Drupal cryptojacking campaign -- vuuwd.com

Domain/URL	IP
http://afimin.com/misc/jquery.once.js?v=1.2	82.138.73.42
http://avexacomputing.com/misc/jquery.once.js?v=1.2	37.61.232.130
http://cf-bank.ru/misc/jquery.once.js?v=1.2	89.253.226.57
http://d2t.co/misc/jquery.once.js?v=1.2	192.186.253.8
http://dljmsystem.pl/misc/jquery.once.js?v=1.2	77.55.81.67
http://ecosoulife.com/misc/jquery.once.js?v=1.2	43.241.54.247
http://gibsonsbuilding.com/misc/jquery.once.js?v=1.2	104.27.136.31
http://inmet.pl/misc/jquery.once.js?v=1.2	212.85.110.249
http://int-x.ru/misc/jquery.once.js?v=1.2	37.46.128.159
http://kmarasvdb.gov.tr/misc/jquery.once.js?v=1.2	188.132.180.115
http://maids.ua/misc/jquery.once.js?v=1.2	5.101.119.225
http://ndiop.kiev.ua/misc/jquery.once.js?v=1.2	178.20.158.40
http://networkofpractice.org/misc/jquery.once.js?v=1.2	204.93.177.137
http://nikolskreg.ru/misc/jquery.once.js?v=1.2	195.208.1.106
http://obruch.ru/misc/jquery.once.js?v=1.2	31.31.196.239
http://onevoicepress.com/misc/jquery.once.js?v=1.2	64.118.87.36
http://pagato.biz/misc/jquery.once.js?v=1.2	109.200.26.40
http://peter-gabel.com/misc/jquery.once.js?v=1.2	155.186.145.231
http://safirasia.org/misc/jquery.once.js?v=1.2	107.173.187.105
http://sistecr.ac.in/misc/jquery.once.js?v=1.2	103.251.25.94
http://sociotal.eu/misc/jquery.once.js?v=1.2	89.238.188.205
http://solovushka46.ru/misc/jquery.once.js?v=1.2	144.76.198.105
http://supreme-group.net/misc/jquery.once.js?v=1.2	13.95.171.233
http://sushilabirlagirlschool.com/misc/jquery.once.js?v=1.2	69.175.56.241
http://theatre-ouvert-archives.com/misc/jquery.once.js?v=1.2	213.186.33.82
http://topbrainds.com/misc/jquery.once.js?v=1.2	112.124.124.121
http://uneac.org.cu/misc/jquery.once.js?v=1.2	200.55.135.29
http://www.a8-actualites.com/misc/jquery.once.js?v=1.2	178.32.79.23
http://www.ardc.ru/misc/jquery.once.js?v=1.2	188.225.38.171
http://www.congresouniversidad.cu/misc/jquery.once.js?v=1.2	200.14.55.214
http://www.degeroyachts.fi/misc/jquery.once.js?v=1.2	81.22.250.25
http://www.ethionet.et/misc/jquery.once.js?v=1.2	213.55.96.140
http://www.ethiotelecom.et/misc/jquery.once.js?v=1.2	213.55.96.140
http://www.inyene.com/misc/jquery.once.js?v=1.2	185.38.44.179
http://www.level5partners.com/misc/jquery.once.js?v=1.2	104.130.169.110
http://www.matzikamamun.co.za/misc/jquery.once.js?v=1.2	129.232.185.234
http://www.onema.fr/misc/jquery.once.js?v=1.2	159.180.228.229
http://www.pixshock.net/misc/jquery.once.js?v=1.2	136.243.4.40
http://www.ptlgroup.com.sg/misc/jquery.once.js?v=1.2	103.104.196.98
http://www.semnaniau.ac.ir/misc/jquery.once.js?v=1.2	217.218.243.197
http://www.so2014.com/misc/jquery.once.js?v=1.2	89.106.244.114
http://www.spiil.org/misc/jquery.once.js?v=1.2	91.194.60.51
http://www.sprint-car.ro/misc/jquery.once.js?v=1.2	5.2.185.154
http://www.visaprolaw.com/misc/jquery.once.js?v=1.2	216.87.173.183
http://www.webrelief.fr/misc/jquery.once.js?v=1.2	87.98.154.146
http://www.woneel.com/misc/jquery.once.js?v=1.2	27.123.7.14
https://ecosoulife.com/misc/jquery.once.js?v=1.2	43.241.54.247
https://falconcampservices.com/misc/jquery.once.js?v=1.2	74.207.240.47
https://kongre.net/misc/jquery.once.js?v=1.2	139.162.186.119
https://museum-irkutsk.com/misc/jquery.once.js?v=1.2	94.154.83.134
https://polprowet.pl/misc/jquery.once.js?v=1.2	85.128.250.34
https://spb.izet.ru/misc/jquery.once.js?v=1.2	185.77.150.142
https://tessellastudio.com/misc/jquery.once.js?v=1.2	188.120.254.133
https://trinity-kreativ.de/misc/jquery.once.js?v=1.2	109.239.49.77
https://www.avidity.com/misc/jquery.once.js?v=1.2	216.239.225.208
https://www.diabeteswellness.net/misc/jquery.once.js?v=1.2	5.39.105.12
https://www.igbcolombia.com/misc/jquery.once.js?v=1.2	108.163.227.76
https://www.opi.ch/misc/jquery.once.js?v=1.2	164.132.98.152
https://www.plantationgalleries.com/misc/jquery.once.js?v=1.2	204.93.248.230
https://www.trinity-kreativ.de/misc/jquery.once.js?v=1.2	109.239.49.77