UNC6691

Overview 8,599 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 4 reports

Ranked by how many of this actor's indicators each report brought in.

• 7,299validin.com/blog/aye_coruna_ios_exploit_kit_c2
• 1,182cloud.google.com/blog/topics/threat-intelligence/coruna-…
• 1,182iverify.io/blog/coruna-inside-the-nation-state-gra…
• 122safedep.io/art-template-npm-supply-chain-compromise

Timeline 8,599 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

Showing the 300 most recent of 8,599. Complete: UNC6691.json.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2026-08-06 7,221 domain, 5 ipv4this year

   validin.com/blog/aye_coruna_ios_exploit_kit_c2

   domain	00da.6hv86gxz.com
   domain	0159.axmatx.com
   domain	017.xdjuvoau.xyz
   domain	01b26ddfd3.top
   domain	022.furzocpc.cc
   domain	0221f016.6hv86gxz.com
   domain	025f.cjmekxr.xyz
   domain	027.st
   domain	0278.fxexebji.org
   domain	028mfsb.com
   domain	035b1c.xlgxyf.net
   domain	03f6aef6fd.top
   domain	0462b0.xdkfog.net
   domain	047.auyciwmw.com
   domain	04f327f914.top
   domain	054.esqifis.com
   domain	063.heppmpuz.org
   domain	0661.vdrywdi.xyz
   domain	069.st
   domain	06bf0.crfbbarx.com
   domain	06ee.vcfwvb.com
   domain	070052.sod777.com
   domain	07c0.ybbshhn.com
   domain	07f61.ncjqeyid.com
   domain	0847.zcfniju.cc
   domain	09688.xkbaamgc.cc
   domain	0992.app
   domain	099339.6hv86gxz.com
   domain	099ae.qcechaw.cc
   domain	0am15.com
   domain	0b2b.dljuhnea.com
   domain	0b461.xdjuvoau.xyz
   domain	0b6c80a39c.top
   domain	0b87ed69.xlgxyf.net
   domain	0b88.mqztymvz.cc
   domain	0ba7.vqlbhbmo.xyz
   domain	0bb7.dmjdwvpy.com
   domain	0ce1.dljuhnea.com
   domain	0cncoxi.com
   domain	0d0.ozhignq.com
   domain	0dc48.xjhvsgg.xyz
   domain	0de.ofvtspr.xyz
   domain	0e2a2.xlgxyf.net
   domain	0e8.kqyxwyb.xyz
   domain	0opus.com
   domain	0r97p.com
   domain	1-d3i.pages.dev
   domain	1.votetexas.xyz
   domain	100000000115d9.sod777.com
   domain	100000000199e6.sod777.com
   domain	10000000024523.sod777.com
   domain	10000000026e1e.sod777.com
   domain	1000000002e39f.sod777.com
   domain	10000000037c14.sod777.com
   domain	1000000004ae15.sod777.com
   domain	1000000004b0cc.sod777.com
   domain	10000000051e09.sod777.com
   domain	1000000006107.sod777.com
   domain	10000000061892.sod777.com
   domain	10000000080bd7.sod777.com
   domain	10000000086ecf.sod777.com
   domain	1002906492a419.sod777.com
   domain	100dd.sod777.com
   domain	100de.xtikbxvv.top
   domain	101.vqlbhbmo.xyz
   domain	101477049.252fe.sod777.com
   domain	1017c.sod777.com
   domain	1026f.sod777.com
   domain	102a1.sod777.com
   domain	10323db.sod777.com
   domain	104298016.25fd.sod777.com
   domain	1052.sod777.com
   domain	10746618620e82.sod777.com
   domain	109da.sod777.com
   domain	10b4d.sod777.com
   domain	10e07.sod777.com
   domain	10e24.sod777.com
   domain	10ff3.xjhvsgg.xyz
   domain	110f.sod777.com
   domain	1124e.ryvjugi.com
   domain	112b.kjtwhgda.tips
   domain	113484032.3ea61.sod777.com
   domain	115228239.377125217b713.sod777.com
   domain	1163.sod777.com
   domain	117c1.sod777.com
   domain	11aa.com.br
   domain	11d28.sod777.com
   domain	120.st
