credential_stealer
IPs hosting credential-stealer malware (infostealers) like RedLine, Vidar, Lumma, ACRStealer, or Raccoon. These steal passwords, cookies, and crypto wallets from infected machines.
Related signatures
Check an IP for this and every other signature.
FFraud returns the exact threat tags on any IP, free and without a key. The confirmed addresses, with their worst category, are also on GitHub as open data.