844 lines
19 KiB
Plaintext
844 lines
19 KiB
Plaintext
# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
|
|
# See the file 'LICENSE' for copying permission
|
|
|
|
# Aliases: ta582, TAG-124
|
|
|
|
# Reference: https://x.com/malware_traffic/status/1884476331821326816
|
|
# Reference: https://www.malware-traffic-analysis.net/2025/01/28/index.html
|
|
# Reference: https://www.virustotal.com/gui/ip-address/86.107.101.93/relations
|
|
|
|
adlndb2k9too7vt.top
|
|
cyz3a2ykhj59kx8.top
|
|
f5sx3kqkz03db00.top
|
|
fmnljjmaeihehge.top
|
|
gq6dzbnl8rkxp1f.top
|
|
happychristmas.click
|
|
toavt7i2d6fgwei.top
|
|
yfh5jg724eu50iq.top
|
|
z0vlf733d4bpek4.top
|
|
|
|
# Reference: https://www.virustotal.com/gui/file/2c38cfeb19129f8d8169b4b582bb1ed8b446c738a684aa2fd987b2ec996787e5/detection
|
|
|
|
ofjubuznb3ugz.top
|
|
|
|
# Reference: https://malpedia.caad.fkie.fraunhofer.de/details/js.mints_loader
|
|
# Reference: https://app.validin.com/detail?find=d19f9a166178a3865b959cc108068990&type=hash#tab=host_pairs (# 2025-01-18)
|
|
|
|
adkfnnbmakcgael.top
|
|
afglgehgjgjmgdh.top
|
|
afnfdijahijefmh.top
|
|
afsfff44by.top
|
|
anldfaggmdbglen.top
|
|
bidjdlegcnincee.top
|
|
blclmjamegjaffd.top
|
|
bmadfjbhnijhckh.top
|
|
bmbuz83hhhhg73.top
|
|
canjjclmlnicbga.top
|
|
ccibchdgfjbhhfk.top
|
|
ckahaebgighbngc.top
|
|
dckhgjimeghemhl.top
|
|
diebinjmajbkhhg.top
|
|
ecmkkjcfdbjfbkf.top
|
|
ehjdilgfljdimkg.top
|
|
eizcic3.top
|
|
ekbnfghmhcaldid.top
|
|
eldcjfbfglbngll.top
|
|
feheecfmkmhfiij.top
|
|
ffjihcnfkhihlmd.top
|
|
fnbagmmgneabdmi.top
|
|
fnnkcnemajnnaja.top
|
|
fubuzbvy23nnn.top
|
|
gbkiafbmhbmbkkl.top
|
|
gdsubbuz3hbyy.top
|
|
ghecbjcmdfghfkg.top
|
|
ghggfjkgdahjina.top
|
|
giahbuz3bbuz2.top
|
|
hbmmdfjggkadnnf.top
|
|
hdebljjjfidlnec.top
|
|
hhgiflifcbmdjmh.top
|
|
hjbamcnnkmfjbld.top
|
|
idhglmmnaimdhlj.top
|
|
ikebnbckbjlmfjf.top
|
|
immmjjkndeekmma.top
|
|
jejmbadfmeenlnk.top
|
|
jgeeifjnhbledmg.top
|
|
kmaealcfcalhcac.top
|
|
kmchelkmbjmifdk.top
|
|
lalclenfjhkinbn.top
|
|
lbnfbehmicmkceh.top
|
|
lggknhaffleahbh.top
|
|
mdinjlkfcajkjck.top
|
|
media-amz.top
|
|
mgubu48bnxi43.top
|
|
midhkalfmddcece.top
|
|
mjflaafmmmeehfm.top
|
|
nbuz73ubhzu33zz3.top
|
|
ndkdmkenbjlmmfe.top
|
|
nhjndjemlimakmk.top
|
|
nlafhhiffkceadc.top
|
|
nlcjlhcnffdgdgk.top
|
|
nueyfrtvrv.top
|
|
nzy3tvbb72g3.top
|
|
pitibnzi4un.top
|
|
ssl-imgamz.top
|
|
veadytgffttw.top
|
|
|
|
# Reference: https://www.virustotal.com/gui/file/1f44cd566148bd904dcdb632c11cf3917f694c98ce0e69560932f49cc8fe4107/detection
|
|
|
|
kibcfmgnahkgand.top
|
|
tubuz3ubhz222.top
|
|
|
|
# Reference: https://www.virustotal.com/gui/ip-address/192.153.57.125/relations
|
|
# Reference: https://www.virustotal.com/gui/file/59015eae646b3c2ff97d775eb40641ad6f3992ec7dfb2f12121047a7852ccc3c/detection
|
|
