4,160 DGA/Khalesi/DGALIST-Khalesi.txt
View file

Large diffs are not rendered by default.

34,136 DGA/Mylobot/DGALIST-Mylobot.txt
View file

Large diffs are not rendered by default.

202 DGA/Phorpiex/DGALIST-Phorpiex.txt
View file
@@ -1,4 +1,115 @@
#name first_seen last_seen
afeifieuuufufufuf.ru 2021-12-07 2021-12-07
aiiaiafrzrueuedur.ru 2021-12-07 2021-12-07
eiifngjfksisiufjf.ru 2021-12-07 2021-12-07
eofihsishihiursgu.ru 2021-12-07 2021-12-07
eoroooskfogihisrg.ru 2021-12-07 2021-12-07
fieieienfsnirgrni.ru 2021-12-07 2021-12-07
fifiehsueuufidhfi.ru 2021-12-07 2021-12-07
fihsifuiiusuiuduf.ru 2021-12-07 2021-12-07
fiiauediehduefuge.ru 2021-12-07 2021-12-07
fuaiuebndieufeufu.ru 2021-12-07 2021-12-07
fuihaihueifnnnvnd.ru 2021-12-07 2021-12-07
iuirshriuisruruuf.ru 2021-12-07 2021-12-07
nnososoosjfeuhueu.ru 2021-12-07 2021-12-07
noeuaoenriusfiruu.ru 2021-12-07 2021-12-07
nousiieiffgogogoo.ru 2021-12-07 2021-12-07
seusiiusuiuifiuui.ru 2021-12-07 2021-12-07
sfiusihuisisifgmr.ru 2021-12-07 2021-12-07
slpsrgpsrhojifdij.ru 2021-12-07 2021-12-07
srndndubsbsifurfd.ru 2021-12-07 2021-12-07
ssofhoseuegsgrfnu.ru 2021-12-07 2021-12-07
diowiwiiwinfifif.su 2021-02-02 2021-12-07
eaojefiuaugueuif.su 2021-02-02 2021-12-07
eioeiufuisefniif.su 2021-02-02 2021-12-07
eiufhiedniunegif.su 2021-02-02 2021-12-07
ffoeefsheuesihif.su 2021-02-02 2021-12-07
fieooeoafheifiif.su 2021-02-02 2021-12-07
fisiejdajijejgif.su 2021-02-02 2021-12-07
fiueafnuieniuaif.su 2021-02-02 2021-12-07
fiuehiaueifuiiif.su 2021-02-02 2021-12-07
fnauendaieghidif.su 2021-02-02 2021-12-07
fsoufsefenugnuif.su 2021-02-02 2021-12-07
giuediaudnudunif.su 2021-02-02 2021-12-07
iandiwuiwnnuguif.su 2021-02-02 2021-12-07
ifuhaeiuaeuigrif.su 2021-02-02 2021-12-07
iusrhiufhsirurif.su 2021-02-02 2021-12-07
ofeideinieghihif.su 2021-02-02 2021-12-07
sefuhsuifhishfif.su 2021-02-02 2021-12-07
seiiamefiaigaeif.su 2021-02-02 2021-12-07
sfiushiudneineif.su 2021-02-02 2021-12-07
sfuhseidueiihfif.su 2021-02-02 2021-12-07
sirfuhsihfiugrif.su 2021-02-02 2021-12-07
sisfiusnrsruisif.su 2021-02-02 2021-12-07
siufhseifhurgrif.su 2021-02-02 2021-12-07
sndiuenidniueiif.su 2021-02-02 2021-12-07
soijodneoiauoeif.su 2021-02-02 2021-12-07
srgsifijsjigjhif.su 2021-02-02 2021-12-07
srgsiuhedufiusif.su 2021-02-02 2021-12-07
sriuedueiuiefgif.su 2021-02-02 2021-12-07
uaihefiuieagugif.su 2021-02-02 2021-12-07
utdifguizdidizif.su 2021-02-02 2021-12-07
aegohaohuoruitiiep.su 2021-01-31 2021-12-07
aeifaeifhutuhuhusp.su 2021-01-31 2021-12-07
aeoughaoheguaoehdp.su 2021-01-31 2021-12-07
aeufuaehfiuehfuhfp.su 2021-01-31 2021-12-07
afaeigaifgsgrhhafp.su 2021-01-31 2021-12-07
afaigaeigieufuifip.su 2021-01-31 2021-12-07
befaheaiudeuhughgp.su 2021-01-31 2021-12-07
bfagzzezgaegzgfaip.su 2021-01-31 2021-12-07
daedagheauehfuuhfp.su 2021-01-31 2021-12-07
eaeuafhuaegfugeudp.su 2021-01-31 2021-12-07
eguaheoghouughahsp.su 2021-01-31 2021-12-07
gaghpaheiafhjefijp.su 2021-01-31 2021-12-07
gaoehuoaoefhuhfugp.su 2021-01-31 2021-12-07
gaoheeuofhefefhutp.su 2021-01-31 2021-12-07
gaohrhurhuhruhfsdp.su 2021-01-31 2021-12-07
gaouehaehfoaeajrsp.su 2021-01-31 2021-12-07
geauhouefheuutiiip.su 2021-01-31 2021-12-07
huaeokaefoaeguaehp.su 2021-01-31 2021-12-07
rzhsudhugugfugugsp.su 2021-01-31 2021-12-07
urusurofhsorhfuuhp.su 2021-01-31 2021-12-07
aaeuauaueieiier.su 2021-01-25 2021-12-07
aeaunengieisiag.su 2021-01-25 2021-12-07
aeigeibfabidbgu.su 2021-01-25 2021-12-07
ahefihaehiuguus.su 2021-01-25 2021-12-07
ahoouhrghsudmfg.su 2021-01-25 2021-12-07
azbdezaeugnungg.su 2021-01-25 2021-12-07
babiuedunefbbgg.su 2021-01-25 2021-12-07
bidjcceaiidjieg.su 2021-01-25 2021-12-07
eaeunauenuangdg.su 2021-01-25 2021-12-07
eahaiuhuirsuhfg.su 2021-01-25 2021-12-07
eiugaidihehuhfs.su 2021-01-25 2021-12-07
eunuegnuaebuang.su 2021-01-25 2021-12-07
ezeiafzbgzabzdg.su 2021-01-25 2021-12-07
