Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

Domains/URLs

https://stryper.info/t.ps1

https://stryper.info/aa.js

http://aa.amazingshield.xyz/33244556546.py

stryper.info

aa.amazingshield.xyz

crowdstri.com

reg.pcsdkflyer.ca

vendralo.info

finersto.com

drelto.info

mqsearch.com

extentrack.com

noiseship.cfd

atthelake.info

uy.basesfiles.com

basesfile.com

igk.filexspace.com ikx.filexspace.com

filexstorage.site

filescloud.pro

zippyfiles.net

mifilesx.site

dw.xrsdownload.com

storage.ggclicker.com

watchadvance.com

animalview.xyz

trickflag.info

suitstraw.info

connect.fuelleg.info

vesselsystem.xyz

minewave.info

collartitle.info

boardmagic.info

placespoon.xyz

needcherries.online

voyagemist.space

statementtouch.xyz

chawton.info

velfps.blogspot.com

velvoxlab.blogspot.com

venrx.blogspot.com

venrxhub.blogspot.com

venrx.xyz

ravexoffical.blogspot.com

adex-blog.blogspot.com

achievershelf.space

activitymeal.space

additionplot.cfd

adviceturn.xyz

afternoonscrew.space

agreementjuice.space

airplaneiron.xyz

airtwig.xyz

amountfuel.icu

animalrecord.xyz

apparatustruck.xyz

apparelplate.space

archairport.xyz

authoritykittens.info

babyvein.xyz

badgewing.xyz

bagcare.space

basinpleasure.xyz

basketballyear.xyz

baskethumor.xyz

bedroomdesire.xyz

beliefpicture.xyz

bellplayground.xyz

bikesdonkey.info

birthdaymagic.xyz

boatthought.xyz

boundarychickens.xyz

boytank.xyz

branchmorning.xyz

breathdoctor.xyz

bubbleslip.xyz

cabbagemeasure.xyz

cablecanvas.xyz

cardgrape.xyz

cattlegold.xyz

celeryerror.xyz

centscarf.xyz

chalkprose.xyz

cherriestruck.space

chesstail.xyz

chickensmine.space

churchpail.xyz

clothcrib.xyz

clothcurrent.xyz

coatberry.xyz

connect.activitykitty.xyz

connect.apparatustaste.xyz

connect.armcard.xyz

connect.badgeterritory.xyz

connect.baitmetal.xyz

connect.beefteeth.xyz

connect.believesisters.xyz

connect.boundaryfly.xyz

connect.bubbleappliance.xyz

connect.cableland.xyz

connect.chinexpert.xyz

connect.conditiongrade.xyz

connect.coppersummer.xyz

connect.creatorcreator.xyz

connect.dresstent.xyz

connect.dropjeans.xyz

connect.edgeplayground.xyz

connect.exchangeclub.xyz

connect.existencediscussion.info

connect.expansionsalt.info

connect.fangstitch.xyz

connect.fogparcel.info

connect.foodhook.info

connect.forkcountry.xyz

connect.geesepurpose.xyz

connect.giantsdogs.info

connect.giraffetoothpaste.xyz

