The record
Indicators
Every domain, address and file hash taken from a published ClickFix report, shown defanged and never rendered as a link.
Defanged input works — example[.]com and hxxps://example[.]com both resolve to the same record.
Composition of the record
- Domains
- 713
- IP addresses
- 151
- URLs
- 118
- SHA-256 hashes
- 303
- SHA-1 hashes
- 4
- MD5 hashes
- 2
- Filenames
- 58
- Email addresses
- 10
Recognised on ingest, with nothing on record yet: ASNs, Registry keys.
Counts are of indicators attached to at least one published campaign. What is excluded, and why.
Most recently observed
ordered by last observation
By the most recent date a source or a check saw the indicator, not the date we added it.