gaieufhaefuefhg.su 2021-01-25 2021-12-07
gaubaduebdubegu.su 2021-01-25 2021-12-07
giaigduaedhhush.su 2021-01-25 2021-12-07
hioeppaepgoaneg.su 2021-01-25 2021-12-07
hisrfsosrughudh.su 2021-01-25 2021-12-07
ibbgursuiuedeeg.su 2021-01-25 2021-12-07
ibieibfiubefudg.su 2021-01-25 2021-12-07
ieanubfiuagugng.su 2021-01-25 2021-12-07
iinnfuaeidaighg.su 2021-01-25 2021-12-07
isohgohrusurgdg.su 2021-01-25 2021-12-07
iuauebfeufuuasg.su 2021-01-25 2021-12-07
iuebfiueifuitog.su 2021-01-25 2021-12-07
iuehuhaethhtudg.su 2021-01-25 2021-12-07
iuhuefibuibgbsg.su 2021-01-25 2021-12-07
lpekfoaefhiehug.su 2021-01-25 2021-12-07
ngsiososusdiifi.su 2021-01-25 2021-12-07
niemfoefomsegig.su 2021-01-25 2021-12-07
nifaneieugunuug.su 2021-01-25 2021-12-07
nniaendiandiihg.su 2021-01-25 2021-12-07
oaoeuoouegandsg.su 2021-01-25 2021-12-07
pojoieaohauubfg.su 2021-01-25 2021-12-07
rutuneuenfuhusg.su 2021-01-25 2021-12-07
sogounfsungunrg.su 2021-01-25 2021-12-07
ubanedanigmimig.su 2021-01-25 2021-12-07
ueinaieugnusfig.su 2021-01-25 2021-12-07
uhiueaaubgbuadg.su 2021-01-25 2021-12-07
uniunieubfiubgg.su 2021-01-25 2021-12-07
uririneinigning.su 2021-01-25 2021-12-07
geauhouefheuutiiiw.top 2021-10-11 2021-12-06
aegohaohuoruitiiee.to 2021-10-05 2021-12-06
aegohaohuoruitiiew.top 2021-10-05 2021-12-06
@@ -35,67 +146,6 @@ huaeokaefoaeguaehw.top 2021-10-05 2021-12-06
rzhsudhugugfugugse.to 2021-10-05 2021-12-06
rzhsudhugugfugugsw.top 2021-10-05 2021-12-06
urusurofhsorhfuuhe.to 2021-10-05 2021-12-06
aegohaohuoruitiiep.su 2021-01-31 2021-12-06
aeifaeifhutuhuhusp.su 2021-01-31 2021-12-06
aeoughaoheguaoehdp.su 2021-01-31 2021-12-06
aeufuaehfiuehfuhfp.su 2021-01-31 2021-12-06
afaeigaifgsgrhhafp.su 2021-01-31 2021-12-06
afaigaeigieufuifip.su 2021-01-31 2021-12-06
befaheaiudeuhughgp.su 2021-01-31 2021-12-06
bfagzzezgaegzgfaip.su 2021-01-31 2021-12-06
daedagheauehfuuhfp.su 2021-01-31 2021-12-06
eaeuafhuaegfugeudp.su 2021-01-31 2021-12-06
eguaheoghouughahsp.su 2021-01-31 2021-12-06
gaghpaheiafhjefijp.su 2021-01-31 2021-12-06
gaoehuoaoefhuhfugp.su 2021-01-31 2021-12-06
gaoheeuofhefefhutp.su 2021-01-31 2021-12-06
gaohrhurhuhruhfsdp.su 2021-01-31 2021-12-06
gaouehaehfoaeajrsp.su 2021-01-31 2021-12-06
geauhouefheuutiiip.su 2021-01-31 2021-12-06
huaeokaefoaeguaehp.su 2021-01-31 2021-12-06
rzhsudhugugfugugsp.su 2021-01-31 2021-12-06
urusurofhsorhfuuhp.su 2021-01-31 2021-12-06
aaeuauaueieiier.su 2021-01-25 2021-12-06
aeaunengieisiag.su 2021-01-25 2021-12-06
aeigeibfabidbgu.su 2021-01-25 2021-12-06
ahefihaehiuguus.su 2021-01-25 2021-12-06
ahoouhrghsudmfg.su 2021-01-25 2021-12-06
azbdezaeugnungg.su 2021-01-25 2021-12-06
babiuedunefbbgg.su 2021-01-25 2021-12-06
bidjcceaiidjieg.su 2021-01-25 2021-12-06
eaeunauenuangdg.su 2021-01-25 2021-12-06
eahaiuhuirsuhfg.su 2021-01-25 2021-12-06
eiugaidihehuhfs.su 2021-01-25 2021-12-06
eunuegnuaebuang.su 2021-01-25 2021-12-06
ezeiafzbgzabzdg.su 2021-01-25 2021-12-06
gaieufhaefuefhg.su 2021-01-25 2021-12-06
gaubaduebdubegu.su 2021-01-25 2021-12-06
giaigduaedhhush.su 2021-01-25 2021-12-06
hioeppaepgoaneg.su 2021-01-25 2021-12-06
hisrfsosrughudh.su 2021-01-25 2021-12-06
ibbgursuiuedeeg.su 2021-01-25 2021-12-06
ibieibfiubefudg.su 2021-01-25 2021-12-06
ieanubfiuagugng.su 2021-01-25 2021-12-06
iinnfuaeidaighg.su 2021-01-25 2021-12-06
isohgohrusurgdg.su 2021-01-25 2021-12-06
iuauebfeufuuasg.su 2021-01-25 2021-12-06
iuebfiueifuitog.su 2021-01-25 2021-12-06
iuehuhaethhtudg.su 2021-01-25 2021-12-06
iuhuefibuibgbsg.su 2021-01-25 2021-12-06
lpekfoaefhiehug.su 2021-01-25 2021-12-06
ngsiososusdiifi.su 2021-01-25 2021-12-06
niemfoefomsegig.su 2021-01-25 2021-12-06
nifaneieugunuug.su 2021-01-25 2021-12-06
nniaendiandiihg.su 2021-01-25 2021-12-06
oaoeuoouegandsg.su 2021-01-25 2021-12-06
pojoieaohauubfg.su 2021-01-25 2021-12-06
rutuneuenfuhusg.su 2021-01-25 2021-12-06
