Malicious Hostnames

Collection of malicious hostnames disregarding DGA

Author
agomez
Created
2021-03-25 17:59:09
Last updated
2025-11-06 12:40:33
Downloads
5001732
Hostname indicators
228894
URL indicators
21082

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

http://www.mediafire.com/file/vdcpzhkmn6znb2z/Mewgenics.v1.0.20645.RexaGames.com.rar/file URL

modified 2026-10-18 07:36:50
Xmrig (Triage)

https://kryptonclientcrack.lovable.app/downloads/KryptonClient-Crack.jar URL

modified 2026-10-18 07:36:50
Malware Download (URLhaus Abuse.ch)

syedamariaaa.blogspot.sn Hostname

modified 2026-10-18 07:36:39
Phishing (OpenPhish)

kivyx.info Hostname

modified 2026-10-18 07:36:38
Command & Control (Cyber Threat Alliance)

https://img2.huorongsec.com/zh3G URL

modified 2026-10-18 07:34:42
Cobalt strike (Maltiverse Threat Observatory)

https://www.facebook.sagers.com/ URL

modified 2026-10-18 07:34:41
Facebook phishing (Maltiverse)

tfwed.duckdns.org Hostname

modified 2026-10-18 07:34:40
AsyncRAT (ThreatFox Abuse.ch) · Asyncrat (Maltrail)

http://site9610755.92.webydo.com/ URL

modified 2026-10-18 07:34:31
Phishing (Phishtank)

installrequierementcyka.yzz.me Hostname

modified 2026-10-18 07:34:11
Malicious URL (Triage)

http://pckorea.com/ URL

modified 2026-10-18 07:34:11
other phishing (Maltiverse)

https://hifice-works.wasmer.app/?naps URL

modified 2026-10-18 07:33:47
naver phishing (Maltiverse)

fumail.club Hostname

modified 2026-10-18 07:33:46
Phishing (OpenPhish) · Malicious URL (Hybrid-Analysis) · aurotunstealer (Maltiverse Threat Observatory)

https://dobski.pl/userfiles/file/nelorajifopubom.pdf URL

modified 2026-10-18 07:33:43
Trojan.phishing.pdf (Maltiverse Threat Observatory)

http://mypublix.org/ URL

modified 2026-10-18 07:32:44
other phishing (Maltiverse)

naver.xn------5cdeu4bdefbrmco8cb0g4c7c.xn--p1ai Hostname

modified 2026-10-18 07:32:30
naver phishing (Maltiverse)

mrarmksmsx.com Hostname

modified 2026-10-18 07:31:33
Unknown malware (ThreatFox Abuse.ch)

https://api.timeforsurveys.com/s/63BZGFSVBWSFCDX7Y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a URL

modified 2026-10-18 07:31:10
Phishing (OpenPhish)

evening.yhflpmod.yoga Hostname

modified 2026-10-18 07:29:38
other phishing (Maltiverse)

http://otworz-biuro-podrozy.pl/userfiles/file/9403565b-3c08-4855-bcbe-0fbfb64c2dde.pdf URL

modified 2026-10-18 07:28:49
Trojan.generic (Maltiverse Threat Observatory)

snowflakeceramics.in Hostname

modified 2026-10-18 07:28:13
other phishing (Maltiverse)

https://sddln.moses.asia/ URL

modified 2026-10-18 07:27:38
other phishing (Maltiverse)

latinbrands.pe Hostname

modified 2026-10-18 07:27:18
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch)

https://getsolara.dev/download/v3/SLaunch.exe URL

modified 2026-10-18 07:27:11
Trojan.generic (Maltiverse Threat Observatory)

http://bijbelreizenisrael.nl/images/script-executor-roblox-free_GM431946152.pdf URL

modified 2026-10-18 07:27:05
Trojan.generic (Maltiverse Threat Observatory)

https://webaccess-email.mx/s/63BZGFSVBWSFCDX7Y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a URL

modified 2026-10-18 07:27:00
Phishing (OpenPhish)

