IOC Indicators · MENA Corpus

DOMAINSUSPICIOUS

kiti[.]com[.]kw

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

theway[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

7cars[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

medmark[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

khaleej-tents[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

mediafactory[.]bh

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

papastudio[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

ortakci[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

zarah[.]com[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-13

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

dypro[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

purtiz[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

tosuninsaat[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

www[.]ricolocksmith[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

fmi[.]univ-bba[.]dz

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

teknoda[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

mepi[.]com[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-12

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

URLSUSPICIOUS

hxxps[://]toolshare[.]com[.]tr/files/jqqvLru0VAiH3z[.]exe

source: threatfoxfirst seen: —last seen: 2026-09-11

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

karek[.]tn

source: threatfoxfirst seen: —last seen: 2026-09-11

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

idealsu[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-11

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

gaye[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-11

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

IPSUSPICIOUS

8[.]147[.]114[.]203

source: shodan-c2first seen: —last seen: 2026-09-10

TLP:CLEARBshodan-c2single-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

nabeeh[.]qa

source: threatfoxfirst seen: —last seen: 2026-09-10

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

ouest-tribune[.]dz

source: threatfoxfirst seen: —last seen: 2026-09-10

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

cliq[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-10

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

IPSUSPICIOUS

43[.]134[.]169[.]103

source: shodan-c2first seen: —last seen: 2026-09-09

TLP:CLEARBshodan-c2single-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

infocus[.]tn

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

ictsae[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

ardsanaluminyum[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

shop[.]laundryservice[.]ae

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

mytab[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

injazat[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

berga[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

ipekgil[.]av[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

hahacanvas[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

URLSUSPICIOUS

hxxps[://]medmark[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

derigroup[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

cloudcorner[.]com[.]sa

source: threatfoxfirst seen: —last seen: 2026-09-09

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

IPSUSPICIOUS

82[.]156[.]224[.]184

source: shodan-c2first seen: —last seen: 2026-09-08

TLP:CLEARBshodan-c2single-source

score 3

ViewPivot to IOC graph

IPSUSPICIOUS

210[.]2[.]169[.]213

source: shodan-c2first seen: —last seen: 2026-09-08

TLP:CLEARBshodan-c2single-source

score 3

ViewPivot to IOC graph

URLSUSPICIOUS

hxxps[://]troysolution[.]com[.]tr/api/bundle

source: threatfoxfirst seen: —last seen: 2026-09-08

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

iofinance[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-08

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

troysolution[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-08

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

yogatherapy[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-08

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUSSaudi Aramco

vhpkceq1ci[.]sap[.]s4hana[.]aramcoservices[.]com

source: crt.shfirst seen: 2026-08-10last seen: 2026-09-08

TLP:CLEARBcrt.shsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

dalet[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-07

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

campaign[.]parquet[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-07

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

www[.]hitek[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-05

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph

IPSUSPICIOUS

84[.]247[.]133[.]139

source: shodan-c2first seen: —last seen: 2026-09-04

TLP:CLEARBshodan-c2single-source

score 3

ViewPivot to IOC graph

DOMAINSUSPICIOUS

gultekinlertekstil[.]com[.]tr

source: threatfoxfirst seen: —last seen: 2026-09-04

TLP:CLEARBthreatfoxsingle-source

score 2

ViewPivot to IOC graph

DOMAINSUSPICIOUS

myprod[.]co[.]il

source: threatfoxfirst seen: —last seen: 2026-09-04

TLP:CLEARBthreatfoxsingle-source

score 3

ViewPivot to IOC graph