sogounfsungunrg.su 2021-01-25 2021-12-06
ubanedanigmimig.su 2021-01-25 2021-12-06
ueinaieugnusfig.su 2021-01-25 2021-12-06
uhiueaaubgbuadg.su 2021-01-25 2021-12-06
uniunieubfiubgg.su 2021-01-25 2021-12-06
uririneinigning.su 2021-01-25 2021-12-06
abaeubuegs.su 2021-02-01 2021-12-02
aeoghehofu.su 2021-02-01 2021-12-02
aeuaueudgs.su 2021-02-01 2021-12-02
@@ -175,36 +225,6 @@ yregistrationbk303.top 2021-11-28 2021-12-01
yregistrationbk505.top 2021-11-28 2021-12-01
zregistrationbk999.top 2021-11-28 2021-12-01
hydraruzxfnew4af.su 2021-11-07 2021-12-01
diowiwiiwinfifif.su 2021-02-02 2021-12-01
eaojefiuaugueuif.su 2021-02-02 2021-12-01
eioeiufuisefniif.su 2021-02-02 2021-12-01
eiufhiedniunegif.su 2021-02-02 2021-12-01
ffoeefsheuesihif.su 2021-02-02 2021-12-01
fieooeoafheifiif.su 2021-02-02 2021-12-01
fisiejdajijejgif.su 2021-02-02 2021-12-01
fiueafnuieniuaif.su 2021-02-02 2021-12-01
fiuehiaueifuiiif.su 2021-02-02 2021-12-01
fnauendaieghidif.su 2021-02-02 2021-12-01
fsoufsefenugnuif.su 2021-02-02 2021-12-01
giuediaudnudunif.su 2021-02-02 2021-12-01
iandiwuiwnnuguif.su 2021-02-02 2021-12-01
ifuhaeiuaeuigrif.su 2021-02-02 2021-12-01
iusrhiufhsirurif.su 2021-02-02 2021-12-01
ofeideinieghihif.su 2021-02-02 2021-12-01
sefuhsuifhishfif.su 2021-02-02 2021-12-01
seiiamefiaigaeif.su 2021-02-02 2021-12-01
sfiushiudneineif.su 2021-02-02 2021-12-01
sfuhseidueiihfif.su 2021-02-02 2021-12-01
sirfuhsihfiugrif.su 2021-02-02 2021-12-01
sisfiusnrsruisif.su 2021-02-02 2021-12-01
siufhseifhurgrif.su 2021-02-02 2021-12-01
sndiuenidniueiif.su 2021-02-02 2021-12-01
soijodneoiauoeif.su 2021-02-02 2021-12-01
srgsifijsjigjhif.su 2021-02-02 2021-12-01
srgsiuhedufiusif.su 2021-02-02 2021-12-01
sriuedueiuiefgif.su 2021-02-02 2021-12-01
uaihefiuieagugif.su 2021-02-02 2021-12-01
utdifguizdidizif.su 2021-02-02 2021-12-01
aniaeninie.su 2021-02-01 2021-11-29
aehfiaheifuedhgsf.su 2021-07-04 2021-11-28
aehfiaheifuedhgsg.su 2021-07-04 2021-11-28
43 DGA/Tofsee/DGALIST-Tofsee.txt
View file
@@ -1,24 +1,25 @@
#name first_seen last_seen
eafeafa.biz 2021-12-05 2021-12-06
eafeafa.ch 2021-12-05 2021-12-06
eafeafb.biz 2021-12-05 2021-12-06
eafeafb.ch 2021-12-05 2021-12-06
eafeafc.biz 2021-12-05 2021-12-06
eafeafc.ch 2021-12-05 2021-12-06
eafeafd.biz 2021-12-05 2021-12-06
eafeafd.ch 2021-12-05 2021-12-06
eafeafe.biz 2021-12-05 2021-12-06
eafeafe.ch 2021-12-05 2021-12-06
eafeaff.biz 2021-12-05 2021-12-06
eafeaff.ch 2021-12-05 2021-12-06
eafeafg.biz 2021-12-05 2021-12-06
eafeafg.ch 2021-12-05 2021-12-06
eafeafh.biz 2021-12-05 2021-12-06
eafeafh.ch 2021-12-05 2021-12-06
eafeafi.biz 2021-12-05 2021-12-06
eafeafi.ch 2021-12-05 2021-12-06
eafeafj.biz 2021-12-05 2021-12-06
eafeafj.ch 2021-12-05 2021-12-06
dusdusb.ch 2021-12-07 2021-12-07
eafeafa.biz 2021-12-05 2021-12-07
eafeafa.ch 2021-12-05 2021-12-07
eafeafb.biz 2021-12-05 2021-12-07
eafeafb.ch 2021-12-05 2021-12-07
eafeafc.biz 2021-12-05 2021-12-07
eafeafc.ch 2021-12-05 2021-12-07
eafeafd.biz 2021-12-05 2021-12-07
eafeafd.ch 2021-12-05 2021-12-07
eafeafe.biz 2021-12-05 2021-12-07
eafeafe.ch 2021-12-05 2021-12-07
eafeaff.biz 2021-12-05 2021-12-07
eafeaff.ch 2021-12-05 2021-12-07
eafeafg.biz 2021-12-05 2021-12-07
eafeafg.ch 2021-12-05 2021-12-07
eafeafh.biz 2021-12-05 2021-12-07
eafeafh.ch 2021-12-05 2021-12-07
eafeafi.biz 2021-12-05 2021-12-07
eafeafi.ch 2021-12-05 2021-12-07
eafeafj.biz 2021-12-05 2021-12-07
eafeafj.ch 2021-12-05 2021-12-07
dwtdwtj.ch 2021-12-05 2021-12-05
dwvdwvj.ch 2021-12-05 2021-12-05
dxadxaa.biz 2021-12-05 2021-12-05
@@ -29,5 +30,3 @@ dxwdxwb.biz 2021-12-05 2021-12-05
dwwdwwg.biz 2021-12-04 2021-12-04
dxxdxxf.biz 2021-12-04 2021-12-04
dyqdyqc.biz 2021-12-04 2021-12-04
dwwdwwh.biz 2021-12-01 2021-12-01
dxvdxva.ch 2021-12-01 2021-12-01
794 DGA/unclassified/2021-12-07-DGALIST-03B3BDA3883CE0AA5BDACE933800AF51.txt
View file

