Export from MISP Threat Report Dark Basin (MISP Event #147) Threat Report Dark Basin 147 2020-06-08T00:00:00+00:00 2020-06-08T15:58:17+00:00 New Attribution Attribution: amanda.lovers@mail.com (MISP Attribute #19050) Malware Artifacts Attribution: amanda.lovers@mail.com (MISP Attribute #19050) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Attribution Attribution: amanda.kruetner@mail.com (MISP Attribute #19051) Malware Artifacts Attribution: amanda.kruetner@mail.com (MISP Attribute #19051) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Attribution Attribution: anurag.breja342@mail.com (MISP Attribute #19052) Malware Artifacts Attribution: anurag.breja342@mail.com (MISP Attribute #19052) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Attribution Attribution: jacktanne@outlook.com (MISP Attribute #19053) Malware Artifacts Attribution: jacktanne@outlook.com (MISP Attribute #19053) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Attribution Attribution: flaviatales@mail.com (MISP Attribute #19054) Malware Artifacts Attribution: flaviatales@mail.com (MISP Attribute #19054) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Attribution Attribution: robert.klein@europe.com (MISP Attribute #19055) Malware Artifacts Attribution: robert.klein@europe.com (MISP Attribute #19055) None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailauthservice.com (MISP Attribute #18688) Malware Artifacts Domain Watchlist Network activity: emailauthservice.com (MISP Attribute #18688) emailauthservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: chromeperfection.com (MISP Attribute #18944) Malware Artifacts Domain Watchlist Network activity: chromeperfection.com (MISP Attribute #18944) chromeperfection.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailmappingservice.com (MISP Attribute #18689) Malware Artifacts Domain Watchlist Network activity: emailmappingservice.com (MISP Attribute #18689) emailmappingservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: trustedserviceonline.com (MISP Attribute #18945) Malware Artifacts Domain Watchlist Network activity: trustedserviceonline.com (MISP Attribute #18945) trustedserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailservername299.com (MISP Attribute #18690) Malware Artifacts Domain Watchlist Network activity: emailservername299.com (MISP Attribute #18690) emailservername299.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: browserdirectservice.com (MISP Attribute #18946) Malware Artifacts Domain Watchlist Network activity: browserdirectservice.com (MISP Attribute #18946) browserdirectservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailvalidateservice.com (MISP Attribute #18691) Malware Artifacts Domain Watchlist Network activity: emailvalidateservice.com (MISP Attribute #18691) emailvalidateservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: browserredirect.com (MISP Attribute #18947) Malware Artifacts Domain Watchlist Network activity: browserredirect.com (MISP Attribute #18947) browserredirect.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostemailserver.com (MISP Attribute #18692) Malware Artifacts Domain Watchlist Network activity: hostemailserver.com (MISP Attribute #18692) hostemailserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionalblogging.com (MISP Attribute #18948) Malware Artifacts Domain Watchlist Network activity: optionalblogging.com (MISP Attribute #18948) optionalblogging.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailauthenticatorservice.com (MISP Attribute #18693) Malware Artifacts Domain Watchlist Network activity: mailauthenticatorservice.com (MISP Attribute #18693) mailauthenticatorservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectedmaxstores.com (MISP Attribute #18949) Malware Artifacts Domain Watchlist Network activity: selectedmaxstores.com (MISP Attribute #18949) selectedmaxstores.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailauthservice399.com (MISP Attribute #18694) Malware Artifacts Domain Watchlist Network activity: mailauthservice399.com (MISP Attribute #18694) mailauthservice399.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: auditionregistrationonline.com (MISP Attribute #18950) Malware Artifacts Domain Watchlist Network activity: auditionregistrationonline.com (MISP Attribute #18950) auditionregistrationonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailcollectorservice.com (MISP Attribute #18695) Malware Artifacts Domain Watchlist Network activity: mailcollectorservice.com (MISP Attribute #18695) mailcollectorservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: homeforallorphans.com (MISP Attribute #18951) Malware Artifacts Domain Watchlist Network activity: homeforallorphans.com (MISP Attribute #18951) homeforallorphans.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserverenterprise.com (MISP Attribute #18696) Malware Artifacts Domain Watchlist Network activity: mailserverenterprise.com (MISP Attribute #18696) mailserverenterprise.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: knowledgebaseonlineuk.com (MISP Attribute #18952) Malware Artifacts Domain Watchlist Network activity: knowledgebaseonlineuk.com (MISP Attribute #18952) knowledgebaseonlineuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailservershare.com (MISP Attribute #18697) Malware Artifacts Domain Watchlist Network activity: mailservershare.com (MISP Attribute #18697) mailservershare.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: promotespritialbelief.com (MISP Attribute #18953) Malware Artifacts Domain Watchlist Network activity: promotespritialbelief.com (MISP Attribute #18953) promotespritialbelief.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: networkshareserver.com (MISP Attribute #18698) Malware Artifacts Domain Watchlist Network activity: networkshareserver.com (MISP Attribute #18698) networkshareserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: getreadytorunhalfmarathon.com (MISP Attribute #18954) Malware Artifacts Domain Watchlist Network activity: getreadytorunhalfmarathon.com (MISP Attribute #18954) getreadytorunhalfmarathon.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainserver399.com (MISP Attribute #18699) Malware Artifacts Domain Watchlist Network activity: domainserver399.com (MISP Attribute #18699) domainserver399.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: getsetgoforhealth.com (MISP Attribute #18955) Malware Artifacts Domain Watchlist Network activity: getsetgoforhealth.com (MISP Attribute #18955) getsetgoforhealth.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostsecuremail544.com (MISP Attribute #18700) Malware Artifacts Domain Watchlist Network activity: hostsecuremail544.com (MISP Attribute #18700) hostsecuremail544.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxserverfast.com (MISP Attribute #18956) Malware Artifacts Domain Watchlist Network activity: linuxserverfast.com (MISP Attribute #18956) linuxserverfast.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shrtnerlnk.com (MISP Attribute #18701) Malware Artifacts Domain Watchlist Network activity: shrtnerlnk.com (MISP Attribute #18701) shrtnerlnk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: tinyurlshortner.com (MISP Attribute #18957) Malware Artifacts Domain Watchlist Network activity: tinyurlshortner.com (MISP Attribute #18957) tinyurlshortner.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailingserver938.com (MISP Attribute #18702) Malware Artifacts Domain Watchlist Network activity: mailingserver938.com (MISP Attribute #18702) mailingserver938.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msgrdrg.com (MISP Attribute #18958) Malware Artifacts Domain Watchlist Network activity: msgrdrg.com (MISP Attribute #18958) msgrdrg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailserver499.com (MISP Attribute #18703) Malware Artifacts Domain Watchlist Network activity: emailserver499.com (MISP Attribute #18703) emailserver499.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: dnsserverprv.com (MISP Attribute #18959) Malware Artifacts Domain Watchlist Network activity: dnsserverprv.com (MISP Attribute #18959) dnsserverprv.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserverru2099.com (MISP Attribute #18704) Malware Artifacts Domain Watchlist Network activity: mailserverru2099.com (MISP Attribute #18704) mailserverru2099.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: economyservicesil.com (MISP Attribute #18960) Malware Artifacts Domain Watchlist Network activity: economyservicesil.com (MISP Attribute #18960) economyservicesil.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netsecureserver399.com (MISP Attribute #18705) Malware Artifacts Domain Watchlist Network activity: netsecureserver399.com (MISP Attribute #18705) netsecureserver399.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: portfoliofasinating.com (MISP Attribute #18961) Malware Artifacts Domain Watchlist Network activity: portfoliofasinating.com (MISP Attribute #18961) portfoliofasinating.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: lnkshrtnr.com (MISP Attribute #18706) Malware Artifacts Domain Watchlist Network activity: lnkshrtnr.com (MISP Attribute #18706) lnkshrtnr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectiveservicemax.com (MISP Attribute #18962) Malware Artifacts Domain Watchlist Network activity: selectiveservicemax.com (MISP Attribute #18962) selectiveservicemax.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailsecurenode.com (MISP Attribute #18707) Malware Artifacts Domain Watchlist Network activity: emailsecurenode.com (MISP Attribute #18707) emailsecurenode.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: maxlaboratories.com (MISP Attribute #18963) Malware Artifacts Domain Watchlist Network activity: maxlaboratories.com (MISP Attribute #18963) maxlaboratories.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostemailsecureserver.com (MISP Attribute #18708) Malware Artifacts Domain Watchlist Network activity: hostemailsecureserver.com (MISP Attribute #18708) hostemailsecureserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostfeasta.com (MISP Attribute #18964) Malware Artifacts Domain Watchlist Network activity: hostfeasta.com (MISP Attribute #18964) hostfeasta.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailmarknotes.com (MISP Attribute #18709) Malware Artifacts Domain Watchlist Network activity: mailmarknotes.com (MISP Attribute #18709) mailmarknotes.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: readmytipsntricks.com (MISP Attribute #18965) Malware Artifacts Domain Watchlist Network activity: readmytipsntricks.com (MISP Attribute #18965) readmytipsntricks.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailhostsecurehk.com (MISP Attribute #18710) Malware Artifacts Domain Watchlist Network activity: emailhostsecurehk.com (MISP Attribute #18710) emailhostsecurehk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: backwaterreservoir.com (MISP Attribute #18966) Malware Artifacts Domain Watchlist Network activity: backwaterreservoir.com (MISP Attribute #18966) backwaterreservoir.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailgatorservice.com (MISP Attribute #18711) Malware Artifacts Domain Watchlist Network activity: mailgatorservice.com (MISP Attribute #18711) mailgatorservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: supportserviceeu.com (MISP Attribute #18967) Malware Artifacts Domain Watchlist Network activity: supportserviceeu.com (MISP Attribute #18967) supportserviceeu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netsecureemailservice.com (MISP Attribute #18712) Malware Artifacts Domain Watchlist Network activity: netsecureemailservice.com (MISP Attribute #18712) netsecureemailservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: bellsouthnetwork.com (MISP Attribute #18968) Malware Artifacts Domain Watchlist Network activity: bellsouthnetwork.com (MISP Attribute #18968) bellsouthnetwork.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linkshortnr.com (MISP Attribute #18713) Malware Artifacts Domain Watchlist Network activity: linkshortnr.com (MISP Attribute #18713) linkshortnr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: homeremedytipntricks.com (MISP Attribute #18969) Malware Artifacts Domain Watchlist Network activity: homeremedytipntricks.com (MISP Attribute #18969) homeremedytipntricks.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailhostingsecurenet.com (MISP Attribute #18714) Malware Artifacts Domain Watchlist Network activity: mailhostingsecurenet.com (MISP Attribute #18714) mailhostingsecurenet.