不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様1社 -
2026/06/19
※2026/06/19 更新
マルウェア感染させると考えられるURLを検知（2026/06/19）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://f8zkjy83[.]azmoondadrasi[.]xyz/?ublib=f228735b-394c-416a-86b5-29af43fab12b hxxps://l7r6eyvg[.]biagameskade[.]com/?ublib=64f394ae-a1be-42ec-8aca-04656494d2d9 hxxps://qpz5krrv[.]hokm[.]bet/?ublib=a6f963ce-6d90-4e30-967e-016d49f66c65 hxxps://acu1ajv0[.]irxbetkade[.]com/?ublib=f1f9a803-eca2-4d05-ab18-9af325c11ea8 hxxps://fg7za1dh[.]casinobet[.]casino/?ublib=7fcbbe22-df66-4c6d-9f9e-c440a659db33 hxxps://eozmzva6[.]anodaz[.]co/?ublib=f70151a5-1bfb-4d40-a11d-348a475828aa hxxps://6wplx51t[.]azmoonhayeravani[.]shop/?ublib=a661fc37-516b-4998-a1b6-c179af4e3eeb hxxps://fs2m9wxw[.]khalsebet[.]com/?ublib=68c341b3-b1d2-4e33-9870-09eee924ea62 hxxps://8apvykue[.]daf[.]bet/?ublib=d7936d18-9227-46af-a44b-ecffed7327e8 hxxps://9jdr35y2[.]kir[.]bet/?ublib=256fba31-cada-43d7-8e45-6f3abfcf3ee4 hxxps://l6k9xubq[.]oxidbetkade[.]online/?ublib=3ea6cd94-8c02-42e1-8ac1-c3e5fc1867ae hxxps://lnc1c2cf[.]anodaz[.]vip/?ublib=a03c56f3-7531-4717-8683-7a307aacc136 hxxps://022iqw23[.]bet303[.]download/?ublib=e92f0ae0-916d-4a28-910f-3041ca56ef32 hxxps://5zn1z0hp[.]dancebetyek[.]app/?ublib=034cc23a-1f89-4f26-afdf-22448512a3e6 hxxps://8u88xbeq[.]pinbahiskade[.]com/?ublib=4d940804-38f5-4140-87f2-e4b52caeb0a7 hxxps://zt7vrheg[.]bio90[.]football/?ublib=5b37fd1e-b2ff-467d-ab24-fd8a402cc0e0 hxxps://erby3ts4[.]pornbet[.]bet/?ublib=1a45c585-4e5d-4690-812c-d91c06142ebb hxxps://jam3b5k6[.]enfejarland[.]com/?ublib=0484f84f-c5dd-47de-a8e3-91e0e616ea5e hxxps://k7mqynmb[.]hesabdarieskandari[.]xyz/?ublib=a5ce5f0e-b320-4959-b8a2-73b47dc421ce hxxps://4hjech32[.]helabetkade[.]com/?ublib=424a5514-6703-4837-9efc-502cfdde7a12 hxxps://inv527xk[.]testpaye[.]xyz/?ublib=dc2ce220-5b5a-45bb-a17e-4b6153606766 hxxps://2wr0b5x0[.]jetbetkade[.]com/?ublib=6e0ff5c7-4934-406f-93c6-77da3bf07ca4 hxxps://pfoleggz[.]enfejwin[.]com/?ublib=d20990b3-6eb4-4086-95fc-60db3a52a033 hxxps://ef1q7686[.]enfej[.]win/?ublib=7c6e64a6-a318-466e-8a2f-53b2ef8adad7 hxxps://conu6dbe[.]hugugmadanikatouzian[.]xyz/?ublib=e6bf3d39-7853-48f7-8c61-f140f8bf8b05 hxxps://1qmi6vxn[.]hesabdarinoravesh[.]xyz/?ublib=9965da49-1775-4125-8384-6f641c2607af hxxps://es23okhi[.]enfej[.]win/?ublib=626dd819-6fff-4d9c-86e4-df3c06021934 hxxps://lgoanndm[.]betvarzeshkade[.]online/?ublib=0f9c8042-5fa4-4b74-ba20-0d3e8f821a6c hxxps://5hgxfy2r[.]pishbinibet[.]bet/?ublib=dd0b0a39-c5b1-4487-9123-89ca07d321be hxxps://w5kaz0nm[.]ahkam[.]xyz/?ublib=e7de44f3-837b-4bff-b1d3-35cf4d2d26d7 hxxps://v4niq74d[.]daf[.]bet/?ublib=865f1e0c-c400-4c11-9720-4228bd4b14ff hxxps://hf9o1qtn[.]kir[.]bet/?ublib=c5beda80-4e0e-40d4-8d6f-b78c3a04ec2b hxxps://60e6of1k[.]akhbarsport[.]info/?ublib=c7740357-9d4a-4959-ac5d-ebbe363f2635 |
ClearFake |
| URL | hxxps://xeno[.]lat/download/Xeno-v1[.]3[.]55[.]exe hxxps://xeno[.]lat/download/Xeno-v1[.]3[.]55[.]zip |
SalatStealer |
| URL | hxxps://henriqueq[.]xyz/file[.]js hxxps://henriqueq[.]xyz/api/v1/session hxxps://henriqueq[.]xyz/api/v1/verify hxxps://henriqueq[.]xyz/api/v1/status hxxps://one-check[.]lol/o hxxps://onetime-v[.]lol/o |
KongTuke |
| URL | hxxps://dl[.]dropboxusercontent[.]com/scl/fi/0m8mxuh181ska4zxthp9f/DE0039-029302-R-IMG0029002[.]iso?rlkey=jri4w2xcq3y5kgve3ij6vu8b0&dl=1 | PureLogs Stealer |
| URL | hxxps://mail[.]avicennaalliedhealthinstitute[.]org/stubcc[.]ps1 hxxps://brenmayasociados[.]com/sass/optimized_MSIjune[.]png |
Formbook |
| URL | hxxps://solar-sanat[.]net/ThornFlash3Client[.]exe | PureRAT |
| URL | hxxp://216[.]107[.]139[.]197/CRPO hxxp://216[.]107[.]139[.]197/KAJQ hxxp://216[.]107[.]139[.]197/WBMD hxxp://216[.]107[.]139[.]197/DRMF hxxp://216[.]107[.]139[.]197/LNRU hxxp://216[.]107[.]139[.]197/FNMC hxxp://216[.]107[.]139[.]197/KCVW hxxp://216[.]107[.]139[.]197/OHBE hxxp://216[.]107[.]139[.]197/WSYM |
Ngioweb |
| URL | hxxp://130[.]12[.]180[.]190/omix/ | Phorpiex |