# Reference: https://www.virustotal.com/gui/file/557d6fc2139ca5ad6e0cf5de5f61659c3247c62d68be39c653c7e420f13ddd96/detection
|
|
|
|
bnaye4ybvgzueb.top
|
|
cmacnnkfbhlcncm.top
|
|
gsosnub8zg3.top
|
|
hkmlchlbjibdafd.top
|
|
jlijkijkkklbkjn.top
|
|
ngub8zb38ib.top
|
|
pbbizibizi3v.top
|
|
phsujibusy4ubad.top
|
|
shd9inbjz4.top
|
|
soeubit.com
|
|
/6kw81vnr3shtr.php
|
|
/fa5y7jvmghhtr.php
|
|
|
|
# Reference: https://app.validin.com/detail?find=d19f9a166178a3865b959cc108068990&type=hash&ref_id=2c26c089669#tab=host_pairs (# 2024-12-17)
|
|
|
|
adanddcdjbdefml.top
|
|
aghbkdbnibkajhb.top
|
|
amgfcnadnlkmlmd.top
|
|
asgibiai3vz2rbv.top
|
|
azurearc-cdn.top
|
|
beefmeme.com
|
|
bfhdkgmmhdbikgj.top
|
|
bginkhdndigadkj.top
|
|
bifnhkmnbijbfim.top
|
|
bizuegy6z.top
|
|
bkkeiekjfcdaaen.top
|
|
bmuegbvuz7u3b.top
|
|
bnayvhgb8.top
|
|
bnbuzu49ibz4.top
|
|
bnzuyeubizh3f.top
|
|
cljhkcjfimibhci.top
|
|
dfgiubuxur.top
|
|
dhmfekmakacdadc.top
|
|
emildeeeabebggm.top
|
|
esbux83hbxze.top
|
|
ewrulfirkyskrsw.top
|
|
fazubuzbw3u2.top
|
|
fdsgujhnby.top
|
|
fgghahagiiekjhg.top
|
|
fhilnadeaigligm.top
|
|
fpziviec.top
|
|
futnbuzj3nh.top
|
|
gajaechkfhfghal.top
|
|
gesuhbuzu4.top
|
|
get-iwrreq.top
|
|
gfnemilkeaaaeek.top
|
|
ghybu8as.top
|
|
gibjzkp3jboz3.top
|
|
gkn33hxueub.top
|
|
gneklekkikhikec.top
|
|
gnmdjjckbgddaie.top
|
|
gonjyeybhz3e3.top
|
|
gpoxcbiuevbz.top
|
|
gsbnzi39gjnz33.top
|
|
gubyzywey6b.top
|
|
hikcjbiklgabbfh.top
|
|
hkdecchgkhgleal.top
|
|
hkinuxb3bz.top
|
|
howmanychairs.com
|
|
iblaehgffmflamn.top
|
|
ighnjnueuelll.top
|
|
iiuthbuzev.top
|
|
ikjfjkkagafbdke.top
|
|
ittubmm4rirub.top
|
|
iviuziu38z2438b.top
|
|
jhkenjhehiadfbn.top
|
|
jhubzgv3.top
|
|
jjdgdeffjimfgne.top
|
|
jmfprcpenkqskxk.top
|
|
kcehmenjdibnmni.top
|
|
kdemjgebjimkanl.top
|
|
kffgkjmjangegkg.top
|
|
khkeclbkacfnnih.top
|
|
ksdgbx9oenj.top
|
|
lcdjbjgdkibifam.top
|
|
lgbibzuehbz.top
|
|
lqalmpkebwpvdaf.top
|
|
mbdbgkfdciedjla.top
|
|
mbuz73hb7z3.top
|
|
mdeakcklcgamcni.top
|
|
mgkwjihehqcknbp.top
|
|
mguiwyvu8345.top
|
|
miutubzxe.top
|
|
mljginjlfchghan.top
|
|
mnatyvgzy3r.top
|
|
mnudybh4unh.top
|
|
mnvuz3gvy3.top
|
|
mubuzb3vvv.top
|
|
mycommsupdate.top
|
|
nbcjihgecijhmnl.top
|
|
nfuvueibzi4.top
|
|
nubxz4ubhxz9i.top
|
|
nuvye89bjz4.top
|
|
oeiurybuzgeus.top
|
|
ohunhebzhbu3.top
|
|
opribhzuw8bz.top
|
|
owrquzbvzu4b.top
|
|
poeiughybzu222.top
|
|
poubnxu3jubz.top
|
|
prighxzuebb3e.top
|
|
rifiziec.top
|
|
rihgi3ibn3ube.top
|
|
ruhybh74ub.top
|
|
saighbuzu32uvv.top
|
|
saubhziu3ibz.top
|
|
sdgobhjzueg.top
|
|
sdubvlbbuz3vzzz.top
|
|
segibuzh3hbz.top
|
|
sfibhzu3ubhza.top
|
|
shunhxuehbu3.top
|
|
spogibizxuur.top
|
|
stlrg124.top
|
|
tubnzy3uvz.top
|
|
usdhhbuzui3v.top
|
|
vbzyeur5ibhz.top
|
|
web3-authframe.top
|
|
wtwudybqrukmclc.top
|
|
xjhgbsyqxnwblmm.top
|
|
yxrqxlvregipunw.top
|
|
zmeueybyz44.top
|
|
|
|
