CVE
CVE-2025-3714
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Threat Intelligence · Historical Research
IOC Archive
Historical article-derived observables that no longer fall inside the current reporting-recency window for their type. Provider-supported values enter only after the applicable enabled services complete the required boundary check without qualifying positive evidence. They remain available for research, pivots, and attribution review. Archived does not mean clean, benign, remediated, resolved, or safe. This archive is not a blocklist.
Reporting-window dates come from Bulwark Black report publication dates, not provider sightings. IP/CIDR observations use 14 days, domains and URLs 30 days, file identifiers 730 days, and other context 90 days. Types without an applicable exact provider check archive by recency alone. Current verified-feed admission is evaluated separately on each IOC Passport and in the machine-readable feeds.
1211 archived unique observations
200 archived observations on this page
Showing 801–1000 of 1211
Source report →
CVE
CVE-2026-32290
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32291
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32292
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32293
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32294
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32295
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32296
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32297
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-32298
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4 address
18[.]139[.]83[.]110
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2025-47812
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-47813
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4 address
185[.]220[.]101[.]15
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
192[.]42[.]116[.]14
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
7740f766-8d1d-46ad-a6bc-onedrive[.]p-9jluifuu[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
audit-report-9767d3[.]fullerjp09[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
f8uh-dwam-j4l5[.]pvasquez-princetonpartners-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
hewktree[.]net
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
onedrive-7tu[.]techroboticslabmade-techie-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
voicemail-59f[.]admin-treyripple-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
voicemail-lyr[.]nbuckley-cambek-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
voicemail-wx7[.]mark-squires-expressrancnes-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
ytgw-9n30-xlwd[.]pvasquez-princetonpartners-com-s-account[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
itsec[.]hboeck[.]de
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://itsec[.]hboeck[.]de/
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
xverse[.]app
Last reported · Reporting window ended · Archive check completed · 1 source report
Solana Addresses
BjVeAjPrSKFiingBn4vZvghsGj9KCE8AJVtbc9S8o8SC
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Domain
company[.]sharepoint[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
organization[.]sharepoint[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://company[.]sharepoint[.]com/sites/ProductionOps/
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://organization[.]sharepoint[.]com/sites/Legal_Archive/
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2017-7921
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2021-33044
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2023-6895
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-34067
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Domain
ipify[.]org
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2026-21666
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21667
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21668
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21669
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21670
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21671
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21672
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21708
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Email Addresses
ops@rescana[.]com
Last reported · Reporting window ended · Context-only recency placement · 1 source report
URL
hxxp://83[.]229[.]126[.]195:8081/xmrig
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2025-15467
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Email Addresses
schneier@schneier[.]com
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-2441
Last reported · Reporting window ended · Context-only recency placement · 4 source reports
CVE
CVE-2026-3909
Last reported · Reporting window ended · Context-only recency placement · 3 source reports
CVE
CVE-2026-3910
Last reported · Reporting window ended · Context-only recency placement · 3 source reports
IPv4:Port
194[.]76[.]226[.]93:8080
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4 address
2[.]59[.]132[.]106
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
93[.]115[.]10[.]35
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2026-24858
Last reported · Reporting window ended · Context-only recency placement · 2 source reports
Domain
jdownloader[.]org
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
1[.]9[.]2[.]13
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxp://146[.]70[.]100[.]69:8000/php_sess
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
206[.]189[.]27[.]39
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2025-31324
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Email Addresses
lucian_constantin@foundryco[.]com
Last reported · Reporting window ended · Context-only recency placement · 2 source reports
IPv4 address
35[.]192[.]41[.]201
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2024-23222
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4:Port
154[.]205[.]154[.]82:443
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4:Port
207[.]148[.]121[.]95:443
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-68613
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-7544
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4 address
13[.]62[.]52[.]206
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
194[.]163[.]175[.]135
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
194[.]233[.]100[.]40
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
65[.]20[.]67[.]134
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4:Port
144[.]172[.]106[.]66:8080
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2022-20775
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2024-12356
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-22769
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Mutex Names
Rmc-GSEGIF
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-20841
Last reported · Reporting window ended · Context-only recency placement · 1 source report
IPv4 address
146[.]70[.]100[.]69
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2026-20805
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21510
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21514
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21519
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21525
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-21533
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-64712
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2017-11882
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2022-41328
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2023-20867
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2023-34048
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Mutex Names
adjgfenkbe
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Mutex Names
asagdugughi41
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Mutex Names
dvyubgbqfusdv32
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Mutex Names
Global\3a886eb8-fe40-4d0a-b78b-9e0bcb683fb7
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-6218
Last reported · Reporting window ended · Context-only recency placement · 1 source report
ASN
AS213790
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2021-44515
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2024-37079
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-22224
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-22225
