🚨 Indonesian Gambling Domain Cluster 🚨 Identified 6,303 domains registered since October 1, 2026, many hosting Indonesian language Toto/Togel, slot, and betting related websites or redirecting to gambling sites. URL: 99totoapp[.]com agustoto[.]vip Top registrars: - Namecheap: 3,025 - Dominet: 1,297 - GoDaddy: 499 - Dynadot: 367 - Spaceship: 180 Some websites also promote APK downloads, raising additional security concerns. Full domain list and IOCs will be shared on GitHub. (link is in comment) #ThreatIntelligence #OSINT #Gambling #Indonesia @500mk500 @skocherhan @ex_raritas @AaronCTI @0x534c @rushibmehta @KirkDerpca @douglasmun

🚨 Suspicious WhatsApp-themed domain cluster! Identified 473 domains registered in October 2026 and there are many more, reportedly hosted on 156.234.58[.]242 and redirecting to Yahoo or Bing search. The domains use sequential naming patterns and technical terms such as API, CDN, DNS, and security. Possible coordinated bulk registration, domain parking, or staged phishing infrastructure. Malicious activity remains unconfirmed. IP: 156.234.58[.]242 IOC: abkweb-whatsapp[.]com action-whatsapp[.]com aggregator-whatsapp[.]com ajz-whatsapp[.]com akb-whatsapp[.]com akc-whatsapp[.]com akd-whatsapp[.]com ake-whatsapp[.]com akf-whatsapp[.]com ala-whatsapp[.]com alb-whatsapp[.]com alc-whatsapp[.]com ald-whatsapp[.]com ale-whatsapp[.]com alf-whatsapp[.]com ama-whatsapp[.]com amb-whatsapp[.]com amc-whatsapp[.]com amd-whatsapp[.]com ame-whatsapp[.]com amf-whatsapp[.]com amg-whatsapp[.]com amh-whatsapp[.]com anc-whatsapp[.]com ane-whatsapp[.]com anf-whatsapp[.]com ang-whatsapp[.]com anh-whatsapp[.]com anj-whatsapp[.]com apibox-whatsapp[.]com apicloud-whatsapp[.]com apidev-whatsapp[.]com apiedge-whatsapp[.]com apihost-whatsapp[.]com apihub-whatsapp[.]com apilab-whatsapp[.]com apinet-whatsapp[.]com apinode-whatsapp[.]com apiops-whatsapp[.]com apisys-whatsapp[.]com appapi-whatsapp[.]com appcloud-whatsapp[.]com appdev-whatsapp[.]com appedge-whatsapp[.]com apphost-whatsapp[.]com appnet-whatsapp[.]com appnode-whatsapp[.]com appops-whatsapp[.]com appsec-whatsapp[.]com async-whatsapp[.]com audio-whatsapp[.]com authnode-whatsapp[.]com await-whatsapp[.]com bkz-whatsapp[.]com bla-whatsapp[.]com blb-whatsapp[.]com blc-whatsapp[.]com bld-whatsapp[.]com ble-whatsapp[.]com blf-whatsapp[.]com blg-whatsapp[.]com blh-whatsapp[.]com bli-whatsapp[.]com bliss-whatsapp[.]com blj-whatsapp[.]com blk-whatsapp[.]com bll-whatsapp[.]com blm-whatsapp[.]com bln-whatsapp[.]com blo-whatsapp[.]com blp-whatsapp[.]com blq-whatsapp[.]com blr-whatsapp[.]com bls-whatsapp[.]com blt-whatsapp[.]com blu-whatsapp[.]com blv-whatsapp[.]com blw-whatsapp[.]com blx-whatsapp[.]com bly-whatsapp[.]com blz-whatsapp[.]com bma-whatsapp[.]com bmb-whatsapp[.]com bmk-whatsapp[.]com bml-whatsapp[.]com bmm-whatsapp[.]com bmn-whatsapp[.]com bmo-whatsapp[.]com bmp-whatsapp[.]com bmq-whatsapp[.]com bmr-whatsapp[.]com