auto: update IOCs and blocklists (2026-06-03 22:42 UTC)

 11 files changed, 90 insertions(+), 27 deletions(-)

Automated sync from server validation run.

Author: APTWatch Bot

blocklists/aptw-apt-combined.hosts

@@ -1,6 +1,6 @@
 # Title: APT Watch — APT Combined Blocklist
 # Description: All validated APT IPs + malicious domains
-# Last modified: 2026-06-03 18:30:29
+# Last modified: 2026-06-03 22:41:47
 # Entries: 10132
 # Homepage: https://aptwatch.org
 # License: TLP:AMBER — do not share publicly

blocklists/aptw-apt-domains.hosts

@@ -1,6 +1,6 @@
 # Title: APT Watch — APT Malicious Domains
 # Description: Domains from APT threat intelligence reports
-# Last modified: 2026-06-03 18:30:29
+# Last modified: 2026-06-03 22:41:47
 # Entries: 11
 # Homepage: https://aptwatch.org
 # License: TLP:AMBER — do not share publicly

blocklists/aptw-apt-ips-all.netset

@@ -4,7 +4,7 @@
 #
 # Category: apt/threat-intelligence
 # Maintainer: APT Watch (aptwatch.org)
-# Generated: 2026-06-03 18:30:29
+# Generated: 2026-06-03 22:41:47
 # Entries: 10121
 #
 # This file is auto-generated from the APT intelligence database.

blocklists/aptw-apt-ips-high.netset

@@ -4,7 +4,7 @@
 #
 # Category: apt/threat-intelligence
 # Maintainer: APT Watch (aptwatch.org)
-# Generated: 2026-06-03 18:30:29
+# Generated: 2026-06-03 22:41:47
 # Entries: 2913
 #
 # This file is auto-generated from the APT intelligence database.

blocklists/aptw-apt-ips-medium.netset

@@ -4,7 +4,7 @@
 #
 # Category: apt/threat-intelligence
 # Maintainer: APT Watch (aptwatch.org)
-# Generated: 2026-06-03 18:30:29
+# Generated: 2026-06-03 22:41:47
 # Entries: 6533
 #
 # This file is auto-generated from the APT intelligence database.

blocklists/aptw-apt-subnets.netset

@@ -4,7 +4,7 @@
 #
 # Category: apt/threat-intelligence
 # Maintainer: APT Watch (aptwatch.org)
-# Generated: 2026-06-03 18:30:29
+# Generated: 2026-06-03 22:41:47
 # Entries: 4
 #
 # This file is auto-generated from the APT intelligence database.