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: cathostingservice.com (MISP Attribute #18970) Malware Artifacts Domain Watchlist Network activity: cathostingservice.com (MISP Attribute #18970) cathostingservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailtransferserver.com (MISP Attribute #18715) Malware Artifacts Domain Watchlist Network activity: mailtransferserver.com (MISP Attribute #18715) mailtransferserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: economyfeeds.com (MISP Attribute #18971) Malware Artifacts Domain Watchlist Network activity: economyfeeds.com (MISP Attribute #18971) economyfeeds.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emaildeliverysuccess.com (MISP Attribute #18716) Malware Artifacts Domain Watchlist Network activity: emaildeliverysuccess.com (MISP Attribute #18716) emaildeliverysuccess.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: productdemoservice.com (MISP Attribute #18972) Malware Artifacts Domain Watchlist Network activity: productdemoservice.com (MISP Attribute #18972) productdemoservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailmarkservice.com (MISP Attribute #18717) Malware Artifacts Domain Watchlist Network activity: mailmarkservice.com (MISP Attribute #18717) mailmarkservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ultimateresponseservice.com (MISP Attribute #18973) Malware Artifacts Domain Watchlist Network activity: ultimateresponseservice.com (MISP Attribute #18973) ultimateresponseservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailcommunicationservice.com (MISP Attribute #18718) Malware Artifacts Domain Watchlist Network activity: mailcommunicationservice.com (MISP Attribute #18718) mailcommunicationservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: cyberserverusa.com (MISP Attribute #18974) Malware Artifacts Domain Watchlist Network activity: cyberserverusa.com (MISP Attribute #18974) cyberserverusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailrockservice.com (MISP Attribute #18719) Malware Artifacts Domain Watchlist Network activity: mailrockservice.com (MISP Attribute #18719) mailrockservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ecoserveraus.com (MISP Attribute #18975) Malware Artifacts Domain Watchlist Network activity: ecoserveraus.com (MISP Attribute #18975) ecoserveraus.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainemailhostings.com (MISP Attribute #18720) Malware Artifacts Domain Watchlist Network activity: domainemailhostings.com (MISP Attribute #18720) domainemailhostings.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: forumtechtopic.com (MISP Attribute #18976) Malware Artifacts Domain Watchlist Network activity: forumtechtopic.com (MISP Attribute #18976) forumtechtopic.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: rockerhostings.com (MISP Attribute #18721) Malware Artifacts Domain Watchlist Network activity: rockerhostings.com (MISP Attribute #18721) rockerhostings.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: interserver439.com (MISP Attribute #18977) Malware Artifacts Domain Watchlist Network activity: interserver439.com (MISP Attribute #18977) interserver439.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basemailservice.com (MISP Attribute #18722) Malware Artifacts Domain Watchlist Network activity: basemailservice.com (MISP Attribute #18722) basemailservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: nameserver3476.com (MISP Attribute #18978) Malware Artifacts Domain Watchlist Network activity: nameserver3476.com (MISP Attribute #18978) nameserver3476.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostmailsecureserver.com (MISP Attribute #18723) Malware Artifacts Domain Watchlist Network activity: hostmailsecureserver.com (MISP Attribute #18723) hostmailsecureserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlinemusicstoreuk.com (MISP Attribute #18979) Malware Artifacts Domain Watchlist Network activity: onlinemusicstoreuk.com (MISP Attribute #18979) onlinemusicstoreuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailpostsecureservice.com (MISP Attribute #18724) Malware Artifacts Domain Watchlist Network activity: mailpostsecureservice.com (MISP Attribute #18724) mailpostsecureservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: chatserverrussia.com (MISP Attribute #18980) Malware Artifacts Domain Watchlist Network activity: chatserverrussia.com (MISP Attribute #18980) chatserverrussia.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: strurl.click (MISP Attribute #18725) Malware Artifacts Domain Watchlist Network activity: strurl.click (MISP Attribute #18725) strurl.click High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: secureemailserver65.com (MISP Attribute #18981) Malware Artifacts Domain Watchlist Network activity: secureemailserver65.com (MISP Attribute #18981) secureemailserver65.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: securemailhost46.com (MISP Attribute #18726) Malware Artifacts Domain Watchlist Network activity: securemailhost46.com (MISP Attribute #18726) securemailhost46.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: snaphosterservice.com (MISP Attribute #18982) Malware Artifacts Domain Watchlist Network activity: snaphosterservice.com (MISP Attribute #18982) snaphosterservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostmailsecure.com (MISP Attribute #18727) Malware Artifacts Domain Watchlist Network activity: hostmailsecure.com (MISP Attribute #18727) hostmailsecure.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: siteadminhk.com (MISP Attribute #18983) Malware Artifacts Domain Watchlist Network activity: siteadminhk.com (MISP Attribute #18983) siteadminhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailpostsecure.com (MISP Attribute #18728) Malware Artifacts Domain Watchlist Network activity: mailpostsecure.com (MISP Attribute #18728) mailpostsecure.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: nameserverredirect.com (MISP Attribute #18984) Malware Artifacts Domain Watchlist Network activity: nameserverredirect.com (MISP Attribute #18984) nameserverredirect.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailsecurehost.com (MISP Attribute #18729) Malware Artifacts Domain Watchlist Network activity: mailsecurehost.com (MISP Attribute #18729) mailsecurehost.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: affiliatedomainservice.com (MISP Attribute #18985) Malware Artifacts Domain Watchlist Network activity: affiliatedomainservice.com (MISP Attribute #18985) affiliatedomainservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailapiservice.com (MISP Attribute #18730) Malware Artifacts Domain Watchlist Network activity: mailapiservice.com (MISP Attribute #18730) mailapiservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: siteadmineurope.com (MISP Attribute #18986) Malware Artifacts Domain Watchlist Network activity: siteadmineurope.com (MISP Attribute #18986) siteadmineurope.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailchimpservice.com (MISP Attribute #18731) Malware Artifacts Domain Watchlist Network activity: mailchimpservice.com (MISP Attribute #18731) mailchimpservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sitebloginfo.com (MISP Attribute #18987) Malware Artifacts Domain Watchlist Network activity: sitebloginfo.com (MISP Attribute #18987) sitebloginfo.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: postmarkapiservice.com (MISP Attribute #18732) Malware Artifacts Domain Watchlist Network activity: postmarkapiservice.com (MISP Attribute #18732) postmarkapiservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: xpertdomain.com (MISP Attribute #18988) Malware Artifacts Domain Watchlist Network activity: xpertdomain.com (MISP Attribute #18988) xpertdomain.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginservercheck.com (MISP Attribute #18733) Malware Artifacts Domain Watchlist Network activity: loginservercheck.com (MISP Attribute #18733) loginservercheck.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: aplsrvrer.com (MISP Attribute #18989) Malware Artifacts Domain Watchlist Network activity: aplsrvrer.com (MISP Attribute #18989) aplsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: checkmailserverhk.com (MISP Attribute #18734) Malware Artifacts Domain Watchlist Network activity: checkmailserverhk.com (MISP Attribute #18734) checkmailserverhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: bsrvrer.com (MISP Attribute #18990) Malware Artifacts Domain Watchlist Network activity: bsrvrer.com (MISP Attribute #18990) bsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortlinkcut.com (MISP Attribute #18735) Malware Artifacts Domain Watchlist Network activity: shortlinkcut.com (MISP Attribute #18735) shortlinkcut.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: csrvrer.com (MISP Attribute #18991) Malware Artifacts Domain Watchlist Network activity: csrvrer.com (MISP Attribute #18991) csrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverhollandservice.com (MISP Attribute #18736) Malware Artifacts Domain Watchlist Network activity: webserverhollandservice.com (MISP Attribute #18736) webserverhollandservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: dsrvrer.com (MISP Attribute #18992) Malware Artifacts Domain Watchlist Network activity: dsrvrer.com (MISP Attribute #18992) dsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: postserviceemaildomain.com (MISP Attribute #18737) Malware Artifacts Domain Watchlist Network activity: postserviceemaildomain.com (MISP Attribute #18737) postserviceemaildomain.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: esrvrer.com (MISP Attribute #18993) Malware Artifacts Domain Watchlist Network activity: esrvrer.com (MISP Attribute #18993) esrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webhostwebcare.com (MISP Attribute #18738) Malware Artifacts Domain Watchlist Network activity: webhostwebcare.com (MISP Attribute #18738) webhostwebcare.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: isrvrer.com (MISP Attribute #18994) Malware Artifacts Domain Watchlist Network activity: isrvrer.com (MISP Attribute #18994) isrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: santanaservice.com (MISP Attribute #18739) Malware Artifacts Domain Watchlist Network activity: santanaservice.com (MISP Attribute #18739) santanaservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: zsrvrer.com (MISP Attribute #18995) Malware Artifacts Domain Watchlist Network activity: zsrvrer.com (MISP Attribute #18995) zsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailhostholland.com (MISP Attribute #18740) Malware Artifacts Domain Watchlist Network activity: emailhostholland.com (MISP Attribute #18740) emailhostholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: inrsrvrer.com (MISP Attribute #18996) Malware Artifacts Domain Watchlist Network activity: inrsrvrer.com (MISP Attribute #18996) inrsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: maillinkservice.com (MISP Attribute #18741) Malware Artifacts Domain Watchlist Network activity: maillinkservice.com (MISP Attribute #18741) maillinkservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mnrsrvrer.com (MISP Attribute #18997) Malware Artifacts Domain Watchlist Network activity: mnrsrvrer.com (MISP Attribute #18997) mnrsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hkdrillonline.com (MISP Attribute #18742) Malware Artifacts Domain Watchlist Network activity: hkdrillonline.com (MISP Attribute #18742) hkdrillonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mvrsrvrer.com (MISP Attribute #18998) Malware Artifacts Domain Watchlist Network activity: mvrsrvrer.com (MISP Attribute #18998) mvrsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostsecuremail.com (MISP Attribute #18743) Malware Artifacts Domain Watchlist Network activity: hostsecuremail.com (MISP Attribute #18743) hostsecuremail.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: imgsrvrer.com (MISP Attribute #18999) Malware Artifacts Domain Watchlist Network activity: imgsrvrer.com (MISP Attribute #18999) imgsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailannounceservice.com (MISP Attribute #18744) Malware Artifacts Domain Watchlist Network activity: mailannounceservice.com (MISP Attribute #18744) mailannounceservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: nrgrsrvrer.com (MISP Attribute #19000) Malware Artifacts Domain Watchlist Network activity: nrgrsrvrer.com (MISP Attribute #19000) nrgrsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforshort.com (MISP Attribute #18745) Malware Artifacts Domain Watchlist Network activity: serverforshort.com (MISP Attribute #18745) serverforshort.