tmobileiddigits.firebaseapp.com Hostname

modified 2026-10-18 07:26:49
Phishing (Phishtank)

ascoitaliasa.duckdns.org Hostname

modified 2026-10-18 07:26:20
Remcos (ThreatFox Abuse.ch)

vapourwatertechnologies.co.uk Hostname

modified 2026-10-18 07:25:26
other phishing (Maltiverse)

provideoviralss2.blogspot.co.id Hostname

modified 2026-10-18 07:25:02
Phishing (Maltiverse) · Phishing (Antiphishing.com.ar)

http://52.43.119.120/hdikd URL

modified 2026-10-18 07:24:38
Generic Malware (Maltiverse Threat Observatory)

https://oaicp.moses.asia/ URL

modified 2026-10-18 07:24:30
other phishing (Maltiverse)

bestsign-9f665.firebaseapp.com Hostname

modified 2026-10-18 07:24:09
Phishing (OpenPhish) · Phishing (Phishtank)

isw.uasuyjje.cyou Hostname

modified 2026-10-18 07:23:44
other phishing (Maltiverse)

codeserver3.joongon.com Hostname

modified 2026-10-18 07:22:36
naver phishing (Maltiverse)

http://www.childlesscatlady.today/2kmz/ URL

modified 2026-10-18 07:22:29
Formbook (ThreatFox Abuse.ch)

http://ixi.tools/ URL

modified 2026-10-18 07:22:26
other phishing (Maltiverse)

beyazesyaonline.online Hostname

modified 2026-10-18 07:22:09
other phishing (Maltiverse)

safer.ddns.net Hostname

modified 2026-10-18 07:21:24
Remcos (ThreatFox Abuse.ch) · AIT:Trojan.GenericTKA (Hybrid-Analysis) · Gen:Variant.Razy (Hybrid-Analysis)

http://www.france-travail-jeunes.de/ URL

modified 2026-10-18 07:21:06
other phishing (Maltiverse)

https://520bhl.com/wp-content/uploads/2022/06/Cracksomovelite.pdf URL

modified 2026-10-18 07:19:31
Malicious.PDF (Maltiverse Threat Observatory)

https://navercorp.great-site.net/?naps URL

modified 2026-10-18 07:19:15
naver phishing (Maltiverse)

56a156f1as.blogspot.lt Hostname

modified 2026-10-18 07:18:57
Phishing (Antiphishing.com.ar) · Phishing (Maltiverse)

authsecuritecle.firebaseapp.com Hostname

modified 2026-10-18 07:18:56
Phishing (OpenPhish) · Phishing (Phishtank)

trezoriuiostartt.webflow.io Hostname

modified 2026-10-18 07:18:56
Phishing (OpenPhish)

coreagency.net Hostname

modified 2026-10-18 07:18:33
Formbook (Maltrail)

https://tv-show-tracker-81e25.web.app/ URL

modified 2026-10-18 07:18:32
Phishing (Phishtank)

https://static.s123-cdn-static.com/uploads/4403565/normal_5ff77a48d8874.pdf URL

modified 2026-10-18 07:18:17
Phishing.artifact (Maltiverse Threat Observatory)

kkk123.no-ip.biz Hostname

modified 2026-10-18 07:18:01
NjRAT (ThreatFox Abuse.ch)

wwr.sdsprine23.cloudns.biz Hostname

modified 2026-10-18 07:17:42
Phishing (OpenPhish)

https://520bhl.com/wp-content/uploads/2022/09/trefeli.pdf URL

modified 2026-10-18 07:17:35
Malicious.PDF (Maltiverse Threat Observatory)

https://www.s7xnc4.tokeonpqaket.com/ URL

modified 2026-10-18 07:17:04
Phishing (OpenPhish)

https://gitral.fr/upload/userfiles/files/43606539969.pdf URL

modified 2026-10-18 07:16:20
Phishing.artifact (Maltiverse Threat Observatory)

https://bbs.microsoftsync.net/YSGi URL

modified 2026-10-18 07:15:59
Cobalt strike (Maltiverse Threat Observatory)

