IOC Radar

espionage

IranThreat Actor

Active Threat

MuddyWater

104

IOCs Tracked

8

Intel Reports

Associated IOCs50 total

Domain1

URL49

http://sp3ct-baslor-biz8-qurvik-fonel.pages.dev/appeals/submit-appeal-form/return

http://www.saskaccessaccountservicedeskuser202.vercel.app/

http://sp25ct7-vernax-biz-kalsor-femlin.pages.dev/appeals/submit-appeal-form/return

http://sp25ct7-zervax-biz-kersen-famdok.pages.dev/appeals/submit-appeal-form/return

http://sp3ct-vornak-biz8-seltri-qovan.pages.dev/appeals/submit-appeal-form/return

http://twxpl54lkwg-bgrnd65spli-2ce31c-zby5k.pages.dev/appeals/submit-appeal-form/return

https://www.trust-ledger-login-patch-gateway.vercel.app/

http://sp29ct-fervik-biz-kantor-hazsel.pages.dev/appeals/submit-appeal-form/return

http://duishalik.blogspot.com/

http://sp3ct-lodvek-biz8-karsin-zumel.pages.dev/appeals/submit-appeal-form/return

http://zwurd-bfrnk-skrunt-0rw71c-vznk-prentz.pages.dev/appeals/submit-appeal-form/return

http://saabeqoon.com/js/vendor/update

https://www.instagramloginpage111.blogspot.com/

https://ipfs.io/ipfs/bafybeifkilhlranv7rj63emeaaz3gye5rigd72s2cpuo4chpfvwqqp3sie

https://yhnuj0fdran-xjnshlpw-0a3b6c-xj811a.pages.dev/

https://ledger-wallets-auth-graphical.vercel.app/ledger%20form/index.html/

http://sp29ct-vaztor-biz-hemqik-forsel.pages.dev/appeals/submit-appeal-form/return

https://www.meta-maskluginxgic.godaddysites.com/

https://net-ledger-wallet-data-script.vercel.app/ledger%20form/index.html/

http://thecourierdelivery2.netlify.app/

http://leboncoin1.github.io/leboncoin

https://maisixx.us.cc/5g

http://ui-clone-by-naman.netlify.app/

https://2farobux.com/redeem/ctbSex5crcuN

https://facebooklogincomin.blogspot.com/?m=1

http://sp29ct-hemtor-biz-zanrik-vaskel.pages.dev/appeals/submit-appeal-form/return

http://sp25ct7-qorvok-biz-hemlor-fansik.pages.dev/appeals/submit-appeal-form/return

http://sp3ct-voslar-biz8-tenvik-qurem.pages.dev/appeals/submit-appeal-form/return

https://www.net-ledger-wallet-data-ios.vercel.app/

http://www.netflixfree2024.blogspot.com/

http://sp3ct-drenix-biz8-solvek-tranu.pages.dev/appeals/submit-appeal-form/return

http://imountsecurity.co.nz/hansonagy/

http://sp29ct-meltor-biz-zovrik-kansel.pages.dev/appeals/submit-appeal-form/return

http://facebook-photo5.blogspot.com/

http://sp29ct-pralvik-biz-komtor-zefsel.pages.dev/appeals/submit-appeal-form/return

http://zwurd-vlypx-skrunt-0rw71c-zplv-prentz.pages.dev/appeals/submit-appeal-form/return

http://fracturdevisdokd.duckdns.org/

http://sp3ct-wesnar-biz8-polvik-damel.pages.dev/appeals/submit-appeal-form/return

https://www.trust-ledger-login-patch-testing.vercel.app/

http://sp29ct-horlen-biz-pravok-kemvik.pages.dev/appeals/submit-appeal-form/return

https://www.netflix-clone-nextjs.vercel.app/

https://www.wallet-trezor-login-trust-website.vercel.app/

http://ksaservicesarl.com/visionrealtymgt/

https://135461223.site/1781/565c2b3b-b892-4792-8858-fe75524f363a/750431

http://sp25ct7-forvex-biz-kamlor-felsik.pages.dev/appeals/submit-appeal-form/return

http://www.bankofamerica-mi.vercel.app/

http://lh.gecnnrl.com/NeemaHospitalityManagement/

https://www.acreditar.webcindario.com/

https://0ipf30-6ivzuz-ucbl8k-43q.pages.dev/qaz-wsx-edc-rfv?welcome=165509926835002

Related Reports8 total

Cyber Conflict Briefing Q2 2026

DCSO CyTec BlogAug 3, 2026

OpenPhish (300 entries)

Weekly Threat Landscape Digest – Week 28

HawkEyeJul 10, 2026

May 2026 Threat Trend Report on APT Groups

AhnLabJun 15, 2026

Critical Langflow Vulnerability Exploited for Malicious Code Execution

Cyber PressJun 11, 2026

When Your AI Agent’s Memory Becomes a Security Liability

Check Point BlogJun 11, 2026

Exposing Fox Tempest: A malware-signing service operation

Microsoft Threat IntelligenceMay 19, 2026

NSFOCUS Monthly APT Insights – March 2026

NSFOCUS Security LabsMay 28, 2026

Threat Profile

Motivationespionage

Origin

Iran

Last seenAug 2026

IOCs tracked104