Report > https://www.fireeye.com/resources/pdfs/fireeye-poison-ivy-report.pdf

Indicators

3q.wubangtu.info
6r.suibian2010.info
aaa.aa24.net
abcd091221.3322.org
abcd100621.3322.org
abcd120221.3322.org
abcd120719.6600.org
abcd120807.3322.org
action.jungleheart.com
aei.cisconline.net
anti-virus.sytes.net
antivirus-groups.com
apple.cmdnetview.com
applelib120102.9966.org
army.xxuz.com
autonews.redirect.hm
autuo.xicp.net
av.ddns.us
baby.macforlinux.net
barrybaker.6600.org
bst.longmusic.com
cecon.flower-show.org
cloudns.8800.org
cmdnetview.com
cs.lflink.com
ct.toh.info
cvnxus.mine.nu
cyhk2008.8800.org
dawosi.3322.org
dedydns.ns01.us
dmc.ezua.com
DNSPODDWG.authorizeddns.org
do.ddns.ms
domain.rm6.org
e.ct.toh.info
europa.freetcp.com
exam.zyns.com
fast.ddns.us
fbi.zyns.com
for.ddns.mobi
ftp.join3com.com
gensuzuki.6600.org
geo.dnset.com
have8000.com
helshellfucde.8866.org
hi777.3322.org
hk.2012yearleft.com
hk.cmdnetview.com
info.jodsky.com
ipod.jodsky.com
jj.mysecondarydns.com
jpwen.2288.org
js001.3322.org
kmd.crabdance.com
kr.iphone.qpoe.com
kr.wt.ikwb.com
ma.vizvaz.com
maofajapa.3322.org
meibubaker.3322.org
memo.dnsrd.com
mf.ddns.info
microcnmlgb.3322.org
microsofta.byinter.net
microsoftb.byinter.net
microsoftc.byinter.net
microsoftd.byinter.net
microsofte.byinter.net
microsoftupdate.eDNS.biz
microsoftupdate.freeTCP.com
microsoftupdate.ns01.biz
minzhu.jetos.com
mongoles.3322.org
monkey.2012yearleft.com
muller.exprenum.com
nasa.xxuz.com
ngcc.8800.org
nkr.iphone.qpoe.com
nodns2.qipian.org
nualits.MrFace.com
nyhq.wikaba.com
out.se7.org
pansenes.3322.org
pliment.3322.org
poc.hidnew.com
pu.flower-show.org
rdp.hidnew.com
scrlk.exprenum.com
send.have8000.com
sh.chromeenter.com
sportsnews.chilichi.com
sportsnews.findhere.org
support.mrslove.com
suzukigooogle.8866.org
tempfy.9966.org
tempsys.8866.org
test.yamaha.10dig.net
thief.epac.to
threethree.ns1.name
tw.2012yearleft.com
twtw.toh.info
usemail.mrbasic.com
voanews.proxydns.com
wefhijapad.9966.org
weile3322a.3322.org
weile3322b.3322.org
win7.my03.com
wt.ikwb.com
ww.msnet.proxydns.com
www.consilium.dnset.com
www.consilium.dynssl.com
www.consilium.proxydns.com
www.dhcpserver.ns01.us
www.dnsserver.ns01.us
www.hq.dsmtp.com
www.hq.dynssl.com
www.iesecs.com
www.microsoft.dhcp.biz
www.microsoft.dynssl.com
www.microsoft.onmypc.net
www.microsoft.wikaba.com
www.microsoftupdate.dynssl.COM
www.msnet.freetcp.com
www.msnet.proxydns.com
www.st4rt.org
www.unog.dnset.com
www.unog.dynssl.com
www.unog.freetcp.com
www.webserver.dynssl.com
www.webserver.fartit.com
www.webserver.freetcp.com
www.webserver.proxydns.com
www.windows.wikaba.com
www.yamaha10.tk
xc.chromeenter.com
xgstone.3322.org
xgstonebak.3322.org
xwwl8866.vicp.net
yahoomail.2waky.com
yeap1.jumpingcrab.com
yo.acmetoy.com
yugoogless.3322.org
za.myftp.info
zg.ns02.biz

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]