| 176[.]53[.]159[.]40ip, shown defanged for safety: 176 dot 53 dot 159 dot 40 | IP | not assessed | 1 | 2026-09-09 | 2026-09-14 |
| uasputnik[.]comdomain, shown defanged for safety: uasputnik dot com | Domain | Attacker-controlled | 1 | 2026-09-09 | 2026-09-14 |
| macintosh-hub[.]comdomain, shown defanged for safety: macintosh-hub dot com | Domain | Attacker-controlled | 1 | 2025-12-02 | 2026-03-05 |
| macos-storageperf[.]comdomain, shown defanged for safety: macos-storageperf dot com | Domain | Attacker-controlled | 1 | 2026-02-06 | 2026-03-05 |
| mac-os-helper[.]comdomain, shown defanged for safety: mac-os-helper dot com | Domain | Attacker-controlled | 1 | 2026-02-07 | 2026-03-05 |
| valetfortesla[.]comdomain, shown defanged for safety: valetfortesla dot com | Domain | not assessed | 1 | 2025-11-12 | 2026-03-05 |
| vipbirdrank[.]comdomain, shown defanged for safety: vipbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| usebirdrep[.]comdomain, shown defanged for safety: usebirdrep dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| topbirdrep[.]comdomain, shown defanged for safety: topbirdrep dot com | Domain | Attacker-controlled | 1 | 2024-05-17 | 2026-03-05 |
| topbirdrank[.]comdomain, shown defanged for safety: topbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| probirdrep[.]comdomain, shown defanged for safety: probirdrep dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| optbirdrank[.]comdomain, shown defanged for safety: optbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| nowbirdrank[.]comdomain, shown defanged for safety: nowbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-17 | 2026-03-05 |
| mybirdrank[.]comdomain, shown defanged for safety: mybirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| justbirdrank[.]comdomain, shown defanged for safety: justbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| infobirdrep[.]comdomain, shown defanged for safety: infobirdrep dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| helpbirdrep[.]comdomain, shown defanged for safety: helpbirdrep dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| helpbirdrank[.]comdomain, shown defanged for safety: helpbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| gobirdrank[.]comdomain, shown defanged for safety: gobirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |
| getbirdrank[.]comdomain, shown defanged for safety: getbirdrank dot com | Domain | Attacker-controlled | 1 | 2024-05-16 | 2026-03-05 |