Skip to content
Bulwark BlackBulwark Black LLC
Latest
Crime Stoppers Vendor Breach: Protect Confidentiality When Reporting Routes ChangeBinance Estimates $6.3 Billion Impact: Separate Frozen Funds From RecoverySignal RingRTC Hang-Up Flaw: Update the Client, Verify the Call EndsPillow Image-Processing Flaw: Patch the Worker Behind the UploadWasmtime on Arm: Check the Separate br_table Sandbox EscapeBlastmail Breach: Protect the Audience Data Behind Your NewsletterKeyDrift on Cisco SD-WAN: Patch the Entry Point, Investigate the ControllerPostiz Token Forgery: Patch the Publisher, Review Organization AccessBrotli Enters CISA KEV: Patch Node.js and Trace Every Decompression PathWasmtime Sandbox Escape: Patch the Engine Behind Your Wasm WorkloadsQuest Quanum Incident: Protect Patient Data While Keeping Orders MovingPulsar Token Bypass: Check Anonymous Fallback and Patch BrokersCisco Expressway Root RCE: Patch the Cluster and Check Service ReachabilityPulsar Manager Is Retired: Remove the Console and Recover Cluster Credentials

IOC Passport

t[.]me

DomainArticle-derived observationCurrent reporting windowReported in 2 articlesWatch this →

A domain extracted from published reporting. It may be infrastructure, a cited service, or a candidate indicator; check current feed admission before blocking. Shown defanged for safe viewing; use Copy live value for the functional form.

This value remains inside its 30-day domain/URL reporting window. Current reporting status is separate from verified-feed admission. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.

Current verified-feed status

Checking live guard…

Article reporting and current malicious-feed admission are evaluated separately.

First reported
Last reported
Article count
2
Admission policy
bulwark-exact-malicious-v2
Research lifecycle
Current

Article reporting history

These dates are report publication dates, not provider sightings or proof of malicious activity.

General CTI·Oct 29, 2026

Binance Estimates $6.3 Billion Impact: Separate Frozen Funds From Recovery

Russian Cyber Threat Intelligence·Feb 25, 2026

Diesel Vortex: Russian Cybercrime Group Steals 1,600+ Credentials From Global Logistics Sector

Related indicators

Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.

237608b847954d4f9e2c73d7c66b22ad4f406308840549ffb8fdaac9873c25a858d55610f5954d6c867bfa71658585dd8d59d768fac54356b6038b41b0d0145fbinance[.]onelink[.]mec5a8729a97ac486d963784d96c5642d7discord[.]ggeb1fb9e5f41f43b682332aff0b7b89ceernigr-esfilc[.]comglobalprofit-lpanel-abcdefghij[.]tophxxps://ernigr-esfilc[.]com/security/logon[.]jsp?verify=7g2q978fg11jka=891FHjaH32-2f1Hnb2sFhxxps://penskecar[.]riersrmissecured[.]com/_c/cstm/4325/reg/DOTLookup[.]aspxhxxps://rsrmissecured[.]top/[.]git/configipinfo[.]iolpanel-bckaoplsks[.]toplpanel-bumaepxuje-iframe[.]toplpanel-bumaepxuje[.]toplpanel-kkbnukltpo[.]topns1[.]suspended-domain[.]compenskecar[.]riersrmissecured[.]compenskecar[.]rsrmissecured[.]topriersrmissecured[.]comrsrmissecured[.]topsuspended-domain[.]comuscargoexpressyahoo[.]comyasomawork[.]space
Browse all indicators →IOC Archive →Machine-readable feeds →Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.