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-22226
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-41244
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Ethereum Addresses
0xd67f158b2bcc819eee7029f3477f0270ec1d37b4
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Monero Addresses
87YLCx7zEFghgMEeZvJCZ3gHyS3fUsbAnXSTH8nh8EP7SeptPH8Pnh18snravwhE3dfRt5x67aWo8e6tSJ2cv4mpRNkSdqL
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Monero Addresses
88H9UmU6QyYiGeZdR6hXZJXtJF9Z8zLHDQbC1NV1PDdjCynBq3QKzB1fo1NRhgMX4cBx68Rva5msyKW3PGXfPhCA4itHmiv
Last reported · Reporting window ended · Context-only recency placement · 1 source report
URL
hxxps://api[.]github[.]com/repos/motoralis/singled/contents/kcca/technik
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://raw[.]githubusercontent[.]com/motoralis/singled/main/kcca/paper[.]jim
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2024-7587
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2023-38831
Last reported · Reporting window ended · Context-only recency placement · 1 source report
URL
hxxps://trueconf[.]com/docs/server/en/admin/info/
Last reported · Reporting window ended · Archive check completed · 1 source report
CVE
CVE-2026-24061
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-23760
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-24423
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2026-25067
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Domain
match[.]com
Last reported · Reporting window ended · Archive check completed · 2 source reports
CVE
CVE-2024-28986
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2024-28987
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2024-28988
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-26399
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40536
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40537
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40551
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40552
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40553
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2025-40554
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Email Addresses
cloud-init@mail[.]io
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Email Addresses
cloud-noc@mail[.]io
Last reported · Reporting window ended · Context-only recency placement · 1 source report
CVE
CVE-2020-16040
Last reported · Reporting window ended · Context-only recency placement · 1 source report
Domain
dropbox[.]com
Last reported · Reporting window ended · Archive check completed · 2 source reports
Domain
dl[.]k8s[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://championships-peoples-point-cassette[.]trycloudflare[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://dl[.]k8s[.]io/release/$(curl
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://investigation-launches-hearings-copying[.]trycloudflare[.]com/
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://souls-entire-defined-routes[.]trycloudflare[.]com/
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://souls-entire-defined-routes[.]trycloudflare[.]com/kube[.]py"
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]aikido[.]dev/blog/teampcp-stage-payload-canisterworm-iran
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
xyz[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
malaymoil[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
systemgroup[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
angular-studio[.]ng
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
brategmaqendaalar-studio[.]pro
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
daeumer-web[.]es
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
oigotm[.]my
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
pessa07tm[.]my
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
studio-velte-distributor[.]pro
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
go[.]nature[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
verifiedvoting[.]org
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
www[.]schneier[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://doi[.]org/10[.]48550/arXiv[.]2509[.]14233
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]schneier[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
socksescort[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
ap[.]org
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
forticlient[.]co
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
gate[.]us
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
polyfill[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
polyfillcache[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
www[.]mediafire[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
216[.]126[.]225[.]156
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
balabalabo[.]mywire[.]org
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
ddnsfree[.]com
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
ddnsgeek[.]com
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
doboudix1024[.]mywire[.]org
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
mmmfaco2025[.]mywire[.]org
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
ovmmiuy[.]mywire[.]org
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
styuij[.]mywire[.]org
Last reported · Reporting window ended · Archive check completed · 3 source reports
Domain
notemacro[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
drivefrontend[.]pa
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
drivefrontend[.]pa-clients[.]workers[.]dev
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
go[.]googlesource[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
themesdna[.]com
Last reported · Reporting window ended · Archive check completed · 2 source reports
Domain
ipinfo[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
penskecar[.]riersrmissecured[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
penskecar[.]rsrmissecured[.]top
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
uscargoexpressyahoo[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
www[.]treadstone71[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]treadstone71[.]com/cognitive-army
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]treadstone71[.]com/training/building-a-cognitive-warfare-cyber-psyops-program
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]treadstone71[.]com/training/p-omega-syllabus
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://www[.]treadstone71[.]com/training/the-mission
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
weepee[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://85[.]155[.]186[.]121/access/Remote%20Access-linux64-offline[.]tar?language=en&app=76049110434275449312180081368257747094
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
172[.]67[.]196[.]232
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
18[.]223[.]24[.]218
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
geti2p[.]net
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
atlassian[.]net
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
go[.]sparkpostmail1[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
sparkpostmail1[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
authentication-check[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
ledger[.]setuptransactioncheck[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
setuptransactioncheck[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
trezor[.]authentication-check[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://ledger[.]setuptransactioncheck[.]com/
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://trezor[.]authentication-check[.]io/
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxps://trezor[.]authentication-check[.]io/black/api/send[.]php
Last reported · Reporting window ended · Archive check completed · 1 source report
IPv4 address
104[.]21[.]51[.]8
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
azwsappdev[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
unstructured[.]io
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
cloudinary[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
Domain
res[.]cloudinary[.]com
Last reported · Reporting window ended · Archive check completed · 1 source report
URL
hxxp://pub-3bc1de741f8149f49bdbafa703067f24[.]r2[.]dev/wwa[.]txt
Last reported · Reporting window ended · Archive check completed · 1 source report