celrebs[.]galleryDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
1 report, newest first · the exact sentence from each-
FontPack: A dangerous update“var linkDesktop = [‘hxxp://www.celebs.gallery:8001/chrome-update.exe’], [‘hxxp://celrebs[.]gallery:8001/firefox-update.exe’], [‘hxxp://celebs.gallery:8001/opera-update.exe’]”
Indicators reported together
named in the same reports- hxxps://browsertelemetry[.]tk/admin/loginin 1 report
- browsertelemetry[.]tkin 1 report
- hxxp://aziendaagricoladitraglia[.]it/in 1 report
- aziendaagricoladitraglia[.]itin 1 report
- hxxps://bitbucket[.]org/FlashPlayerUpdate/flashplayer/downloads/FlashPlayer.exe%E2%80%99in 1 report
- hxxp://www.mistressallegri[.]it/in 1 report
- www.mistressallegri[.]itin 1 report
- hxxps://bitbucket[.]org/AdobeFlashUpdate/flashplayer/downloads/FlashPlayer.zip%E2%80%99in 1 report
- hxxp://studio8weddingart[.]com/in 1 report
- studio8weddingart[.]comin 1 report
- hxxp://adifino[.]it/in 1 report
- adifino[.]itin 1 report
- hxxp://www.animadellepietre[.]it/in 1 report
- www.animadellepietre[.]itin 1 report
- hxxp://18.223.24[.]124/in 1 report
- 18.223.24[.]124in 1 report
- hxxps://bitbucket[.]org/FlashPlayerUpdate/flashplayerin 1 report
- hxxps://bitbucket[.]org/AdobeFlashUpdate/flashplayerin 1 report
- 1ea09cd229b34951…d323386e4fb6in 1 report
- 36d08c8ab8e16192…600fccd6629ain 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.