{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/hospitality-photo-zip-nodejs-implant-defense/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:56Z",
    "total": 157,
    "categories": 6
  },
  "iocs": {
    "IPv4": [
      "172.67.161.215",
      "178.16.54.27",
      "178.16.55.179",
      "193.202.84.32",
      "208.95.112.1",
      "95.217.97.121"
    ],
    "Domains": [
      "aluminiostramuntana.com",
      "bookreservphoto.pro",
      "dancamp.info",
      "dashgamein.info",
      "deeprace.info",
      "derbyoni.info",
      "doc-imagehub.info",
      "docshub-01.info",
      "docshub-secure.com",
      "docstore-safe.info",
      "expedla-getphoto.cloud",
      "fairyspells.info",
      "finallyrain.info",
      "hakeiwjs727wj.com",
      "haobbao.com",
      "heliosup.info",
      "higoksbupwou.com",
      "image-vlt.info",
      "imagestore-hub.info",
      "imagevault-safe.info",
      "ip-api.com",
      "joincroud.info",
      "kellystreets.info",
      "kelopins.info",
      "kentjerk.info",
      "keypmenu.info",
      "kinghoruswe.info",
      "kiptownim.info",
      "lestresot.info",
      "lookinlip.info",
      "ministrew.info",
      "montagelips.info",
      "photo-21473.xyz",
      "photo-box.info",
      "photo-dekor.xyz",
      "photo-hub-io.info",
      "photobook-reserv.pro",
      "photobookadm.pro",
      "photodoc-secure.info",
      "photosafe-hub.info",
      "prejointl.info",
      "racestrech.info",
      "recallnine.info",
      "recepyman.info",
      "recstrace.info",
      "reservebookphot.pro",
      "safe-picvault.info",
      "safedoc-storage.info",
      "safedoc-vault.info",
      "safedocphoto.info",
      "safephoto-vault.info",
      "safevault-hub.info",
      "sec-safe-dc.info",
      "secure-imagehub.info",
      "snapkeep.info",
      "tripadvisor-photo-view.com",
      "vertualstreak.info",
      "visa-safedocs.info",
      "visa-vault.info",
      "visaimage-storage.icu",
      "visaimages.info",
      "visaphoto-secure.info",
      "visaphoto-vault.info",
      "widjssij728dj.com"
    ],
    "URLs": [
      "aluminiostramuntana.com",
      "bookreservphoto.pro",
      "dancamp.info",
      "dashgamein.info",
      "deeprace.info",
      "derbyoni.info",
      "doc-imagehub.info",
      "docshub-01.info",
      "docshub-secure.com",
      "docstore-safe.info",
      "expedla-getphoto.cloud",
      "fairyspells.info",
      "finallyrain.info",
      "hakeiwjs727wj.com",
      "haobbao.com",
      "heliosup.info",
      "higoksbupwou.com",
      "image-vlt.info",
      "imagestore-hub.info",
      "imagevault-safe.info",
      "ip-api.com",
      "joincroud.info",
      "kellystreets.info",
      "kelopins.info",
      "kentjerk.info",
      "keypmenu.info",
      "kinghoruswe.info",
      "kiptownim.info",
      "lestresot.info",
      "lookinlip.info",
      "ministrew.info",
      "montagelips.info",
      "photo-21473.xyz",
      "photo-box.info",
      "photo-dekor.xyz",
      "photo-hub-io.info",
      "photobook-reserv.pro",
      "photobookadm.pro",
      "photodoc-secure.info",
      "photosafe-hub.info",
      "prejointl.info",
      "racestrech.info",
      "recallnine.info",
      "recepyman.info",
      "recstrace.info",
      "reservebookphot.pro",
      "safe-picvault.info",
      "safedoc-storage.info",
      "safedoc-vault.info",
      "safedocphoto.info",
      "safephoto-vault.info",
      "safevault-hub.info",
      "sec-safe-dc.info",
      "secure-imagehub.info",
      "snapkeep.info",
      "tripadvisor-photo-view.com",
      "vertualstreak.info",
      "visa-safedocs.info",
      "visa-vault.info",
      "visaimage-storage.icu",
      "visaimages.info",
      "visaphoto-secure.info",
      "visaphoto-vault.info",
      "widjssij728dj.com"
    ],
    "md5": [
      "17082531775760189576112827972435",
      "25908558764390958596189327204542"
    ],
    "sha256": [
      "04ec44f2618460f5c77c5e56014a512cc03a123c9c5b6b6b1273e2a1681ac2e1",
      "06a2888c1f07119873ccb051221bd8717281494b33585f4242556e6e5e227969",
      "1c693bcdaf1da636eb21c274b21cc2f6c52c62ddd514700783eee83fe13acb0a",
      "1f8daffec5945a13a1e9231f4a76655d4c7ef4560d0c64ca3abfe48f38297cbd",
      "2e5fd01b7949a45937b853eabcf4b03195614cf84338dcaaa97240d1c5301ddc",
      "3f66634f103b80412d1d670b91befab2a74425d2ea76d904c4a7ffae2ae94b44",
      "49cc0e0c3ec060fb354cacee244d4f297aaefb6db66e67a21262d6c4d2eae1bd",
      "63565f15a99769bbcd527a4d53e5cc259d80e1254463ef9c878c2074685558ae",
      "6580de3b74fd635a1d7a887b8f6e5b0c9ac9e90d6e20466ad41489203119cca9",
      "83e970feb3f10692c164f6889f7a026f135c2433e5bf8e662a6e63a3b81267b7",
      "89934cb1494cf0327f0ab82fe644c74caf687814379cad116bd7adaca74c1028",
      "97448688b292bfec6d83b153588076fe59b111c35ac4e42a916238df16a71e2f",
      "98825c0c7764f45c891275b2f038ea559e84b340df30b41c2cc77b8d4215c6c8",
      "9f10e3b6e5745784f26d18c38ce01fba054b19749c17260978ac11472564aee2",
      "b7f46b192cd83a1d2487cb048cca645f6e8855b9673d500d50bbdb04eebc6bea",
      "bd6805782df15e53581096b99bd6bbb81f4d4a5e2d2b30954df63175a4075be9",
      "c5baa0c16b0074a1e94b48aa0177e9bfc23746aca8a5b42848a6685da85658b5",
      "d14ba95cdce1ef7dc9ad3ac74949ca5db38b27378ee30f30a23cf26f9e875a11",
      "da4b72764ae929050353f3da759c839e2a061a8b9a8dd3c3b2e909d4a8a3291c",
      "f629311734b7c6e6579f8e1d0e1e3f3bf72c9ac6c301b631ba4df7f393c41b14"
    ],
    "Bitcoin Addresses": [
      "17082531775760189576112827972435"
    ]
  }
}