This page summarises recently observed malicious URLs collected during the reporting window.
Window: 12 Mar 2026 00:03 UTC → 13 Mar 2026 01:58 UTC (exclusive end)
Generated: 13 Mar 2026 02:00 UTC
Overview
“Online/Offline” indicate the URL statuses at the time of reporting.
- Total URLs observed in the window: 600.
- Online URLs: 412.
- Offline URLs: 188.
- Reporting window start and end: 12 Mar 2026 00:03 UTC → 13 Mar 2026 01:58 UTC (exclusive end).
Most recent URLs
The table below lists the most recently added URLs in the feed for this run.
| ID | Status | Threat type | Host | Date added | URL |
|---|---|---|---|---|---|
| 3794961 | online | malware_download | 117.26.227.156 | 13 Mar 2026 01:58 UTC | http://117.26.227.156:52208/i |
| 3794960 | online | malware_download | 117.241.54.232 | 13 Mar 2026 01:55 UTC | http://117.241.54.232:57836/bin.sh |
| 3794959 | online | malware_download | 27.216.44.248 | 13 Mar 2026 01:52 UTC | http://27.216.44.248:52650/i |
| 3794958 | online | malware_download | 110.37.11.215 | 13 Mar 2026 01:48 UTC | http://110.37.11.215:60599/bin.sh |
| 3794957 | online | malware_download | 110.37.127.205 | 13 Mar 2026 01:48 UTC | http://110.37.127.205:50926/i |
| 3794956 | online | malware_download | 7xvura.coldcaught.in.net | 13 Mar 2026 01:48 UTC | https://7xvura.coldcaught.in.net/verification.google |
| 3794955 | online | malware_download | 27.12.98.229 | 13 Mar 2026 01:36 UTC | http://27.12.98.229:36351/i |
| 3794954 | online | malware_download | i0n3-graph.coldcaught.in.net | 13 Mar 2026 01:36 UTC | https://i0n3-graph.coldcaught.in.net/verification.google |
| 3794953 | online | malware_download | 27.216.44.248 | 13 Mar 2026 01:35 UTC | http://27.216.44.248:52650/bin.sh |
| 3794952 | online | malware_download | 115.50.219.72 | 13 Mar 2026 01:26 UTC | http://115.50.219.72:59211/i |
| 3794951 | online | malware_download | 110.37.127.205 | 13 Mar 2026 01:21 UTC | http://110.37.127.205:50926/bin.sh |
| 3794950 | online | malware_download | 115.55.221.37 | 13 Mar 2026 01:20 UTC | http://115.55.221.37:49271/i |
| 3794949 | online | malware_download | cratelayout.coldcaught.in.net | 13 Mar 2026 01:11 UTC | https://cratelayout.coldcaught.in.net/verification.google |
| 3794948 | online | malware_download | m4nif-stack.coldcaught.in.net | 13 Mar 2026 01:06 UTC | https://m4nif-stack.coldcaught.in.net/verification.google |
| 3794947 | online | malware_download | 115.50.219.72 | 13 Mar 2026 01:01 UTC | http://115.50.219.72:59211/bin.sh |
| 3794946 | online | malware_download | 158.94.208.7 | 13 Mar 2026 00:55 UTC | http://158.94.208.7/files/6902778688/AcjqUEy.exe |
| 3794945 | online | malware_download | sannod.liberalpilka.in.net | 13 Mar 2026 00:55 UTC | https://sannod.liberalpilka.in.net/verification.google |
| 3794944 | online | malware_download | 115.55.221.37 | 13 Mar 2026 00:53 UTC | http://115.55.221.37:49271/bin.sh |
| 3794943 | online | malware_download | 125.44.157.61 | 13 Mar 2026 00:50 UTC | http://125.44.157.61:46797/i |
| 3794942 | online | malware_download | 158.94.208.7 | 13 Mar 2026 00:44 UTC | http://158.94.208.7/files/8441193572/Na8U4Fe.exe |
| 3794941 | online | malware_download | vfjpe.liberalpilka.in.net | 13 Mar 2026 00:33 UTC | https://vfjpe.liberalpilka.in.net/verification.google |
| 3794940 | online | malware_download | vorcoreix1.liberalpilka.in.net | 13 Mar 2026 00:24 UTC | https://vorcoreix1.liberalpilka.in.net/verification.google |
| 3794939 | online | malware_download | 59.182.112.134 | 13 Mar 2026 00:22 UTC | http://59.182.112.134:32968/i |
| 3794938 | online | malware_download | 125.44.157.61 | 13 Mar 2026 00:21 UTC | http://125.44.157.61:46797/bin.sh |
| 3794937 | online | malware_download | scarnetwor.liberalpilka.in.net | 13 Mar 2026 00:17 UTC | https://scarnetwor.liberalpilka.in.net/verification.google |
Top hosts
Hosts with the highest counts observed during the window (top 10).
| Host | Count |
|---|---|
| 87.121.79.23 | 33 |
| chanchanmiraixd.duckdns.org | 32 |
| 158.94.208.7 | 26 |
| 161.97.148.194 | 15 |
| 45.141.26.73 | 15 |
| 83.142.209.47 | 12 |
| 91.196.32.55 | 11 |
| 84.234.99.24 | 9 |
| 209.54.102.132 | 6 |
| applicationhost17.com | 6 |
Top threat types
Threat types observed in the feed during the window (showing top entries).
| Threat type | Count |
|---|---|
| malware_download | 600 |
Top tags
Most frequent tags associated with the observed items (top 10).
| Tag | Count |
|---|---|
| elf | 429 |
| 32-bit | 304 |
| Mozi | 303 |
| mips | 261 |
| mirai | 162 |
| ua-wget | 137 |
| ClearFake | 82 |
| arm | 56 |
| ACRStealer | 38 |
| opendir | 37 |
This page is updated daily.