1dnscontrol[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
NotPetya pulls BadRabbit out of the hat“Requests are sent to 1dnscontrol[.]com/logo.png and 1dnscontrol.com/flash_install.php, then the executable file 1dnscontrol.com/install_flash_player.exe is downloaded for user to launch.”
-
BadRabbit: spread of new cryptolocker“If a visitor pressed “download” then the malicious file was downloaded from 1dnscontrol[.]com.”
Indicators reported together
named in the same reports- 185.149.120[.]3in 2 reports
- www.fontanka[.]ruin 2 reports
- hxxp://argumenti[.]ruin 2 reports
- argumenti[.]ruin 2 reports
- hxxp://argumentiru[.]comin 2 reports
- argumentiru[.]comin 2 reports
- fbbdc39af1139aebba4da004475e8839in 2 reports
- webcheck01[.]netin 2 reports
- webdefense1[.]netin 2 reports
- secure-check[.]hostin 2 reports
- firewebmail[.]comin 2 reports
- secureinbox[.]emailin 2 reports
- secure-dns1[.]netin 2 reports
- hxxp://www.fontanka[.]ruin 1 report
- hxxp://spbvoditel[.]ruin 1 report
- spbvoditel[.]ruin 1 report
- hxxp://www.sinematurk[.]comin 1 report
- www.sinematurk[.]comin 1 report
- hxxp://www.online812[.]ruin 1 report
- www.online812[.]ruin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.