Skip to content
Bulwark Black Bulwark Black LLC
Latest
Jscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware FuelOusaban Shows Banking Trojans Are Learning to Hide From SandboxesNUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

plcoaweniva[.]ddnsgeek[.]com

Domain Seen in 3 reports Watch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the Domains feed (live, machine-readable).

Seen in these reports

Chinese Cyber Threat Intelligence · Mar 6, 2026

Google Disrupts Chinese APT UNC2814’s GRIDTIDE Backdoor Campaign Targeting 42 Countries
Chinese Cyber Threat Intelligence · Mar 5, 2026

Google and Mandiant Disrupt GRIDTIDE: Chinese APT Espionage Campaign Compromises 53 Victims in 42 Countries
Chinese Cyber Threat Intelligence · Feb 28, 2026

Google Disrupts UNC2814 GRIDTIDE Campaign: Chinese APT Breaches 53 Organizations Across 42 Countries

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

01fc3bd5a78cd59255a867ffb3dfdd6e0b7713ee90098ea96cc01c640c6495eb 130[.]94[.]6[.]228 139[.]180[.]219[.]115 139[.]84[.]236[.]237 149[.]28[.]128[.]128 149[.]28[.]139[.]125 178[.]79[.]188[.]181 195[.]123[.]211[.]70 195[.]123[.]226[.]235 1cv2f3d5s6a9w[.]ddnsfree[.]com 202[.]59[.]10[.]122 207[.]148[.]73[.]18 38[.]180[.]205[.]14 38[.]54[.]112[.]184 38[.]54[.]31[.]146 38[.]54[.]32[.]244 38[.]54[.]37[.]196 38[.]54[.]82[.]69 38[.]60[.]171[.]242 38[.]60[.]194[.]21 38[.]60[.]224[.]25 38[.]60[.]252[.]66 45[.]76[.]157[.]113 45[.]76[.]184[.]214 45[.]77[.]254[.]168 45[.]90[.]59[.]129 4eb994b816a1a24cf97bfd7551d00fe14b810859170dbf15180d39e05cd7c0f9 5[.]34[.]176[.]6 65[.]20[.]104[.]91 669917bad46a57e5f2de037f8ec200a44fb579d723af3e2f1be1e8479a267966 accesscam[.]org admina[.]freeddns[.]org afsaces[.]accesscam[.]org ancisesic[.]accesscam[.]org applebox[.]camdvr[.]org appler[.]kozow[.]com asdad21ww[.]freeddns[.]org aw2o25forsbc[.]camdvr[.]org awcc001jdaigfwdagdcew[.]giize[.]com bab2o25com[.]accesscam[.]org
Browse all indicators → Machine-readable feeds → Extract IOCs from text →