ssl.blsouqs[.]comDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 2 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Targeted Attack on Government Entities in the Middle East | Part 2“We observed attempts by the threat actor to ping ssl.blsouqs[.]com (C2 server of OctLurk backdoor), cert.hypersnet.com (C2 server of BINDCLOAK) and contacts.ftabnews.com.”
-
Targeted Attack on Government Entities in the Middle East | Part 1“ping ssl.blsouqs[.]com -n 2”
Indicators reported together
named in the same reports- 7a14a99d70d42d3f7bf72f843185fc07in 2 reports
- cert.hypersnet[.]comin 2 reports
- contacts.ftabnews[.]comin 2 reports
- 577b1cc894636f4a…b9b7ade137c3in 2 reports
- 3b0c658ebaa2bae8…e84da4fa669din 2 reports
- 59fe1ef7707fe497d89f34505222862fin 1 report
- 107.175.172[.]40in 1 report
- about.blsouqs[.]comin 1 report
- ftabnews[.]comin 1 report
- hxxps://api.telegram[.]org/botin 1 report
- message.chat[.]idin 1 report
- c99f29ac08454855b3d538960bb2f34fin 1 report
- 97124a93766be732e8fef5a56a5346a2in 1 report
- c1f16e31ae71372e…c7b887a4e3f2in 1 report
- 789fd11285642861…c907f7f320bdin 1 report
- 68926e6c958562deaae35de3d9f59de3in 1 report
- ccb2002fe8f5cc1f…b52d1c507421in 1 report
- c84542ac30cbe9bb…2466e084340fin 1 report
- 087499849115eb28c4364581d2b28d09in 1 report
- 86ee99f293a30720…91f93fb9be95in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.