popcorntimeupd[.]xyzDomain
Named in 1 report · first reported by The Hacker News · last reported
Last reported today
What the reports say
1 report, newest first · the exact sentence from each-
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet“Public registration records for one of them, popcorntimeupd[.]xyz, now point to Shadowserver's sinkhole servers, with a transfer dated March 20, 2026.”
Indicators reported together
named in the same reports- hack[.]luin 1 report
- 6.2.1[.]18in 1 report
- 6.2.1[.]17in 1 report
- 3.5.0[.]173in 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-30612
Thanks — we review every report.