bms-whatsapp[.]com bmt-whatsapp[.]com bmu-whatsapp[.]com bmv-whatsapp[.]com bmw-whatsapp[.]com bmx-whatsapp[.]com bmy-whatsapp[.]com bmz-whatsapp[.]com bna-whatsapp[.]com bnb-whatsapp[.]com bnc-whatsapp[.]com bnd-whatsapp[.]com bnf-whatsapp[.]com bng-whatsapp[.]com bnh-whatsapp[.]com bni-whatsapp[.]com bnj-whatsapp[.]com bnk-whatsapp[.]com bnl-whatsapp[.]com bnm-whatsapp[.]com bnn-whatsapp[.]com bno-whatsapp[.]com bnp-whatsapp[.]com bnq-whatsapp[.]com bnr-whatsapp[.]com bns-whatsapp[.]com bnt-whatsapp[.]com bnu-whatsapp[.]com bnv-whatsapp[.]com bnw-whatsapp[.]com bnx-whatsapp[.]com bny-whatsapp[.]com boc-whatsapp[.]com bod-whatsapp[.]com boe-whatsapp[.]com bof-whatsapp[.]com bog-whatsapp[.]com boh-whatsapp[.]com boi-whatsapp[.]com boj-whatsapp[.]com bok-whatsapp[.]com bol-whatsapp[.]com bom-whatsapp[.]com bon-whatsapp[.]com boo-whatsapp[.]com bop-whatsapp[.]com bor-whatsapp[.]com boxapp-whatsapp[.]com boxkit-whatsapp[.]com boxlab-whatsapp[.]com boxrun-whatsapp[.]com boxset-whatsapp[.]com boxuse-whatsapp[.]com branch-whatsapp[.]com bryweb-whatsapp[.]com btu-whatsapp[.]com btv-whatsapp[.]com btw-whatsapp[.]com btx-whatsapp[.]com bty-whatsapp[.]com btz-whatsapp[.]com bua-whatsapp[.]com bub-whatsapp[.]com buc-whatsapp[.]com bue-whatsapp[.]com build-whatsapp[.]com buz-whatsapp[.]com bva-whatsapp[.]com bvb-whatsapp[.]com bvc-whatsapp[.]com bvd-whatsapp[.]com bve-whatsapp[.]com bvf-whatsapp[.]com bvg-whatsapp[.]com bvi-whatsapp[.]com bvj-whatsapp[.]com bvk-whatsapp[.]com bwf-whatsapp[.]com bwg-whatsapp[.]com bwh-whatsapp[.]com bwi-whatsapp[.]com bwj-whatsapp[.]com bwk-whatsapp[.]com bwl-whatsapp[.]com bwm-whatsapp[.]com bwn-whatsapp[.]com bwo-whatsapp[.]com bwp-whatsapp[.]com bwq-whatsapp[.]com bxl-whatsapp[.]com bxm-whatsapp[.]com bxn-whatsapp[.]com bxo-whatsapp[.]com bxp-whatsapp[.]com cachesrv-whatsapp[.]com callback-whatsapp[.]com cdncloud-whatsapp[.]com cdnedge-whatsapp[.]com charm-whatsapp[.]com chathub-whatsapp[.]com clientapi-whatsapp[.]com clientcdn-whatsapp[.]com cloudapi-whatsapp[.]com cloudcdn-whatsapp[.]com clouddns-whatsapp[.]com cloudsec-whatsapp[.]com codehub-whatsapp[.]com column-whatsapp[.]com command-whatsapp[.]com commit-whatsapp[.]com cookieapi-whatsapp[.]com cookiecdn-whatsapp[.]com cookienode-whatsapp[.]com coral-whatsapp[.]com cors-whatsapp[.]com csrf-whatsapp[.]com cwjweb-whatsapp[.]com cycle-whatsapp[.]com dbcache-whatsapp[.]com decode-whatsapp[.]com devapi-whatsapp[.]com devcloud-whatsapp[.]com devedge-whatsapp[.]com devhost-whatsapp[.]com devnet-whatsapp[.]com devnode-whatsapp[.]com devpro-whatsapp[.]com devsec-whatsapp[.]com devsys-whatsapp[.]com dhcpnode-whatsapp[.]com discovery-whatsapp[.]com dmpweb-whatsapp[.]com dnscloud-whatsapp[.]com dnsedge-whatsapp[.]com dnshost-whatsapp[.]com dnsnode-whatsapp[.]com drift-whatsapp[.]com edgedns-whatsapp[.]com edgenode-whatsapp[.]com egrweb-whatsapp[.]com encode-whatsapp[.]com fhnweb-whatsapp[.]com