Compromised Websites

Name: Compromised Websites
Creator: Maltiverse
Published: 2026-11-03

Legitimate websites that have been hacked and are currently abused to serve malicious content, such as phishing kits, payment skimmers, malware droppers or injected redirects. These domains belong to victims, not to attackers: they are identified either because the source reports them as compromised, or because the domain had a long legitimate history before the abuse started or hosts malicious content under CMS paths (WordPress, Drupal). Only sites with active malicious evidence are included. Alerting is usually preferable to blocking, since the site itself is legitimate and will be cleaned up.

Author: davidgil
Created: 2026-11-03 14:03:37
Last updated: 2026-11-03 14:04:15
Downloads: 41
Hostname indicators: 85703

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

reach.at Hostname

modified 2026-11-07 06:10:21
Phishing (Maltiverse Threat Observatory) · Phishing (Phishtank)

download.deejaysystem.com Hostname

modified 2026-11-07 06:10:21
Trojan.generic (Maltiverse Threat Observatory)

www.encinardemamre.com Hostname

modified 2026-11-07 06:10:04
Trojan.generic (Maltiverse Threat Observatory)

sweetgeorgiayarns.com Hostname

modified 2026-11-07 06:08:56
Trojan.js.generic (Maltiverse Threat Observatory)

fonexequipamientos.com.ar Hostname

modified 2026-11-07 06:08:53
Generic Malware (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

ssur.cc Hostname

modified 2026-11-07 06:08:24
Scam (Maltiverse) · Malicious URL (Hybrid-Analysis) · Phishing (OpenPhish) · Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory)

3dgame3d.com Hostname

modified 2026-11-07 06:07:54
Malicious behavior (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · Android.adware.generic (Maltiverse Threat Observatory) · Pup (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

ijacr.net Hostname

modified 2026-11-07 06:06:42
PDF.maliciousmalware (Maltiverse Threat Observatory) · Pdf.spam (Maltiverse Threat Observatory) · Phishing.artifact (Maltiverse Threat Observatory) · Phishing.artifact.pdf (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

static0.xesimg.com Hostname

modified 2026-11-07 06:02:34
Top Popularity Site (Cisco Umbrella) · Trojan.generic (Maltiverse Threat Observatory)

mirfiles.com Hostname

modified 2026-11-07 06:01:53
Matched whitelist entry (Maltiverse) · Pup (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory) · Zupdater (Maltiverse Threat Observatory)

lua-executor.com Hostname

modified 2026-11-07 06:01:12
Trojan.generic (Maltiverse Threat Observatory)

phoneky.co.uk Hostname

modified 2026-11-07 06:00:42
Malicious site (Hybrid-Analysis) · Alexa Top 1 Million (Alexa) · Top Popularity Site (Cisco Umbrella) · Trojan.generic (Maltiverse Threat Observatory)

strang-02-static.com Hostname

modified 2026-11-07 06:00:28
PureLogs Stealer (ThreatFox Abuse.ch) · PureLogs Stealer (Maltiverse Threat Observatory) · Unknown malware (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory) · Unam (Maltiverse Threat Observatory)

download2265.mediafire.com Hostname

modified 2026-11-07 06:00:18
Generic.Malware (Hybrid-Analysis) · Riskware.Wacapew (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Donutloader (Triage) · Malware Download (URLhaus Abuse.ch)

sub.followerswave.com Hostname

modified 2026-11-07 05:58:48
Generic Malware (Maltiverse Threat Observatory) · Malicious behavior (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

msncodereceiver.webcindario.com Hostname

modified 2026-11-07 05:55:34
Phishing (OpenPhish) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

ca7e79b6df.scan.leakix.org Hostname

modified 2026-11-07 05:55:05
php.shin_webshell (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory) · Trojan.php.webshell (Maltiverse Threat Observatory)

autosofted.com Hostname

modified 2026-11-07 05:52:38
Downloader.win32.generic (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

themagnumgroup.net Hostname

modified 2026-11-07 05:46:52
Trojan.generic (Maltiverse Threat Observatory)

thedoccloud.com Hostname

modified 2026-11-07 05:46:38
SolarWinds C2 (Maltiverse Research Team) · Malicious site (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Sunburst (Maltiverse Threat Observatory)

linfoxdomain.com Hostname

modified 2026-11-07 05:42:47
Gw.fammalware (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

www.loopmm.com Hostname

modified 2026-11-07 05:42:43
Clearfake (Maltiverse Threat Observatory) · ClearFake (ThreatFox Abuse.ch)