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: minrsrvr.com (MISP Attribute #19001) Malware Artifacts Domain Watchlist Network activity: minrsrvr.com (MISP Attribute #19001) minrsrvr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hathwaynetwork.com (MISP Attribute #18746) Malware Artifacts Domain Watchlist Network activity: hathwaynetwork.com (MISP Attribute #18746) hathwaynetwork.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: intrsrvrer.com (MISP Attribute #19002) Malware Artifacts Domain Watchlist Network activity: intrsrvrer.com (MISP Attribute #19002) intrsrvrer.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servermain43.com (MISP Attribute #18747) Malware Artifacts Domain Watchlist Network activity: servermain43.com (MISP Attribute #18747) servermain43.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mail-msrgr.info (MISP Attribute #19003) Malware Artifacts Domain Watchlist Network activity: mail-msrgr.info (MISP Attribute #19003) mail-msrgr.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainsserver4f.com (MISP Attribute #18748) Malware Artifacts Domain Watchlist Network activity: domainsserver4f.com (MISP Attribute #18748) domainsserver4f.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-oa-en-us.com (MISP Attribute #19004) Malware Artifacts Domain Watchlist Network activity: com-oa-en-us.com (MISP Attribute #19004) com-oa-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainblacklistcheck.com (MISP Attribute #18749) Malware Artifacts Domain Watchlist Network activity: domainblacklistcheck.com (MISP Attribute #18749) domainblacklistcheck.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mrgrhr.com (MISP Attribute #19005) Malware Artifacts Domain Watchlist Network activity: mrgrhr.com (MISP Attribute #19005) mrgrhr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serversap54.com (MISP Attribute #18750) Malware Artifacts Domain Watchlist Network activity: serversap54.com (MISP Attribute #18750) serversap54.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-nh-en-us.com (MISP Attribute #19006) Malware Artifacts Domain Watchlist Network activity: com-nh-en-us.com (MISP Attribute #19006) com-nh-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sapserverhike.com (MISP Attribute #18751) Malware Artifacts Domain Watchlist Network activity: sapserverhike.com (MISP Attribute #18751) sapserverhike.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-io-en-us.com (MISP Attribute #19007) Malware Artifacts Domain Watchlist Network activity: com-io-en-us.com (MISP Attribute #19007) com-io-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainserveractive.com (MISP Attribute #18752) Malware Artifacts Domain Watchlist Network activity: domainserveractive.com (MISP Attribute #18752) domainserveractive.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msrdr.com (MISP Attribute #19008) Malware Artifacts Domain Watchlist Network activity: msrdr.com (MISP Attribute #19008) msrdr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netsecurehostingmy.com (MISP Attribute #18753) Malware Artifacts Domain Watchlist Network activity: netsecurehostingmy.com (MISP Attribute #18753) netsecurehostingmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msrwr.com (MISP Attribute #19009) Malware Artifacts Domain Watchlist Network activity: msrwr.com (MISP Attribute #19009) msrwr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: pageredirectservice.com (MISP Attribute #18754) Malware Artifacts Domain Watchlist Network activity: pageredirectservice.com (MISP Attribute #18754) pageredirectservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mgrsr.com (MISP Attribute #19010) Malware Artifacts Domain Watchlist Network activity: mgrsr.com (MISP Attribute #19010) mgrsr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailbaseserverhl.com (MISP Attribute #18755) Malware Artifacts Domain Watchlist Network activity: emailbaseserverhl.com (MISP Attribute #18755) emailbaseserverhl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-en-us.co.uk (MISP Attribute #19011) Malware Artifacts Domain Watchlist Network activity: com-en-us.co.uk (MISP Attribute #19011) com-en-us.co.uk High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: logincontrolserver.com (MISP Attribute #18756) Malware Artifacts Domain Watchlist Network activity: logincontrolserver.com (MISP Attribute #18756) logincontrolserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-er-en-us.com (MISP Attribute #19012) Malware Artifacts Domain Watchlist Network activity: com-er-en-us.com (MISP Attribute #19012) com-er-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: baseserveremailbg.com (MISP Attribute #18757) Malware Artifacts Domain Watchlist Network activity: baseserveremailbg.com (MISP Attribute #18757) baseserveremailbg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-ar-en-us.com (MISP Attribute #19013) Malware Artifacts Domain Watchlist Network activity: com-ar-en-us.com (MISP Attribute #19013) com-ar-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linkforwrder.com (MISP Attribute #18758) Malware Artifacts Domain Watchlist Network activity: linkforwrder.com (MISP Attribute #18758) linkforwrder.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: secureserver9898.com (MISP Attribute #19014) Malware Artifacts Domain Watchlist Network activity: secureserver9898.com (MISP Attribute #19014) secureserver9898.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailsecureservers.com (MISP Attribute #18759) Malware Artifacts Domain Watchlist Network activity: mailsecureservers.com (MISP Attribute #18759) mailsecureservers.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: deferrer.website (MISP Attribute #19015) Malware Artifacts Domain Watchlist Network activity: deferrer.website (MISP Attribute #19015) deferrer.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserveroutlook.com (MISP Attribute #18760) Malware Artifacts Domain Watchlist Network activity: mailserveroutlook.com (MISP Attribute #18760) mailserveroutlook.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: look-com.org (MISP Attribute #19016) Malware Artifacts Domain Watchlist Network activity: look-com.org (MISP Attribute #19016) look-com.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: websecurehostings.com (MISP Attribute #18761) Malware Artifacts Domain Watchlist Network activity: websecurehostings.com (MISP Attribute #18761) websecurehostings.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mail-com.org (MISP Attribute #19017) Malware Artifacts Domain Watchlist Network activity: mail-com.org (MISP Attribute #19017) mail-com.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: anothershortnr.com (MISP Attribute #18762) Malware Artifacts Domain Watchlist Network activity: anothershortnr.com (MISP Attribute #18762) anothershortnr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ppleid.org (MISP Attribute #19018) Malware Artifacts Domain Watchlist Network activity: ppleid.org (MISP Attribute #19018) ppleid.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserverdirect3994.com (MISP Attribute #18763) Malware Artifacts Domain Watchlist Network activity: mailserverdirect3994.com (MISP Attribute #18763) mailserverdirect3994.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-biz.website (MISP Attribute #19019) Malware Artifacts Domain Watchlist Network activity: com-biz.website (MISP Attribute #19019) com-biz.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserver39.com (MISP Attribute #18764) Malware Artifacts Domain Watchlist Network activity: mailserver39.com (MISP Attribute #18764) mailserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-com-us.com (MISP Attribute #19020) Malware Artifacts Domain Watchlist Network activity: com-com-us.com (MISP Attribute #19020) com-com-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailserver4859.com (MISP Attribute #18765) Malware Artifacts Domain Watchlist Network activity: emailserver4859.com (MISP Attribute #18765) emailserver4859.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-com.website (MISP Attribute #19021) Malware Artifacts Domain Watchlist Network activity: com-com.website (MISP Attribute #19021) com-com.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linkfollowservice.com (MISP Attribute #18766) Malware Artifacts Domain Watchlist Network activity: linkfollowservice.com (MISP Attribute #18766) linkfollowservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-hl-en-us.com (MISP Attribute #19022) Malware Artifacts Domain Watchlist Network activity: com-hl-en-us.com (MISP Attribute #19022) com-hl-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netsecuremailhosting.com (MISP Attribute #18767) Malware Artifacts Domain Watchlist Network activity: netsecuremailhosting.com (MISP Attribute #18767) netsecuremailhosting.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-mail-us.com (MISP Attribute #19023) Malware Artifacts Domain Watchlist Network activity: com-mail-us.com (MISP Attribute #19023) com-mail-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserviceloginonline.com (MISP Attribute #18768) Malware Artifacts Domain Watchlist Network activity: mailserviceloginonline.com (MISP Attribute #18768) mailserviceloginonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-mail.net (MISP Attribute #19024) Malware Artifacts Domain Watchlist Network activity: com-mail.net (MISP Attribute #19024) com-mail.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailauthorizationservice.com (MISP Attribute #18769) Malware Artifacts Domain Watchlist Network activity: mailauthorizationservice.com (MISP Attribute #18769) mailauthorizationservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-us-en-us.com (MISP Attribute #19025) Malware Artifacts Domain Watchlist Network activity: com-us-en-us.com (MISP Attribute #19025) com-us-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailauthservice.com (MISP Attribute #18770) Malware Artifacts Domain Watchlist Network activity: mailauthservice.com (MISP Attribute #18770) mailauthservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webmailmanageruk.com (MISP Attribute #19026) Malware Artifacts Domain Watchlist Network activity: webmailmanageruk.com (MISP Attribute #19026) webmailmanageruk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: trackserviceonline.xyz (MISP Attribute #18771) Malware Artifacts Domain Watchlist Network activity: trackserviceonline.xyz (MISP Attribute #18771) trackserviceonline.xyz High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: websitemanagerusa.com (MISP Attribute #19027) Malware Artifacts Domain Watchlist Network activity: websitemanagerusa.com (MISP Attribute #19027) websitemanagerusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: affliatedomainservice.com (MISP Attribute #18772) Malware Artifacts Domain Watchlist Network activity: affliatedomainservice.com (MISP Attribute #18772) affliatedomainservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: transferserver33.com (MISP Attribute #19028) Malware Artifacts Domain Watchlist Network activity: transferserver33.com (MISP Attribute #19028) transferserver33.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: upgradetravelservice.com (MISP Attribute #18773) Malware Artifacts Domain Watchlist Network activity: upgradetravelservice.com (MISP Attribute #18773) upgradetravelservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: websiteadminuk.com (MISP Attribute #19029) Malware Artifacts Domain Watchlist Network activity: websiteadminuk.com (MISP Attribute #19029) websiteadminuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-authmail.com (MISP Attribute #18774) Malware Artifacts Domain Watchlist Network activity: com-authmail.com (MISP Attribute #18774) com-authmail.