flame-whatsapp[.]com format-whatsapp[.]com future-whatsapp[.]com giant-whatsapp[.]com gitnode-whatsapp[.]com gzlweb-whatsapp[.]com happy-whatsapp[.]com hostapi-whatsapp[.]com hostcdn-whatsapp[.]com hostly-whatsapp[.]com httpcdn-whatsapp[.]com httpsrv-whatsapp[.]com hubbox-whatsapp[.]com hubkit-whatsapp[.]com hublab-whatsapp[.]com hubpro-whatsapp[.]com hubrun-whatsapp[.]com hubset-whatsapp[.]com ids-whatsapp[.]com input-whatsapp[.]com ips-whatsapp[.]com ivory-whatsapp[.]com joker-whatsapp[.]com jqsweb-whatsapp[.]com kdyweb-whatsapp[.]com kitapi-whatsapp[.]com kitapp-whatsapp[.]com kitdev-whatsapp[.]com kitrun-whatsapp[.]com kitset-whatsapp[.]com kitweb-whatsapp[.]com knife-whatsapp[.]com labapi-whatsapp[.]com labbox-whatsapp[.]com labkit-whatsapp[.]com labrun-whatsapp[.]com labuse-whatsapp[.]com labweb-whatsapp[.]com latest-whatsapp[.]com layer-whatsapp[.]com layout-whatsapp[.]com legacy-whatsapp[.]com lemon-whatsapp[.]com level-whatsapp[.]com lexer-whatsapp[.]com limit-whatsapp[.]com linkhub-whatsapp[.]com lookup-whatsapp[.]com lpfweb-whatsapp[.]com macro-whatsapp[.]com magic-whatsapp[.]com mapper-whatsapp[.]com match-whatsapp[.]com merge-whatsapp[.]com mkwweb-whatsapp[.]com model-whatsapp[.]com mono-whatsapp[.]com nat-whatsapp[.]com netbox-whatsapp[.]com netlab-whatsapp[.]com netpro-whatsapp[.]com netset-whatsapp[.]com netsys-whatsapp[.]com netuse-whatsapp[.]com next-whatsapp[.]com nfdweb-whatsapp[.]com noble-whatsapp[.]com nodeapi-whatsapp[.]com nodecdn-whatsapp[.]com nodedns-whatsapp[.]com nodeedge-whatsapp[.]com nosqldb-whatsapp[.]com nqxweb-whatsapp[.]com okx-whatsaop[.]com opsbox-whatsapp[.]com opshub-whatsapp[.]com opskit-whatsapp[.]com opsnet-whatsapp[.]com opsnode-whatsapp[.]com opspro-whatsapp[.]com opssec-whatsapp[.]com opsset-whatsapp[.]com orchestrator-whatsapp[.]com output-whatsapp[.]com owyweb-whatsapp[.]com parse-whatsapp[.]com patch-whatsapp[.]com phase-whatsapp[.]com pipe-whatsapp[.]com podnode-whatsapp[.]com pool-whatsapp[.]com prev-whatsapp[.]com pride-whatsapp[.]com prohub-whatsapp[.]com prokit-whatsapp[.]com prolab-whatsapp[.]com promise-whatsapp[.]com prompt-whatsapp[.]com proset-whatsapp[.]com prouse-whatsapp[.]com proxyapi-whatsapp[.]com proxysrv-whatsapp[.]com pvnweb-whatsapp[.]com qtmweb-whatsapp[.]com quota-whatsapp[.]com range-whatsapp[.]com readme-whatsapp[.]com regex-whatsapp[.]com reload-whatsapp[.]com repoapi-whatsapp[.]com repocdn-whatsapp[.]com reponode-whatsapp[.]com resolver-whatsapp[.]com restart-whatsapp[.]com river-whatsapp[.]com rjxweb-whatsapp[.]com rule-whatsapp[.]com runapi-whatsapp[.]com runapp-whatsapp[.]com rundev-whatsapp[.]com runops-whatsapp[.]com runsec-whatsapp[.]com runuse-whatsapp[.]com sample-whatsapp[.]com schema-whatsapp[.]com scope-whatsapp[.]com sechub-whatsapp[.]com seclab-whatsapp[.]com secnet-whatsapp[.]com secnode-whatsapp[.]com secops-whatsapp[.]com secpro-whatsapp[.]com secsys-whatsapp[.]com serverapi-whatsapp[.]com