Threat Intelligence · Historical Research

IOC Archive

Historical article-derived observables that no longer fall inside the current reporting-recency window for their type. Provider-supported values enter only after the applicable enabled services complete the required boundary check without qualifying positive evidence. They remain available for research, pivots, and attribution review. Archived does not mean clean, benign, remediated, resolved, or safe. This archive is not a blocklist.

Reporting-window dates come from Bulwark Black report publication dates, not provider sightings. IP/CIDR observations use 14 days, domains and URLs 30 days, file identifiers 730 days, and other context 90 days. Types without an applicable exact provider check archive by recency alone. Current verified-feed admission is evaluated separately on each IOC Passport and in the machine-readable feeds.

1211 archived unique observations

← Current observations (4616)Revalidation queue (2234)IOC Archive (1211)

200 archived observations on this page

Showing 1001–1200 of 1211

URL

hxxps://pub-3bc1de741f8149f49bdbafa703067f24[.]r2[.]dev/wwa[.]txt

Last reported Feb 11, 2026 · Reporting window ended Mar 13, 2026 · Archive check completed Sep 7, 2026 · 1 source report

IOC Archive

hxxps://pub-3bc1de741f8149f49bdbafa703067f24[.]r2[.]dev/wwa[.]txt

hxxps://res[.]cloudinary[.]com/dbjtzqp4q/image/upload/v1767455040/

hxxps://res[.]cloudinary[.]com/dbjtzqp4q/image/upload/v1767455040/optimized_MSI_lpsd9p[.]jpg

autoupdate[.]online

awaitingfor[.]online

awaitingfor[.]site

chkstate[.]online

crypto[.]com

datatabletemplate[.]xyz

face-online[.]world

longlastfor[.]online

security-update[.]xyz

support[.]ms

systemupdate[.]cloud

us[.]zoom[.]com

zoom[.]app

hxxps://download[.]datatabletemplate[.]xyz/account/register/id=8118555902061899&amp;secret=QwLoOZSDakFh

7-zip[.]org

herosms[.]cc

herosms[.]vip

iplogger[.]org

smshero[.]com

update[.]7zip[.]com

mega[.]nz

gateway[.]itstgate[.]com

winbuzzer[.]com

concours[.]gov

concours[.]gov[.]bf

duchop[.]gov[.]vn

exploit[.]in

forum[.]exploit[.]in

phutho[.]duchop[.]gov[.]vn

hxxps://malpedia[.]caad[.]fkie[.]fraunhofer[.]de/details/win[.]shadowpad&quot

oemhwupd[.]sy

download[.]pytorch[.]org

terraform-bedrock-deploy[.]tf

kawpow[.]asia

kawpow[.]asia[.]mine[.]zergpool[.]com

kawpow[.]eu

kawpow[.]eu[.]mine[.]zergpool[.]com

kawpow[.]na

kawpow[.]na[.]mine[.]zergpool[.]com

zergpool[.]com

ehxbxtjliybbloantpwq[.]supabase[.]co

www[.]moltbook[.]com

hxxps://ehxbxtjliybbloantpwq[.]supabase[.]co/rest/v1/agents?select

hxxps://ehxbxtjliybbloantpwq[.]supabase[.]co/rest/v1/owners?select=email,x_handle,x_name&#x26;email=neq[.]null&#x26;limit=5

hxxps://ehxbxtjliybbloantpwq[.]supabase[.]co/rest/v1/posts?id=eq[.]74b073fd-37db-4a32-a9e1-c7652e5c0d59

hxxps://ehxbxtjliybbloantpwq[.]supabase[.]co/rest/v1/users

hxxps://www[.]moltbook[.]com/_next/static/chunks/18e24eafc444b2b9[.]js

sundhed[.]dk

13[.]227[.]180[.]4

codeberg[.]org

lists[.]gnu[.]org

www[.]cvedetails[.]com

hxxps://codeberg[.]org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cc

hxxps://codeberg[.]org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7b

hxxps://lists[.]gnu[.]org/archive/html/bug-inetutils/2026-01/msg00004[.]html

hxxps://www[.]cve[.]org/CVERecord?id=CVE-2026-24061

hxxps://www[.]cvedetails[.]com/cve/CVE-2026-24061/

help[.]ivanti[.]com

hxxps://help[.]ivanti[.]com/mi/help/en_us/core/11[.]x/gsg/CoreGettingStarted/Configuring_LDAP_servers[.]htm

forums[.]ivanti[.]com

hxxps://forums[.]ivanti[.]com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US

hf[.]co

huggingface[.]co

www[.]trustbastion[.]com

hxxps://cdn-lfs-us-1[.]hf[.]co/r

hxxps://huggingface[.]co

hxxps://huggingface[.]co/datasets/xcvqsccm/sfxyt851/resolve/main/b[.]apk?download=true

matchinternal[.]com

haveibeenpwned[.]com

hxxp://clawdbot[.]getintwopc[.]site/config[.]json&#x27

hxxp://clawdbot[.]getintwopc[.]site/dl/Lightshot[.]dll&#x27

hxxp://clawdbot[.]getintwopc[.]site/dl/Lightshot[.]exe&#x27

hxxps://darkgptprivate[.]com/d111&quot

hxxps://www[.]aikido[.]dev/blog/fake-clawdbot-vscode-extension-malware

hxxps://www[.]dropbox[.]com/scl/fi/tmwi4j86op04r9qo2xdgh/zoomupdate[.]msi?rlkey=ymr9yn5p3q2w2l3uz9cg71dvm&amp;st=q93av9p6&amp;dl=1

104[.]21[.]57[.]71

hxxps://download[.]datatabletemplate[.]xyz/account/register/id=8118555902061899&secret=QwLoOZSDakFh

hxxps://ehxbxtjliybbloantpwq[.]supabase[.]co/rest/v1/owners?select=email,x_handle,x_name&email=neq[.]null&limit=5

hxxps://www[.]dropbox[.]com/scl/fi/tmwi4j86op04r9qo2xdgh/zoomupdate[.]msi?rlkey=ymr9yn5p3q2w2l3uz9cg71dvm&st=q93av9p6&dl=1