Large diffs are not rendered by default.

16,186 DGA/unclassified/2021-12-07-DGALIST-5975D26327BD8AB10D2202B59F8F99CA.txt
View file

Large diffs are not rendered by default.

16 DGA/unclassified/2021-12-07-DGALIST-873C6D18C438662D184B1007F975D6C7.txt
View file
@@ -0,0 +1,16 @@
diowiwiiwinfify.in
eiufhiedniunegy.in
fisiejdajijejgy.in
fiueafnuieniuay.in
fiuehiaueifuiiy.in
fsoufsefenugnuy.in
iandiwuiwnnuguy.in
ofeideinieghihy.in
seiiamefiaigaey.in
sfiushiudneiney.in
sfuhseidueiihfy.in
sirfuhsihfiugry.in
siufhseifhurgry.in
srgsifijsjigjhy.in
sriuedueiuiefgy.in
utdifguizdidizy.in
40 DGA/unclassified/2021-12-07-DGALIST-8E590528D5FC336C6E3604550F1BB9F5.txt
View file
@@ -0,0 +1,40 @@
azcbbvdb.net
bpuqeyec.net
cgfhbq.cn
dpnacxkr.com
efdmadji.com
epehyeyu.com
fazfxe.cn
fdoqhmeg.com
giqhqukn.com
heixuntj.com
hmbgppah.net
ifplnm.cn
imvpifyd.net
ipxqvc.cn
izyveobo.com
jrjqssli.com
jvggwsfy.net
jvqswhhf.com
kjhifglh.net
ldzaee.cn
ljmvkinc.net
lshybnvt.com
lvnpxb.cn
meuxufao.net
mhneed.cn
nzjmni.cn
obcohv.cn
pkzzml.cn
qwwmcvgy.com
rtrwqmak.net
segxtr.cn
vajpdqck.net
vljillkc.net
vmhkgnot.com
whwfqoiv.net
xgxrfh.cn
yofllcur.net
yqzzlw.cn
yvewmu.cn
zxhbpajq.com
20 DGA/unclassified/2021-12-07-DGALIST-D3308B4D8579FBDDB44727A2A5EE5C34.txt
View file
@@ -0,0 +1,20 @@
eafeifieuuufufufuf.ru
eaiiaiafrzrueuedur.ru
eeiifngjfksisiufjf.ru
eeofihsishihiursgu.ru
eeoroooskfogihisrg.ru
efieieienfsnirgrni.ru
efifiehsueuufidhfi.ru
efihsifuiiusuiuduf.ru
efiiauediehduefuge.ru
efuaiuebndieufeufu.ru
efuihaihueifnnnvnd.ru
eiuirshriuisruruuf.ru
ennososoosjfeuhueu.ru
enoeuaoenriusfiruu.ru
enousiieiffgogogoo.ru
eseusiiusuiuifiuui.ru
esfiusihuisisifgmr.ru
eslpsrgpsrhojifdij.ru
esrndndubsbsifurfd.ru
essofhoseuegsgrfnu.ru
6 ioc_extender/BB_TA575-Dridex.json
View file
@@ -4620,6 +4620,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "eservicesbd.net",
"links": "63c773164970d2cb467269896df990fb043bd7e6",
"type": "certs",
"ln": 2
},
{
"host": "esinniobiwaquareeb.com",
"links": "bb115e0fc99ec38bbb585a2dade63ca00f36c716",
48 ioc_extender/ET_APT33.json
View file
@@ -192,6 +192,12 @@
"type": "certs",
"ln": 2
},
{
"host": "dev.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "dev.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -396,6 +402,12 @@
"type": "certs",
"ln": 2
},
{
"host": "hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -618,6 +630,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "mail.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -822,6 +840,12 @@
"type": "certs",
"ln": 2
},
{
"host": "n3tc4t.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "n3tc4t.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -1020,6 +1044,12 @@
"type": "certs",
"ln": 2
},
{
"host": "proxymaterials.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "proxymaterials.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -1260,6 +1290,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.dev.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "www.dev.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -1452,6 +1488,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "www.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
@@ -1644,6 +1686,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.proxymaterials.hopto.com",
"links": "cfdc1f588533db90067c534b344767e8c9f65471",
"type": "certs",
"ln": 2
},
{
"host": "www.proxymaterials.hopto.com",
"links": "d15402ae8eac20a5dc61b9d89999b4d02160e75d",
108 ioc_extender/ET_Gamaredon.json
View file
@@ -366,6 +366,18 @@
"type": "pdns",
"ln": 2
},
{
"host": "albatrellus.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "alibetar.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "amaniwa.ru",
"links": "80.78.240.157",
@@ -378,12 +390,24 @@
