Threat Intelligence · Historical Research

IOC Archive

Historical article-derived observables that no longer fall inside the current reporting-recency window for their type. Provider-supported values enter only after the applicable enabled services complete the required boundary check without qualifying positive evidence. They remain available for research, pivots, and attribution review. Archived does not mean clean, benign, remediated, resolved, or safe. This archive is not a blocklist.

Reporting-window dates come from Bulwark Black report publication dates, not provider sightings. IP/CIDR observations use 14 days, domains and URLs 30 days, file identifiers 730 days, and other context 90 days. Types without an applicable exact provider check archive by recency alone. Current verified-feed admission is evaluated separately on each IOC Passport and in the machine-readable feeds.

1201 archived unique observations

← Current observations (4660)Revalidation queue (2200)IOC Archive (1201)

200 archived observations on this page

Showing 1–200 of 1201

URL

hxxps://chatgpt[.]com/g/g-6ab595ad6554819181b686d4876efb80-plus-5-6

Last reported Sep 29, 2026 · Reporting window ended Oct 29, 2026 · Archive check completed Oct 29, 2026 · 1 source report

IOC Archive

hxxps://chatgpt[.]com/g/g-6ab595ad6554819181b686d4876efb80-plus-5-6

hxxps://chatgpt[.]com/g/g-6ab6ba039440819185ed491740b11cf8-plus-5-6

hxxps://pastebin[.]com/api/api_post[.]php

caldav[.]icloud[.]com

gateway[.]icloud[.]com

hxxp://caldav[.]icloud[.]com/published/2/MTk1NDMwMDMzNTUxOTU0M1aHCZ-nMxiyGzBTzPiodOf44DtKJ6PpjftAG28_ui2NCYMpL_vu4pF4ddsJ8ysg0QI7pR0VEIEbZYdilVZRw08

hxxps://caldav[.]icloud[.]com/published/2/MTk1NDMwMDMzNTUxOTU0M1aHCZ-nMxiyGzBTzPiodOf44DtKJ6PpjftAG28_ui2NCYMpL_vu4pF4ddsJ8ysg0QI7pR0VEIEbZYdilVZRw08

CVE-2026-31431

CVE-2026-43284

CVE-2026-43500

CVE-2026-43503

d5dbb3783b4_7d5dbb3783b4_e1926048963f

cloud[.]com

docs[.]netscaler[.]com

www[.]cloud[.]com

hxxps://docs[.]netscaler[.]com/en-us/citrix-adc/current-release/system/tcp-configurations[.]html#enhanced-isn-generation

hxxps://www[.]cloud[.]com/trust-center/support

25[.]1[.]1[.]1

25[.]1[.]2[.]2

a[.]read

g[.]read

i[.]read

americanprogress[.]org

borneobulletin[.]com[.]bn

chinadigitaltimes[.]net

theconversation[.]com

185[.]14[.]92[.]223

51[.]89[.]199[.]125

54[.]37[.]237[.]166

64[.]111[.]92[.]89

help-ja[.]gyazo[.]com

help[.]gyazo[.]com

hxxps://help-ja[.]gyazo[.]com/contact-us

hxxps://help[.]gyazo[.]com/contact-us

awwwards.com

dallikilic54.github.io

edgarcostartqd.github.io

lastpass-authenticator.github.io

lastpass.com

ofac.treasury.gov

www.verfassungsschutz.de

https://ofac.treasury.gov/media/923131/download?inline

https://www.verfassungsschutz.de/SharedDocs/publikationen/EN/economic-and-

opera.com

20[.]12[.]8[.]2

20[.]15[.]6[.]1

20[.]18[.]4[.]1

20[.]9[.]10[.]1

26[.]1[.]2[.]1

CVE-2026-32201

stro7121[.]blob[.]core[.]windows[.]net

windows[.]net

hxxps://backup-ubt[.]s3[.]us-east-1[.]amazonaws[.]com/hostfxr[.]dll

hxxps://skipraid[.]com/dsVGmQTrzX/default2

hxxps://stro7121[.]blob[.]core[.]windows[.]net/dpp1/config[.]py

hxxps://stro7121[.]blob[.]core[.]windows[.]net/dpp1/hostfxr[.]dll

5[.]xxx[.]xx[.]xxx

adex-blog[.]blogspot[.]com

amazingshield[.]xyz

ravexoffical[.]blogspot[.]com

velfps[.]blogspot[.]com

velvoxlab[.]blogspot[.]com

venrx[.]blogspot[.]com

venrxhub[.]blogspot[.]com

folder[.]id

i3[.]wp[.]com

schemas[.]xmlsoap[.]org

slack-imgs[.]com

hxxp://schemas[.]xmlsoap[.]org/soap/envelope/

hxxps://images[.]weserv[.]nl/?url=hxxps://acocdn[.]com/assets/v1_SGVsbG8gV29ybGQ

CVE-2026-43074

CVE-2026-46242

13[.]52[.]201[.]0/24

18[.]144[.]76[.]0/24

3[.]101[.]0[.]0/16

3[.]101[.]157[.]240

CVE-2026-34908

CVE-2026-34909

CVE-2026-34910