alloaypparel[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
The footprints of Raccoon“According to urlscan.io, more than 20 sites with a similar structure were discovered, but the one that stands out is alloaypparel[.]com.”
-
Massive malicious campaign by FakeSecurity JS-sniffer“…ML file contains an iframe element with a link to the page’s main content; in this case, all content was stored by the link hxxps://alloaypparel[.]com/view/public/Statement00534521/PDF/Statement001854.pdf.”
Indicators reported together
named in the same reports- fiswedbesign[.]comin 2 reports
- firstofbanks[.]comin 2 reports
- magento-security[.]orgin 2 reports
- mage-security[.]orgin 2 reports
- co[.]zain 1 report
- documents-cloud-server.co[.]zain 1 report
- b1799345152f0f11…a1867d64e119in 1 report
- hxxp://cloudupdate.co[.]za/documents/msofficeupdate.exein 1 report
- cloudupdate.co[.]zain 1 report
- f3498ba783b9c8c8…d2ff189615d9in 1 report
- badlandsparks[.]comin 1 report
- 185.244.149[.]100in 1 report
- 13b7afe8ee87977a…ca7efd62b9b6in 1 report
- 596a3cb4d82e6ab4…14b0f7bd14afin 1 report
- gineuter[.]infoin 1 report
- fastandprettycleaner[.]hkin 1 report
- c2f8d217877b1a28…5212f8dc2335in 1 report
- hxxp://download-plugin.co[.]za/documents/msofficeupdate.exein 1 report
- download-plugin.co[.]zain 1 report
- 430a406f2134b489…da11a172a7e1in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.