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: budgtoffmy.com (MISP Attribute #19030) Malware Artifacts Domain Watchlist Network activity: budgtoffmy.com (MISP Attribute #19030) budgtoffmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webredirect.click (MISP Attribute #18775) Malware Artifacts Domain Watchlist Network activity: webredirect.click (MISP Attribute #18775) webredirect.click High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: budgtoffru.com (MISP Attribute #19031) Malware Artifacts Domain Watchlist Network activity: budgtoffru.com (MISP Attribute #19031) budgtoffru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: javaservermy.com (MISP Attribute #18776) Malware Artifacts Domain Watchlist Network activity: javaservermy.com (MISP Attribute #18776) javaservermy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhelplux.com (MISP Attribute #19032) Malware Artifacts Domain Watchlist Network activity: serverforhelplux.com (MISP Attribute #19032) serverforhelplux.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailcommute.com (MISP Attribute #18777) Malware Artifacts Domain Watchlist Network activity: mailcommute.com (MISP Attribute #18777) mailcommute.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhelpmy.com (MISP Attribute #19033) Malware Artifacts Domain Watchlist Network activity: serverforhelpmy.com (MISP Attribute #19033) serverforhelpmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortenup.com (MISP Attribute #18778) Malware Artifacts Domain Watchlist Network activity: shortenup.com (MISP Attribute #18778) shortenup.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicru3.com (MISP Attribute #19034) Malware Artifacts Domain Watchlist Network activity: linuxbasicru3.com (MISP Attribute #19034) linuxbasicru3.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: assuredreturnplan.com (MISP Attribute #18779) Malware Artifacts Domain Watchlist Network activity: assuredreturnplan.com (MISP Attribute #18779) assuredreturnplan.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: nigeriaoilleaks.com (MISP Attribute #19035) Malware Artifacts Domain Watchlist Network activity: nigeriaoilleaks.com (MISP Attribute #19035) nigeriaoilleaks.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionaldesigners.com (MISP Attribute #18780) Malware Artifacts Domain Watchlist Network activity: optionaldesigners.com (MISP Attribute #18780) optionaldesigners.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ondemand.pushthisurl.com (MISP Attribute #19036) Malware Artifacts Domain Watchlist Network activity: ondemand.pushthisurl.com (MISP Attribute #19036) ondemand.pushthisurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: post-manager.com (MISP Attribute #18781) Malware Artifacts Domain Watchlist Network activity: post-manager.com (MISP Attribute #18781) post-manager.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: saferedirect.pw (MISP Attribute #19037) Malware Artifacts Domain Watchlist Network activity: saferedirect.pw (MISP Attribute #19037) saferedirect.pw High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: racksackserveruk.com (MISP Attribute #18782) Malware Artifacts Domain Watchlist Network activity: racksackserveruk.com (MISP Attribute #18782) racksackserveruk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortserver1.com (MISP Attribute #19038) Malware Artifacts Domain Watchlist Network activity: shortserver1.com (MISP Attribute #19038) shortserver1.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netgeoserversg.com (MISP Attribute #18783) Malware Artifacts Domain Watchlist Network activity: netgeoserversg.com (MISP Attribute #18783) netgeoserversg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: blogserverlx.com (MISP Attribute #18784) Malware Artifacts Domain Watchlist Network activity: blogserverlx.com (MISP Attribute #18784) blogserverlx.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: dotnetserverhk.com (MISP Attribute #18785) Malware Artifacts Domain Watchlist Network activity: dotnetserverhk.com (MISP Attribute #18785) dotnetserverhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: capitalinvestmentsllp.com (MISP Attribute #18786) Malware Artifacts Domain Watchlist Network activity: capitalinvestmentsllp.com (MISP Attribute #18786) capitalinvestmentsllp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: frwrdrurl.com (MISP Attribute #18787) Malware Artifacts Domain Watchlist Network activity: frwrdrurl.com (MISP Attribute #18787) frwrdrurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: offshoretoursntravels.com (MISP Attribute #18788) Malware Artifacts Domain Watchlist Network activity: offshoretoursntravels.com (MISP Attribute #18788) offshoretoursntravels.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shipnyatchholland.com (MISP Attribute #18789) Malware Artifacts Domain Watchlist Network activity: shipnyatchholland.com (MISP Attribute #18789) shipnyatchholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hollandtourandtravel.com (MISP Attribute #18790) Malware Artifacts Domain Watchlist Network activity: hollandtourandtravel.com (MISP Attribute #18790) hollandtourandtravel.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: tricktravelbooking.com (MISP Attribute #18791) Malware Artifacts Domain Watchlist Network activity: tricktravelbooking.com (MISP Attribute #18791) tricktravelbooking.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hongkongshippingcompany.com (MISP Attribute #18792) Malware Artifacts Domain Watchlist Network activity: hongkongshippingcompany.com (MISP Attribute #18792) hongkongshippingcompany.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: offshorecompanyllp.com (MISP Attribute #18793) Malware Artifacts Domain Watchlist Network activity: offshorecompanyllp.com (MISP Attribute #18793) offshorecompanyllp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hardcoretechnologiesllp.com (MISP Attribute #18794) Malware Artifacts Domain Watchlist Network activity: hardcoretechnologiesllp.com (MISP Attribute #18794) hardcoretechnologiesllp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: strongwingtechnologies.com (MISP Attribute #18795) Malware Artifacts Domain Watchlist Network activity: strongwingtechnologies.com (MISP Attribute #18795) strongwingtechnologies.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: watchmanservice.com (MISP Attribute #18796) Malware Artifacts Domain Watchlist Network activity: watchmanservice.com (MISP Attribute #18796) watchmanservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hiretechservicehg.com (MISP Attribute #18797) Malware Artifacts Domain Watchlist Network activity: hiretechservicehg.com (MISP Attribute #18797) hiretechservicehg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: internetmarketingservicehg.com (MISP Attribute #18798) Malware Artifacts Domain Watchlist Network activity: internetmarketingservicehg.com (MISP Attribute #18798) internetmarketingservicehg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: prwebsiteuk.com (MISP Attribute #18799) Malware Artifacts Domain Watchlist Network activity: prwebsiteuk.com (MISP Attribute #18799) prwebsiteuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectyourgroom.com (MISP Attribute #18800) Malware Artifacts Domain Watchlist Network activity: selectyourgroom.com (MISP Attribute #18800) selectyourgroom.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: exchangeserverformailing.com (MISP Attribute #18801) Malware Artifacts Domain Watchlist Network activity: exchangeserverformailing.com (MISP Attribute #18801) exchangeserverformailing.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginservicesmailsonlinesaccounts.com (MISP Attribute #18802) Malware Artifacts Domain Watchlist Network activity: loginservicesmailsonlinesaccounts.com (MISP Attribute #18802) loginservicesmailsonlinesaccounts.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: redirectserviceonline.com (MISP Attribute #18803) Malware Artifacts Domain Watchlist Network activity: redirectserviceonline.com (MISP Attribute #18803) redirectserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: strongbolthostinghk.com (MISP Attribute #18804) Malware Artifacts Domain Watchlist Network activity: strongbolthostinghk.com (MISP Attribute #18804) strongbolthostinghk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: dotnerserversg.com (MISP Attribute #18805) Malware Artifacts Domain Watchlist Network activity: dotnerserversg.com (MISP Attribute #18805) dotnerserversg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netserviceru.com (MISP Attribute #18806) Malware Artifacts Domain Watchlist Network activity: netserviceru.com (MISP Attribute #18806) netserviceru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sapserverhg.com (MISP Attribute #18807) Malware Artifacts Domain Watchlist Network activity: sapserverhg.com (MISP Attribute #18807) sapserverhg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: srvrgruk.com (MISP Attribute #18808) Malware Artifacts Domain Watchlist Network activity: srvrgruk.com (MISP Attribute #18808) srvrgruk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainformailinguk.com (MISP Attribute #18809) Malware Artifacts Domain Watchlist Network activity: domainformailinguk.com (MISP Attribute #18809) domainformailinguk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: exchangeserver2345.com (MISP Attribute #18810) Malware Artifacts Domain Watchlist Network activity: exchangeserver2345.com (MISP Attribute #18810) exchangeserver2345.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: tnyurlservice.com (MISP Attribute #18811) Malware Artifacts Domain Watchlist Network activity: tnyurlservice.com (MISP Attribute #18811) tnyurlservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserver39490.com (MISP Attribute #18812) Malware Artifacts Domain Watchlist Network activity: webserver39490.com (MISP Attribute #18812) webserver39490.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserveroginusa.com (MISP Attribute #18813) Malware Artifacts Domain Watchlist Network activity: webserveroginusa.com (MISP Attribute #18813) webserveroginusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverdomaineu.com (MISP Attribute #18814) Malware Artifacts Domain Watchlist Network activity: webserverdomaineu.com (MISP Attribute #18814) webserverdomaineu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverdomainhk.com (MISP Attribute #18815) Malware Artifacts Domain Watchlist Network activity: webserverdomainhk.com (MISP Attribute #18815) webserverdomainhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverdomainuk.com (MISP Attribute #18816) Malware Artifacts Domain Watchlist Network activity: webserverdomainuk.com (MISP Attribute #18816) webserverdomainuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverdomainusa.com (MISP Attribute #18817) Malware Artifacts Domain Watchlist Network activity: webserverdomainusa.com (MISP Attribute #18817) webserverdomainusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainhostnetworkuk.com (MISP Attribute #18818) Malware Artifacts Domain Watchlist Network activity: domainhostnetworkuk.com (MISP Attribute #18818) domainhostnetworkuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainhostnetworkusa.com (MISP Attribute #18819) Malware Artifacts Domain Watchlist Network activity: domainhostnetworkusa.com (MISP Attribute #18819) domainhostnetworkusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainhostworkeu.com (MISP Attribute #18820) Malware Artifacts Domain Watchlist Network activity: domainhostworkeu.com (MISP Attribute #18820) domainhostworkeu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainlocalhostingeu.com (MISP Attribute #18821) Malware Artifacts Domain Watchlist Network activity: domainlocalhostingeu.com (MISP Attribute #18821) domainlocalhostingeu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainlocalhostinghk.com (MISP Attribute #18822) Malware Artifacts Domain Watchlist Network activity: domainlocalhostinghk.com (MISP Attribute #18822) domainlocalhostinghk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainlocalhostinguk.com (MISP Attribute #18823) Malware Artifacts Domain Watchlist Network activity: domainlocalhostinguk.com (MISP Attribute #18823) domainlocalhostinguk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: localhostinguk.com (MISP Attribute #18824) Malware Artifacts Domain Watchlist Network activity: localhostinguk.com (MISP Attribute #18824) localhostinguk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shorturlservice.com (MISP Attribute #18825) Malware Artifacts Domain Watchlist Network activity: shorturlservice.com (MISP Attribute #18825) shorturlservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginserviceeu.com (MISP Attribute #18826) Malware Artifacts Domain Watchlist Network activity: onlineloginserviceeu.com (MISP Attribute #18826) onlineloginserviceeu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginserviceuk.com (MISP Attribute #18827) Malware Artifacts Domain Watchlist Network activity: onlineloginserviceuk.com (MISP Attribute #18827) onlineloginserviceuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginserviceusa.com (MISP Attribute #18828) Malware Artifacts Domain Watchlist Network activity: onlineloginserviceusa.com (MISP Attribute #18828) onlineloginserviceusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basichostnetservice.com (MISP Attribute #18829) Malware Artifacts Domain Watchlist Network activity: basichostnetservice.com (MISP Attribute #18829) basichostnetservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginservicebasic.com (MISP Attribute #18830) Malware Artifacts Domain Watchlist Network activity: loginservicebasic.com (MISP Attribute #18830) loginservicebasic.