>samit_hota
Back to IOCs
50 indicators

RevStealer — Indicators of Compromise

Samit Hota·
#ioc#revstealer

Overview

Indicators of compromise associated with RevStealer. 50 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domainstage6.stillpath8.oneJuly 27, 2026100%
domainstatus7.skypress.clickJuly 27, 2026100%
domainstore.framecove.lolJuly 27, 2026100%
domainsync.northform.clickJuly 27, 2026100%
domaintask.valley-north.lolJuly 27, 2026100%
domaintest.kilnteam35.clickJuly 27, 2026100%
domaintrace.lunartempo.xyzJuly 27, 2026100%
domaintrace.novagarden.lolJuly 27, 2026100%
domainvault8.brighttempo.lolJuly 27, 2026100%
domainwatch.common-store.lolJuly 27, 2026100%
domainwatch.harvestbazaar.clickJuly 27, 2026100%
domainwatch7.deepclimate.clickJuly 27, 2026100%
domainpush.pixelplaza.clickJuly 27, 2026100%
domainpush.shorecourt.lolJuly 27, 2026100%
domainqueue.cdnbazaar.xyzJuly 27, 2026100%
domainregistry.amberscreen.lolJuly 27, 2026100%
domainreport.clearlens.clickJuly 27, 2026100%
domainroute4.modellab84.xyzJuly 27, 2026100%
domainscan.civicblaze.clickJuly 27, 2026100%
domainsetup.explore-store.xyzJuly 27, 2026100%
domainstage.mycourt33.clickJuly 27, 2026100%
domainmeta1.net-weather.lolJuly 27, 2026100%
domainmetric.mentorcreek25.lolJuly 27, 2026100%
domainmonitor5.roast-core85.clickJuly 27, 2026100%
domainnode.gentleroom.lolJuly 27, 2026100%
domainnode3.meadowrhythm.xyzJuly 27, 2026100%
domainops.canvascampus.xyzJuly 27, 2026100%
domainping.node-stock.lolJuly 27, 2026100%
domainping0.aqua-grid77.xyzJuly 27, 2026100%
domainportal.framerun.clickJuly 27, 2026100%
domainprod.commonsource14.clickJuly 27, 2026100%
domainproxy.everatlas.lolJuly 27, 2026100%
domainpull.alpha-zone.clickJuly 27, 2026100%
domainpull7.motiondepot.oneJuly 27, 2026100%
domainevent.wanderwest.oneJuly 27, 2026100%
domainfiles4.jade-hub.clickJuly 27, 2026100%
domaingate.steadygroup.xyzJuly 27, 2026100%
domaingate.voyagezone.clickJuly 27, 2026100%
domainguard.warm-climate.clickJuly 27, 2026100%
domainhealth0.pinetile86.clickJuly 27, 2026100%
domainlab.loomweather.oneJuly 27, 2026100%
domainlog.neonhq.xyzJuly 27, 2026100%
domainlookup.hazelshelf.xyzJuly 27, 2026100%
domainmain.commontexture76.oneJuly 27, 2026100%
domainmeta.bench-grid.oneJuly 27, 2026100%
domainarchive.mintfair.clickJuly 27, 2026100%
domainassets5.frameai35.xyzJuly 27, 2026100%
domainboard8.creekpath.lolJuly 27, 2026100%
domainbridge.garden-pixel.oneJuly 27, 2026100%
domaincache.coastpilot.lolJuly 27, 2026100%

Related content

IOCs

5.t Downloader — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

IOCs

AdaptixC2 — Indicators of Compromise

IOCs

AdWind — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call