Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
9 IOCs

Borrowed Reputation: Domain Shadowing and Gambling SEO

Infoblox
Infoblox
Published October 26, 2026Original Report

Excerpt

Borrowed Reputation How domain shadowing placed illegal gambling pages beneath school and government domains Executive Summary We identified two unrelated operations that used domain shadowing to place illegal gambling content beneath legitimate school and government domains. In both cases, an unauthorized party appears to have gained access to DNS administration and created records that the original domain owners may not have noticed. Because the resulting hostnames sat…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURElink-omacuan-amc-edu-…free-bonus-no-deposit…imghaxor.ioCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(6)
Capability
Victim

Indicators of Compromise

Open the mindmap →

9 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainlink-omacuan-amc-edu-et-raahs-edu-bd.pages.devHighScore 58/100First seen
Domainfree-bonus-no-deposit-betting-sites.dpboss.maharashtra.gov.inHighScore 58/100First seen
Domainimghaxor.ioHighScore 58/100First seen
Domainimgmahasuhu.ioHighScore 58/100First seen
Domainimgstore.ioHighScore 58/100First seen
Domainmikale.meHighScore 58/100First seen
Domainhinkale.meHighScore 58/100First seen
Domainlink.omacuan.amc.edu.et.raahs.edu.bdHighScore 58/100First seen
IP168.144.156.92HighScore 58/100First seen

IOC Relationship Graph

Building graph…