BaselineWatch
Desk

65.20.105.177 Candiru infrastructure address (address, primary source)

AdFection / Candiru indicators (Zero Breach) 2026-10-18 (7253316) against 2026-10-18 (e36dc96)
All changes in this version
unchanged Candiru infrastructure address

Title

Candiru infrastructure address (address, primary source)

Control

Tier: candiru-ip (Candiru infrastructure address). Confidence: primary. Source: recordedfuture-2025-08.

Discussion

Source: The Citizen Lab, "Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware", published 2026-10-15.
https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/