www.csu-shop[.]deDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 7 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Meet the JS-Sniffers 3: Illum Family“…g to the post by Willem de Groot, the same gate was used for the JS-sniffer as the one used in an attack on an online store hxxps://www.csu-shop[.]de/, owned by the German political party CSU.”
Indicators reported together
named in the same reports- cdn.illum[.]pwin 1 report
- records.nstatistics[.]comin 1 report
- hxxp://sr.illum[.]pw/mjs_special/visiondirect.co.uk.jsin 1 report
- sr.illum[.]pwin 1 report
- request.payrightnow[.]cfin 1 report
- hxxp://sr.illum[.]pw/mjs_special/topdierenshop.nl.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/tiendalenovo.es.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/pro-bolt.com.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/plae.co.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/ottolenghi.co.uk.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/oldtimecandy.com.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/mylook.ee.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/luluandsky.com.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/julep.com.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/gymcompany.es.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/grotekadoshop.nl.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/fushi.co.uk.jsin 1 report
- hxxp://sr.illum[.]pw/mjs_special/fareastflora.com.jsin 1 report
Copy these 18 indicators · defanged
Also named with it: CVE-2009-1185, CVE-2016-4010
Thanks — we review every report.