Skip to content
Bulwark Black Bulwark Black LLC
Latest
CISA OT Advisories Show How Trusted Monitoring and Physical-Security Systems Can Become Attack PathsGolden Chickens Shows Browser Sessions Are the New Malware PrizeCl0p’s Windchill Campaign Shows Why Engineering Data Is Extortion SurfaceOrigin Energy Breach Shows Why Customer Data Is Critical-Infrastructure Attack SurfaceJADEPUFFER Shows How Autonomous Ransomware Turns Old Exposure Into Fast ImpactIranian PLC Exploitation Shows Why OT Remote Access Is Now a Board-Level RiskFakeAgent Shows Why Trusted AI Brands Are Now Malware Delivery InfrastructureJadeProx Shows Why China-Nexus Intrusions Still Start With Basic ExposureAPT34 Shows Why Identity Infrastructure Is Iran’s Quietest Attack PathAI Malware Analysis Agents Need Human-Led Quality GatesTrickBot DNS Tunneling Shows Why DNS Is a Malware Control PlaneBitLocker Extortion Shows Why Misconfiguration Is Still Ransomware’s ShortcutProject CAV3RN Turns Outlook Calendars and DNS Into Covert C2Qilin Turns GlobalProtect VPN Exposure Into Ransomware Initial Access

Indicator of Compromise

tria[.]ge

Domain Seen in 2 reports Watch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the Domains feed (live, machine-readable).

Seen in these reports

General CTI · Jul 24, 2026

Golden Chickens Shows Browser Sessions Are the New Malware Prize
Cyber Security Blog · Jun 29, 2026

Bing SEO Poisoning Shows IT Admin Downloads Are Ransomware Initial Access

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

086273cd91f3d6556ed2af915df310e4b184b3db84c3903aa09830d49d1fbb62 108[.]61[.]209[.]100109[.]205[.]195[.]211 124a48b78060fa851e1cc077ca35713c 16735cb80d796865b2430aa11d21a539fcb00b027932f2c63e4b5c098d26585b 170[.]130[.]55[.]223171[.]22[.]183[.]43172[.]96[.]137[.]160185[.]174[.]100[.]203 186b26df63df3b7334043b47659cba4185c948629d857d47452cc1936f0aa5da 188[.]40[.]187[.]145192[.]121[.]22[.]94193[.]242[.]184[.]150194[.]127[.]178[.]21 200fbc76bd9fab3b4adcecfe44233cf47146f5709a9735a0232cb4aa7284eadb 2rxyt8yrhq0bgj[.]org2rxyt9urhq0bgj[.]org 3250adbca0a0bfeab8bd88ee93b603be31fc86b341fd77a152b4843416560d53 337e92c233edc38842c6122fa38e0e84a478f5aa5af2a95ca6be3ca056d925b8 33a12c2328db22429c4a515400a57ffeaf7aec48a2a3c299ab6f1ce2d2b0e87d 4[.]239[.]95[.]1 41aa04782e436345ef45dc159321d5c0e0e5cba300e55a4d1d3194e5c7c5fd97 45c8cbaeb5c7708e7b8030e701747c65203958e82eddc41f39e0ca93bd36c114 5cae5202ddcc29f19f954d81ba138f11b8a4080d05fef63c05a00b9242c06967 5d585f2b24503a96011bbe928f42b1b663946e822b309f8496573c66b5ee834c 5ka8rxp6t6eup2[.]org65[.]20[.]102[.]16165[.]20[.]105[.]177 652346c05123b4c9556c27f5c5efc4bcd941dd66957e3797c6751246a2bff9c6 6922b319dc96d020738bcf466c4d6d9233e4767b68592e1fd9258a232f166ce1 6adf68448b8541e3cbe4a471845cb6c2ac07613f08698567e5ed76dc2a921834 6c23b7723a9f69ea48f02c8fe13fd60ecbfc2fb28e32e481c46ec968a66c66cd 6c7619c34497f430c4f7618cfefe07d1defacfae48f6730c20f52e7a7344faa9 6cimu4mc085em8[.]org70[.]34[.]205[.]43 7ee371ff1a13a3bbd26c925a9beedb1aa0d0c03fe6f63d3803a3a55aaccd0a5b 84[.]32[.]84[.]32 8c113b3aa82c81eee7c6b4ed0ba9a90f 8doj8uvx604eck[.]org 9a2d714ddd5c48722c35df8a70e97f12d46bcde05dc79b7242a7e692bd346826
Browse all indicators → Machine-readable feeds → Extract IOCs from text →