connect.guitarrobin.xyz

connect.halllunch.info

connect.harborclam.xyz

connect.holecompany.info

connect.knifesea.icu

connect.monthsmoke.info

connect.nosegovernor.xyz

connect.pagesubstance.xyz

connect.poisonblade.xyz

connect.prosesalt.xyz

connect.purposethings.info

connect.quiltgirls.xyz

connect.reactionbit.info

connect.rewardrun.xyz

connect.riceapparel.xyz

connect.seashoreletters.info

connect.selectiondogs.xyz

connect.shapeboot.info

connect.shoptax.xyz

connect.stopfinger.info

connect.structurekiss.xyz

connect.tanksuggestion.xyz

connect.thingbrass.xyz

connect.thoughtslave.xyz

connect.threadfuel.xyz

connect.trailcontrol.xyz

connect.trickbushes.info

connect.vacationthought.xyz

connect.viewschool.xyz

connect.voyagelaugh.xyz

connect.woolreward.xyz

connect.yearicicle.xyz

connect.zebratransport.xyz

controlprice.xyz

coughcoal.icu

countrypipe.space

cowsfoot.xyz

crackfood.space

creamfurniture.space

creditchickens.xyz

crediteducation.cfd

crimestreet.xyz

crimesupport.cfd

curvebite.xyz

deathrock.xyz

deathshop.xyz

decisionreaction.xyz

dinosaursjam.cfd

distancebedroom.xyz

distributiontheory.cfd

dolldebt.xyz

doorsoap.cfd

dustprotest.icu

expansionsalt.info

fallbeginner.xyz

fangbear.xyz

filescenter.cloud

filesilo.cloud

fingerbasketball.xyz

flavorwood.xyz

fleshfrog.xyz

fleshplants.xyz

fleshproduce.xyz

foodrock.space

forkmice.xyz

friendjewel.cfd

geeseairport.xyz

girlsgrain.xyz

glassmove.xyz

goldsteel.cfd

governmentyard.cfd

grandfatherquiver.xyz

gripcollar.xyz

gripsleep.xyz

gunbear.xyz

hairreward.xyz

hatescale.info

healthiron.space

holemuscle.xyz

homecub.cfd

homefireman.xyz

honeyfear.xyz

ilesilo.cloud

instrumentvolcano.space

kittenschalk.xyz

kittensgrade.cfd

kittensrobin.info

landerror.xyz

lesilo.cloud

liptendency.info

liquidtoes.xyz

liquidwrench.cfd

lockettrail.xyz

lumberbaseball.xyz

memorycompany.xyz

micesisters.xyz

milkname.xyz

minuteblade.xyz

mountainsurprise.cfd

mouthfruit.cfd

noiseship.cfd

northbox.xyz

partpipe.xyz

partyfriends.cfd

passengerbrake.space

peacejewel.xyz

peacetongue.xyz

petminister.xyz

pictureporter.cfd

pieplant.space

pizzasthread.xyz

pleasurewaves.info

popcornregret.xyz

porterdebt.xyz

powerbushes.xyz

profitfact.xyz

prosetoothbrush.xyz

quincepage.xyz

raintexture.xyz

rakepurpose.xyz

raterake.cfd

readingscience.xyz

reasonachiever.xyz