yahoo-mail-105965.square.site Hostname

modified 2026-10-18 07:15:59
Phishing (Phishtank) · Phishing (OpenPhish)

https://infraovensculinary.com/wp-content/uploads/2022/10/Download_F1_2009_Pc_Torent_Iso_TOP.pdf URL

modified 2026-10-18 07:15:44
Malicious.PDF (Maltiverse Threat Observatory)

instafrefollowears10k.blogspot.md Hostname

modified 2026-10-18 07:15:12
Phishing (OpenPhish)

artnovaproiect.ro Hostname

modified 2026-10-18 07:14:13
naver phishing (Maltiverse)

http://img2.huorongsec.com/3Axp URL

modified 2026-10-18 07:13:33
Cobalt strike (Maltiverse Threat Observatory)

rent.yama-jp.vu Hostname

modified 2026-10-18 07:13:08
other phishing (Maltiverse)

http://www.hacdop.com/le/config.php?account=legal URL

modified 2026-10-18 07:12:46
FormBook (Cybercrime-tracker.net)

http://galerie-louise.be/userfiles/files/59202106540.pdf URL

modified 2026-10-18 07:11:52
Phishing.artifact.pdf (Maltiverse Threat Observatory)

http://galerieportelouise.be/userfiles/files/12487789017.pdf URL

modified 2026-10-18 07:11:39
Trojan.phishing.pdf (Maltiverse Threat Observatory)

https://suemsas.com/wp-content/plugins/super-forms/uploads/php/files/in4efk9v9adojcahjkon0dgdu3/86733684745.pdf URL

modified 2026-10-18 07:09:54
Generic Malware (Maltiverse Threat Observatory) · Malicious.behaviour (Maltiverse Threat Observatory) · Malicious.PDF (Maltiverse Threat Observatory)

https://upwopldexliang-us.godaddysites.com/ URL

modified 2026-10-18 07:08:13
Phishing (OpenPhish)

netcoinzlogin.webflow.io Hostname

modified 2026-10-18 07:07:57
Phishing (OpenPhish) · Phishing (Phishtank)

https://sites.google.com/view/01wdohgucx0oxc428etxf3b1k9krkc URL

modified 2026-10-18 07:07:09
naver phishing (Maltiverse)

sempersim.su Hostname

modified 2026-10-18 07:06:54
Nanocore RAT (ThreatFox Abuse.ch) · Malicious URL (Hybrid-Analysis) · LokiBot (ThreatFox Abuse.ch) · Loki Password Stealer (PWS) (ThreatFox Abuse.ch) · Malicious.behaviour (Maltiverse Threat Observatory)

recieviblrggg.duckdns.org Hostname

modified 2026-10-18 07:05:46
Ave Maria (ThreatFox Abuse.ch)

kuconeloginn.webflow.io Hostname

modified 2026-10-18 07:05:11
Phishing (OpenPhish)

https://accshomecnfrm0log.github.io/confirm.html URL

modified 2026-10-18 07:05:00
Phishing (OpenPhish)

http://wish-china.com/ URL

modified 2026-10-18 07:02:42
other phishing (Maltiverse)

https://suemsas.com/wp-content/plugins/super-forms/uploads/php/files/cf0fu13bepbah4hp3a580nsvd7/65809091870.pdf URL

modified 2026-10-18 06:59:52
Trojan.phishing.pdf (Maltiverse Threat Observatory)

http://rashihospital.com/logo.gif?5b533=3366603 URL

modified 2026-10-18 06:59:24
Malicious url (Cyber Threat Coalition) · Covid19 scam (Cyber Threat Coalition)

onedrivefiles58.firebaseapp.com Hostname

modified 2026-10-18 06:58:44
Phishing (OpenPhish)

harveyautos112.ddns.net Hostname

modified 2026-10-18 06:57:47
Remcos (ThreatFox Abuse.ch)

https://lgiinkuconn.webflow.io/ URL

modified 2026-10-18 06:56:32
Phishing (OpenPhish)

