gvenlayer[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 4 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Switching side jobs“Figure 7: Exfiltration address hxxps://gvenlayer[.]com/track/ in a sample of the ATMZOW JS sniffer”
Indicators reported together
named in the same reports- hxxps://designestylelab[.]com/css/in 1 report
- designestylelab[.]comin 1 report
- hxxps://gvenlayer[.]com/track/in 1 report
- hxxps://xn--keyvigatrs-key-7oc4531jsva[.]com/ktt/cmd/logonin 1 report
- xn--keyvigatrs-key-7oc4531jsva[.]comin 1 report
- xn--kys-nvigatorky-zp8g5mna[.]comin 1 report
- xn--kynavigatos-ky-pwc6541jna[.]comin 1 report
- navlgator-kcy[.]comin 1 report
- xn--kyavigator-ky-jjc7914ima[.]comin 1 report
- xn--ky-vigatorkey-kjc9383i4ka[.]comin 1 report
- xn--key-vigatrs-key-wuc9688j1wa[.]comin 1 report
- vigatorkey[.]comin 1 report
- rskey[.]comin 1 report
- xn--key-vigatrskey-8oc4531jsva[.]comin 1 report
- hxxp://www.swingsidebilbao[.]com/wp-content/plugins/contact-form-7/includes/block-editor/carl.phpin 1 report
- www.swingsidebilbao[.]comin 1 report
- be3effcb9069ac6d…e33e55980403in 1 report
- hxxps://xn--keynvigatorkey-yp8g[.]com/ktt/cmd/logon0210_4367220121562.docin 1 report
- xn--keynvigatorkey-yp8g[.]comin 1 report
- 17693bca881ec9bc…64704c048b9din 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.