# Reference: https://www.virustotal.com/gui/collection/60eaccde7d13ee5f19b7ec1cb1ec58e69b825c4755ddc4505458df65a6eb5a04/iocs
|
|
# Reference: https://www.virustotal.com/gui/file/9dc3495a6ba058977a72a45732277524e5fe8975f3180a89b672234536224f34/detection
|
|
# Reference: https://www.virustotal.com/gui/file/ccdf82b45b2ee9173c27981c51958e44dee43131edfbce983b6a5c146479ac33/detection
|
|
# Reference: https://www.virustotal.com/gui/file/c1db76929e4723c2824b66bb062fe608c84e00e4df02ea70aff76661c312f710/detection
|
|
# Reference: https://www.virustotal.com/gui/file/5bf852829ddc1655796ec778f04adb92f685800dbda0380814d39ce022d44443/detection
|
|
# Reference: https://www.virustotal.com/gui/file/1e2f3f3be9eda8c98dbe2fbf903fa9185b9b1612553be334a87985223cd07b02/detection
|
|
|
|
527newagain.top
|
|
bajcgicdiinbegb.top
|
|
cfverclsid.top
|
|
cignjjgmdnbchhc.top
|
|
faybzuy3byz2v.top
|
|
eebchjechginddk.top
|
|
mcajijknegnbbga.top
|
|
robnzuwubz.top
|
|
/4xwkjhmf0thtr.php
|
|
/7l382vdthuhtr.php
|
|
/72lbnz85t4htr.php
|
|
/8juvid7zmwhtr.php
|
|
/c5fejq38wxhtr.php
|
|
/iduqkxn7s3htr.php
|
|
/jnpdcoxuv8htr.php
|
|
/z39hrcfekvhtr.php
|
|
|
|
# Reference: https://trac-labs.com/dont-ghost-the-socgholish-ghostweaver-backdoor-574154dd9983
|
|
|
|
djdi6tukqamtyym.top
|
|
r3vgxgl24fywid4.top
|
|
|
|
# Reference: https://x.com/DaveLikesMalwre/status/1890146942631702962/history
|
|
|
|
http://64.95.12.42
|
|
64.95.12.42:443
|
|
allcarauction.com
|
|
doearencorinthians.com
|
|
|
|
# Reference: https://app.validin.com/detail?find=5b735c4ca898e63c537b62dfaa09291f&type=hash&ref_id=98b2b5da99b#tab=host_pairs (# 2025-02-17)
|
|
|
|
192.153.57.90.sslip.io
|
|
45-61-138-38.cprapid.com
|
|
asguhuhbi33g.top
|
|
auhbuziejbius.top
|
|
eruihvuzue3ui.top
|
|
gauhbuysj3.top
|
|
ghusunbisi3.top
|
|
gjbubtuub.top
|
|
gnyzy3u4bbzwe2.top
|
|
kiguybu4tbz.top
|
|
mail.45-61-138-38.cprapid.com
|
|
makeyoursub.info
|
|
oierhjuhbi3i3.top
|
|
prubhzeghb.top
|
|
tbnzuejbize.top
|
|
wearsebralndead.com
|
|
zpoeritjbs.top
|
|
|
|
# Reference: https://www.virustotal.com/gui/file/bfacbee12a9a3781e4c2728c904e3078925f3d96e6365ceeb03f81ab34bc27be/detection
|
|
|
|
banhiaanlmdhahh.top
|
|
ewhbuxu3ibz.top
|
|
|
|
# Reference: https://app.validin.com/detail?find=67.217.228.80&type=ip4&ref_id=39d46916990#tab=resolutions (# 2025-02-17)
|
|
|
|
fhadcadeelljmge.top
|
|
gbfialbehidddhj.top
|
|
iejkbmggndnekad.top
|
|
kbpaovmeuedhtyu.top
|
|
ktnxsicyrhffgds.top
|
|
njjhegddgfllalg.top
|
|
xbfeffomvrxaxql.top
|
|
|
|
# Reference: https://app.validin.com/detail?find=eafc61809a25b8a654d0c45cfac8b8b8cd3aa1d2&type=hash&ref_id=72fe64ec118#tab=host_pairs (# 2025-02-17)
|
|
|
|
eughusu23.top
|
|
tibn9ierijb.top
|
|
|
|
# Reference: https://x.com/RussianPanda9xx/status/1891504671300153591
|
|
|
|
3dijvbhfyutu34j.top
|
|
jlltk5azih351g4.top
|
|