you-never-die.com Hostname

modified 2026-10-18 06:55:58
naver phishing (Maltiverse)

https://indoorclub-informa.com/boletines/img/file/sukunopozaxubagepabagorug.pdf URL

modified 2026-10-18 06:54:25
Trojan.phishing.pdf (Maltiverse Threat Observatory)

mtb0support.web.app Hostname

modified 2026-10-18 06:52:22
Phishing (OpenPhish)

https://dobski.pl/userfiles/file/10397252481.pdf URL

modified 2026-10-18 06:51:58
Trojan.phishing.pdf (Maltiverse Threat Observatory)

https://www.scribd.com/document/736252892 URL

modified 2026-10-18 06:50:49
Bradesco phishing (Maltiverse)

http://sapporomn.com/userfiles/files/61769952739.pdf URL

modified 2026-10-18 06:50:40
Trojan.generic (Maltiverse Threat Observatory)

qmoz0g9m.werighteus.com Hostname

modified 2026-10-18 06:50:22
ClearFake (ThreatFox Abuse.ch)

http://globalmediaminds.com/uploads/files/42312448857.pdf URL

modified 2026-10-18 06:49:56
Trojan.generic.pdf (Maltiverse Threat Observatory)

script-dev.buzz Hostname

modified 2026-10-18 06:49:29
Generic Malware (Maltiverse Threat Observatory)

https://static.s123-cdn.com/uploads/4673112/normal_61b4a350f223a.pdf URL

modified 2026-10-18 06:48:55
Generic Malware (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

https://caribbeanequipmenttraders.com/wp-content/uploads/2022/06/clarya.pdf URL

modified 2026-10-18 06:48:06
Malicious.PDF (Maltiverse Threat Observatory)

vcnm.telroble.click Hostname

modified 2026-10-18 06:47:26
other phishing (Maltiverse)

https://calendar.google.com/calendar/event?action=VIEW&eid=MWFqaGdwMzBvNjBjdHVlbmI0YTRsY2dxNzAgcm9vc19kZW5pc2VAeWFob2... URL

modified 2026-10-18 06:47:24
McAfee phishing (Maltiverse)

http://astur.travelshops.pl/userfiles/file/6529259962.pdf URL

modified 2026-10-18 06:47:06
Phishing.artifact.pdf (Maltiverse Threat Observatory)

http://mypikora.com/ URL

modified 2026-10-18 06:45:10
other phishing (Maltiverse)

https://static.s123-cdn-static.com/uploads/4472488/normal_5ff40a588f571.pdf URL

modified 2026-10-18 06:45:02
Phishing.artifact (Maltiverse Threat Observatory)

tehran.ddns.net Hostname

modified 2026-10-18 06:44:04
NjRAT (ThreatFox Abuse.ch)

iniiivan.ydns.eu Hostname

modified 2026-10-18 06:43:30
Remcos (ThreatFox Abuse.ch)

https://bbs.microsoftsync.net/5Gsm URL

modified 2026-10-18 06:42:59
Cobalt strike (Maltiverse Threat Observatory)

http://truca-taoules.com/ckfinder/userfiles/files/39422-minsk-krem-dlya-uvelicheniya-chlena.pdf URL

modified 2026-10-18 06:41:30
Trojan.phishing.pdf (Maltiverse Threat Observatory)

http://bloomhomeeg.com/wp-content/uploads/2023/01/Photoshop-Cs3-Driver-Download-FREE.pdf URL

modified 2026-10-18 06:40:44
Trojan.phishing.pdf (Maltiverse Threat Observatory)

https://suemsas.com/wp-content/plugins/super-forms/uploads/php/files/impvqocu19rd90vq74gt7ngbi6/73721697174.pdf URL

modified 2026-10-18 06:39:10
Phishing.artifact.pdf (Maltiverse Threat Observatory)

dcurectifynow.web.app Hostname

modified 2026-10-18 06:37:17
Phishing (Phishtank)

zzujllop.cannca.shop Hostname

modified 2026-10-18 06:36:17
Joker (Maltrail)