qr.fm Hostname

modified 2026-11-07 05:42:19
Generic Malware (Maltiverse Threat Observatory) · Malicious behavior (Maltiverse Threat Observatory) · Phishing (OpenPhish) · naver phishing (Maltiverse) · Phishing (Phishtank)

formdesigner.pro Hostname

modified 2026-11-07 05:41:58
Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · webmail phishing (Maltiverse) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

acvconsultoria.com Hostname

modified 2026-11-07 05:40:45
Top Popularity Site (Cisco Umbrella) · Deathransom (Maltiverse Threat Observatory) · Alien (Maltiverse Threat Observatory) · Malicious.PDF (Maltiverse Threat Observatory) · Phishing.artifact.pdf (Maltiverse Threat Observatory)

mesh.rigeye.com Hostname

modified 2026-11-07 05:39:59
Tactical RMM (Maltiverse Threat Observatory)

www.refal.cl Hostname

modified 2026-11-07 05:39:13
Trojan.generic (Maltiverse Threat Observatory)

studypages.com Hostname

modified 2026-11-07 05:37:10
Malicious.behaviour (Maltiverse Threat Observatory) · Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

voila.love Hostname

modified 2026-11-07 05:37:03
Malicious URL (Hybrid-Analysis) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

www.halo2pc.com Hostname

modified 2026-11-07 05:36:27
Malicious URL (Hybrid-Analysis) · Generic Malware (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

mesh.zillbyte.com Hostname

modified 2026-11-07 05:35:06
Tactical RMM (Maltiverse Threat Observatory)

static.classicube.net Hostname

modified 2026-11-07 05:32:49
Trojan.wisdomeyes (Maltiverse Threat Observatory)

grupoprovialsa.com Hostname

modified 2026-11-07 05:32:30
Deathransom (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

salonhogar.net Hostname

modified 2026-11-07 05:30:49
Generic Malware (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

inbio.me Hostname

modified 2026-11-07 05:29:28
Generic Malware (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

liveupdt.com Hostname

modified 2026-11-07 05:28:00
Top Popularity Site (Cisco Umbrella) · Malicious behavior (Maltiverse Threat Observatory) · ghostposter (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory) · Trojan.generic.js (Maltiverse Threat Observatory)

voltiq.ru Hostname

modified 2026-11-07 05:27:03
Scam (Maltiverse) · Compromised verdict (Maltiverse) · Android.adware.generic (Maltiverse Threat Observatory)

uopilot.uokit.com Hostname

modified 2026-11-07 05:26:51
Malware Download (Abuse.ch) · Malicious site (Hybrid-Analysis) · Trojan.generic (Maltiverse Threat Observatory)

updater.se7enkills.net Hostname

modified 2026-11-07 05:25:53
Generic (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Se7enkills.A potentially unwanted (Hybrid-Analysis) · Presenoker (Hybrid-Analysis) · Yandex.K potentially unwanted (Hybrid-Analysis)

ec2-54-213-149-80.us-west-2.compute.amazonaws.com Hostname

modified 2026-11-07 05:25:05
php.shin_webshell (ThreatFox Abuse.ch)

files.eduuu.com Hostname

modified 2026-11-07 05:23:30
Adware.generic (Maltiverse Threat Observatory) · Android.exploit (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory) · Worm.generic (Maltiverse Threat Observatory) · Virus.generic.msword (Maltiverse Threat Observatory)

registroheca.com.ar Hostname

modified 2026-11-07 05:22:27
Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

plotsoft.com Hostname

modified 2026-11-07 05:21:14
Top 1M Site (Cisco Umbrella) · Trojan.generic (Maltiverse Threat Observatory)

itlav.itlantivirus.com Hostname

modified 2026-11-07 05:20:33
Generic Malware (Maltiverse Threat Observatory) · Pup (Maltiverse Threat Observatory)

comercmoble.com Hostname

modified 2026-11-07 05:18:49
Malicious.PDF (Maltiverse Threat Observatory)

crackmes.one Hostname

modified 2026-11-07 05:18:48
Trojan.generic (Maltiverse Threat Observatory)

consent.clarosgvas.mobicare.com.br Hostname

modified 2026-11-07 05:17:09
Phishing domain (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

www.plantation-productions.com Hostname

modified 2026-11-07 05:16:16
Trojan.generic (Maltiverse Threat Observatory)

