THE HUNTER’S LEDGER
IOC Feed
ShinyHunters Data Leak Site (91.215.85.22)
27 indicators extracted from this investigation's feed. Filter by type, then copy or download exactly what is on screen.
27 shown
TypeIndicator
ipv4 91.215.43.200
ipv4 91.215.85.22
domain europa.zip
domain ns1.ddos-guard.net
domain ns2.ddos-guard.net
domain pro-spero.ru
domain shinyhunte.rs
domain shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion
domain shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion
domain toolatedhs5dtr2pv6h5kdraneak5gs3sxrecqhoufc5e45edior7mqd.onion
url http://91.215.85.22/pay_or_leak/
url http://91.215.85.22/pay_or_leak/INFORMATION.txt
url http://web.archive.org/web/20260322033123/https://shinyhunte.rs/
url http://web.archive.org/web/20260322033217/https://shinyhunte.rs/newpgp
url https://pastebin.com/raw/sb7aB9eU
url https://shinyhunte.rs/
url https://shinyhunte.rs/newpgp
url https://t.me/wokawoka10
url https://web.archive.org/web/20251012013224/https://shinyhunte.rs/
url https://web.archive.org/web/20251217231546/https://shinyhunte.rs/
sha1 1fc4d0b1dee914bb05b57fabf1f1b98a51c989b3
sha1 828537c15f43f135a8317153cd16a1660cc7ce51
sha1 e80c1308a09ec1adc418c3f02578988f69bca3fc
sha1 f4953411767de71bedcdabcb76f4e26f7a20978a
email abuse@ddos-guard.net
email abuse@pro-spero.ru
filename information.txt

108 further values in this feed are not shown above, because they are not an indicator type that can be recognised reliably by shape: command names, fingerprints and behavioural patterns among them. They are all in the raw JSON, which remains the complete record.

Licensed CC BY 4.0, free to use commercially with attribution to The Hunters Ledger.