recessgiraffe.xyz

recordhistory.xyz

regretsquirrel.xyz

restbucket.xyz

ricestar.xyz

rifledog.xyz

ringsparcel.xyz

roadyear.xyz

rockcredit.space

rollglass.xyz

roofbattle.xyz

roofreaction.xyz

rosegrip.xyz

routeletters.xyz

runhouses.xyz

scarecrowcare.xyz

scentrod.info

screwbirth.xyz

seatlace.space

seaword.xyz

servantadvice.xyz

shiptank.cfd

shirtexample.xyz

shoesearthquake.xyz

sinkwash.space

skirtloss.xyz

slipvegetable.xyz

smokecar.space

songtheory.xyz

spadeleg.xyz

sparkrice.space

sparkrub.xyz

spoonducks.cfd

springdogs.xyz

spybaseball.space

startmonkey.cfd

statementservant.xyz

statementtouch.xyz

steamhouses.cfd

stopzinc.xyz

structurelinen.xyz

suggestioncemetery.xyz

suitsoap.xyz

suitstraw.info

swimrest.xyz

tablechess.info

tailsilk.xyz

territorycaption.xyz

texturebadge.xyz

thrillducks.xyz

throneback.xyz

tinsofa.xyz

toespiders.xyz

toothpastesense.xyz

toothpastesun.xyz

townquiver.xyz

trampdonkey.icu

treesboard.xyz

truckpig.cfd

truckshat.xyz

turnclass.xyz

umbrellavessel.xyz

vacationengine.xyz

vesselsystem.xyz

vestthings.cfd

volcanopin.xyz

voyagemist.space

wastereading.xyz

wasteturkey.xyz

wastewine.xyz

wavepan.xyz

whistlebook.cfd

whistlesong.xyz

wormspark.xyz

woundsecretary.xyz

wrenobservation.xyz

yamsmell.xyz

yardvalue.cfd

zephyrhall.cfd

Hash

7f792c45de1e28fd42ac44c9444f157a2161742d130bac336c0e991aabbb112c

fc485882626512e7ff82a1d7cd8e8fb3e9751b026d97e682d6908aefff1f2d73

3052bd320a34e12ee694811ed0578797477dfd480c664491e509ed15ce1a6961

25558ea78c4aa0fdd0f45fafcaa546d3115dc5806809d144a5801a40e48fd4c5

9b0d9cbc0fd4a7bae8b78a15dfbe63052779414ad725845732c4a0083008da69

ceb30a5eb9ad9d9c6712c80726df16f96f99d9fc0753be241b00b4d636eb576e

cf184d04ca31fb2b6b7efd85399c29c1136b539153e137ceb3877b1b905791de

62d49d0c78207ec2452cc8a30501db771c9edbae89889e41a7dd227551243e8e

aaebc8c07de485be6d1bfa956668c5e18aa1ff5588dfe84672e20ae90b4560f1

e05bc22afbc5ddd50b49c85ee169dd13318000d38286de2b8bcff98217256a8d

b367762140ae7f5098230b8a5da738c9241f286281ec9439dd6ca581fc87989c

d8d783f8e050a6e394f3c0aa5e2bc73a38d822e55fbc39c0648cbff566de3cdf

06e0afd01bbc6c9d5dc16c3165089b233dc071e1f251abd06235d1b9166cdac5

2c6e11027b011042c9a118fc20728f8f4ebb6be8795cc84cc9a45622c297d354

553ce594c9c6afdd4794fddc28c194e3bc3c1b052310e5099c58ac15bab72104

fdcc95b7791c0d6590dcf1a412dc9fcc92ad2095818d1b78368b31efad012007

Detection Query 1 :