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basichostingrussia.com (MISP Attribute #18831) Malware Artifacts Domain Watchlist Network activity: basichostingrussia.com (MISP Attribute #18831) basichostingrussia.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: bitserverhk.com (MISP Attribute #18832) Malware Artifacts Domain Watchlist Network activity: bitserverhk.com (MISP Attribute #18832) bitserverhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: openserverholland.com (MISP Attribute #18577) Malware Artifacts Domain Watchlist Network activity: openserverholland.com (MISP Attribute #18577) openserverholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: bitserverlux.com (MISP Attribute #18833) Malware Artifacts Domain Watchlist Network activity: bitserverlux.com (MISP Attribute #18833) bitserverlux.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailseverrus23.com (MISP Attribute #18578) Malware Artifacts Domain Watchlist Network activity: emailseverrus23.com (MISP Attribute #18578) emailseverrus23.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectedservicemy.com (MISP Attribute #18834) Malware Artifacts Domain Watchlist Network activity: selectedservicemy.com (MISP Attribute #18834) selectedservicemy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: smtpserver389.com (MISP Attribute #18579) Malware Artifacts Domain Watchlist Network activity: smtpserver389.com (MISP Attribute #18579) smtpserver389.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectedserviceru.com (MISP Attribute #18835) Malware Artifacts Domain Watchlist Network activity: selectedserviceru.com (MISP Attribute #18835) selectedserviceru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: pageserver77.com (MISP Attribute #18580) Malware Artifacts Domain Watchlist Network activity: pageserver77.com (MISP Attribute #18580) pageserver77.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: selectedservicesg.com (MISP Attribute #18836) Malware Artifacts Domain Watchlist Network activity: selectedservicesg.com (MISP Attribute #18836) selectedservicesg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: euanticorruption.com (MISP Attribute #18581) Malware Artifacts Domain Watchlist Network activity: euanticorruption.com (MISP Attribute #18581) euanticorruption.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicmyoffshore.com (MISP Attribute #18837) Malware Artifacts Domain Watchlist Network activity: basicmyoffshore.com (MISP Attribute #18837) basicmyoffshore.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovcog.com (MISP Attribute #18582) Malware Artifacts Domain Watchlist Network activity: ablyazovcog.com (MISP Attribute #18582) ablyazovcog.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicruoffshore.com (MISP Attribute #18838) Malware Artifacts Domain Watchlist Network activity: basicruoffshore.com (MISP Attribute #18838) basicruoffshore.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovcriminalgang.com (MISP Attribute #18583) Malware Artifacts Domain Watchlist Network activity: ablyazovcriminalgang.com (MISP Attribute #18583) ablyazovcriminalgang.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicsgoffshore.com (MISP Attribute #18839) Malware Artifacts Domain Watchlist Network activity: basicsgoffshore.com (MISP Attribute #18839) basicsgoffshore.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovgang.com (MISP Attribute #18584) Malware Artifacts Domain Watchlist Network activity: ablyazovgang.com (MISP Attribute #18584) ablyazovgang.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginportal.com (MISP Attribute #18840) Malware Artifacts Domain Watchlist Network activity: onlineloginportal.com (MISP Attribute #18840) onlineloginportal.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovcriminals.com (MISP Attribute #18585) Malware Artifacts Domain Watchlist Network activity: ablyazovcriminals.com (MISP Attribute #18585) ablyazovcriminals.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginportalhk.com (MISP Attribute #18841) Malware Artifacts Domain Watchlist Network activity: onlineloginportalhk.com (MISP Attribute #18841) onlineloginportalhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovcrimestory.com (MISP Attribute #18586) Malware Artifacts Domain Watchlist Network activity: ablyazovcrimestory.com (MISP Attribute #18586) ablyazovcrimestory.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginportalmy.com (MISP Attribute #18842) Malware Artifacts Domain Watchlist Network activity: onlineloginportalmy.com (MISP Attribute #18842) onlineloginportalmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovmafia.com (MISP Attribute #18587) Malware Artifacts Domain Watchlist Network activity: ablyazovmafia.com (MISP Attribute #18587) ablyazovmafia.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlineloginportalsg.com (MISP Attribute #18843) Malware Artifacts Domain Watchlist Network activity: onlineloginportalsg.com (MISP Attribute #18843) onlineloginportalsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovcrimesyndicate.com (MISP Attribute #18588) Malware Artifacts Domain Watchlist Network activity: ablyazovcrimesyndicate.com (MISP Attribute #18588) ablyazovcrimesyndicate.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: personaldoaminru.com (MISP Attribute #18844) Malware Artifacts Domain Watchlist Network activity: personaldoaminru.com (MISP Attribute #18844) personaldoaminru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovorganisedcrime.com (MISP Attribute #18589) Malware Artifacts Domain Watchlist Network activity: ablyazovorganisedcrime.com (MISP Attribute #18589) ablyazovorganisedcrime.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: personaldoaminsg.com (MISP Attribute #18845) Malware Artifacts Domain Watchlist Network activity: personaldoaminsg.com (MISP Attribute #18845) personaldoaminsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linkshrtnr22.com (MISP Attribute #18590) Malware Artifacts Domain Watchlist Network activity: linkshrtnr22.com (MISP Attribute #18590) linkshrtnr22.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainexpertswebuk.com (MISP Attribute #18846) Malware Artifacts Domain Watchlist Network activity: domainexpertswebuk.com (MISP Attribute #18846) domainexpertswebuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ablyazovangels.com (MISP Attribute #18591) Malware Artifacts Domain Watchlist Network activity: ablyazovangels.com (MISP Attribute #18591) ablyazovangels.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serviceasneed.com (MISP Attribute #18847) Malware Artifacts Domain Watchlist Network activity: serviceasneed.com (MISP Attribute #18847) serviceasneed.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sapserver39j.com (MISP Attribute #18592) Malware Artifacts Domain Watchlist Network activity: sapserver39j.com (MISP Attribute #18592) sapserver39j.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webdomainexperts.com (MISP Attribute #18848) Malware Artifacts Domain Watchlist Network activity: webdomainexperts.com (MISP Attribute #18848) webdomainexperts.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: pageserver299.com (MISP Attribute #18593) Malware Artifacts Domain Watchlist Network activity: pageserver299.com (MISP Attribute #18593) pageserver299.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: buzzoffbul.com (MISP Attribute #18849) Malware Artifacts Domain Watchlist Network activity: buzzoffbul.com (MISP Attribute #18849) buzzoffbul.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shadymario.com (MISP Attribute #18594) Malware Artifacts Domain Watchlist Network activity: shadymario.com (MISP Attribute #18594) shadymario.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: buzzoffhk.com (MISP Attribute #18850) Malware Artifacts Domain Watchlist Network activity: buzzoffhk.com (MISP Attribute #18850) buzzoffhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailserver399.com (MISP Attribute #18595) Malware Artifacts Domain Watchlist Network activity: emailserver399.com (MISP Attribute #18595) emailserver399.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: buzzoffmy.com (MISP Attribute #18851) Malware Artifacts Domain Watchlist Network activity: buzzoffmy.com (MISP Attribute #18851) buzzoffmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: newserver39.com (MISP Attribute #18596) Malware Artifacts Domain Watchlist Network activity: newserver39.com (MISP Attribute #18596) newserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: buzzoffru.com (MISP Attribute #18852) Malware Artifacts Domain Watchlist Network activity: buzzoffru.com (MISP Attribute #18852) buzzoffru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: maildeliveryagent.com (MISP Attribute #18597) Malware Artifacts Domain Watchlist Network activity: maildeliveryagent.com (MISP Attribute #18597) maildeliveryagent.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: buzzoffsg.com (MISP Attribute #18853) Malware Artifacts Domain Watchlist Network activity: buzzoffsg.com (MISP Attribute #18853) buzzoffsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hbh-europe-ripoff-report.com (MISP Attribute #18598) Malware Artifacts Domain Watchlist Network activity: hbh-europe-ripoff-report.com (MISP Attribute #18598) hbh-europe-ripoff-report.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostbasichk.com (MISP Attribute #18854) Malware Artifacts Domain Watchlist Network activity: hostbasichk.com (MISP Attribute #18854) hostbasichk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortformurl.com (MISP Attribute #18599) Malware Artifacts Domain Watchlist Network activity: shortformurl.com (MISP Attribute #18599) shortformurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostbasicholl.com (MISP Attribute #18855) Malware Artifacts Domain Watchlist Network activity: hostbasicholl.com (MISP Attribute #18855) hostbasicholl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortformurl.xyz (MISP Attribute #18600) Malware Artifacts Domain Watchlist Network activity: shortformurl.xyz (MISP Attribute #18600) shortformurl.xyz High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostbasicmy.com (MISP Attribute #18856) Malware Artifacts Domain Watchlist Network activity: hostbasicmy.com (MISP Attribute #18856) hostbasicmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webredirect39.com (MISP Attribute #18601) Malware Artifacts Domain Watchlist Network activity: webredirect39.com (MISP Attribute #18601) webredirect39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostbasicru.com (MISP Attribute #18857) Malware Artifacts Domain Watchlist Network activity: hostbasicru.com (MISP Attribute #18857) hostbasicru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: logserver39.com (MISP Attribute #18602) Malware Artifacts Domain Watchlist Network activity: logserver39.com (MISP Attribute #18602) logserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostbasicsg.com (MISP Attribute #18858) Malware Artifacts Domain Watchlist Network activity: hostbasicsg.com (MISP Attribute #18858) hostbasicsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webmasterserver39.com (MISP Attribute #18603) Malware Artifacts Domain Watchlist Network activity: webmasterserver39.com (MISP Attribute #18603) webmasterserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: demoprojectsuk.com (MISP Attribute #18859) Malware Artifacts Domain Watchlist Network activity: demoprojectsuk.com (MISP Attribute #18859) demoprojectsuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webnetonlineservice.com (MISP Attribute #18604) Malware Artifacts Domain Watchlist Network activity: webnetonlineservice.com (MISP Attribute #18604) webnetonlineservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortnerserviceonline.com (MISP Attribute #18860) Malware Artifacts Domain Watchlist Network activity: shortnerserviceonline.com (MISP Attribute #18860) shortnerserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: redirectonline.xyz (MISP Attribute #18605) Malware Artifacts Domain Watchlist Network activity: redirectonline.xyz (MISP Attribute #18605) redirectonline.xyz High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hklinbas.com (MISP Attribute #18861) Malware Artifacts Domain Watchlist Network activity: hklinbas.com (MISP Attribute #18861) hklinbas.