mieuyyzbv334s.top
|
|
|
|
# Reference: https://x.com/RussianPanda9xx/status/1891876225284452504
|
|
|
|
anccvfsrkauefoh.top
|
|
bgllakndcidgcnj.top
|
|
daedfjkgnikkbkb.top
|
|
gnbmanbacedkgaj.top
|
|
icciilhkbdgjggn.top
|
|
kdljlignmgemecf.top
|
|
l284afj165tqz51.top
|
|
mioasfybz7y4.top
|
|
nfuagy7fgus.top
|
|
nuuhhcfenjoywca.top
|
|
u9oaqye2mww19fx.top
|
|
wu2qmpa2vndlnhb.top
|
|
usdgyzjey4h.top
|
|
|
|
# Reference: https://app.validin.com/detail?find=94.131.101.85&type=ip4&ref_id=78adb29a186#tab=resolutions (# 2025-02-21)
|
|
|
|
bdmnsyqrqshsopr.top
|
|
caddngldgejahna.top
|
|
ciijlckdjacimag.top
|
|
crwxqsnrwmthyqc.top
|
|
ddabknjdnliceal.top
|
|
dhhjollrefgvirm.top
|
|
dlghjjhdchbkjbd.top
|
|
helbbcmejnnbmej.top
|
|
ikhagifkenndlge.top
|
|
jengfeekijgldhk.top
|
|
jmemebcklgmfihc.top
|
|
lbbkbinkemlhein.top
|
|
okfsfvcetdbngdk.top
|
|
papecoyebvmcqeu.top
|
|
pucxumkixhitdxk.top
|
|
qoaoaiwehoyqaff.top
|
|
sekawctenilfkgp.top
|
|
|
|
# Reference: https://x.com/malwrhunterteam/status/1894147528972468478
|
|
# Reference: https://app.validin.com/detail?find=178.156.128.182&type=ip4&ref_id=8c1cfbf0b14#tab=resolutions (# 2025-02-25)
|
|
# Reference: https://www.virustotal.com/gui/file/fb98c0e8dccab7fda59884315e58c6d5d02973afacd0bcefa0815a0b4120a525/detection
|
|
|
|
054l1q8clc3ga1k.top
|
|
1r44zklfp4caq35.top
|
|
2rj0yh5cu3k0n2z.top
|
|
3cxfu81c2t1l14d.top
|
|
4yxzs2df7laeg6x.top
|
|
5xbvryxdbki5e5r.top
|
|
6jbeot9ffbryu7c.top
|
|
7iqanptdkazps76.top
|
|
834pkgqdt1g958k.top
|
|
84pulk6fo28j79q.fun
|
|
9p49hb2fxsp3la5.top
|
|
aoi5g7md2rxtjaz.top
|
|
baioe2yf6j6nycj.top
|
|
c9xkdyidbieewbd.top
|
|
cvw4asuffan7cdx.com
|
|
cvw4asuffan7cdx.fun
|
|
dub09pedk9vyadr.top
|
|
egbj7jrgo04rpec.top
|
|
fbm2q7cw29odahn.top
|
|
fgpf6gbdtzcine6.top
|
|
g14u277d2qt21gk.top
|
|
g2py3angxrmc3gq.top
|
|
ga1yo3wu78v48hh.top
|
|
hvfdlusugzdoliv.top
|
|
hw1hmy8wb05xnj1.top
|
|
ihfwjp4xkqmi1kf.top
|
|
jgushlouppu8zk9.top
|
|
k2tcff1xth32elu.fun
|
|
k2tcff1xth32elu.top
|
|
l188ecluygbsclo.top
|
|
ln8rc6xx27kmsn8.top
|
|
mmmna3hv77sdqn2.top
|
|
n8m78xtxby165on.top
|
|
o7127udvgx9x3oh.top
|
|
qef11fmxtfzbwrf.top
|
|
qtfi3l9vpoqhgqv.top
|
|
retx0c6vye71ur9.top
|
|
s0thy6ix26gvatu.top
|
|
tz7dw32v75ol7so.top
|
|
ukmstuyvfv56lu2.top
|
|
ul7wuxexbwxfnu8.fun
|
|
v6mbrobyknez1wn.fun
|
|
w507pluvommqyvh.top
|
|
xr0rnf7ysdvkex1.top
|
|
yce6k63y14c4szf.top
|
|
ylb962se7ne5z0c.top
|
|
yqenmbrvxc3acxv.top
|
|
z6qp2tofgdvqc1q.top
|
|
zbt2i2nw63kupy9.top
|
|
zkq55zcccmmww06.top
|
|
|
|
# Reference: https://www.huntress.com/blog/fake-browser-updates-lead-to-boinc-volunteer-computing-software
|
|
# Reference: https://www.virustotal.com/gui/ip-address/64.94.84.200/relations
|
|
# Reference: https://www.virustotal.com/gui/file/3abdcdaf35d27527fe642e94cf0b33b72267e1f05fa8d947d3c6f9bd4e79f63c/detection
|
|