domainname like "connect.thingbrass.xyz" or url like "connect.thingbrass.xyz" or siteurl like "connect.thingbrass.xyz" or domainname like "activitymeal.space" or url like "activitymeal.space" or siteurl like "activitymeal.space" or domainname like "gripcollar.xyz" or url like "gripcollar.xyz" or siteurl like "gripcollar.xyz" or domainname like "kittensrobin.info" or url like "kittensrobin.info" or siteurl like "kittensrobin.info" or domainname like "atthelake.info" or url like "atthelake.info" or siteurl like "atthelake.info" or domainname like "connect.expansionsalt.info" or url like "connect.expansionsalt.info" or siteurl like "connect.expansionsalt.info" or domainname like "lesilo.cloud" or url like "lesilo.cloud" or siteurl like "lesilo.cloud" or domainname like "breathdoctor.xyz" or url like "breathdoctor.xyz" or siteurl like "breathdoctor.xyz" or domainname like "recordhistory.xyz" or url like "recordhistory.xyz" or siteurl like "recordhistory.xyz" or domainname like "boatthought.xyz" or url like "boatthought.xyz" or siteurl like "boatthought.xyz" or domainname like "honeyfear.xyz" or url like "honeyfear.xyz" or siteurl like "honeyfear.xyz" or domainname like "connect.fuelleg.info" or url like "connect.fuelleg.info" or siteurl like "connect.fuelleg.info" or domainname like "connect.yearicicle.xyz" or url like "connect.yearicicle.xyz" or siteurl like "connect.yearicicle.xyz" or domainname like "swimrest.xyz" or url like "swimrest.xyz" or siteurl like "swimrest.xyz" or domainname like "liptendency.info" or url like "liptendency.info" or siteurl like "liptendency.info" or domainname like "ricestar.xyz" or url like "ricestar.xyz" or siteurl like "ricestar.xyz" or domainname like "tinsofa.xyz" or url like "tinsofa.xyz" or siteurl like "tinsofa.xyz" or domainname like "agreementjuice.space" or url like "agreementjuice.space" or siteurl like "agreementjuice.space" or domainname like "connect.reactionbit.info" or url like "connect.reactionbit.info" or siteurl like "connect.reactionbit.info" or domainname like "deathrock.xyz" or url like "deathrock.xyz" or siteurl like "deathrock.xyz" or domainname like "connect.selectiondogs.xyz" or url like "connect.selectiondogs.xyz" or siteurl like "connect.selectiondogs.xyz" or domainname like "crowdstri.com" or url like "crowdstri.com" or siteurl like "crowdstri.com" or domainname like "venrxhub.blogspot.com" or url like "venrxhub.blogspot.com" or siteurl like "venrxhub.blogspot.com" or domainname like "minuteblade.xyz" or url like "minuteblade.xyz" or siteurl like "minuteblade.xyz" or domainname like "wavepan.xyz" or url like "wavepan.xyz" or siteurl like "wavepan.xyz" or domainname like "territorycaption.xyz" or url like "territorycaption.xyz" or siteurl like "territorycaption.xyz" or domainname like "stryper.info" or url like "stryper.info" or siteurl like "stryper.info" or domainname like "connect.boundaryfly.xyz" or url like "connect.boundaryfly.xyz" or siteurl like "connect.boundaryfly.xyz" or domainname like "chickensmine.space" or url like "chickensmine.space" or siteurl like "chickensmine.space" or domainname like "bellplayground.xyz" or url like "bellplayground.xyz" or siteurl like "bellplayground.xyz" or domainname like "glassmove.xyz" or url like "glassmove.xyz" or siteurl like "glassmove.xyz" or domainname like "filesilo.cloud" or url like "filesilo.cloud" or siteurl like "filesilo.cloud" or domainname like "runhouses.xyz" or url like "runhouses.xyz" or siteurl like "runhouses.xyz" or domainname like "structurelinen.xyz" or url like "structurelinen.xyz" or siteurl like "structurelinen.xyz" or domainname like "connect.zebratransport.xyz" or url like "connect.zebratransport.xyz" or siteurl like "connect.zebratransport.xyz" or domainname like "connect.armcard.xyz" or url like "connect.armcard.xyz" or siteurl like "connect.armcard.xyz" or domainname like "ravexoffical.blogspot.com" or url like "ravexoffical.blogspot.com" or siteurl like "ravexoffical.blogspot.com" or domainname like "controlprice.xyz" or url like "controlprice.xyz" or siteurl like "controlprice.xyz" or domainname like "suitsoap.xyz" or url like "suitsoap.xyz" or siteurl like "suitsoap.xyz" or domainname like "turnclass.xyz" or url like "turnclass.xyz" or siteurl like "turnclass.xyz" or domainname like "chalkprose.xyz" or url like "chalkprose.xyz" or siteurl like "chalkprose.xyz" or domainname like "velvoxlab.blogspot.com" or url like "velvoxlab.blogspot.com" or siteurl like "velvoxlab.blogspot.com" or domainname like "crackfood.space" or url like "crackfood.space" or siteurl like "crackfood.space" or domainname like "umbrellavessel.xyz" or url like "umbrellavessel.xyz" or siteurl like "umbrellavessel.xyz" or domainname like "quincepage.xyz" or url like "quincepage.xyz" or siteurl like "quincepage.xyz" or domainname like "filexstorage.site" or url like "filexstorage.site" or siteurl like "filexstorage.site" or domainname like "homefireman.xyz" or url like "homefireman.xyz" or siteurl like "homefireman.xyz"

Detection Query 2 :

