IoC Investigation

https://github.com/deepfield/public-research/blob/main/aisuru/iocs/domains.csv

URL IN DATABASE

URL · threat 0.50 · 1× seen · 0 datasets · Malware Attribution · last seen Aug 12, 2026

🔄 Pivot:📁 Malware Attribution

Threat Score

0.50

Sightings

1
0 sources

Detected Type

URL

Enrichments

0

Related IoCs

20
URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Hostgithub.com
RegistrarMarkMonitor, Inc.
OrgGithub
Abuse Contact-
CountryUS
DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
win.redline MALWARE Malware Attribution investigate →
95.143.179.85 IP Malware Attribution investigate →
https://search.censys.io/hosts/149.28.37.137 URL Malware Attribution investigate →
https://search.censys.io/hosts/38.147.188.61 URL Malware Attribution investigate →
38.147.188.61 IP Malware Attribution investigate →
https://search.censys.io/hosts/130.51.20.64 URL Malware Attribution investigate →
130.51.20.64 IP Malware Attribution investigate →
https://search.censys.io/hosts/45.74.34.32 URL Malware Attribution investigate →
45.74.34.32 IP Malware Attribution investigate →
AS214943 ASN Malware Attribution investigate →
https://search.censys.io/hosts/91.92.240.57 URL Malware Attribution investigate →
91.92.240.57 IP Malware Attribution investigate →
182.92.117.223 IP Malware Attribution investigate →
https://bazaar.abuse.ch/sample/bd8c11720b387… URL Malware Attribution investigate →
http://77.110.119.94/ce369e7324834845.php URL Malware Attribution investigate →
AS3223 ASN Malware Attribution investigate →
https://search.censys.io/hosts/104.243.248.6… URL Malware Attribution investigate →
45.196.97.119 IP Malware Attribution investigate →
xorisapedophile.st OTHER Malware Attribution investigate →
https://app.any.run/tasks/1ef52a2b-2735-48b0… URL Malware Attribution investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--ee6e992d-60cc-431f-d5ff-0000ce6aedff",
    "created": "2026-08-20T23:33:21Z",
    "modified": "2026-08-20T23:33:21Z",
    "name": "URL: https://github.com/deepfield/public-research/blob/main/aisuru/iocs/domains.csv",
    "pattern": "[url:value = 'https://github.com/deepfield/public-research/blob/main/aisuru/iocs/domains.csv']",
    "pattern_type": "stix",
    "valid_from": "2026-08-20T23:33:21Z",
    "labels": [
        "malware attribution"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center