tidio.cc
comunidadesparentais.com
projetosmecanicos.com
models.litellm.cloud
fortuneprimeglobalirts.com
azurenetfiles.net
attacker.com
docs.splunk.com.evil.com
deliverly.top
inboxly.top
soundsgroovybox.com
shampobiskworld.nl
shampoolagtto.com
shamppocosmaticso.com
nativems-mfl09093004.digitalscrapbookingfreebies.com
hrs2y15sungu.com
helloworld.supp0v3.com
supp0v3.com
welcome.supp0v3.com
achipu.com
justsstop.ru
worldcup2026-tickets.com
advinservers.com
pulsynk.org
a.digoprotergonde.org
a.hefirealde.org
a.heopldenticalderr.org
c.hefirealde.org
c.heopldenticalderr.org
demo.business-data-leaks.com
d.hefirealde.org
d.heopldenticalderr.org
ep6pheij.com
help.business-data-leaks.com
heopldenticalderr.org
id.business-data-leaks.com
mail.business-data-leaks.com
member.business-data-leaks.com
alibaba.xyz
byte-io.us
cloud-sync.online
driver-store.com
windows.driver-store.com
account-emails-verification.cc.cd
accounts.mgovcloud.in.departmentofdefence.live
departmentofdefence.live
sorlastore.com
appradarr.cc
asdqxcdsa.icu
d.pc-weide.com
guhxmg.com
naiqja.icu
taxations.cn-web-okooo.com
ws4962.com
zhengfu666.com
zh-welcome-1xbet.com
blackcore.online
g00gle.com
andrefelipedonascime1778799406970.2241107.meusitehostgator.com
0x0.st
bestflowers247.online
api.yellowflashvpn.com
com.okovpn.app
9pay.org
de8xapil.in
warmbr-ead5.de8xapil.in
api.masscan.cloud
riggletoy.ru
systemupdate.app
totally-legit-ca.com
microsoftsupport.ru
minemine.gleeze.com
5d14vnfb.space
jeaw520i.space
qdmagva5.space
r7mvjl67.space
zgj1tam9.space
ransomed.vc
1vpns.com
1vpns.net
1vpns.org
runner.bw
l1ewsu3yjkqeroy.xyz
mamont.jo
attacker-host.com
proxy.ae
check.git-service.com
artemislab.cc
triada.ag
mickeymousegamesdealer.al
trojandropper.fr
kro.kr
n-e.kr
opedromos1.r-e.kr
p-e.kr
r-e.kr
agent.bi
dropper.agent.gi
gov-iq.net
runner.ec
runner.lk
webshell.se
git-tanstack.com
cloudservbr.com
infra-telemetry.com
tronfind-api.tronfindexplorer.com
trx-scan-explorer.org
legitserver.theworkpc.com
yourcornpany.com
micro-soft.com
dns-providersa2.com
forest-entityl.cc
api.skycloudcenter.com
api.wiresguard.com
1980food.co
cndsoft.co
colorncopy.co
sqgame.com
swr.co
notepad-plus-plus-mac.org
econsulat.ro
eviza.mae.ro
file.551911.xyz
dsupgrade.pm
cst001.epc.mnc053.mcc234.3gppnetwork.org
dex01.epc.mnc001.mcc460.3gppnetwork.org
dra1.je211.epc.mnc003.mcc234.3gppnetwork.org
epc.mnc001.mcc460.3gppnetwork.org
epc.mnc019.mcc425.3gppnetwork.org
ideabpl1h.dea.epc.mnc003.mcc520.3gppnetwork.org
vmdra01.epc.mnc019.mcc425.3gppnetwork.org
dfndrpebluhmr.bz
staybud.dpdns.org