# Reference: https://www.virustotal.com/gui/file/11be386867f47cf17cd8f556efe4a89ba46084cbb13f608bae5591ed75532dcf/detection
|
|
|
|
adednihknaalilg.top
|
|
bfcfkihhjhldhbf.top
|
|
cangmifbdhhidha.top
|
|
dcliihflnaeacln.top
|
|
flijkidfhaaendh.top
|
|
fndfgcedjaalfca.top
|
|
ga1yo3wu78v48hh.top
|
|
gggkmibncajjjic.top
|
|
glcfjyfrqreycth.top
|
|
hidmjhbklhgbimb.top
|
|
jcbnlineghcffek.top
|
|
jembhhnabanmeij.top
|
|
klmnnilmahlkcje.top
|
|
lnkcjhlikajcaad.top
|
|
nihclijcfaeglfm.top
|
|
nkffihjnahcnkkl.top
|
|
ugagyvy4ubtg.top
|
|
uenjffeqkbxxrkr.top
|
|
/4gdufvx3ezhtr.php
|
|
/9kp158bfixhtr.php
|
|
/hwgk5n7slfhtr.php
|
|
/d%20czioh%20f.php
|
|
/k%20lzioi%20l.php
|
|
|
|
# Reference: https://cert-agid.gov.it/wp-content/uploads/2025/03/MintLoader-10-03-2025.json
|
|
|
|
aabmieglhidedln.top
|
|
axahmvcunfdlcjh.top
|
|
cnksjpyuuxpalkr.top
|
|
eflnhggdgdieacj.top
|
|
fhilfndenkhfldg.top
|
|
gcaddjbecgancdl.top
|
|
hkfjcgaegdghhed.top
|
|
jwduisxirpyygsk.top
|
|
klngfmuixjlnqtu.top
|
|
lbxqdgsiecxcauf.top
|
|
ljhcaemkhjeakje.top
|
|
mdnimbkllflibjk.top
|
|
mqicaapikukqjvp.top
|
|
ngkgkiilelkkllh.top
|
|
nmealljlabdcgkc.top
|
|
ofsnxsnirovftwa.top
|
|
poejhsjeuiwd.top
|
|
xtflqjhubseiihm.top
|
|
yipwodeuhlqwriw.top
|
|
robsonpeluquerocr.com
|
|
robzombierealestate.com
|
|
rochesterhillshomevaluation.com
|
|
rockandroselawns.com
|
|
rockfordgraphics.com
|
|
rockymountainsaxophone.com
|
|
rockymtnhy.com
|
|
rodandoporlavida.com
|
|
rodhighar.com
|
|
rogerhauling.com
|
|
rogersrevue.com
|
|
rogharayurvedic.com
|
|
roguedigitalnomad.com
|
|
rollercoasterkids.com
|
|
rollingsmokeandvape.com
|
|
rollinsmokeandvape.com
|
|
romanchit.com
|
|
romanisolav.com
|
|
romansspirituality.com
|
|
romeprivategolfcarttour.com
|
|
ronbb.com
|
|
rooferz.com
|
|
roofproroofingcompany.com
|
|
roofwashexperts.com
|
|
rookieowner.com
|
|
roomindubai.com
|
|
rootandcreate.com
|
|
ropaonlinecolombia.com
|
|
roperetreats.com
|
|
rosalindagonzalezartist.com
|
|
rosebudjewelery.com
|
|
roslyncamuglia.com
|
|
rosyhomehealthagency.com
|
|
royalcylindersusa.com
|
|
royaltymeat.com
|
|
royluxtour.com
|
|
roypriyanka.com
|
|
rozanaanews.com
|
|
rozzhealth-beauty.com
|
|
rp-realm.com
|
|
rsvp2learn.com
|
|
rubberduckiefunding.com
|
|
rubedomarketing.com
|
|
rubinfirm.com
|
|
ruchisales.com
|
|
ruipapa.com
|
|
rumiangame.com
|
|
runzdt.com
|
|
rupine-labs.com
|
|
rvindustrialsolutions-store.com
|
|
rvrepairmedic.com
|
|
saakinsurancegroup.com
|
|
saalmurphy.com
|
|
sabahaquademy.com
|
|
sabrinaforclerk.com
|
|
sacgaragedoorservice.com
|
|
sacoverheaddoor.com
|
|
saesoluciones.com
|
|
safariinegypt.com
|
|
safehavenvault.com
|
|
saferdeodorant.com
|
|
safetexplusgh.com
|
|
safetyadminstration.com
|
|
saidmorebetter.com
|
|
sainithintech.com
|
|
saintjuliacc.com
|
|
sake-notes.com
|
|
salestrack360.com
|
|