"type": "pdns",
"ln": 2
},
{
"host": "anaraq.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "anisoptera.online",
"links": "193.124.206.65",
"type": "pdns",
"ln": 2
},
{
"host": "anisoptera.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "anna-sanchez.online",
"links": "73209463937f97c1ae8be060f4e1743e909b3a6d",
@@ -936,6 +960,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "185.46.11.54",
@@ -1032,6 +1062,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "blattodea.ru",
"links": "89.108.79.114",
@@ -1356,6 +1392,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "185.46.11.54",
@@ -1452,6 +1494,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "clank.hazari.ru",
"links": "89.108.83.120",
@@ -2490,6 +2538,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "gholam.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "gholam.ru",
"links": "194.180.174.147",
@@ -3102,6 +3156,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "185.46.11.54",
@@ -3198,6 +3258,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "83.166.242.134",
@@ -4284,6 +4350,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "185.46.11.54",
@@ -4380,6 +4452,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "lovers.semara.ru",
"links": "89.108.83.120",
@@ -4440,6 +4518,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "185.46.11.54",
@@ -4536,6 +4620,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "lump.semara.ru",
"links": "89.108.83.120",
@@ -5388,6 +5478,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "mucora.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "muhicha.ru",
"links": "176.118.164.159",
@@ -6444,6 +6540,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "185.46.10.250",
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "185.46.11.161",
@@ -6546,6 +6648,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "80.78.253.26",
"type": "pdns",
"ln": 2
},
{
"host": "tomond.ru",
"links": "89.108.83.120",
6 ioc_extender/ET_Lazarus.json
View file
@@ -708,6 +708,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mitsueshiro.com",
"links": "f3ba45ed8d7fbe302bedc36c12e9fc10c33058cb",
"type": "certs",
"ln": 2
},
{
"host": "morepros.xyz",
"links": "f3ba45ed8d7fbe302bedc36c12e9fc10c33058cb",
6 ioc_extender/ET_Lazarus_APT_Related.json
View file
@@ -54,6 +54,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "ny.silvergatehr.com",
"links": "149.28.162.113",
"type": "pdns",
"ln": 2
},
{
"host": "onedocshare.com",
"links": "149.28.162.113",
70 ioc_extender/ET_NOBELIUM_(TA421).json
View file
@@ -0,0 +1,70 @@
{
"meta": [
{
"name": "host",
"type": "String"
},
{
"name": "links",
"type": "String"
},
{
"name": "type",
"type": "String"
},
{
"name": "ln",
"type": "UInt8"
}
],
"data": [
{
"host": "ET Trojan: NOBELIUM (TA421)",
"links": "stonecrestnews.com",
"type": "z",
"ln": 2
},
{
"host": "cpanel.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "cpcalendars.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "cpcontacts.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "mail.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "webdisk.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
},
{
"host": "webmail.stonecrestnews.com",
"links": "91.234.254.144",
"type": "pdns",
"ln": 2
}
]
}
28 ioc_extender/ET_NOBELIUM_(TA421)_CEELOADER.json
View file
@@ -0,0 +1,28 @@
{
"meta": [
{
"name": "host",
"type": "String"
},
{
"name": "links",
"type": "String"
},
{
"name": "type",
"type": "String"
},
{
"name": "ln",
"type": "UInt8"
}
],
"data": [
{
"host": "ET Trojan: NOBELIUM (TA421) CEELOADER",
"links": "theandersonco.com",
"type": "z",
"ln": 2
}
]
}
562 ioc_extender/ET_NOBELIUM_(TA421)_Cobalt_Strike.json
View file

Large diffs are not rendered by default.