blocklists/aptw-full-domains-plain.txt

@@ -74121,6 +74121,7 @@ alternatifklinik.com
 alternating-current.online
 alternativ-lernen.de
 alternativaletrasenumeros.com.br
+alternativas.ru
 alternative-acces.xyz
 alternative-online.xyz
 alternative.tallyelhyani.info
@@ -161739,6 +161740,7 @@ bv.elitoras.ru
 bv.hilotras.ru
 bv.horoton.ru
 bv3.impact11.xyz
+bvaco.com
 bvanehanctnrawuf-dot-millinium.ey.r.appspot.com
 bvargus.atozgroup.ir
 bvasecka.inshapeinforma.it
@@ -164135,6 +164137,7 @@ calculator-motels-leone-subjects.trycloudflare.com
 calculatorstatement.com
 calculusindia.com
 calcuttaplastics.com
+caldas-pires.pt
 caldav.elitoras.ru
 calder.virosat.ru
 caldoro.shop
@@ -174074,6 +174077,7 @@ chippy.dedspac.ru
 chippy.virosat.ru
 chips.dedspac.ru
 chips.ulitron.ru
+chiptune.com
 chiptuning.lviv.ua
 chipwavenet.com
 chipwavenet.site
@@ -179108,6 +179112,7 @@ clubcanteen.com
 clubdao.com.cn
 clubdelaparrilla.cl
 clubdelasalud.com.ar
+clubdetiroelpicarcho.com
 clubeamigosdopedrosegundo.com.br
 clubecripto.com.br
 clubedevantangensbb.com.br
@@ -188408,6 +188413,7 @@ corpmail.vadilops.ru
 corpmail.voranfi.ru
 corporacion-desguridad-deti.mx
 corporacion.com
+corporacioncrf.com
 corporaciondesafio.org
 corporacionjkys.com
 corporacionlasirena.com
@@ -190926,6 +190932,7 @@ creativestate-fy2010.leftbankcompanies.com
 creativeteam.it
 creativetopic.pro
 creativevisionlv.com
+creativevoltage.com
 creativewastepartners.com
 creativeweb.co.zw
 creativewebsiteconcepts.com
@@ -208810,6 +208817,7 @@ disjungere.online
 disjungere.ru
 disk-4fb5.pre-ooauth.workers.dev
 disk-previewer.com
+disk.accord1key.cn
 disk.dedspac.ru
 disk.vwwv.workers.dev
 diskbae.com
@@ -212627,6 +212635,7 @@ download.filmfanatic.com
 download.freeshare.link
 download.fyxm.net
 download.grandcloud.cn
+download.haozip.com
 download.heato.ru
 download.hitbox.com
 download.hivdakarakoc.com
@@ -212720,6 +212729,7 @@ downtowninv.pages.dev
 downtownresident.org
 downy.ulitron.ru
 downy.virosat.ru
+dowonline.ru
 dowry.dedspac.ru
 dowry.ulitron.ru
 dowry.virosat.ru
@@ -213653,6 +213663,7 @@ drevityblocksnodex.pages.dev
 drevkontbreskmond.pro
 drevkontfal.top
 drevo-hracky.cz
+drevos.ro
 drevoskimhel.top
 drew.dedspac.ru
 drew.ulitron.ru
@@ -221818,6 +221829,7 @@ electon.xyz
 electosake.com
 electra-conveyor.pages.dev
 electrex.it
+electri.billregulator.com
 electric-folds.000webhostapp.com
 electric-tesla.com
 electric-utilities.com
@@ -263524,6 +263536,7 @@ gobikehike.com
 gobikvip-euonline.shop
 gobinbbc404.azurewebsites.net
 gobio.ulitron.ru
+gobiotechpestcontrol.com
 gobjudicial.royalwebhosting.net
 goblesdd.elementor.cloud
 goblog166.blogspot.com
@@ -276389,6 +276402,7 @@ harwade--trezorr.webflow.io
 harworlu83.github.io
 harygbolahan.github.io
 has76q3yufe.hopto.org
+hasalltalent.com
 hasan-can-1.ml
 hasan.dedspac.ru
 hasan.ulitron.ru
@@ -322113,6 +322127,7 @@ kokoneh.000webhostapp.com
 kokoni.space
 kokonorotomo.pro
 kokoqq1.online
+kokorostore.it
 kokoskym.vvipnewyear.my.id
 kokoziz.com
 koksurup.com
@@ -322401,6 +322416,7 @@ konratove.com
 konsciouscreations.com
 konserv-kassa.com
 konservesepeti.com
+konsor.ru
 konstellations.net
 konstrukcjestalowepolska.pl
 konsultanci.online
@@ -373524,6 +373540,7 @@ mosrg.gotdns.ch
 mosryhltirswxqao-dot-millinium.ey.r.appspot.com
 moss.ulitron.ru
 mossandy0.wixsite.com
+mosselnet.co.za
 mossframef.vercel.app
 mossi.dedspac.ru
 mosso.dedspac.ru
@@ -377359,6 +377376,7 @@ mx7.kathypope.id.au
 mx74.prueba.site
 mx7w33.shop
 mx888.vip
+mx9x.com
 mxapp46.com
 mxaps.appsempresa.ga
 mxardxisqmsl.top
@@ -381161,6 +381179,7 @@ n.pkup.fr
 n.systemlog.me
 n.targetctracker.com
 n.timerto.ru
+n.vs108.com
 n.yj.fr
 n.z7mard.yhfnxn4yif.yyg.44f4bm8jj.tjgs.a7fwx4s.y4sk4f.fs.2ejmf.jjxp.scyrz6q.3k4y.cn2gbzw.epjnheai6.ndsye.6b8scztpm.rbfkhx.de.w.2qkwnw.hmtr.5ntsprmyy.awejw.jphz.iyxw3qjcn.ens3c.pay.paypalcancel.cc
 n01d05.cumulus-cloud.com
@@ -384262,6 +384281,7 @@ neksfkjkhxntztjb-dot-millinium.ey.r.appspot.com
 nekuweurude-8417.vercel.app
 nelak.info
 nelclwpseyracysvpjrcutbhrgcomnjpnujh-dot-solar-vertex-285913.rj.r.appspot.com
+nelees.com
 nelem-acen.web.app
 neletao.digital
 nelfitv.shop
