Skip to content

Public IOC feed / Scams and fraud

Scams and fraud

Investment, shopping and gambling scams, and wallets that receive money from victims.

48 high-confidence indicators from the last 30 days of security reporting. Free, refreshed hourly, no login, CC-BY.

Files

With an API key: /api/public/v1/iocs/feed?category=scam_fraud. API reference

Newest indicators

Showing 48 of 48.

  • mygta6.icu domain, 4 Nov

    Domain used for scams involving fake game keys. Source

  • gta6keycodes.com domain, 4 Nov

    Domain used for scams involving fake game keys. Source

  • atlascore-panel.net domain, 3 Nov

    Domain used by AtlasCore administrators for hosting affiliate program panels Source

  • bravioar.com domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content linked to AtlasCore Source

  • btwoteam.xyz domain, 3 Nov

    Domain resolves to IP associated with Magnetic Team's administrative panel Source

  • casino.atlascore-panel.net domain, 3 Nov

    Subdomain used for hosting casino-related content by AtlasCore Source

  • crossbook.xyz domain, 3 Nov

    Domain hosted on IP associated with Magnetic Team's infrastructure Source

  • docs.atlascore-panel.net domain, 3 Nov

    Subdomain used for hosting manuals by AtlasCore Source

  • event-x.cc domain, 3 Nov

    Domain used for marketing and associated with fraudulent offers Source

  • fortexp.live domain, 3 Nov

    Domain linked to fraudulent prediction market operations Source

  • fortvet.cc domain, 3 Nov

    Domain associated with fraudulent prediction market operations Source

  • futaryx.com domain, 3 Nov

    Domain linked to fraudulent prediction market operations Source

  • kiro-cheap.pro domain, 3 Nov

    Domain associated with fraudulent prediction market operations Source

  • magnetic-panel.space domain, 3 Nov

    Domain used for managing campaigns by Magnetic Team Source

  • polyfucker.space domain, 3 Nov

    Domain used for hosting admin panel for PolyFucked offer Source

  • polymarket.atlascore-panel.net domain, 3 Nov

    Subdomain used for hosting prediction market content by AtlasCore Source

  • prdct.cc domain, 3 Nov

    Domain used as shared infrastructure by AtlasCore Source

  • pred.co domain, 3 Nov

    Domain linked to fraudulent prediction market operations Source

  • predicate.club domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content Source

  • predicate.world domain, 3 Nov

    Domain used as shared infrastructure by AtlasCore Source

  • predictedby.cc domain, 3 Nov

    Domain used as shared infrastructure by AtlasCore Source

  • predictum.app domain, 3 Nov

    Domain linked to fraudulent prediction market operations Source

  • predictum.cc domain, 3 Nov

    Domain linked to fraudulent prediction market operations Source

  • rqwrujarser.icu domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content Source

  • speculor.net domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content Source

  • tradingai.fun domain, 3 Nov

    Domain hosted on IP associated with Magnetic Team's infrastructure Source

  • wettora.com domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content Source

  • winzo.live domain, 3 Nov

    Domain hosted casino-, exchange-, and prediction-market-related content Source

  • 192.162.199.243 ipv4, 3 Nov

    IP address hosted domains linked to fraudulent operations Source

  • 192.64.119.163 ipv4, 3 Nov

    IP address associated with Magnetic Team's infrastructure Source

  • 31.76.10.48 ipv4, 3 Nov

    IP address associated with Magnetic Team's infrastructure Source

  • 31.77.159.194 ipv4, 3 Nov

    IP address associated with Magnetic Team's infrastructure Source

  • 81.90.17.100 ipv4, 3 Nov

    IP address linked to fraudulent prediction market operations Source

  • 87.120.165.193 ipv4, 3 Nov

    IP address associated with Magnetic Team's infrastructure Source

  • jet-night.com domain, 2 Nov

    Domain used by attackers to route stolen API keys and incur fraudulent charges Source

  • apkder.com domain, 30 Oct

    Domain used for hosting fraudulent mobile applications Source

  • gadbets.site domain, 19 Oct

    Used in tech support scam operations Source

  • hjce0ou6.aparticult.my.id domain, 19 Oct

    Used as a redirect URL in Help TDS campaigns Source

  • misunderstanding.salahaaakal.my.id domain, 19 Oct

    Used in tech support scam operations Source

  • radiant.growsier.shop domain, 19 Oct

    Used in tech support scam operations Source

  • adv.realsh.xyz domain, 17 Oct

    Used in a fake 'AI crypto quant trading' site. Source

  • mercu-wgp.com domain, 17 Oct

    Used in an online casino scam. Source

  • pushub.net domain, 17 Oct

    Used in a scam page for investment fraud. Source

  • fosetya.shop domain, 15 Oct

    Redirects to Hotejka tech support scam page Source

  • roi777.online domain, 15 Oct

    Used for login pages related to tech support scams Source

  • bc1qrsfyjrsel924nny9q0qak5cfyf7pahmsydwnrq btc, 27 Oct

    Bitcoin wallet used for financial theft by attackers Source

  • 0x93ce11fAA9FC83741e8b392879b383bcc5f7f3Ad eth, 27 Oct

    Ethereum wallet used for financial theft by attackers Source

  • 47Ce53JfHMxhze2cTBCkn9G1bbHDWZHVYKNZccaKktr32bZVrCcJggQCSFYukkEoS9DvaYmzi313hJzkj9G8PZDT4x6HgS9 xmr, 21 Oct

    Monero wallet address used for receiving illicit funds. Source

Think one of these is wrong? Email [email protected].

Other categories