   domain	120198456.43605.sod777.com
   domain	12056.sod777.com
   domain	1208190011dc9.sod777.com
   domain	120d.com
   domain	1215577532ead6.sod777.com
   domain	1216.st
   domain	1216.tw
   domain	121756948c517.sod777.com
   domain	122562cf0.sod777.com
   domain	1252e.sod777.com
   domain	126310256d6f0.sod777.com
   domain	127b4.sod777.com
   domain	12819992.7ac1c.sod777.com
   domain	1299432afc0.sod777.com
   domain	12a24.sod777.com
   domain	12b01.sod777.com
   domain	12be0.sod777.com
   domain	12cc.thqirrxu.com
   domain	13-212-103-78.cprapid.com
   domain	13015572941048.sod777.com
   domain	1303.sod777.com
   domain	13102.sod777.com
   domain	131127212.52de.sod777.com
   domain	13278159926f4.sod777.com
   domain	132f03.vnriifeq.com
   domain	1331624ba57.sod777.com
   domain	133530975.7baa8.sod777.com
   domain	1342365375b85.sod777.com
   domain	134ec.sod777.com
   domain	13601.sod777.com
   domain	1363c.sod777.com
   domain	1364f.sod777.com
   domain	1365.sod777.com
   domain	137b9.sod777.com
   domain	13ef1e.sod777.com
   domain	13f31.sod777.com
   domain	140516091.7ac1c.sod777.com
   domain	14065081ed4e.sod777.com
   domain	140a6.sod777.com
   domain	140fd.sod777.com
   domain	141.st
   domain	141069989.4adec.sod777.com
   domain	141415295.15f4f.sod777.com
   domain	14186f.sod777.com
   domain	141c4.sod777.com
   domain	141e0.sod777.com
   domain	144d2.sod777.com
   domain	146809242.31498.sod777.com
   domain	147925.com
   domain	147949.com
   domain	149061812.7c1c4.sod777.com
   domain	14a.crfbbarx.com
   domain	14af3.oqpxppl.cc
   domain	14bea.sod777.com
   domain	14ecc.sod777.com
   domain	151.lfhbtowr.xyz
   domain	15157683649978.sod777.com
   domain	1523fa9.sod777.com
   domain	1536247046e1d.sod777.com
   domain	15396.sod777.com
   domain	155a9.sod777.com
   domain	156983194.7c2cb.sod777.com
   domain	158.ozhignq.com
   domain	158a9.ryvjugi.com
   domain	15f4f.sod777.com
   domain	160972513038f.sod777.com
   domain	161.st
   domain	162099178f4a.sod777.com
   domain	1622.heppmpuz.org
   domain	163684116.26ab8.sod777.com
   domain	163a4ad3eb.top
   domain	165466514.emgqpi.7b7eb.sod777.com
   domain	166bet.uk.com
   domain	168.yktajeyp.com
   domain	169e.kbjpauvh.xyz
   domain	169e.ofvtspr.xyz
   domain	16e.adbagtak.cc
   domain	170185920.1364f.sod777.com
   domain	1724.sod777.com
   domain	172455313.4a6e5.sod777.com
   domain	172652451.7c458.sod777.com
   domain	17679247441742.sod777.com
   domain	178326603d84d.sod777.com
   domain	1799597.sod777.com
   domain	17cx1.com
   domain	17cx1.huiyuanswift.com
   domain	17cx10.huiyuanswift.com
   domain	17cx11.com
   domain	17cx2.com
   domain	17cx2.huiyuangoedge.com
   domain	17cx2.huiyuanswift.com
   domain	17cx3.com
   domain	17cx3.huiyuanswift.com
   domain	17cx4.com
   domain	17cx4.huiyuangoedge.com
   domain	17cx4.huiyuanswift.com
   domain	17cx5.com
   domain	17cx5.huiyuangoedge.com
   domain	17cx5.huiyuanswift.com
   domain	17cx6.com
   domain	17cx6.huiyuanswift.com
   domain	17cx7.com
   domain	17cx7.huiyuangoedge.com
   domain	17cx7.huiyuanswift.com
   domain	17cx8.com
   domain	17cx8.huiyuangoedge.com
   domain	17cx8.huiyuanswift.com
   domain	17cx9.com