@@ -393865,6 +393885,7 @@ nusaefa.tuskilenstileawitesokemog.link
 nusantarajayakonveksi.com
 nusapintar.masuk.id
 nusaspin.co-ud.com
+nusatoyota.co.id
 nusbpvjhbhhdkqsu-dot-millinium.ey.r.appspot.com
 nusciwgtmrxrsdwbhjqoyomizz-dot-glmar9393293232323.uk.r.appspot.com
 nuseek.com
@@ -405690,6 +405711,7 @@ owl.amaniwa.ru
 owl.proadscdn.com
 owl.ulitron.ru
 owl745.github.io
+owlcity.ru
 owldac.pages.dev
 owldata.com
 owler.dedspac.ru
@@ -419331,6 +419353,7 @@ pnqunibuxhdbwefedshrpakpxggtoprznybg-dot-cryptic-now-290917.ey.r.appspot.com
 pnrt-stsdk.vivo.com.cn
 pnrt.stsdk.vivo.com.cn
 pnrtscr.com
+pns.org.pk
 pns.rsl.mybluehost.me
 pnsahu94.github.io
 pnsd.pages.dev
@@ -437440,6 +437463,7 @@ pvrip.cn
 pvrpmaflqrsrtvzr-dot-millinium.ey.r.appspot.com
 pvrqawrrei.5q5e5o.cn
 pvrtual-prcessdesblq.com
+pvsa.gxfugy.cn
 pvsbpinztmzinyxmdaisdmmdsr-dot-gl099898987fhkl.uk.r.appspot.com
 pvsissnm.shop
 pvsissnm.wiki
@@ -438772,6 +438796,7 @@ qingtian.whttccp.icu
 qingtian.wtshaabp.cyou
 qingtian.zypofl.xyz
 qingyutiankong.github.io
+qiniuyunxz.yxflzs.com
 qinnan.pilot45.com
 qinrenwang.com.cn
 qintaz.com
@@ -446140,6 +446165,7 @@ redlined.leonardis.ru
 redliners.sikolar.ru
 redlinkbits.top
 redlion-lb.com
+redlk.com
 redllnk.ddns.net
 redllnk.sytes.net
 redly.dedspac.ru
@@ -457788,6 +457814,7 @@ rxobcswccfpxqjossqxmbhricn-dot-gleowayel400503.uc.r.appspot.com
 rxoulvmh.1x4avau.cn
 rxpfy.top
 rxpwtetasancamqlbusefctqlm-dot-gle39404049.rj.r.appspot.com
+rxquickpay.com
 rxresults.purocueroecuador.com
 rxrunning.com
 rxsdruqzhrbhdjlsawsskumika-dot-gle39404049.rj.r.appspot.com
@@ -467133,6 +467160,7 @@ shrcnfgcfa.pages.dev
 shredform.com
 shredova.ru
 shreenath1696.github.io
+shreesaiseva.org
 shreeyadhawal.com
 shreeyash1204.github.io
 shrek.6.cn
@@ -468658,6 +468686,7 @@ smartdealspl.shop
 smartdeconline.com
 smartdevicecentral.us.intellitxt.com
 smartdiscountzone.shop
+smartermail.host
 smartfiles.nocoshop.ru
 smartfiles.uploadbox.world
 smartfinancialbo.com
@@ -473055,6 +473084,7 @@ static.ifa.camads.net
 static.ifa.empflixlive.com
 static.ifa.slutloadlive.com
 static.ifa.yobtcams.com
+static.ilclock.com
 static.innovid.com
 static.intentarget.com
 static.inviziads.com
@@ -475767,6 +475797,7 @@ support.1com.site.imvdevelopment.gr
 support.agpeypedia3.my.id
 support.autopay-update.telstra.sellergyllc.com
 support.business.privacy-center.help
+support.clz.kr
 support.decursio.online
 support.flodman.ru
 support.gta-link.com
@@ -478477,6 +478508,7 @@ techstats.net
 techsupportforum.us.intellitxt.com
 techsvibe.shop
 techtalentafrica.xyz
+techtattva.in
 techtulse-uk.com
 techvibeg.vercel.app
 techwald.serv00.net
@@ -482716,6 +482748,7 @@ transnoblelogistics.mintonsharlem.icu
 transorpodocs.com
 transpaink.cyou
 transparencia.bibliota.ru
+transparenciacanaa.com.br
 transparency-meta-policies-no1020-9.vercel.app
 transparency-meta-policies-no1021-h.vercel.app
 transparency-meta-policies-no1022-e.vercel.app
@@ -489501,6 +489534,7 @@ vectrabank.112.2o7.net
 veda.dedspac.ru
 veda.ulitron.ru
 vedant364.github.io
+vedantawisdom.org
 vedaprathikgattu.github.io
 vedhasssss.github.io
 vedkam.pages.dev
@@ -490289,6 +490323,7 @@ videojug.uk.intellitxt.com
 videoliveasli.blogspot.com
 videology-partners.tremorhub.com
 videomediagroep.nl
+videomeetgoogle.com
 videopanasbanget.blogspot.be
 videoplanet.pl
 videoproductions.info
@@ -492675,6 +492710,7 @@ wearagainstudio.shop
 wearehivemind.com
 wearelemonpeople.com
 wearelovelive.com
+wearjora.com
 wearlino.shop
 weartexhibitions.com
 weather-online.hopto.org
@@ -493336,6 +493372,7 @@ website-resmi.layanancustomerr.biz.id
 website-web.github.io
 website.alacritas.ru
 website.goloser.ru
+website.mypetapp.co.za
 websitecompany.org
 websiteconnecting.com
 websitedanaid.website-bantuan.top
@@ -498820,6 +498857,7 @@ www.arctic-quests.com
 www.arcuspartners.pro
 www.arcutisbiotherapeutics.com
 www.ardent-cash.com
+www.ardguisser.com
 www.area043.com
 www.areaflix.com
 www.areasnap.com
@@ -515930,6 +515968,7 @@ www.sallyevans.shop
 www.salomonbutypolska.com
 www.salomxt4.shop
 www.salon-evolve.com
+www.salonmarketing.ca
 www.saloopppsretribalization.info
 www.salsajeans.shop
 www.saltomortalefilms.com