{
  "name": "Infrastructure of Interest: Medium Confidence InfoStealer",
  "slug": "infrastructure-of-interest-medium-confidence-infostealer",
  "description": "These indicators of compromise (IOCs) were identified through LevelBlue Labs' proprietary collection and threat hunting processes, leveraging AI-driven heuristics to detect anomalous patterns, behavioral analysis of malicious activity, and cross-referenced intelligence from endpoint telemetry and external sources. The IOCs included in this pulse are associated with infostealer malware, designed to harvest sensitive data such as credentials, cookies, and financial information from compromised systems. Use this data to enhance detection rules, block malicious infrastructure, or correlate with existing incident investigations involving data theft.",
  "published": "2025-08-07T05:31:55+00:00",
  "created_at": "2025-08-07T05:31:55+00:00",
  "modified_at": "2025-08-08T05:46:07+00:00",
  "created_at_opencti": "2025-08-07T05:31:55+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-08-07"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "wwwstarstruck.store"
      },
      {
        "id": "",
        "name": "www2.online"
      },
      {
        "id": "",
        "name": "zycus.online"
      },
      {
        "id": "",
        "name": "zlibraryd.online"
      },
      {
        "id": "",
        "name": "zlibraryc.online"
      },
      {
        "id": "",
        "name": "zlibraryo.online"
      },
      {
        "id": "",
        "name": "zlibrarya.online"
      },
      {
        "id": "",
        "name": "zlibraryb.online"
      },
      {
        "id": "",
        "name": "zlibo.online"
      },
      {
        "id": "",
        "name": "zexn2od7.online"
      },
      {
        "id": "",
        "name": "z1412.online"
      },
      {
        "id": "",
        "name": "zavora.online"
      },
      {
        "id": "",
        "name": "yqmczwseuyjck.site"
      },
      {
        "id": "",
        "name": "yxunqfhyuwrxt.online"
      },
      {
        "id": "",
        "name": "yxnews.online"
      },
      {
        "id": "",
        "name": "yerbana.store"
      },
      {
        "id": "",
        "name": "xyqoquy.shop"
      },
      {
        "id": "",
        "name": "xyled.online"
      },
      {
        "id": "",
        "name": "x5vw0y8h70804254.cfd"
      },
      {
        "id": "",
        "name": "x-ray-inspection-machine2.click"
      },
      {
        "id": "",
        "name": "wwopenclick.space"
      },
      {
        "id": "",
        "name": "womenlove.online"
      },
      {
        "id": "",
        "name": "wishm.shop"
      },
      {
        "id": "",
        "name": "willtown.shop"
      },
      {
        "id": "",
        "name": "weilei.site"
      },
      {
        "id": "",
        "name": "watersprite.shop"
      },
      {
        "id": "",
        "name": "watch-free-movies.online"
      },
      {
        "id": "",
        "name": "watchnow.site"
      },
      {
        "id": "",
        "name": "wanderwoman.online"
      },
      {
        "id": "",
        "name": "wainui.online"
      },
      {
        "id": "",
        "name": "vzpgwqvgqbprq.online"
      },
      {
        "id": "",
        "name": "vvov.shop"
      },
      {
        "id": "",
        "name": "vvccyee.shop"
      },
      {
        "id": "",
        "name": "vpnnow.site"
      },
      {
        "id": "",
        "name": "viral-news.online"
      },
      {
        "id": "",
        "name": "viktorgavrilov.online"
      },
      {
        "id": "",
        "name": "videonew.online"
      },
      {
        "id": "",
        "name": "videyus.site"
      },
      {
        "id": "",
        "name": "steprtex.click"
      },
      {
        "id": "",
        "name": "vaultandco.shop"
      },
      {
        "id": "",
        "name": "varsityclub.bar"
      },
      {
        "id": "",
        "name": "truetok.site"
      },
      {
        "id": "",
        "name": "usau.site"
      },
      {
        "id": "",
        "name": "uzaloza.site"
      },
      {
        "id": "",
        "name": "trendseua.site"
      },
      {
        "id": "",
        "name": "trendingnow.online"
      },
      {
        "id": "",
        "name": "true-english.online"
      },
      {
        "id": "",
        "name": "travelingisrael.shop"
      },
      {
        "id": "",
        "name": "tikamoon.online"
      },
      {
        "id": "",
        "name": "tiendavitaluna.store"
      },
      {
        "id": "",
        "name": "thestudent.space"
      },
      {
        "id": "",
        "name": "thehairplug.shop"
      },
      {
        "id": "",
        "name": "teslalightshows.store"
      },
      {
        "id": "",
        "name": "term-life-insurance.click"
      },
      {
        "id": "",
        "name": "tekni-plex.store"
      },
      {
        "id": "",
        "name": "teethcare.site"
      },
      {
        "id": "",
        "name": "tcg-world.shop"
      },
      {
        "id": "",