   domain	17cx9.huiyuanswift.com
   domain	17cxa.com
   domain	17f2c2i2npjklhl.xyz
   domain	17fd.kbjpauvh.xyz
   domain	180.auyciwmw.com
   domain	18004575.3634429527b168.sod777.com
   domain	184.sxtolloh.xyz
   domain	184623420.991434737a840.sod777.com
   domain	186342762.586a.sod777.com
   domain	186c0a0f.auyciwmw.com
   domain	18b7c.sod777.com
   domain	18bbe.sod777.com
   domain	18c18.earscjiy.cc
   domain	18c54.dljuhnea.com
   domain	18f85.sod777.com
   domain	1901.sod777.com
   domain	1904e.sod777.com
   domain	19076.sod777.com
   domain	191245251.nr.7b3fd.sod777.com
   domain	1915d.sod777.com
   domain	191db.ajerdsg.top
   domain	19253385f86f.sod777.com
   domain	193ca.sod777.com
   domain	19485.sod777.com
   domain	194ef.sod777.com
   domain	19506861854ec.sod777.com
   domain	196567873.7b3b3.sod777.com
   domain	19687.sod777.com
   domain	198317818.7c1c4.sod777.com
   domain	1989921597d5.sod777.com
   domain	198c7.sod777.com
   domain	199740a6d.sod777.com
   domain	1998b.sod777.com
   domain	19b09.sod777.com
   domain	19c0e.sod777.com
   domain	19d94.sod777.com
   domain	19e0a.sod777.com
   domain	19f64.sod777.com
   domain	1a0bc.sod777.com
   domain	1a0ed.sod777.com
   domain	1a4.kjtwhgda.tips
   domain	1a4a2.sod777.com
   domain	1a5569f242.top
   domain	1a5b.sod777.com
   domain	1a606.sod777.com
   domain	1a626.sod777.com
   domain	1a643.sod777.com
   domain	1a67f.sod777.com
   domain	1a811.sod777.com
   domain	1a816.mpmhskx.cc
   domain	1aa24.sod777.com
   domain	1afa.sod777.com
   domain	1b4d.jkhvfia.com
   domain	1b6v3.com
   domain	1b99.sod777.com
   domain	1c4m9.com
   domain	1c51.sod777.com
   domain	1c5w8.com
   domain	1c68f.vxhbijn.com
   domain	1cc01.ryvjugi.com
   domain	1d42ghd36as85azx54.com
   domain	1d52.sod777.com
   domain	1d5e.sod777.com
   domain	1d82.de83c8f74.net
   domain	1d9085.xlgxyf.net
   domain	1d962.sod777.com
   domain	1dad1.ryvjugi.com
   domain	1ddc.sod777.com
   domain	1df99.sod777.com
   domain	1e0b1.sod777.com
   domain	1e1ce.sod777.com
   domain	1e39f.sod777.com
   domain	1e3bd.sod777.com
   domain	1ebb1.lfhbtowr.xyz
   domain	1ec5.sod777.com
   domain	1ed4b.sod777.com
   domain	1ed54.sod777.com
   domain	1f0.yojvhod.com
   domain	1f00.sod777.com
   domain	1f34e.sod777.com
   domain	1f63.sod777.com
   domain	1f84f.sod777.com
   domain	1f8f.sod777.com
   domain	1f8fe.sod777.com
   domain	1f9d2.sod777.com
   domain	1g6h3.com
   domain	1h56d8.com
   domain	1k5w8.com
   domain	1lpaavvmir4v9dzsb4jte0o.icu
   domain	1m7k4.com
   domain	1m7t9.com
   domain	1n.chuixisix.com
   domain	1p7c9.com
   domain	1r9v4.com
   domain	1vfw4raxub65c3d.xyz
   domain	1xgz3.com
   domain	1z6k4.com
   domain	2-fbadsgood.toptoptop1.xyz
   domain	20018bb38.sod777.com
   domain	2004702492eb07.sod777.com
   domain	200b6.sod777.com
   domain	2013.sod777.com
   domain	201c.onbveo.com
   domain	201dd.mqztymvz.cc

   copy batch · 6,926 more in this batch, in the JSON

Further reading 4

• iverify.io/blog/coruna-inside-the-nation-state-gra…
• validin.com/blog/aye_coruna_ios_exploit_kit_c2
• safedep.io/art-template-npm-supply-chain-compromise
• cloud.google.com/blog/topics/threat-intelligence/coruna-…