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: homeserver87.com (MISP Attribute #18606) Malware Artifacts Domain Watchlist Network activity: homeserver87.com (MISP Attribute #18606) homeserver87.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: luxlinbas.com (MISP Attribute #18862) Malware Artifacts Domain Watchlist Network activity: luxlinbas.com (MISP Attribute #18862) luxlinbas.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netcomserviceonline.com (MISP Attribute #18607) Malware Artifacts Domain Watchlist Network activity: netcomserviceonline.com (MISP Attribute #18607) netcomserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mylinbas.com (MISP Attribute #18863) Malware Artifacts Domain Watchlist Network activity: mylinbas.com (MISP Attribute #18863) mylinbas.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servermappingserviceonline.com (MISP Attribute #18608) Malware Artifacts Domain Watchlist Network activity: servermappingserviceonline.com (MISP Attribute #18608) servermappingserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ruslinbas.com (MISP Attribute #18864) Malware Artifacts Domain Watchlist Network activity: ruslinbas.com (MISP Attribute #18864) ruslinbas.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: onlinenetworkinghelp.com (MISP Attribute #18609) Malware Artifacts Domain Watchlist Network activity: onlinenetworkinghelp.com (MISP Attribute #18609) onlinenetworkinghelp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sglinbas.com (MISP Attribute #18865) Malware Artifacts Domain Watchlist Network activity: sglinbas.com (MISP Attribute #18865) sglinbas.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginauths-service.com (MISP Attribute #18610) Malware Artifacts Domain Watchlist Network activity: loginauths-service.com (MISP Attribute #18610) loginauths-service.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverfortechies.com (MISP Attribute #18866) Malware Artifacts Domain Watchlist Network activity: serverfortechies.com (MISP Attribute #18866) serverfortechies.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: softnetworksolutions.com (MISP Attribute #18611) Malware Artifacts Domain Watchlist Network activity: softnetworksolutions.com (MISP Attribute #18611) softnetworksolutions.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicservicehk.com (MISP Attribute #18867) Malware Artifacts Domain Watchlist Network activity: basicservicehk.com (MISP Attribute #18867) basicservicehk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ultronnetworksolution.com (MISP Attribute #18612) Malware Artifacts Domain Watchlist Network activity: ultronnetworksolution.com (MISP Attribute #18612) ultronnetworksolution.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicservicelux.com (MISP Attribute #18868) Malware Artifacts Domain Watchlist Network activity: basicservicelux.com (MISP Attribute #18868) basicservicelux.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: softredirect.info (MISP Attribute #18613) Malware Artifacts Domain Watchlist Network activity: softredirect.info (MISP Attribute #18613) softredirect.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicservicemy.com (MISP Attribute #18869) Malware Artifacts Domain Watchlist Network activity: basicservicemy.com (MISP Attribute #18869) basicservicemy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: extranetserviceonline.com (MISP Attribute #18614) Malware Artifacts Domain Watchlist Network activity: extranetserviceonline.com (MISP Attribute #18614) extranetserviceonline.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicservicerus.com (MISP Attribute #18870) Malware Artifacts Domain Watchlist Network activity: basicservicerus.com (MISP Attribute #18870) basicservicerus.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: short-ner.com (MISP Attribute #18615) Malware Artifacts Domain Watchlist Network activity: short-ner.com (MISP Attribute #18615) short-ner.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: basicservicesg.com (MISP Attribute #18871) Malware Artifacts Domain Watchlist Network activity: basicservicesg.com (MISP Attribute #18871) basicservicesg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserveruk.com (MISP Attribute #18616) Malware Artifacts Domain Watchlist Network activity: mailserveruk.com (MISP Attribute #18616) mailserveruk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhelphk.com (MISP Attribute #18872) Malware Artifacts Domain Watchlist Network activity: serverforhelphk.com (MISP Attribute #18872) serverforhelphk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mywebredirect.info (MISP Attribute #18617) Malware Artifacts Domain Watchlist Network activity: mywebredirect.info (MISP Attribute #18617) mywebredirect.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhelpru.com (MISP Attribute #18873) Malware Artifacts Domain Watchlist Network activity: serverforhelpru.com (MISP Attribute #18873) serverforhelpru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: srtnr.co (MISP Attribute #18618) Malware Artifacts Domain Watchlist Network activity: srtnr.co (MISP Attribute #18618) srtnr.co High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhelpsg.com (MISP Attribute #18874) Malware Artifacts Domain Watchlist Network activity: serverforhelpsg.com (MISP Attribute #18874) serverforhelpsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: cyberanalyticals.com (MISP Attribute #18619) Malware Artifacts Domain Watchlist Network activity: cyberanalyticals.com (MISP Attribute #18619) cyberanalyticals.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainforhostuk.com (MISP Attribute #18875) Malware Artifacts Domain Watchlist Network activity: domainforhostuk.com (MISP Attribute #18875) domainforhostuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mail-logger.com (MISP Attribute #18620) Malware Artifacts Domain Watchlist Network activity: mail-logger.com (MISP Attribute #18620) mail-logger.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: transferdomainhk.com (MISP Attribute #18876) Malware Artifacts Domain Watchlist Network activity: transferdomainhk.com (MISP Attribute #18876) transferdomainhk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailer-domain.com (MISP Attribute #18621) Malware Artifacts Domain Watchlist Network activity: mailer-domain.com (MISP Attribute #18621) mailer-domain.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: transferdomainlu.com (MISP Attribute #18877) Malware Artifacts Domain Watchlist Network activity: transferdomainlu.com (MISP Attribute #18877) transferdomainlu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servermailing34.com (MISP Attribute #18622) Malware Artifacts Domain Watchlist Network activity: servermailing34.com (MISP Attribute #18622) servermailing34.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: transferdomainmy.com (MISP Attribute #18878) Malware Artifacts Domain Watchlist Network activity: transferdomainmy.com (MISP Attribute #18878) transferdomainmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: nodeserver50.com (MISP Attribute #18623) Malware Artifacts Domain Watchlist Network activity: nodeserver50.com (MISP Attribute #18623) nodeserver50.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shoponlinefreesg.com (MISP Attribute #18879) Malware Artifacts Domain Watchlist Network activity: shoponlinefreesg.com (MISP Attribute #18879) shoponlinefreesg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: rackserver39.com (MISP Attribute #18624) Malware Artifacts Domain Watchlist Network activity: rackserver39.com (MISP Attribute #18624) rackserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shoponlinefreeuk.com (MISP Attribute #18880) Malware Artifacts Domain Watchlist Network activity: shoponlinefreeuk.com (MISP Attribute #18880) shoponlinefreeuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailerdomain56.com (MISP Attribute #18625) Malware Artifacts Domain Watchlist Network activity: mailerdomain56.com (MISP Attribute #18625) mailerdomain56.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shrinkandshareurl.com (MISP Attribute #18881) Malware Artifacts Domain Watchlist Network activity: shrinkandshareurl.com (MISP Attribute #18881) shrinkandshareurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginserviceunified.com (MISP Attribute #18626) Malware Artifacts Domain Watchlist Network activity: loginserviceunified.com (MISP Attribute #18626) loginserviceunified.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: strngbltru.com (MISP Attribute #18882) Malware Artifacts Domain Watchlist Network activity: strngbltru.com (MISP Attribute #18882) strngbltru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: comservicelogin.com (MISP Attribute #18627) Malware Artifacts Domain Watchlist Network activity: comservicelogin.com (MISP Attribute #18627) comservicelogin.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionalblogginges.com (MISP Attribute #18883) Malware Artifacts Domain Watchlist Network activity: optionalblogginges.com (MISP Attribute #18883) optionalblogginges.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: 4mblk.com (MISP Attribute #18628) Malware Artifacts Domain Watchlist Network activity: 4mblk.com (MISP Attribute #18628) 4mblk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionalbloggingeu.com (MISP Attribute #18884) Malware Artifacts Domain Watchlist Network activity: optionalbloggingeu.com (MISP Attribute #18884) optionalbloggingeu.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-en-us.com (MISP Attribute #18629) Malware Artifacts Domain Watchlist Network activity: corn-en-us.com (MISP Attribute #18629) corn-en-us.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionalblogginguk.com (MISP Attribute #18885) Malware Artifacts Domain Watchlist Network activity: optionalblogginguk.com (MISP Attribute #18885) optionalblogginguk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-en-gb.com (MISP Attribute #18630) Malware Artifacts Domain Watchlist Network activity: corn-en-gb.com (MISP Attribute #18630) corn-en-gb.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shrinkthisurl.com (MISP Attribute #18886) Malware Artifacts Domain Watchlist Network activity: shrinkthisurl.com (MISP Attribute #18886) shrinkthisurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-lang-eng.com (MISP Attribute #18631) Malware Artifacts Domain Watchlist Network activity: corn-lang-eng.com (MISP Attribute #18631) corn-lang-eng.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: updatenameserver45.com (MISP Attribute #18887) Malware Artifacts Domain Watchlist Network activity: updatenameserver45.com (MISP Attribute #18887) updatenameserver45.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-loginservicesverified.com (MISP Attribute #18632) Malware Artifacts Domain Watchlist Network activity: corn-loginservicesverified.com (MISP Attribute #18632) corn-loginservicesverified.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: rulinuxbasic.com (MISP Attribute #18888) Malware Artifacts Domain Watchlist Network activity: rulinuxbasic.com (MISP Attribute #18888) rulinuxbasic.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-msrvrgr.com (MISP Attribute #18633) Malware Artifacts Domain Watchlist Network activity: corn-msrvrgr.com (MISP Attribute #18633) corn-msrvrgr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: russialinuxbasic.com (MISP Attribute #18889) Malware Artifacts Domain Watchlist Network activity: russialinuxbasic.com (MISP Attribute #18889) russialinuxbasic.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-servicelogin.com (MISP Attribute #18634) Malware Artifacts Domain Watchlist Network activity: corn-servicelogin.com (MISP Attribute #18634) corn-servicelogin.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainsforfreehosting.com (MISP Attribute #18890) Malware Artifacts Domain Watchlist Network activity: domainsforfreehosting.com (MISP Attribute #18890) domainsforfreehosting.