gonefishe[.]comDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 14 months ago
What the reports say
1 report, newest first · the exact sentence from each-
MaaS Appeal: An Infostealer Rises From The Ashes“In one example, the URL hxxp://gonefishe[.]com prompted the user to download a binary and install a French-language version of a game with a name and description comparable to one recently released on Steam.”
Indicators reported together
named in the same reports- bashupload[.]comin 1 report
- hxxp://gonefishe[.]comin 1 report
- shadow.nova-blight[.]topin 1 report
- nova-blight[.]sitein 1 report
- nova-blight[.]xyzin 1 report
- hxxps://github[.]com/KSCHcuck1in 1 report
- hxxps://github[.]com/CrackedProgramer412/cacain 1 report
- hxxps://github[.]com/MYnvain 1 report
- hxxps://github[.]com/404login 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/blocked_ips.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/blocked_progr.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/refs/heads/main/json/blockedorg.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/blocked_GPUTYPE.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/nope.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/blocked_hwid.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/Mynva/sub/main/json/blockedpcname.jsonin 1 report
- hxxps://raw.githubusercontent[.]com/MYnva/sub/refs/heads/main/json/blockedOS.jsonin 1 report
- hxxps://api.nova-blight[.]top/injections/*targeted_application*/*some_key*in 1 report
- api.nova-blight[.]topin 1 report
- hxxps://api.nova-blight[.]top/injections/mullvad/dVukBEtL8rW2PDgkwdwfbNSdG3imwU8bZhYUygzthir66sXXUuyURunOin9sin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.