12 ioc_extender/ET_RouteX.json
View file
@@ -96,6 +96,12 @@
"type": "certs",
"ln": 2
},
{
"host": "aenvkys.info",
"links": "1be5f0983b9d22c7e169311ab2ee49ba52e8d5d0",
"type": "certs",
"ln": 2
},
{
"host": "akfvhrvjj.info",
"links": "1be5f0983b9d22c7e169311ab2ee49ba52e8d5d0",
@@ -366,6 +372,12 @@
"type": "certs",
"ln": 2
},
{
"host": "c515eeb921a2d.org",
"links": "1be5f0983b9d22c7e169311ab2ee49ba52e8d5d0",
"type": "certs",
"ln": 2
},
{
"host": "c580d419d9425.org",
"links": "2afdd105f3574fc7f38431441c7cfbdbd77147d8",
24 ioc_extender/HP_CryptBot.json
View file
@@ -378,12 +378,6 @@
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "morsfu04.top",
"type": "z",
"ln": 2
},
{
"host": "HP Threat Research: CryptBot",
"links": "mortar05.top",
@@ -1062,6 +1056,18 @@
"type": "pdns",
"ln": 2
},
{
"host": "gomkud25.top",
"links": "195.123.218.222",
"type": "pdns",
"ln": 2
},
{
"host": "gomkud25.top",
"links": "46.16.13.154",
"type": "pdns",
"ln": 2
},
{
"host": "hierodula.online",
"links": "176.118.164.159",
@@ -1464,12 +1470,6 @@
"type": "pdns",
"ln": 2
},
{
"host": "morsfu04.top",
"links": "5.101.44.203",
"type": "pdns",
"ln": 2
},
{
"host": "mortar05.top",
"links": "192.236.179.242",
6 ioc_extender/TF_Chrysaor.json
View file
@@ -696,6 +696,12 @@
"type": "certs",
"ln": 2
},
{
"host": "kleven.co",
"links": "5572f138f4ba9cab3aa444fc49cf24d6d7932e93",
"type": "certs",
"ln": 2
},
{
"host": "ksxingye.com",
"links": "168.206.185.83",
30 ioc_extender/TF_Formbook.json
View file
@@ -846,6 +846,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "coolstories22.com.ng",
"links": "1de115581e2a6543d0b1e844f6f54be26ffd70fb",
"type": "certs",
"ln": 2
},
{
"host": "coopertonllc.com",
"links": "199.192.24.12",
@@ -2382,6 +2388,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "server1.coolstories22.com.ng",
"links": "d121f5ee301143e2fdc52363312acbd188428ff6",
"type": "certs",
"ln": 2
},
{
"host": "server1.digitalcontentinsider.com",
"links": "ebfb242ac5cbd1cfb1e05737cc7817235533837e",
@@ -3252,6 +3264,18 @@
"type": "pdns",
"ln": 2
},
{
"host": "www.cinmax.xyz",
"links": "1de115581e2a6543d0b1e844f6f54be26ffd70fb",
"type": "certs",
"ln": 2
},
{
"host": "www.cinmax.xyz",
"links": "d121f5ee301143e2fdc52363312acbd188428ff6",
"type": "certs",
"ln": 2
},
{
"host": "www.commagx4.info",
"links": "63.250.44.249",
@@ -3276,6 +3300,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "www.coolstories22.com.ng",
"links": "1de115581e2a6543d0b1e844f6f54be26ffd70fb",
"type": "certs",
"ln": 2
},
{
"host": "www.cowbex.info",
"links": "162.0.230.164",
156 ioc_extender/TF_QakBot.json
View file
@@ -6468,6 +6468,12 @@
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: QakBot",
"links": "vilde.pro",
"type": "z",
"ln": 2
},
{
"host": "ThreatFox: QakBot",
"links": "villaalena.me",
@@ -8934,6 +8940,12 @@
"type": "certs",
"ln": 2
},
{
"host": "akperyagma.ac.id",
"links": "103.102.155.38",
"type": "pdns",
"ln": 2
},
{
"host": "al2us.com",
"links": "78.46.235.88",
@@ -19452,6 +19464,12 @@
"type": "certs",
"ln": 2
},
{
"host": "barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -25932,6 +25950,12 @@
"type": "certs",
"ln": 2
},
{
"host": "click2search.in",
"links": "5023f086bbb3c28086822bfcea5506b2c083f787",
"type": "certs",
"ln": 2
},
{
"host": "click2search.in",
"links": "76a09d3e2c0ddf5aa32a3d1f7b8868d68e044270",
@@ -28572,6 +28596,12 @@
"type": "certs",
"ln": 2
},
{
"host": "cpanel.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "cpanel.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -37554,6 +37584,12 @@
"type": "certs",
"ln": 2
},
{
"host": "cpcalendars.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "cpcalendars.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -45912,6 +45948,12 @@
"type": "certs",
"ln": 2
},
{
"host": "cpcontacts.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "cpcontacts.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -58428,6 +58470,12 @@
"type": "certs",
"ln": 2
},
{
"host": "ejurnal-analiskesehatan.web.id",
"links": "103.102.155.28",
"type": "pdns",
"ln": 2
},
{
"host": "ekin.pkmtgpriok.com",
"links": "b1fa15d58cb66c5ef96dea8538d97b442ebeb155",
@@ -59478,6 +59526,12 @@
"type": "certs",
"ln": 2
},
{
"host": "eriesetiawan.com",
"links": "103.102.155.38",
"type": "pdns",
"ln": 2
},
{
"host": "eriqbrooklyn-info.safeserverhost.org",
"links": "1e16bb113110b2e29d3de913c222202af4ecb041",
@@ -61788,6 +61842,12 @@
"type": "certs",
"ln": 2
},
{
"host": "flytaxi.ge",
"links": "838f493b6fbe5e3bdb7909eef65125f33089484e",
"type": "certs",
"ln": 2
},
{
"host": "flytaxi.ge",
"links": "85ce64f42862f4531fad8e4b6e1c7a3b6d26b0b3",
@@ -62652,6 +62712,12 @@