salishlandscaping.com
|
|
saltrivercompany.com
|
|
sama-gi.com
|
|
samflorida.com
|
|
saminenonen.com
|
|
samizstores.com
|
|
sampoernapusat.com
|
|
sanasanamidwifery.com
|
|
sanavoz.com
|
|
sandtondaily.com
|
|
santabarbaraclonesnursery.com
|
|
santafeinvestments.com
|
|
santahohojoe.com
|
|
santiagoalpizar.com
|
|
santiagobelacqua.com
|
|
sanvadvahini.com
|
|
sapatilhaspensadoras.com
|
|
saplingsage.com
|
|
sapnamalik.com
|
|
sarcasticsimiansgaming.com
|
|
sarkariresultss.com
|
|
satcomacademy.com
|
|
savarifitness.com
|
|
savesns.com
|
|
savoiretpartager.com
|
|
saylot.com
|
|
sayroofing.com
|
|
sazary.com
|
|
sbpropertyproject.com
|
|
scaffoldingriyadh.com
|
|
scaleimpactcapital.com
|
|
scalingtime.com
|
|
scandwood.com
|
|
scansimpli.com
|
|
scaryaisle.com
|
|
scavigo.com
|
|
schemantic.com
|
|
scholasticadvance.com
|
|
schoolhousetechnologiesllc.com
|
|
schoolnewsdaily.com
|
|
schuylercommonsapts.com
|
|
sciencemachineshop.com
|
|
scott-bragg.com
|
|
screenplayacademy.com
|
|
scrubsdirect1.com
|
|
scrumitout.com
|
|
scrummytummies.com
|
|
sdractiderc.com
|
|
sdruiz.com
|
|
sea-to-sales.com
|
|
sea-vulture.com
|
|
seaboardstravel.com
|
|
seamlessairalliance.com
|
|
seanfarbolin.com
|
|
search4vape.com
|
|
searchfries.com
|
|
seasonsbyatlantica.com
|
|
sebandlari.com
|
|
sebastiancarrillo.com
|
|
secofstates.com
|
|
secondmountainadventuresforyoursoul.com
|
|
secondspringplanner.com
|
|
secrethotelscollection.com
|
|
secretmanifestations.com
|
|
secretrecipegourmetfoods.com
|
|
secretwindowstudios.com
|
|
securedbworks.com
|
|
sedgefieldpress.com
|
|
seedsinabox.com
|
|
seedsontrial.com
|
|
seethemoneypath.com
|
|
sefiria.com
|
|
segnanthosting.com
|
|
selectivecollective.com
|
|
selfenhancing.com
|
|
selfhaircutmirror.com
|
|
selfimprovementfocus.com
|
|
selfsufficientshopper.com
|
|
sellanyphones.com
|
|
sellfromtheheart.com
|
|
sellmystyle.com
|
|
sellusyourcarid.com
|
|
tlg1hvbbq02ci28ghkf2swv49zrmnf8n8kco6.ronbb.com
|
|
uoikbmio6mym0kc.com
|
|
/yr2tza05mghtr.php
|
|
|
|
# Reference: https://threatfox.abuse.ch/browse/tag/Kongtuke/ (# 2025-03-22)
|
|
|
|
bhaighhdebikfge.top
|
|
cmiklajbmincnbe.top
|
|
deanbimjnlbkgec.top
|
|
deecmnfemamgjed.top
|
|
dejlehfiiibgbcm.top
|
|
dlbfdiabhhdaifg.top
|
|
dlnelagmjgeaime.top
|
|
dsgubuz73gv6322.top
|
|
fbeadhdmmbidklg.top
|
|
ffmikjcfenjanii.top
|
|
fnglhhdcdilllhh.top
|
|
hkbafhbghbehhda.top
|
|
jhkddhnllikecni.top
|
|
lginchimfgfckeb.top
|
|
mknjddllgakhaje.top
|
|
nmchehjjkbnfiak.top
|
|
vnuefff555hr.top
|
|
|
|
# Reference: https://cert-agid.gov.it/wp-content/uploads/2025/03/asyncrat-pec-25-03-2025.json
|
|
|
|
ebmmnhkldkhdlbk.top
|
|
herophombyre.top
|
|
mgibfgcefbdahig.top
|
|
|
|
# Reference: https://x.com/skocherhan/status/1906616989893746993
|
|
# Reference: https://app.validin.com/detail?type=ip&find=185.250.151.155#tab=resolutions
|