servercdn-whatsapp[.]com sessionapi-whatsapp[.]com sessioncdn-whatsapp[.]com sessionnode-whatsapp[.]com setapp-whatsapp[.]com setdev-whatsapp[.]com setkit-whatsapp[.]com setrun-whatsapp[.]com setuse-whatsapp[.]com setweb-whatsapp[.]com signal-whatsapp[.]com smbweb-whatsapp[.]com softhub-whatsapp[.]com sort-whatsapp[.]com splitter-whatsapp[.]com sslcert-whatsapp[.]com ssltls-whatsapp[.]com stable-whatsapp[.]com stack-whatsapp[.]com state-whatsapp[.]com string-whatsapp[.]com style-whatsapp[.]com subject-whatsapp[.]com syncly-whatsapp[.]com syntax-whatsapp[.]com sysbox-whatsapp[.]com syshub-whatsapp[.]com syskit-whatsapp[.]com syslab-whatsapp[.]com sysnet-whatsapp[.]com syspro-whatsapp[.]com table-whatsapp[.]com tcp-whatsapp[.]com tcpip-whatsapp[.]com techly-whatsapp[.]com tgvweb-whatsapp[.]com theme-whatsapp[.]com tier-whatsapp[.]com tokenapi-whatsapp[.]com tokencdn-whatsapp[.]com tokennode-whatsapp[.]com topic-whatsapp[.]com tutorial-whatsapp[.]com uazweb-whatsapp[.]com udp-whatsapp[.]com udpip-whatsapp[.]com useapi-whatsapp[.]com useapp-whatsapp[.]com usedev-whatsapp[.]com userun-whatsapp[.]com usesec-whatsapp[.]com useweb-whatsapp[.]com vcnweb-whatsapp[.]com version-whatsapp[.]com vivid-whatsapp[.]com vpc-whatsapp[.]com vpcnode-whatsapp[.]com wafnode-whatsapp[.]com webact-whatsapp[.]com webadd-whatsapp[.]com webage-whatsapp[.]com webair-whatsapp[.]com webalert-whatsapp[.]com webant-whatsapp[.]com webape-whatsapp[.]com webarc-whatsapp[.]com webarm-whatsapp[.]com webart-whatsapp[.]com webash-whatsapp[.]com webask-whatsapp[.]com webbad-whatsapp[.]com webbag-whatsapp[.]com webban-whatsapp[.]com webbar-whatsapp[.]com webbat-whatsapp[.]com webcap-whatsapp[.]com webcar-whatsapp[.]com webcat-whatsapp[.]com webcompiler-whatsapp[.]com webdev-whatsapp[.]com webedge-whatsapp[.]com webengine-whatsapp[.]com webevent-whatsapp[.]com webframework-whatsapp[.]com webkotlin-whatsapp[.]com webmetric-whatsapp[.]com webops-whatsapp[.]com webparser-whatsapp[.]com webqueue-whatsapp[.]com webruntime-whatsapp[.]com webrust-whatsapp[.]com webscala-whatsapp[.]com webschema-whatsapp[.]com websec-whatsapp[.]com webstream-whatsapp[.]com webswift-whatsapp[.]com websys-whatsapp[.]com webtrace-whatsapp[.]com wheat-whatsapp[.]com xerox-whatsapp[.]com xrtweb-whatsapp[.]com xss-whatsapp[.]com ykbweb-whatsapp[.]com young-whatsapp[.]com zdhweb-whatsapp[.]com zebra-whatsapp[.]com #ThreatIntel #WhatsApp #Phishing #CyberSecurity @WhatsApp @500mk500 @skocherhan @KirkDerpca @0x534c

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases. CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers. Read - thehackernews.com/2026/10/cr…

Five domains copied Microsoft's Defender update page in Webamon captures (29 Sep–21 Oct). The lure pointed to Azure Blob downloads and silent installation. Using familiar branding and legit MS hosting, makes it look more legitimate, when it's not. intel.webamon.com/search?luc…