"type": "certs",
"ln": 2
},
{
"host": "ftp.flytaxi.ge",
"links": "838f493b6fbe5e3bdb7909eef65125f33089484e",
"type": "certs",
"ln": 2
},
{
"host": "ftp.flytaxi.ge",
"links": "85ce64f42862f4531fad8e4b6e1c7a3b6d26b0b3",
@@ -62958,6 +63024,12 @@
"type": "certs",
"ln": 2
},
{
"host": "gains.cloudmonsterservers.com",
"links": "5023f086bbb3c28086822bfcea5506b2c083f787",
"type": "certs",
"ln": 2
},
{
"host": "gains.cloudmonsterservers.com",
"links": "dad3756eb13eced9f27f3a384fee48c03984f717",
@@ -71436,6 +71508,12 @@
"type": "certs",
"ln": 2
},
{
"host": "ipv6.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "ipv6.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -81300,6 +81378,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "mail.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -84006,6 +84090,12 @@
"type": "certs",
"ln": 2
},
{
"host": "mail.flytaxi.ge",
"links": "838f493b6fbe5e3bdb7909eef65125f33089484e",
"type": "certs",
"ln": 2
},
{
"host": "mail.flytaxi.ge",
"links": "85ce64f42862f4531fad8e4b6e1c7a3b6d26b0b3",
@@ -101196,6 +101286,12 @@
"type": "certs",
"ln": 2
},
{
"host": "pelvic-priestess.com",
"links": "70f0f20300d7cf7b058165a208be82908a35ad74",
"type": "certs",
"ln": 2
},
{
"host": "pelvic-priestess.com",
"links": "8b54f5ad5d8535072d77bc356140ffbe0140249c",
@@ -101226,6 +101322,12 @@
"type": "certs",
"ln": 2
},
{
"host": "pelvic-priestess.gracepelvichealth.com",
"links": "70f0f20300d7cf7b058165a208be82908a35ad74",
"type": "certs",
"ln": 2
},
{
"host": "pelvic-priestess.gracepelvichealth.com",
"links": "8b54f5ad5d8535072d77bc356140ffbe0140249c",
@@ -102480,6 +102582,12 @@
"type": "certs",
"ln": 2
},
{
"host": "pop.flytaxi.ge",
"links": "838f493b6fbe5e3bdb7909eef65125f33089484e",
"type": "certs",
"ln": 2
},
{
"host": "pop.flytaxi.ge",
"links": "85ce64f42862f4531fad8e4b6e1c7a3b6d26b0b3",
@@ -111732,6 +111840,12 @@
"type": "certs",
"ln": 2
},
{
"host": "smkbna.sch.id",
"links": "103.102.155.38",
"type": "pdns",
"ln": 2
},
{
"host": "smkpuriwisatapancasari.sch.id",
"links": "deadb99830fca68b1f522687a2f27a8759927649",
@@ -111828,6 +111942,12 @@
"type": "certs",
"ln": 2
},
{
"host": "smtp.flytaxi.ge",
"links": "838f493b6fbe5e3bdb7909eef65125f33089484e",
"type": "certs",
"ln": 2
},
{
"host": "smtp.flytaxi.ge",
"links": "85ce64f42862f4531fad8e4b6e1c7a3b6d26b0b3",
@@ -116616,6 +116736,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "thebalconehotel.com",
"links": "103.102.155.38",
"type": "pdns",
"ln": 2
},
{
"host": "thebalconehotel.com",
"links": "5f240260574cf20c364143c54c8bf85f14913873",
@@ -122058,6 +122184,12 @@
"type": "certs",
"ln": 2
},
{
"host": "vinylshuffle.tv",
"links": "143.95.250.185",
"type": "pdns",
"ln": 2
},
{
"host": "vipmaintenance.ca",
"links": "385fe54ae213fa41ff901955b8c2674b1b4c5363",
@@ -124650,6 +124782,12 @@
"type": "certs",
"ln": 2
},
{
"host": "webdisk.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "webdisk.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -133740,6 +133878,12 @@
"type": "certs",
"ln": 2
},
{
"host": "webmail.barnik.com",
"links": "2659ae07a75fc966c51e1eb7f75706609227ba5b",
"type": "certs",
"ln": 2
},
{
"host": "webmail.barnik.com",
"links": "72e9770cd5a73e1a5fa40341b0c37135b985834e",
@@ -172266,6 +172410,12 @@
"type": "certs",
"ln": 2
},
{
"host": "www.pelvic-priestess.gracepelvichealth.com",
"links": "70f0f20300d7cf7b058165a208be82908a35ad74",
"type": "certs",
"ln": 2
},
{
"host": "www.pelvic-priestess.gracepelvichealth.com",
"links": "8b54f5ad5d8535072d77bc356140ffbe0140249c",
@@ -176856,12 +177006,6 @@
"type": "certs",
"ln": 2
},
{
"host": "www.saree.com",
"links": "50.115.20.125",
"type": "pdns",
"ln": 2
},
{
"host": "www.saree.com",
"links": "91.197.228.238",
12 ioc_extender/TF_Remcos.json
View file
@@ -306,12 +306,6 @@
"type": "pdns",
"ln": 2
},
{
"host": "gadeopticg.myddns.me",
"links": "185.244.30.240",
"type": "pdns",
"ln": 2
},
{
"host": "hokahay.net",
"links": "104.254.90.235",
@@ -372,6 +366,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "mirroronthewall.hopto.org",
"links": "185.140.53.137",
"type": "pdns",
"ln": 2
},
{
"host": "nas-smokerlolilol.direct.quickconnect.to",
"links": "87.101.92.171",
42 ioc_extender/TF_SmokeLoader.json
View file
@@ -2616,6 +2616,12 @@
"type": "certs",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "179.177.63.84",
"type": "pdns",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "186.182.55.44",
@@ -2634,6 +2640,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "190.140.246.135",
"type": "pdns",
"ln": 2
},
{
"host": "amogohuigotuli.at",
"links": "190.43.145.172",
@@ -4452,6 +4464,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "file-coin-data-5.com",
