Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [2026-05-20] IP/OS Coruna telemetry domains
- Detection: https://github.com/stamparm/maltrail/commit/7f01ccd57edb32d4cbdc3b82f75dd5daccaa1d64
- "IP/OS telemetry syncs to a C2 at l1ewsu3yjkqeroy[.]xyz (Cloudflare-fronted) every 10 seconds"
- Ref: https://safedep.io/art-template-npm-supply-chain-compromise/
- =================================================
- 0fx7qmdggegytul\.xyz
- 1an94xtp37j04rh\.xyz
- 23hs16uua03wc37\.xyz
- 2n8psx9r4rbu4ym\.xyz
- 4laqouz21lrm4qa\.xyz
- 4z1jn2d6f95ab6o\.xyz
- 5hz5vevyy0sccxx\.xyz
- 6y3r7895ec4ucxd\.xyz
- 7kvgccspqu66khd\.xyz
- 82lqwfoid9uh03u\.xyz
- 8d3x413aph9yel4\.xyz
- 93ulni68qu7fkqt\.xyz
- 9pzx64gxoro0o8t\.xyz
- a1t5ps59bvg58nl\.xyz
- aygd82dymm4kpw4\.xyz
- c3atzhavt9t3drw\.xyz
- cb6b06ev3e789cy\.xyz
- ct1boy78fhhbi7b\.xyz
- d1q2kfw4wj6a1p0\.xyz
- d95l3efcegbrma2\.xyz
- g3knq19zsveuvux\.xyz
- gkxtguomb5mrs16\.xyz
- hivkaimrsrbnuek\.xyz
- isllczzovdlvg5s\.xyz
- j7bvmd04ttsyua6\.xyz
- je43wrtxf8j27rm\.xyz
- km974980kv49sf2\.xyz
- l1ewsu3yjkqeroy\.xyz
- mxjht88dwegvaku\.xyz
- ned0e3bwqooh4kz\.xyz
- npihetcniyq5ymb\.xyz
- odntitrx9mulxf0\.xyz
- og2yyl3vgizq6rx\.xyz
- q6762dzwtgypc80\.xyz
- q6ouy6sewocm3sy\.xyz
- qcpujc0ep5ujntz\.xyz
- t6ptmj5tay5s5p8\.xyz
- tpl09o77v75fygn\.xyz
- ukgwi7hotwlzpnp\.xyz
- wvd1u78mc4tvk1l\.xyz
- x2wy5e652cjcmvl\.xyz
- x8fdyv0vp4txtfi\.xyz
- xjclgn6ospcjvci\.xyz
- xy7bhvf7s4fiz42\.xyz
- yagy548ag5zlsrf\.xyz
- yauo3bdp0fqu9hb\.xyz
- yw5jbbhgzqe3gnq\.xyz
- zu44xabg5ak3pxt\.xyz
Advertisement
Add Comment
Please, Sign In to add comment
