Report > http://www.secureworks.com/cyber-threat-intelligence/threats/secrets-of-the-comfoo-masters/

Indicators

accounts.ddns.info
active.googleupdate.hk
active.nifty-user.com
addr.googleupdate.hk
ahn06.myfw.us
allroot80.4pu.com
apf.googleupdate.hk
aptlkxqm.25u.com
back.agfire.com
back.winsupdate.com
bbs.dynssl.com
bbs.gladallinone.com
bigdog.winself.com
billgates.itsaol.com
bjllgvtms.effers.com
blizzcon.sexidude.com
blizzcon.sexxxy.biz
buffet.bbsindex.com
buffet80.bigmoney.biz
buffet80.itsaol.com
bxpudqx.otzo.com
cart.itsaol.com
catawarm.gicp.net
cell.missingthegirl.com
cmart.iownyour.org
config.microupdata.com
copyright.imwork.net
cpt.csinfos.net
crsky.systemsupdata.com
database.googleupdate.hk
davidcat.yick.lflink.com
daviddog.gicp.net
db.themmdance.com
ddns.yourturbe.org
demi.yick.lflink.com
deminich.gicp.net
deminich.jungleheart.com
dgoil.3322.org
dns.google-login.com
do.centr-info.com
dolaamen.xicp.net
domain.centr-info.com
domain.nifty-user.com
download.yourturbe.org
dunya.8800.org
et.stoneqwer.com
eudge.3322.org
eudge.redirect.hm
european.pass.as
eurowizard.byinter.net
facebook.nifty-japan.com
fact.winsupdate.com
fbook.google-login.com
fish.windwarp.uicp.net
football.deminich.jungleheart.com
football.dynamiclink.ddns.us
foxpart.oicp.net
fr.washbart.com
free3w.lflinkup.org
ftp.alvinton.jetos.com
ftp.lucky.ddns.ms
ftp.superaround.ns02.biz
ftp.y3.3-a.net
ftpserver.3-a.net
fun.marktie.com
funew.noorno.com
funnygamea.vicp.net
games.jeepworker.com
games.noorno.com
googlemail.servehttp.com
googleupdate2009.kmip.net
graymmy.longmusic.com
gws01.microupdata.com
gws12.microupdata.com
hanoihcm.phdns01.com
havefuns.rkntils.10dig.net
henryclub.25u.com
hfwwpofuyer.4pu.com
homehost.3322.org
https.port25.biz
hyphen.dyndns.biz
hzg002.mooo.com
image.google-login.com
image.qpoe.com
info.kembletech.com
info.rumorse.com
info.whandjg.net
insert.51vip.biz
intrusion.post-horse.net
it.buglan.com
it.davyhop.com
it.pudnet.net
johnnees.rkntils.10dig.net
kapa2000.3322.org
kimomail.3-a.net
korea001.tribeman.com
korea1.mooo.com
kx.davyhop.com
lanama.jkub.com
lcyma.jetos.com
li.noorno.com
livedoor.microupdata.com
login.yahoo-user.com
lovehill.3d-game.com
lovehill.dyndns-blog.com
lovehill.xxuz.com
lsass.google-login.com
luck201202.oicp.net
mail.carsystm.net
mail.lthreebox.com
mail.mariofreegame.net
mail.mgtfcayman.com
mail.mofa.zyns.com
mail.systemsupdata.com
mail.xygong.com
mail91.nifty-login.com
mail91.nifty-user.com
mail911.nifty-login.com
mail911.nifty-user.com
mailsrv.mariofreegame.net
manpower.3322.org
marhone.vicp.net
mdb.clawsnare.com
mf.tpznet.com
microsoft.redirect.hm
mil.winsupdate.com
msnsupport.servehttp.com
my.officebeautyclub.com
myweb.wwwcrazy.com
nevruz.mrface.com
news.mcesign.com
news.rumorse.com
news.win.dnset.com
news.wintersunshine.net
night.mefound.com
nikimen.etowns.net
nslsa.microupdata.com
nsser.systemsupdata.com
nsservic.googleupdate.hk
nunok.ninth.biz
oct.clawsnare.com
offer.eosboxster.com
office-sevice.com
okkou.9966.org
park006.myfw.us
pazar.vicp.net
pcnews.rr.nu
pcpc.helpngr.net
pcuser.ikwb.com
podding.newsinsky.com
poft.yahoo-user.com
pofuyer.4pu.com
polly.jwt.ourhobby.com
polly.slyip.com
poly.jwt.ourhobby.com
pop.microupdata.com
pop.peroillion.com
pop3.freemail.mrface.com
prc.deminich.jungleheart.com
prc.dynamiclink.ddns.us
pure.mypop3.org
record.yick.lflink.com
rember.clawsnare.com
reserve.trickip.net
rouji.king.proxydns.com
s0ft.noorno.com
sapudy.dns2.us
server.epac.to
server.nifty-login.com
server.universityexp.com
services.google-config.com
shift.8866.org
sinagame.2288.org
singes.organiccrap.com
singngh.gicp.net
slll.pbfsnet.com
smell.gotgeek.com
smtp.deminich.jungleheart.com
smtp.travelexpolorer.com
soft.yahoo-user.com
sollysly.servegame.com
sonam.goodnews007.com
sports.wintersunshine.net
srv91.googleupdate.hk
srv91.yahoo-user.com
srv911.yahoo-user.com
sscdtt.phmail.us
stone.king.proxydns.com
superaround.ns02.biz
tech.bommow.com
terrys.rr.nu
test1.dns1.us
test1.windwarp.uicp.net
thec.csinfos.net
timeout.myvnc.com
trans.helpngr.net
tttt.sundaynews.us
tw.pudnet.net
uncrisis.findhere.org
update.yourturbe.org
usstream.coyo.eu
venus.gr8domain.biz
vstar-2006.vicp.net
wakawaka.servehttp.com
web.nifty-login.com
web.nifty-user.com
web.yahoo-user.com
webdata.helpngr.net
wetboy.vicp.hk
winhelp.yahoo-config.com
winserver.3-a.net
wogawoga.sytes.net
worldwide.servehttp.com
wt.pudnet.net
wwmrus.gicp.net
www.a1yac.net
www.avau.info
www.ayfd.info
www.butr.info
www.catholicstory.info
www.config.sendsmtp.com
www.drsc.in
www.firehorse.changeip.name
www.fsdr.info
www.google-login.com
www.greenhawthorn.com
www.grtk.info
www.hgtw.info
www.jeepworker.com
www.kkle.info
www.lconstruct.com
www.linejudge.net
www.microsoft.yourtrap.com
www.missingthegirl.com
www.nifty-japan.com
www.noorno.com
www.post-horse.net
www.search.wwwhost.biz
www.setinfor.proxydns.com
www.smtp2010.googleupdate.hk
www.solarisc.com
www.superpowereye.com
www.swf.zyns.com
www.test1.dns1.us
www.tomdavid.dns04.com
www.windows.dynamicdns.org.uk
www.wsdv.info
www12.sexidude.com
xmahone.51vip.biz
xmahone.gicp.net
xmahone.suroot.com
yftpost.flnet.org
ynet.nifty-login.com
ynet.nifty-user.com
zp.amazingrm.com
zp.tpznet.com

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]