        "name": "taste.online"
      },
      {
        "id": "",
        "name": "superlove.shop"
      },
      {
        "id": "",
        "name": "takits.shop"
      },
      {
        "id": "",
        "name": "sunnynet.site"
      },
      {
        "id": "",
        "name": "sublimelbc.store"
      },
      {
        "id": "",
        "name": "studyuts.online"
      },
      {
        "id": "",
        "name": "stopnews.online"
      },
      {
        "id": "",
        "name": "strainsense.store"
      },
      {
        "id": "",
        "name": "stmgroup.online"
      },
      {
        "id": "",
        "name": "srsone.click"
      },
      {
        "id": "",
        "name": "starbay.shop"
      },
      {
        "id": "",
        "name": "sportxtienda.shop"
      },
      {
        "id": "",
        "name": "spinempire-empire.click"
      },
      {
        "id": "",
        "name": "special-offer.fun"
      },
      {
        "id": "",
        "name": "sowetobynight.online"
      },
      {
        "id": "",
        "name": "southernindustrial.store"
      },
      {
        "id": "",
        "name": "solepopnext.cfd"
      },
      {
        "id": "",
        "name": "socialproof.store"
      },
      {
        "id": "",
        "name": "softguide.store"
      },
      {
        "id": "",
        "name": "smartgolf.online"
      },
      {
        "id": "",
        "name": "skinsolution.online"
      },
      {
        "id": "",
        "name": "skvirel.online"
      },
      {
        "id": "",
        "name": "skin-rejuvenation-treatment3.site"
      },
      {
        "id": "",
        "name": "showday.online"
      },
      {
        "id": "",
        "name": "skander.online"
      },
      {
        "id": "",
        "name": "sepgames.online"
      },
      {
        "id": "",
        "name": "securityservices-vortps-tta8-asl-us-2.shop"
      },
      {
        "id": "",
        "name": "segatoys.space"
      },
      {
        "id": "",
        "name": "securityservices-nwvrtx-bc7-mks-us-6.shop"
      },
      {
        "id": "",
        "name": "rootoria.store"
      },
      {
        "id": "",
        "name": "royalmeuble.shop"
      },
      {
        "id": "",
        "name": "robinko.online"
      },
      {
        "id": "",
        "name": "relojeriatempus.shop"
      },
      {
        "id": "",
        "name": "roba.store"
      },
      {
        "id": "",
        "name": "redir.store"
      },
      {
        "id": "",
        "name": "reelsappbackend.space"
      },
      {
        "id": "",
        "name": "red1.store"
      },
      {
        "id": "",
        "name": "radiosoftware.online"
      },
      {
        "id": "",
        "name": "readingnews.store"
      },
      {
        "id": "",
        "name": "realnewsz13.store"
      },
      {
        "id": "",
        "name": "r2m.online"
      },
      {
        "id": "",
        "name": "raffela.store"
      },
      {
        "id": "",
        "name": "qvspsjpiczfcd.online"
      },
      {
        "id": "",
        "name": "quoteloom.online"
      },
      {
        "id": "",
        "name": "quintet.shop"
      },
      {
        "id": "",
        "name": "quistora.store"
      },
      {
        "id": "",
        "name": "queenstreasures.store"
      },
      {
        "id": "",
        "name": "quicktint.shop"
      },
      {
        "id": "",
        "name": "quickhookup.site"
      },
      {
        "id": "",
        "name": "quicklegaladvice.space"
      },
      {
        "id": "",
        "name": "quickcartcheckout.store"
      },
      {
        "id": "",
        "name": "queformatos.click"
      },
      {
        "id": "",
        "name": "quickamz.site"
      },
      {
        "id": "",
        "name": "quantumpcs.shop"
      },
      {
        "id": "",
        "name": "quechevereec.store"
      },
      {
        "id": "",
        "name": "quantumarcade.store"
      },
      {
        "id": "",
        "name": "queenbeast.shop"
      },
      {
        "id": "",
        "name": "qjaioccuzbmud.site"
      },
      {
        "id": "",
        "name": "qhsiuu.online"
      },
      {
        "id": "",
        "name": "qu-axa.online"
      },
      {
        "id": "",
        "name": "q33.space"
      },
      {
        "id": "",
        "name": "pure.shop"
      },
      {
        "id": "",
        "name": "pwrfume.shop"
      },
      {
        "id": "",
        "name": "professionalpackingservices-ttbc7-asl-us-3.shop"
      },
      {
        "id": "",
        "name": "pubmetrics.online"
      },
      {
        "id": "",
        "name": "pureaura.shop"
      },
      {
        "id": "",
        "name": "procurementsoftware.site"
      },
      {
        "id": "",
        "name": "powersports.online"
      },
      {
        "id": "",
        "name": "power-bi-seminar.site"
      },
      {
        "id": "",
        "name": "plugins-wp.online"
      },
      {
        "id": "",
        "name": "plumbing-adx-bc7-asl-us-1.click"
      },
      {
        "id": "",
        "name": "pkshoes.store"