|
|
|
acrtyfmjdxpvnha.top
|
|
ahdkfhbmdhbdlkb.top
|
|
aihehafllejmime.top
|
|
ajncmmgfleiiejl.top
|
|
akclafkefbcdala.top
|
|
ampaovunhdwcjda.top
|
|
anmegkcmnlijgkk.top
|
|
anrpmujswopsulb.top
|
|
atcpvjdaxfsrebp.top
|
|
bbjcednmgeildlh.top
|
|
bcakmprnnvjqtek.top
|
|
bcmkgldlaacgnmk.top
|
|
bdaiadclnkiagib.top
|
|
bdfikiffbaacjkd.top
|
|
bfidmcjejlilflg.top
|
|
bjicchekjncgbij.top
|
|
bjmbtcbaexfgnca.top
|
|
bmkajfdfekhkaki.top
|
|
brcfvyjjkrckwik.top
|
|
cegabkkmnkhmnme.top
|
|
cfkidealhhbhknh.top
|
|
cjbicammkaaeiln.top
|
|
clecehclelinenc.top
|
|
clfanablcgbimjg.top
|
|
crkvkjpntpvfdfu.top
|
|
cxwlrvxakrruxdk.top
|
|
dcuehjvvbqcoulc.top
|
|
ddjrxxmvnfvdkjv.top
|
|
dgdlmdhmgdgaknb.top
|
|
dkcnhcdeikhbmaa.top
|
|
dmmfahjmdhagemk.top
|
|
dnbabanlldibban.top
|
|
dnsjxaeyevjvrhc.top
|
|
eajdlagmknnibah.top
|
|
ecduutcykpvkbim.top
|
|
eeiffmcemgaieag.top
|
|
egmmcmfdemamhmn.top
|
|
eguhhdmnaiitmgf.top
|
|
ehhgalllaaajgbe.top
|
|
elhgdcgdbchecli.top
|
|
emnlejafbdgcjbl.top
|
|
erfoectvhkndfmm.top
|
|
estcvrkwtyirukg.top
|
|
eyrflpcixmjsakd.top
|
|
faedbjddijhgnmf.top
|
|
fdgbihdmdgmklbe.top
|
|
fgfddfnffnnkabd.top
|
|
fhenslhwarugelq.top
|
|
fhpacvqvndaronw.top
|
|
fiajkkemnkfcgan.top
|
|
fkeeleilhgaldcb.top
|
|
focpjiyiefvhjln.top
|
|
fvfrfvjnhcuiwhp.top
|
|
gakjbclfijfefci.top
|
|
gdmbgcwilyivsnx.top
|
|
gejkkahlkdgfich.top
|
|
gjcbamkfmgmmlca.top
|
|
glmhhdcmgcfddbk.top
|
|
gmbcjlglannmndn.top
|
|
gvalypovtwmgxoh.top
|
|
hbmagedlhgmakek.top
|
|
hdihnjifbcfgcdg.top
|
|
hfdnfnamknllicb.top
|
|
hfmnjildiifkgbn.top
|
|
hghihheldjfgede.top
|
|
hkhhlmndemncaai.top
|
|
hlkvwjlvbpyuipr.top
|
|
hnjfeknmnjefnch.top
|
|
hswmevtirrukdoi.top
|
|
ibuhucivhjljrqc.top
|
|
icgdbdkmgcdhkee.top
|
|
ifffkbffijehmed.top
|
|
ihinmjjecgmdjgg.top
|
|
iialdglmcflnedn.top
|
|
iihwcorixlhymps.top
|
|
ilnnlfhffmlahel.top
|
|
imdhnnlemjgjefa.top
|
|
inefifkdlemdlbf.top
|
|
jbaflgiefcfkagl.top
|
|
jbbdfmheellfhcc.top
|
|
jhjlhbieabelccl.top
|
|
jlrmktqaknsqomc.top
|
|
jmtdirgfbylhaud.top
|
|
jnkljmefmflbefi.top
|
|
jpfsrvgvncxxcrm.top
|
|
jwriyiojeetnvqd.top
|
|
kbcximoaqhffxnm.top
|
|
kcengkdfhsxvjvn.top
|
|
kciigfbfemkdagg.top
|
|
kdldinfemjemlhi.top
|
|
khldldaknllhgem.top
|
|
kicchidfbbdjjfa.top
|
|
kjfljchejmlefhd.top
|
|
lamcnajlkbdmihk.top
|
|
lbdjkamkchebmfe.top
|
|
lefgdmmflejflhd.top
|
|
lfpdppdvtvjmlsw.top
|
|
lieimkimamkfnhb.top
|
|
lknafbafiiclfgl.top
|
|
llcjgjeecflgcia.top
|
|
lpmjgglawartiow.top
|
|
lqoydebfnlkkswx.top
|
|
maahecbejmkimjl.top
|
|
mcjakhgmdidneih.top
|
|
mfwtdajaeteirph.top
|
|
mgykbxxftfvydxi.top
|
|
mkbgjdfmhejhkjn.top
|
|
mkibiklkgekjdfj.top
|
|
mmkkkmrmuvaxmnx.top
|
|
mnkmcilfbbcnchi.top
|
|
muaomibvaovbuth.top
|
|
nbhknbifihbamjg.top
|
|
nbuuifonbommvoi.top
|
|
nclfbjmecejjjki.top
|
|
nfgmiaemkbcbbje.top
|
|
nhceafjfelighia.top
|
|
