不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様2社 -
2026/06/26
※2026/06/26 更新
マルウェア感染させると考えられるURLを検知（2026/06/26）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://pa9xqikq[.]1000shart[.]xyz/?ublib=b7cd8121-586a-47e6-8acc-07ae169647bd hxxps://g3byemsx[.]xbetone[.]com/?ublib=361a0d0e-e4e4-4b68-afe9-3ecaa2dd28e3 hxxps://ygbl3eg2[.]vip1xbet[.]org/?ublib=0e0abe39-4e05-40ea-a663-04b2e1f0feb1 hxxps://4olnuxxz[.]blackjackonlineplay83[.]com/?ublib=cf5e4a39-69f9-459a-9f8f-19dc4f0dcf17 hxxps://oay019z6[.]1xfa[.]bio/?ublib=f41699fe-9f66-49bb-b033-b877b315998a hxxps://c3u193ap[.]betmajic[.]cc/?ublib=9bd2acf0-ad55-4b13-bf07-c775fcf5cd7f hxxps://jw2wczuj[.]jetbet1[.]pro/?ublib=7ad8380a-5ab4-470a-88fe-aab2caeeb2ff hxxps://6novzudn[.]vip1xbet[.]net/?ublib=96c60124-b066-4958-a5ea-a50071191f64 hxxps://qkqz220k[.]jetbet1[.]xyz/?ublib=0bc22eed-3685-4474-b210-b9e75e35294d hxxps://4iuq4imv[.]jetbet1[.]pro/?ublib=37c0fc50-796e-482b-9c5f-4cee609c32d3 hxxps://8opocc30[.]1x303[.]casino/?ublib=c4f50d63-3b86-4cf9-8569-407f1ffe8d6f hxxps://7vs3nqp7[.]vip1x[.]bet/?ublib=67ab1e54-fcad-470b-87ea-b63168276be9 hxxps://tv2gs2t9[.]1xfa[.]bio/?ublib=e938818a-fef6-4d3f-8bf3-3ee13aa5c65e hxxps://cd6ts3mz[.]blackjackonlineplay83[.]com/?ublib=74bb95fe-85d1-4247-b674-b8c0a461ae25 hxxps://t1x1vby3[.]ahkam[.]xyz/?ublib=df01d0ba-2a5b-4f55-8fb3-0b5ec3fa9e29 hxxps://hdb1qm8y[.]shartcart[.]xyz/?ublib=e59453c8-4280-4f44-8070-b6fc1c5788ae hxxps://ex5nibpq[.]vip1xbet[.]net/?ublib=6a5530d6-08b2-45c4-885d-9591d652bac2 hxxps://71zdauu1[.]taktikbet[.]bio/?ublib=b25772d6-925c-4b3e-a91c-004679564062 hxxps://4iw2skgz[.]tinyshart[.]com/?ublib=4c5222c7-0633-4d1d-bb25-47483fbe1738 hxxps://nmo1ivv6[.]akhlagvaahkam[.]xyz/?ublib=b81be4fe-20dc-4d72-bab3-18b14c1d1962 hxxps://wqeign6o[.]vip1xbet[.]org/?ublib=7d1a5001-0f3c-4f7c-99ed-6a2df7baf38f hxxps://9ergp1lh[.]yekshart[.]app/?ublib=baaa48cf-b389-4c92-80bd-3ee4f0ac0992 |
ClearFake |
| URL | hxxps://ledesla[.]cfd/file[.]js hxxps://ledesla[.]cfd/api/v1/session hxxps://ledesla[.]cfd/api/v1/verify hxxps://ledesla[.]cfd/api/v1/status hxxps://ext4-v[.]top/o hxxps://tommy-t[.]lol/o hxxps://moielli[.]xyz/file[.]js hxxps://moielli[.]xyz/api/v1/session hxxps://moielli[.]xyz/api/v1/verify hxxps://moielli[.]xyz/api/v1/status hxxps://denesii[.]com/wild/black |
KongTuke |
| URL | hxxp://111[.]164[.]238[.]73:57439/Mozi[.]m hxxp://119[.]160[.]215[.]52:35806/Mozi[.]a hxxp://115[.]42[.]75[.]110:45397/Mozi[.]m hxxp://110[.]37[.]84[.]200:46837/Mozi[.]m hxxp://110[.]37[.]44[.]158:58509/Mozi[.]m hxxp://223[.]123[.]72[.]169:60310/Mozi[.]m hxxp://153[.]117[.]32[.]156:40587/Mozi[.]m hxxp://70[.]70[.]17[.]10:54200/Mozi[.]m hxxp://182[.]116[.]54[.]21:41717/Mozi[.]a |
Mozi |
| URL | hxxp://ashahaarmans[.]nl/144[.]exe hxxp://45[.]225[.]135[.]18/deploy_softwaretech[.]sh hxxp://209[.]250[.]238[.]240/aarch64 hxxp://ashahaarmans[.]nl/3[.]exe |
Coinminer |
| URL | hxxps://widerangegroup[.]com/cage[.]exe | PureLogs Stealer |
| URL | hxxp://64[.]89[.]161[.]67/3b250ef3f9e542adadfb[.]php hxxp://176[.]65[.]144[.]120/bc850000649f490e9617[.]php |
Stealc |
