Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
40 IOCs

$7 Million in Expired Domains Fuel a Streaming Empire with a Malware Secret

Infoblox
Infoblox
Published August 13, 2026Original Report

Threat Actors

Malware Families

Excerpt

Sable Squirrel spends millions on expired domains to deliver illegal gambling, streaming, RAT malware, and ransomware in a massive cybercriminal enterprise. Infoblox Threat Intel | Dropcatch series | Part 2 of 3 Executive Summary A decade-old news site, a failed startup’s domain, a former corporate campaign, and a football club website do not usually end up in the same threat cluster. In Sable Squirrel’s case, though, they do. This actor has spent years turning other people’s…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREmeung.appdropcatch.comsamefacts.comCAPABILITYAsyncRATNanocoreNjRATVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(7)
Victim

Indicators of Compromise

Open the mindmap →

40 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainmeung.appHighScore 58/100First seen
Domaindropcatch.comHighScore 58/100First seen
Domainsamefacts.comHighScore 58/100First seen
Domainapi-score.comHighScore 58/100First seen
Domain90phutyy.ioHighScore 58/100First seen
Domainthesports.comHighScore 58/100First seen
Domaincolascore.comHighScore 58/100First seen
Domain255.comHighScore 58/100First seen
Domainrefvsb.comHighScore 58/100First seen
Domainimgts.comHighScore 58/100First seen
Domainsocoliveku.ccHighScore 58/100First seen
Domaingvapi.ccHighScore 58/100First seen
Domainws-xyz.comHighScore 58/100First seen
Domainjurasudfoot.comHighScore 58/100First seen
Domainsadd.ioHighScore 58/100First seen
Domainvsbet276.comHighScore 58/100First seen
Domainlfastcdn.comHighScore 58/100First seen
Domainkoepgd.appHighScore 58/100First seen
Domainmaxfactor-international.comHighScore 58/100First seen
Domainchatboxn.comHighScore 58/100First seen
Domainhealthymagination.comHighScore 58/100First seen
Domainanimalrampage3d.ioHighScore 58/100First seen
Domaincel-robox.comHighScore 58/100First seen
Domainxoilacz.comHighScore 58/100First seen
Domainstope40.orgHighScore 58/100First seen
Domaininstitutobancopalmas.orgHighScore 58/100First seen
Domainsnsystems.comHighScore 58/100First seen
Domaintrackervsb.liveHighScore 58/100First seen
SHA2560464caa1c45cb753db25a95a30ce0b6814650b6f839a07cf8c2afdc143de7216MediumScore 53/100First seen
Domainkrogeralbertsons.comHighScore 58/100First seen
Domainmsrktz.appHighScore 58/100First seen
Domainbuffalomarket.comHighScore 58/100First seen
Domaingene-chips.comHighScore 58/100First seen
Domainxemlaibongda.netHighScore 58/100First seen
Domainxoilacxys.topHighScore 58/100First seen
Domainmsdht.appHighScore 58/100First seen
Domainsportliveapiz.comHighScore 58/100First seen
Domainveinteractive.comHighScore 58/100First seen
Domaincolatv88xb.ccHighScore 58/100First seen
Domain6789x.siteHighScore 58/100First seen

IOC Relationship Graph

Building graph…