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-ukr.com (MISP Attribute #18635) Malware Artifacts Domain Watchlist Network activity: corn-ukr.com (MISP Attribute #18635) corn-ukr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainsforsupport.com (MISP Attribute #18891) Malware Artifacts Domain Watchlist Network activity: domainsforsupport.com (MISP Attribute #18891) domainsforsupport.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: corn-fr-fr.com (MISP Attribute #18636) Malware Artifacts Domain Watchlist Network activity: corn-fr-fr.com (MISP Attribute #18636) corn-fr-fr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainsfortechhelp.com (MISP Attribute #18892) Malware Artifacts Domain Watchlist Network activity: domainsfortechhelp.com (MISP Attribute #18892) domainsfortechhelp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserver89.org (MISP Attribute #18637) Malware Artifacts Domain Watchlist Network activity: mailserver89.org (MISP Attribute #18637) mailserver89.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasichk.com (MISP Attribute #18893) Malware Artifacts Domain Watchlist Network activity: linuxbasichk.com (MISP Attribute #18893) linuxbasichk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserver89.net (MISP Attribute #18638) Malware Artifacts Domain Watchlist Network activity: mailserver89.net (MISP Attribute #18638) mailserver89.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasichk1.com (MISP Attribute #18894) Malware Artifacts Domain Watchlist Network activity: linuxbasichk1.com (MISP Attribute #18894) linuxbasichk1.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: srtnr.com (MISP Attribute #18639) Malware Artifacts Domain Watchlist Network activity: srtnr.com (MISP Attribute #18639) srtnr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicmy.com (MISP Attribute #18895) Malware Artifacts Domain Watchlist Network activity: linuxbasicmy.com (MISP Attribute #18895) linuxbasicmy.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserver89.com (MISP Attribute #18640) Malware Artifacts Domain Watchlist Network activity: mailserver89.com (MISP Attribute #18640) mailserver89.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicru.com (MISP Attribute #18896) Malware Artifacts Domain Watchlist Network activity: linuxbasicru.com (MISP Attribute #18896) linuxbasicru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserveruk89.org (MISP Attribute #18641) Malware Artifacts Domain Watchlist Network activity: mailserveruk89.org (MISP Attribute #18641) mailserveruk89.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicru1.com (MISP Attribute #18897) Malware Artifacts Domain Watchlist Network activity: linuxbasicru1.com (MISP Attribute #18897) linuxbasicru1.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserveruk89.net (MISP Attribute #18642) Malware Artifacts Domain Watchlist Network activity: mailserveruk89.net (MISP Attribute #18642) mailserveruk89.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicsg.com (MISP Attribute #18898) Malware Artifacts Domain Watchlist Network activity: linuxbasicsg.com (MISP Attribute #18898) linuxbasicsg.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: 2mblk.com (MISP Attribute #18643) Malware Artifacts Domain Watchlist Network activity: 2mblk.com (MISP Attribute #18643) 2mblk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxbasicsg1.com (MISP Attribute #18899) Malware Artifacts Domain Watchlist Network activity: linuxbasicsg1.com (MISP Attribute #18899) linuxbasicsg1.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailserveruk89.com (MISP Attribute #18644) Malware Artifacts Domain Watchlist Network activity: mailserveruk89.com (MISP Attribute #18644) mailserveruk89.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostingserviceclean.com (MISP Attribute #18900) Malware Artifacts Domain Watchlist Network activity: hostingserviceclean.com (MISP Attribute #18900) hostingserviceclean.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mblk1.com (MISP Attribute #18645) Malware Artifacts Domain Watchlist Network activity: mblk1.com (MISP Attribute #18645) mblk1.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostingserviceforall.com (MISP Attribute #18901) Malware Artifacts Domain Watchlist Network activity: hostingserviceforall.com (MISP Attribute #18901) hostingserviceforall.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: un-told.net (MISP Attribute #18646) Malware Artifacts Domain Watchlist Network activity: un-told.net (MISP Attribute #18646) un-told.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostingservicesloyal.com (MISP Attribute #18902) Malware Artifacts Domain Watchlist Network activity: hostingservicesloyal.com (MISP Attribute #18902) hostingservicesloyal.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-website33.net (MISP Attribute #18647) Malware Artifacts Domain Watchlist Network activity: com-website33.net (MISP Attribute #18647) com-website33.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostingservicesukit.com (MISP Attribute #18903) Malware Artifacts Domain Watchlist Network activity: hostingservicesukit.com (MISP Attribute #18903) hostingservicesukit.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-website33.biz (MISP Attribute #18648) Malware Artifacts Domain Watchlist Network activity: com-website33.biz (MISP Attribute #18648) com-website33.biz High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: xpertmaildomain.com (MISP Attribute #18904) Malware Artifacts Domain Watchlist Network activity: xpertmaildomain.com (MISP Attribute #18904) xpertmaildomain.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-website33.com (MISP Attribute #18649) Malware Artifacts Domain Watchlist Network activity: com-website33.com (MISP Attribute #18649) com-website33.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: standardofficeholland.com (MISP Attribute #18905) Malware Artifacts Domain Watchlist Network activity: standardofficeholland.com (MISP Attribute #18905) standardofficeholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-website33.info (MISP Attribute #18650) Malware Artifacts Domain Watchlist Network activity: com-website33.info (MISP Attribute #18650) com-website33.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: standardofficeil.com (MISP Attribute #18906) Malware Artifacts Domain Watchlist Network activity: standardofficeil.com (MISP Attribute #18906) standardofficeil.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: com-website33.org (MISP Attribute #18651) Malware Artifacts Domain Watchlist Network activity: com-website33.org (MISP Attribute #18651) com-website33.org High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: standardofficeuk.com (MISP Attribute #18907) Malware Artifacts Domain Watchlist Network activity: standardofficeuk.com (MISP Attribute #18907) standardofficeuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: browserextensions.info (MISP Attribute #18652) Malware Artifacts Domain Watchlist Network activity: browserextensions.info (MISP Attribute #18652) browserextensions.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: postserverem.com (MISP Attribute #18908) Malware Artifacts Domain Watchlist Network activity: postserverem.com (MISP Attribute #18908) postserverem.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: allaboutiot.website (MISP Attribute #18653) Malware Artifacts Domain Watchlist Network activity: allaboutiot.website (MISP Attribute #18653) allaboutiot.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverformailings.com (MISP Attribute #18909) Malware Artifacts Domain Watchlist Network activity: serverformailings.com (MISP Attribute #18909) serverformailings.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainserver322.com (MISP Attribute #18654) Malware Artifacts Domain Watchlist Network activity: domainserver322.com (MISP Attribute #18654) domainserver322.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverfornetworks.com (MISP Attribute #18910) Malware Artifacts Domain Watchlist Network activity: serverfornetworks.com (MISP Attribute #18910) serverfornetworks.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: searchsimple.info (MISP Attribute #18655) Malware Artifacts Domain Watchlist Network activity: searchsimple.info (MISP Attribute #18655) searchsimple.info High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforzapper.com (MISP Attribute #18911) Malware Artifacts Domain Watchlist Network activity: serverforzapper.com (MISP Attribute #18911) serverforzapper.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: ecom-servicelogin.com (MISP Attribute #18656) Malware Artifacts Domain Watchlist Network activity: ecom-servicelogin.com (MISP Attribute #18656) ecom-servicelogin.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serviceforneworder.com (MISP Attribute #18912) Malware Artifacts Domain Watchlist Network activity: serviceforneworder.com (MISP Attribute #18912) serviceforneworder.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: searchsimple.net (MISP Attribute #18657) Malware Artifacts Domain Watchlist Network activity: searchsimple.net (MISP Attribute #18657) searchsimple.net High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: loginservicehelp.com (MISP Attribute #18913) Malware Artifacts Domain Watchlist Network activity: loginservicehelp.com (MISP Attribute #18913) loginservicehelp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: sapserverhipe.com (MISP Attribute #18658) Malware Artifacts Domain Watchlist Network activity: sapserverhipe.com (MISP Attribute #18658) sapserverhipe.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: shortenurlservices.com (MISP Attribute #18914) Malware Artifacts Domain Watchlist Network activity: shortenurlservices.com (MISP Attribute #18914) shortenurlservices.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserver91.website (MISP Attribute #18659) Malware Artifacts Domain Watchlist Network activity: webserver91.website (MISP Attribute #18659) webserver91.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostusewithtech.com (MISP Attribute #18915) Malware Artifacts Domain Watchlist Network activity: hostusewithtech.com (MISP Attribute #18915) hostusewithtech.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: phpwebserver34.site (MISP Attribute #18660) Malware Artifacts Domain Watchlist Network activity: phpwebserver34.site (MISP Attribute #18660) phpwebserver34.site High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linuxhostingplatformuk.com (MISP Attribute #18916) Malware Artifacts Domain Watchlist Network activity: linuxhostingplatformuk.com (MISP Attribute #18916) linuxhostingplatformuk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: phpwebserver34.tech (MISP Attribute #18661) Malware Artifacts Domain Watchlist Network activity: phpwebserver34.tech (MISP Attribute #18661) phpwebserver34.tech High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: youranotherserver.com (MISP Attribute #18917) Malware Artifacts Domain Watchlist Network activity: youranotherserver.com (MISP Attribute #18917) youranotherserver.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: phpwebserver34.xyz (MISP Attribute #18662) Malware Artifacts Domain Watchlist Network activity: phpwebserver34.xyz (MISP Attribute #18662) phpwebserver34.xyz High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhiretech.com (MISP Attribute #18918) Malware Artifacts Domain Watchlist Network activity: serverforhiretech.com (MISP Attribute #18918) serverforhiretech.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: phpwebserver34.best (MISP Attribute #18663) Malware Artifacts Domain Watchlist Network activity: phpwebserver34.best (MISP Attribute #18663) phpwebserver34.best High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverfortechhelp.com (MISP Attribute #18919) Malware Artifacts Domain Watchlist Network activity: serverfortechhelp.com (MISP Attribute #18919) serverfortechhelp.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: myfacetik.cf (MISP Attribute #18664) Malware Artifacts Domain Watchlist Network activity: myfacetik.cf (MISP Attribute #18664) myfacetik.cf High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: blogforpranks.com (MISP Attribute #18920) Malware Artifacts Domain Watchlist Network activity: blogforpranks.com (MISP Attribute #18920) blogforpranks.