hxxps://cdn-gstat[.]com/thredzonline/dataURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
1 report, newest first · the exact sentence from each-
JavaScript sniffers’ new tricks“…th a fake form, collect bank card information from it, and send any data collected to the attacker’s gate using the URL hxxps://cdn-gstat[.]com/thredzonline/data (Picture 12).”
Indicators reported together
named in the same reports- hxxps://google-analitics[.]org/diem/trackin 1 report
- google-analitics[.]orgin 1 report
- cdn-gstat[.]comin 1 report
- cdn-host[.]orgin 1 report
- telrshop[.]comin 1 report
- jquery-live[.]comin 1 report
- jquery-on[.]comin 1 report
- hxxps://www.telrshops[.]com/in 1 report
- www.telrshops[.]comin 1 report
Copy these 9 indicators · defanged
Thanks — we review every report.