200.63.40[.]2IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 6 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Massive malicious campaign by FakeSecurity JS-sniffer“Attacker infrastructure was deployed on the server with IP address 200.63.40[.]2, which is owned by a dedicated server provider, Panamaserver.com.”
Indicators reported together
named in the same reports- alloaypparel[.]comin 1 report
- fiswedbesign[.]comin 1 report
- firstofbanks[.]comin 1 report
- magento-security[.]orgin 1 report
- mage-security[.]orgin 1 report
- hxxps://www.etodoors[.]com/uploads/Statement00534521.htmlin 1 report
- www.etodoors[.]comin 1 report
- hxxps://www.healthcare4all.co[.]uk/manuals/Statement00534521.htmlin 1 report
- www.healthcare4all.co[.]ukin 1 report
- hxxps://www.healthcare4all.co[.]uk/lib/Statement001845.htmlin 1 report
- hxxps://www.healthcare4all.co[.]uk/doc/BankStatement001489232.htmlin 1 report
- hxxp://verticalinsider[.]com/bookmarks/Bank_Statement0052890.htmlin 1 report
- verticalinsider[.]comin 1 report
- hxxp://thepinetree[.]net/n/docs/Statement00159701.htmlin 1 report
- thepinetree[.]netin 1 report
- hxxps://www.readicut.co[.]uk/media/pdf/Bank_Statement00334891.htmlin 1 report
- www.readicut.co[.]ukin 1 report
- hxxp://www.e-cig[.]com/doc/pdf/eStmt.htmlin 1 report
- www.e-cig[.]comin 1 report
- hxxps://www.genstattu[.]com/doc/PoliceStatement001854.htmlin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.