      },
      {
        "id": "",
        "name": "pixlily.store"
      },
      {
        "id": "",
        "name": "phit.click"
      },
      {
        "id": "",
        "name": "picnicliverpool.online"
      },
      {
        "id": "",
        "name": "phafrica.shop"
      },
      {
        "id": "",
        "name": "peta-eg.store"
      },
      {
        "id": "",
        "name": "perfumed.store"
      },
      {
        "id": "",
        "name": "panmertnabz.sbs"
      },
      {
        "id": "",
        "name": "panjzerplamn.sbs"
      },
      {
        "id": "",
        "name": "paid-sperm-donation-1-bu.click"
      },
      {
        "id": "",
        "name": "paccingsservices-00-20-tsb.online"
      },
      {
        "id": "",
        "name": "optimax.site"
      },
      {
        "id": "",
        "name": "ofertaza.online"
      },
      {
        "id": "",
        "name": "novefans.online"
      },
      {
        "id": "",
        "name": "oandb.store"
      },
      {
        "id": "",
        "name": "noonteam.store"
      },
      {
        "id": "",
        "name": "newschain.online"
      },
      {
        "id": "",
        "name": "njmcdirect.online"
      },
      {
        "id": "",
        "name": "new-offer.store"
      },
      {
        "id": "",
        "name": "mythi-epris-fixer.space"
      },
      {
        "id": "",
        "name": "netvibe-us.click"
      },
      {
        "id": "",
        "name": "myinsights.online"
      },
      {
        "id": "",
        "name": "mwampua.site"
      },
      {
        "id": "",
        "name": "mur4ev.online"
      },
      {
        "id": "",
        "name": "mudancaagora.site"
      },
      {
        "id": "",
        "name": "moreofme.site"
      },
      {
        "id": "",
        "name": "moneymate.space"
      },
      {
        "id": "",
        "name": "mnvgp.click"
      },
      {
        "id": "",
        "name": "mejorespreciosmexico.online"
      },
      {
        "id": "",
        "name": "minibox.fun"
      },
      {
        "id": "",
        "name": "momsplace.shop"
      },
      {
        "id": "",
        "name": "megapersonals.shop"
      },
      {
        "id": "",
        "name": "media-hub.fun"
      },
      {
        "id": "",
        "name": "mehanizator-m.online"
      },
      {
        "id": "",
        "name": "medglobalcare.online"
      },
      {
        "id": "",
        "name": "marsyang.site"
      },
      {
        "id": "",
        "name": "matjrah.online"
      },
      {
        "id": "",
        "name": "manulifie.click"
      },
      {
        "id": "",
        "name": "maroon5.store"
      },
      {
        "id": "",
        "name": "manydays.space"
      },
      {
        "id": "",
        "name": "m-cramer.shop"
      },
      {
        "id": "",
        "name": "luxparfum.store"
      },
      {
        "id": "",
        "name": "manhuascan.online"
      },
      {
        "id": "",
        "name": "luattriminh.click"
      },
      {
        "id": "",
        "name": "loveshop.fun"
      },
      {
        "id": "",
        "name": "lushiva.shop"
      },
      {
        "id": "",
        "name": "livecrickettvhd.online"
      },
      {
        "id": "",
        "name": "lovepair.shop"
      },
      {
        "id": "",
        "name": "lean-management.site"
      },
      {
        "id": "",
        "name": "laempresa.online"
      },
      {
        "id": "",
        "name": "kxhvyyfmwssbv.online"
      },
      {
        "id": "",
        "name": "kupumalam.site"
      },
      {
        "id": "",
        "name": "ktlyy.click"
      },
      {
        "id": "",
        "name": "kwgs.online"
      },
      {
        "id": "",
        "name": "kinonew.online"
      },
      {
        "id": "",
        "name": "kleanstorage.store"
      },
      {
        "id": "",
        "name": "kqsx.space"
      },
      {
        "id": "",
        "name": "kingdomsports.online"
      },
      {
        "id": "",
        "name": "kalamatakouzina.online"
      },
      {
        "id": "",
        "name": "kaiptc.online"
      },
      {
        "id": "",
        "name": "justoneday.online"
      },
      {
        "id": "",
        "name": "jxnews168.store"
      },
      {
        "id": "",
        "name": "jmdev.cyou"
      },
      {
        "id": "",
        "name": "japanconnect-esim.store"
      },
      {
        "id": "",
        "name": "iptvjungle.online"
      },
      {
        "id": "",
        "name": "j49.space"
      },
      {
        "id": "",
        "name": "insulin.store"
      },
      {
        "id": "",
        "name": "inkshop.online"
      },
      {
        "id": "",
        "name": "interconsulta.online"
      },
      {
        "id": "",
        "name": "iblock.online"
      },
      {
        "id": "",
        "name": "idealthreads.shop"
      },
      {
        "id": "",
        "name": "icbt.online"
      }
    ]
  },
  "external_refs": [
    "https://otx.alienvault.com/pulse/6894566bd94b79b7fbdbade1"
  ]
}