ZeroHour

Indicators of compromise

0 indicators auto-extracted from article text · hashes, IPs, domains, URLs · verify before use

No indicators match. Bare IPs and domains are only extracted from attack-related articles; hashes and defanged indicators from every article.

Extraction is regex-based (SHA-256/SHA-1/MD5, public IPv4, defanged hxxp/[.] indicators, and bare domains/emails only from malware, actor, exploit, phishing, ransomware and breach articles with a nearby indicator context word). Treat confidence as low until you verify against the source article.