891818.com Hostname

modified 2026-11-07 05:15:49
Generic Malware (Maltiverse Threat Observatory) · Android.adware.generic (Maltiverse Threat Observatory) · Pup (Maltiverse Threat Observatory)

squackle.com Hostname

modified 2026-11-07 05:15:22
Trojan.generic (Maltiverse Threat Observatory)

silverspaceship.com Hostname

modified 2026-11-07 05:15:22
Trojan.generic (Maltiverse Threat Observatory)

donasdonegociosicredi.com.br Hostname

modified 2026-11-07 05:14:42
Phishing (OpenPhish) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

igpsclub.ru Hostname

modified 2026-11-07 05:14:05
Alien (Maltiverse Threat Observatory) · Malicious.PDF (Maltiverse Threat Observatory) · Phishing.artifact (Maltiverse Threat Observatory) · Trojan.downloader (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

lihi3.cc Hostname

modified 2026-11-07 05:13:28
Phishing Amazon.com (Phishtank) · Social Engineering (Phishtank) · Phishing (Maltiverse) · Social Engineering (Maltiverse) · Phishing (OpenPhish)

mobidrive.com Hostname

modified 2026-11-07 05:13:02
Top Popularity Site (Cisco Umbrella) · Phishing Microsoft (Phishtank) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

airform.ai Hostname

modified 2026-11-07 05:12:20
Top 1M Site (Cisco Umbrella) · Phishing domain (Maltiverse Threat Observatory) · zimbra phishing (Maltiverse) · Generic Malware (Maltiverse Threat Observatory) · Malicious behavior (Maltiverse Threat Observatory)

grupoemerger.com Hostname

modified 2026-11-07 05:12:18
Gophish (Maltiverse Threat Observatory)

www.thelegendofmir.com Hostname

modified 2026-11-07 05:12:07
Zupdater (Maltiverse Threat Observatory)

customer-portal.info Hostname

modified 2026-11-07 05:11:23
Phishing domain (Maltiverse Threat Observatory) · Facebook phishing (Maltiverse) · Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory) · other phishing (Maltiverse)

pro.formview.io Hostname

modified 2026-11-07 05:10:53
Phishing (Phishtank) · Phishing (Maltiverse Threat Observatory)

roblox.com.ge Hostname

modified 2026-11-07 05:09:22
Malicious URL (Triage) · Malicious behavior (Maltiverse Threat Observatory) · Suspicious URL (Triage) · Generic Malware (Maltiverse Threat Observatory) · Phishing (OpenPhish)

suitedocs-io.framer.media Hostname

modified 2026-11-07 05:06:11
Phishing (Phishtank)

l.ead.me Hostname

modified 2026-11-07 05:06:11
Phishing (Antiphishing.com.ar) · Apple ID phishing (Maltiverse) · Phishing PayPal (Phishtank) · Generic.Malware (Hybrid-Analysis) · Apple ID phishing (Antiphishing.com.ar)

q-r.to Hostname

modified 2026-11-07 05:06:11
Apple ID phishing (Maltiverse) · Alexa Top 1 Million (Alexa) · Malicious site (Hybrid-Analysis) · Malicious URL (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

www.gov-parkingqe.shop Hostname

modified 2026-11-07 05:06:11
Phishing (OpenPhish) · Phishing (Phishtank)

klelnanzeigen-deutch.4f7eua.cfd Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

connect-lejdgercom--ask.framer.media Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

starthub.framer.website Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

nav-cyrptocdn.wixstudio.com Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

klelnanzeigen-deutch.towingservicenewjersey.com Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

legercomstartt.wixstudio.com Hostname

modified 2026-11-07 05:06:10
Phishing (Phishtank)

kleinanzeigen.wlrsj.com Hostname

modified 2026-11-07 05:06:09
Phishing (Phishtank)

qr-codes.io Hostname

modified 2026-11-07 05:06:09
Top Popularity Site (Cisco Umbrella) · Generic Malware (Maltiverse Threat Observatory) · Phishing (Maltiverse Threat Observatory) · Phishing (OpenPhish) · Hostpoint AG phishing (Maltiverse)

kleinanzeigen-deutsch.id-83543.info Hostname

modified 2026-11-07 05:06:09
Phishing (Phishtank)

l.wl.co Hostname

modified 2026-11-07 05:06:08
Phishing PayPal (Phishtank) · target unspecified phishing (Antiphishing.com.ar) · apple phishing (Antiphishing.com.ar) · Generic.Malware (Hybrid-Analysis) · IRS phishing (Antiphishing.com.ar)