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: goomail.ml (MISP Attribute #18665) Malware Artifacts Domain Watchlist Network activity: goomail.ml (MISP Attribute #18665) goomail.ml High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: planyourexoticvacation.com (MISP Attribute #18921) Malware Artifacts Domain Watchlist Network activity: planyourexoticvacation.com (MISP Attribute #18921) planyourexoticvacation.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: websociofiles.com (MISP Attribute #18666) Malware Artifacts Domain Watchlist Network activity: websociofiles.com (MISP Attribute #18666) websociofiles.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: usewithcareathome.com (MISP Attribute #18922) Malware Artifacts Domain Watchlist Network activity: usewithcareathome.com (MISP Attribute #18922) usewithcareathome.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainmanager33.website (MISP Attribute #18667) Malware Artifacts Domain Watchlist Network activity: domainmanager33.website (MISP Attribute #18667) domainmanager33.website High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverforhome.com (MISP Attribute #18923) Malware Artifacts Domain Watchlist Network activity: serverforhome.com (MISP Attribute #18923) serverforhome.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainmanager33.com (MISP Attribute #18668) Malware Artifacts Domain Watchlist Network activity: domainmanager33.com (MISP Attribute #18668) domainmanager33.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: optionsothego.com (MISP Attribute #18924) Malware Artifacts Domain Watchlist Network activity: optionsothego.com (MISP Attribute #18924) optionsothego.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: domainmanager33.site (MISP Attribute #18669) Malware Artifacts Domain Watchlist Network activity: domainmanager33.site (MISP Attribute #18669) domainmanager33.site High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: anitmationworldnews.com (MISP Attribute #18925) Malware Artifacts Domain Watchlist Network activity: anitmationworldnews.com (MISP Attribute #18925) anitmationworldnews.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailtickr.com (MISP Attribute #18670) Malware Artifacts Domain Watchlist Network activity: mailtickr.com (MISP Attribute #18670) mailtickr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servicegoingfar.com (MISP Attribute #18926) Malware Artifacts Domain Watchlist Network activity: servicegoingfar.com (MISP Attribute #18926) servicegoingfar.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servergateway56.com (MISP Attribute #18671) Malware Artifacts Domain Watchlist Network activity: servergateway56.com (MISP Attribute #18671) servergateway56.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: trusteventservices.com (MISP Attribute #18927) Malware Artifacts Domain Watchlist Network activity: trusteventservices.com (MISP Attribute #18927) trusteventservices.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: servergateway33.com (MISP Attribute #18672) Malware Artifacts Domain Watchlist Network activity: servergateway33.com (MISP Attribute #18672) servergateway33.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: belowmargins.com (MISP Attribute #18928) Malware Artifacts Domain Watchlist Network activity: belowmargins.com (MISP Attribute #18928) belowmargins.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msrfrgr.com (MISP Attribute #18673) Malware Artifacts Domain Watchlist Network activity: msrfrgr.com (MISP Attribute #18673) msrfrgr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: hostserverrus.com (MISP Attribute #18929) Malware Artifacts Domain Watchlist Network activity: hostserverrus.com (MISP Attribute #18929) hostserverrus.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: pageserverru.com (MISP Attribute #18674) Malware Artifacts Domain Watchlist Network activity: pageserverru.com (MISP Attribute #18674) pageserverru.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: registrationonlineeurope.com (MISP Attribute #18930) Malware Artifacts Domain Watchlist Network activity: registrationonlineeurope.com (MISP Attribute #18930) registrationonlineeurope.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverhello54.com (MISP Attribute #18675) Malware Artifacts Domain Watchlist Network activity: serverhello54.com (MISP Attribute #18675) serverhello54.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: tineeurl.com (MISP Attribute #18931) Malware Artifacts Domain Watchlist Network activity: tineeurl.com (MISP Attribute #18931) tineeurl.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: smtpserver466.com (MISP Attribute #18676) Malware Artifacts Domain Watchlist Network activity: smtpserver466.com (MISP Attribute #18676) smtpserver466.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: secureserverasia.com (MISP Attribute #18932) Malware Artifacts Domain Watchlist Network activity: secureserverasia.com (MISP Attribute #18932) secureserverasia.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserver39.com (MISP Attribute #18677) Malware Artifacts Domain Watchlist Network activity: webserver39.com (MISP Attribute #18677) webserver39.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: secureservereurope.com (MISP Attribute #18933) Malware Artifacts Domain Watchlist Network activity: secureservereurope.com (MISP Attribute #18933) secureservereurope.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: linksrtnr.com (MISP Attribute #18678) Malware Artifacts Domain Watchlist Network activity: linksrtnr.com (MISP Attribute #18678) linksrtnr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverasiasap.com (MISP Attribute #18934) Malware Artifacts Domain Watchlist Network activity: serverasiasap.com (MISP Attribute #18934) serverasiasap.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: netmapservice.com (MISP Attribute #18679) Malware Artifacts Domain Watchlist Network activity: netmapservice.com (MISP Attribute #18679) netmapservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: mailservereurope.com (MISP Attribute #18935) Malware Artifacts Domain Watchlist Network activity: mailservereurope.com (MISP Attribute #18935) mailservereurope.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: imapserverholland.com (MISP Attribute #18680) Malware Artifacts Domain Watchlist Network activity: imapserverholland.com (MISP Attribute #18680) imapserverholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverloadbalance.com (MISP Attribute #18936) Malware Artifacts Domain Watchlist Network activity: serverloadbalance.com (MISP Attribute #18936) serverloadbalance.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserveronline9.com (MISP Attribute #18681) Malware Artifacts Domain Watchlist Network activity: webserveronline9.com (MISP Attribute #18681) webserveronline9.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: frwrdrwr.com (MISP Attribute #18937) Malware Artifacts Domain Watchlist Network activity: frwrdrwr.com (MISP Attribute #18937) frwrdrwr.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: getemailopens.com (MISP Attribute #18682) Malware Artifacts Domain Watchlist Network activity: getemailopens.com (MISP Attribute #18682) getemailopens.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: localserversa.com (MISP Attribute #18938) Malware Artifacts Domain Watchlist Network activity: localserversa.com (MISP Attribute #18938) localserversa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msrvrgeh.com (MISP Attribute #18683) Malware Artifacts Domain Watchlist Network activity: msrvrgeh.com (MISP Attribute #18683) msrvrgeh.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: serverdemoservice.com (MISP Attribute #18939) Malware Artifacts Domain Watchlist Network activity: serverdemoservice.com (MISP Attribute #18939) serverdemoservice.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: msrvrgh.com (MISP Attribute #18684) Malware Artifacts Domain Watchlist Network activity: msrvrgh.com (MISP Attribute #18684) msrvrgh.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: fastserverasia.com (MISP Attribute #18940) Malware Artifacts Domain Watchlist Network activity: fastserverasia.com (MISP Attribute #18940) fastserverasia.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailserverholland.com (MISP Attribute #18685) Malware Artifacts Domain Watchlist Network activity: emailserverholland.com (MISP Attribute #18685) emailserverholland.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: fastservereurope.com (MISP Attribute #18941) Malware Artifacts Domain Watchlist Network activity: fastservereurope.com (MISP Attribute #18941) fastservereurope.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: emailserverhk48.com (MISP Attribute #18686) Malware Artifacts Domain Watchlist Network activity: emailserverhk48.com (MISP Attribute #18686) emailserverhk48.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: fastserveruk.com (MISP Attribute #18942) Malware Artifacts Domain Watchlist Network activity: fastserveruk.com (MISP Attribute #18942) fastserveruk.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: webserverredirect99.com (MISP Attribute #18687) Malware Artifacts Domain Watchlist Network activity: webserverredirect99.com (MISP Attribute #18687) webserverredirect99.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Network activity Network activity: fastserverusa.com (MISP Attribute #18943) Malware Artifacts Domain Watchlist Network activity: fastserverusa.com (MISP Attribute #18943) fastserverusa.com High Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: n0replyupdatesnotificationskj9@gmail.com (MISP Attribute #19039) Malware Artifacts Malicious E-mail Payload delivery: n0replyupdatesnotificationskj9@gmail.com (MISP Attribute #19039) n0replyupdatesnotificationskj9@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: n0replyn0tificati0nupdatemail@gmail.com (MISP Attribute #19040) Malware Artifacts Malicious E-mail Payload delivery: n0replyn0tificati0nupdatemail@gmail.com (MISP Attribute #19040) n0replyn0tificati0nupdatemail@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: n0reply.notificationexsasuve@gmail.com (MISP Attribute #19041) Malware Artifacts Malicious E-mail Payload delivery: n0reply.notificationexsasuve@gmail.com (MISP Attribute #19041) n0reply.notificationexsasuve@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: noreply.535466586you6585tubadh@gmail.com (MISP Attribute #19042) Malware Artifacts Malicious E-mail Payload delivery: noreply.535466586you6585tubadh@gmail.com (MISP Attribute #19042) noreply.535466586you6585tubadh@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: no.reply.n0tification.alsdkch@gmail.com (MISP Attribute #19043) Malware Artifacts Malicious E-mail Payload delivery: no.reply.n0tification.alsdkch@gmail.com (MISP Attribute #19043) no.reply.n0tification.alsdkch@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: noreply.notifications.gkejkdgj@gmail.com (MISP Attribute #19044) Malware Artifacts Malicious E-mail Payload delivery: noreply.notifications.gkejkdgj@gmail.com (MISP Attribute #19044) noreply.notifications.gkejkdgj@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: noreplynotification.updates@gmail.com (MISP Attribute #19045) Malware Artifacts Malicious E-mail Payload delivery: noreplynotification.updates@gmail.com (MISP Attribute #19045) noreplynotification.updates@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: no.reply.updates.asdfaffgh78jg@gmail.com (MISP Attribute #19046) Malware Artifacts Malicious E-mail Payload delivery: no.reply.updates.asdfaffgh78jg@gmail.com (MISP Attribute #19046) no.reply.updates.asdfaffgh78jg@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: scorpiobond4@gmail.com (MISP Attribute #19047) Malware Artifacts Malicious E-mail Payload delivery: scorpiobond4@gmail.com (MISP Attribute #19047) scorpiobond4@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: sophia.1johnson@mail.com (MISP Attribute #19048) Malware Artifacts Malicious E-mail Payload delivery: sophia.1johnson@mail.com (MISP Attribute #19048) sophia.1johnson@mail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Payload delivery Payload delivery: noreply.mailingservice.3kdj9e9@gmail.com (MISP Attribute #19049) Malware Artifacts Malicious E-mail Payload delivery: noreply.mailingservice.3kdj9e9@gmail.com (MISP Attribute #19049) noreply.mailingservice.3kdj9e9@gmail.com None Derived from MISP's IDS flag. If an attribute is marked for IDS exports, the confidence will be high, otherwise none Event Threat Level: High MISP Tag: SOURCE:CITIZENLAB MISP Tag: DETECT citizenlab ../../../descendant-or-self::node()