nifncmnemidcekd.top
|
|
njjakcxvhhipfur.top
|
|
nuhfbsgakmqwbqr.top
|
|
nvjuyrvfaxinmys.top
|
|
oqfgfymnhhybgps.top
|
|
pfaeldsmbmqbatk.top
|
|
pvrlmcbjkvdisvd.top
|
|
pycbvgbawyoausm.top
|
|
qkcwkuxjqppwdwn.top
|
|
qkmjsgiiebuinyu.top
|
|
qrayasqvudqxhwl.top
|
|
qukojwqmhfdpjuu.top
|
|
ramihovjwiblmxx.top
|
|
rgkkxlnvbvdnrxv.top
|
|
rommtyxadrboftw.top
|
|
rywuqyfikthwwaf.top
|
|
sohfnsciqntlgbp.top
|
|
spwsfisjebnavyi.top
|
|
svuvuflvhopcbyg.top
|
|
terqlmaiwggbqca.top
|
|
tlfgsyivoibqkbq.top
|
|
uaprprfvubnfucb.top
|
|
usccifwieyrpadk.top
|
|
vimmgyujkseejeu.top
|
|
vpadnldvbuatedl.top
|
|
wskswpdmnxmkgau.top
|
|
wtmiuorreiebriv.top
|
|
wxwxesrjqlqstff.top
|
|
xiudtjamtqyyqbf.top
|
|
xjwtrhprkcqpbjg.top
|
|
yereypgarlgduaf.top
|
|
ymhjbmojwfdhdgp.top
|
|
yxfordwmbjlnacp.top
|
|
yyhepbmrqudelkq.top
|
|
|
|
# Reference: https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2025-04-04-IOCs-forKongTuke-web-inject-leading-to-fake-CAPTHA-page.txt
|
|
# Reference: https://www.virustotal.com/gui/file/dcf91fe594ba01d5aabb537b79a3360e1a26412645334708c4df45cd71af0fb8/detection
|
|
|
|
173.232.146.62:25658
|
|
5k3nof58gopuruq.top
|
|
75h3k628pe6e4w4.top
|
|
8qvihxy8x5nyixj.fun
|
|
8qvihxy8x5nyixj.top
|
|
ousv4bmqk1fmgdf.fun
|
|
ousv4bmqk1fmgdf.top
|
|
pf6a02iqtrw6tet.fun
|
|
pf6a02iqtrw6tet.top
|
|
|
|
# Reference: https://x.com/skocherhan/status/1910843696779509857
|
|
|
|
bnnjlmhemhbflml.top
|
|
chfbkjgebeincmd.top
|
|
dblhiffefaahhni.top
|
|
frnfsmyariiyljw.top
|
|
hhwqpgwaxbunukh.top
|
|
ijegfablkcfibfb.top
|
|
ivhcnataeuhcflr.top
|
|
jdjmdlalamlcgfh.top
|
|
jlbechmldjeklgn.top
|
|
kfgkbellhfledge.top
|
|
rkuagqnmnypetvf.top
|
|
syflejkmurbsdwp.top
|
|
uopvcdimblnhmxa.top
|
|
veahywfmheavwyk.top
|
|
|
|
# Reference: https://x.com/malwrhunterteam/status/1911718254155870599
|
|
# Reference: https://www.virustotal.com/gui/file/3b84447288c2f0d93f40eb745e1126dc947d0defbdbe1bf1d62bfad5b67031e4/detection
|
|
|
|
36gls0oe3msx88p.org
|
|
3vwan1xdh0z4q5u.org
|
|
ep7y1u06lobcef8.org
|
|
f8g9jas0x35ftzs.org
|
|
km9a3yy61pgm8lk.org
|
|
krz4vj8df5egqq3.org
|
|
ks2k5gawp30n9z1.org
|
|
lke007k8nqgm8vf.org
|
|
m12pcuzql1cx6gh.org
|
|
nssx5wpifg9pqk9.org
|
|
o7tpe4pocenteho.org
|
|
wxbysns6uw3do5v.org
|
|
ymjgcxtlp2cck5d.org
|
|
folu-molinujera.store
|
|
|
|
# Reference: https://x.com/JAMESWT_WT/status/1920008940286259593
|
|
|
|
sdfjkhgyu6wjkhlasyhd.top
|
|
|
|
# Reference: https://x.com/JAMESWT_WT/status/1930185550733946941
|
|
|
|
abckdkfkgdjnkhe.top
|
|
agleeagkchcffhm.top
|
|
gcbbmcadbbgijac.top
|
|
gikjnfcdlfnaenl.top
|
|
gwoyqeewhlhuomb.top
|
|
hmyjoxcwnetjxnl.top
|
|
khpnpywmhjbusld.top
|
|
lwaynsumocnjdmn.top
|
|
meaghhjkjaddigb.top
|
|
nmfmgdiknkklngg.top
|
|
tehecbqjkuaogas.top
|
|
wawieclaeyiabxk.top
|
|
xphtbvialsuokyu.top
|
|
|
|
# Generic
|
|
|
|
/1.php?s=mints21
|