"links": "37.0.10.199",
"type": "pdns",
"ln": 2
},
{
"host": "file-file-host4.com",
"links": "31.184.249.165",
@@ -4866,6 +4884,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "host-data-coin-11.com",
"links": "37.0.10.199",
"type": "pdns",
"ln": 2
},
{
"host": "host-data-coin-11.com",
"links": "47.251.42.216",
@@ -6318,12 +6342,24 @@
"type": "pdns",
"ln": 2
},
{
"host": "privacy-tools-for-you-777.com",
"links": "37.0.10.199",
"type": "pdns",
"ln": 2
},
{
"host": "privacy-tools-for-you-777.com",
"links": "47.251.42.216",
"type": "pdns",
"ln": 2
},
{
"host": "privacytools-for-you-777.com",
"links": "37.0.10.199",
"type": "pdns",
"ln": 2
},
{
"host": "privacytoolsforyou.xyz",
"links": "6595cd682339af9fe123f5e5a28f0490bf0268b5",
@@ -6720,6 +6756,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "stats404.info",
"links": "37.0.10.199",
"type": "pdns",
"ln": 2
},
{
"host": "stats404.info",
"links": "47.251.42.216",
96 ioc_extender/TF_magecart.json
View file
@@ -108,6 +108,12 @@
"type": "certs",
"ln": 2
},
{
"host": "3dmotor.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "3dvictory.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
@@ -564,6 +570,12 @@
"type": "certs",
"ln": 2
},
{
"host": "ashelf.store",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
"type": "certs",
"ln": 2
},
{
"host": "askiledos.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
@@ -1116,6 +1128,12 @@
"type": "certs",
"ln": 2
},
{
"host": "esigne.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "extrasaleugg.ru",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
@@ -1194,6 +1212,18 @@
"type": "certs",
"ln": 2
},
{
"host": "gairdrops.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "gastrotouch.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "gcdn.space",
"links": "8.209.69.3",
@@ -1962,6 +1992,12 @@
"type": "certs",
"ln": 2
},
{
"host": "kubectl.stripe-auth-api.com",
"links": "47.74.87.193",
"type": "pdns",
"ln": 2
},
{
"host": "l7fc3088.justinstalledpanel.com",
"links": "198.27.83.62",
@@ -2064,6 +2100,12 @@
"type": "certs",
"ln": 2
},
{
"host": "marmeladd.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "masolikad.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
@@ -2088,6 +2130,12 @@
"type": "certs",
"ln": 2
},
{
"host": "medicibistro.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "medicine68.store",
"links": "4d8e2becdfb0a3309e46e243b1f98b46ae049d36",
@@ -2262,6 +2310,12 @@
"type": "certs",
"ln": 2
},
{
"host": "nomerpodderzhki.store",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
"type": "certs",
"ln": 2
},
{
"host": "non-nude.site",
"links": "188.119.113.215",
@@ -2466,6 +2520,12 @@
"type": "certs",
"ln": 2
},
{
"host": "pleransre.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "portalnews24.store",
"links": "e8d6de5b18251d807fbec66a74fde4223ed13727",
@@ -2526,6 +2586,18 @@
"type": "certs",
"ln": 2
},
{
"host": "rvd-sochi.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "sale-cleaning-robot.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "sam-kadastr.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
@@ -2802,6 +2874,12 @@
"type": "certs",
"ln": 2
},
{
"host": "topremonteh.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "topstore123.store",
"links": "4d8e2becdfb0a3309e46e243b1f98b46ae049d36",
@@ -2826,12 +2904,24 @@
"type": "pdns",
"ln": 2
},
{
"host": "travelstartour.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "ttyfhdgyy.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "uk-objectiv.store",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "urbeauteneeds.com",
"links": "4d8e2becdfb0a3309e46e243b1f98b46ae049d36",
@@ -3366,6 +3456,12 @@
"type": "pdns",
"ln": 2
},
{
"host": "xflirty.ru",
"links": "2b3b934000b73d55403b7f96567d0cea2e2ab8bb",
"type": "certs",
"ln": 2
},
{
"host": "xn--90anpebmew.xn--p1ai",
"links": "5b410f323f84cc0ea3f41697444153e11400c683",
8 ioc_extender/et_list.json
View file
@@ -133,7 +133,13 @@
"name": "ET_NIGHTSCOUT Poison Ivy Variant"
},
{
"name": "ET_NOBELIUM Cobalt Strike"
"name": "ET_NOBELIUM (TA421)"
},
{
"name": "ET_NOBELIUM (TA421) CEELOADER"
},
{
"name": "ET_NOBELIUM (TA421) Cobalt Strike"
},
{
"name": "ET_OSX-NukeSped Variant"
1,274 mirai_ddos_victims/2021-11-06-mirai_ddos_victims.json
View file

This file was deleted.

448 mirai_ddos_victims/2021-12-07-mirai_ddos_victims.json
View file

Large diffs are not rendered by default.

13,301 mozi_tracker/2021-11-06-MOZI-IPLIST.txt
View file

This file was deleted.

12,906 mozi_tracker/2021-12-07-MOZI-IPLIST.txt
View file

Large diffs are not rendered by default.