domainname like "texturebadge.xyz" or url like "texturebadge.xyz" or siteurl like "texturebadge.xyz" or domainname like "cablecanvas.xyz" or url like "cablecanvas.xyz" or siteurl like "cablecanvas.xyz" or domainname like "raintexture.xyz" or url like "raintexture.xyz" or siteurl like "raintexture.xyz" or domainname like "popcornregret.xyz" or url like "popcornregret.xyz" or siteurl like "popcornregret.xyz" or domainname like "deathshop.xyz" or url like "deathshop.xyz" or siteurl like "deathshop.xyz" or domainname like "profitfact.xyz" or url like "profitfact.xyz" or siteurl like "profitfact.xyz" or domainname like "countrypipe.space" or url like "countrypipe.space" or siteurl like "countrypipe.space" or domainname like "raterake.cfd" or url like "raterake.cfd" or siteurl like "raterake.cfd" or domainname like "mqsearch.com" or url like "mqsearch.com" or siteurl like "mqsearch.com" or domainname like "distributiontheory.cfd" or url like "distributiontheory.cfd" or siteurl like "distributiontheory.cfd" or domainname like "airplaneiron.xyz" or url like "airplaneiron.xyz" or siteurl like "airplaneiron.xyz" or domainname like "cattlegold.xyz" or url like "cattlegold.xyz" or siteurl like "cattlegold.xyz" or domainname like "tailsilk.xyz" or url like "tailsilk.xyz" or siteurl like "tailsilk.xyz" or domainname like "steamhouses.cfd" or url like "steamhouses.cfd" or siteurl like "steamhouses.cfd" or domainname like "powerbushes.xyz" or url like "powerbushes.xyz" or siteurl like "powerbushes.xyz" or domainname like "distancebedroom.xyz" or url like "distancebedroom.xyz" or siteurl like "distancebedroom.xyz" or domainname like "connect.prosesalt.xyz" or url like "connect.prosesalt.xyz" or siteurl like "connect.prosesalt.xyz" or domainname like "connect.conditiongrade.xyz" or url like "connect.conditiongrade.xyz" or siteurl like "connect.conditiongrade.xyz" or domainname like "clothcurrent.xyz" or url like "clothcurrent.xyz" or siteurl like "clothcurrent.xyz" or domainname like "crediteducation.cfd" or url like "crediteducation.cfd" or siteurl like "crediteducation.cfd" or domainname like "wasteturkey.xyz" or url like "wasteturkey.xyz" or siteurl like "wasteturkey.xyz" or domainname like "connect.harborclam.xyz" or url like "connect.harborclam.xyz" or siteurl like "connect.harborclam.xyz" or domainname like "churchpail.xyz" or url like "churchpail.xyz" or siteurl like "churchpail.xyz" or domainname like "fangbear.xyz" or url like "fangbear.xyz" or siteurl like "fangbear.xyz" or domainname like "roofbattle.xyz" or url like "roofbattle.xyz" or siteurl like "roofbattle.xyz" or domainname like "connect.edgeplayground.xyz" or url like "connect.edgeplayground.xyz" or siteurl like "connect.edgeplayground.xyz" or domainname like "connect.coppersummer.xyz" or url like "connect.coppersummer.xyz" or siteurl like "connect.coppersummer.xyz" or domainname like "centscarf.xyz" or url like "centscarf.xyz" or siteurl like "centscarf.xyz" or domainname like "connect.beefteeth.xyz" or url like "connect.beefteeth.xyz" or siteurl like "connect.beefteeth.xyz" or domainname like "forkmice.xyz" or url like "forkmice.xyz" or siteurl like "forkmice.xyz" or domainname like "wrenobservation.xyz" or url like "wrenobservation.xyz" or siteurl like "wrenobservation.xyz" or domainname like "connect.fangstitch.xyz" or url like "connect.fangstitch.xyz" or siteurl like "connect.fangstitch.xyz" or domainname like "connect.foodhook.info" or url like "connect.foodhook.info" or siteurl like "connect.foodhook.info" or domainname like "minewave.info" or url like "minewave.info" or siteurl like "minewave.info" or domainname like "passengerbrake.space" or url like "passengerbrake.space" or siteurl like "passengerbrake.space" or domainname like "rakepurpose.xyz" or url like "rakepurpose.xyz" or siteurl like "rakepurpose.xyz" or domainname like "gripsleep.xyz" or url like "gripsleep.xyz" or siteurl like "gripsleep.xyz" or domainname like "needcherries.online" or url like "needcherries.online" or siteurl like "needcherries.online" or domainname like "connect.monthsmoke.info" or url like "connect.monthsmoke.info" or siteurl like "connect.monthsmoke.info" or domainname like "connect.nosegovernor.xyz" or url like "connect.nosegovernor.xyz" or siteurl like "connect.nosegovernor.xyz" or domainname like "venrx.xyz" or url like "venrx.xyz" or siteurl like "venrx.xyz" or domainname like "connect.apparatustaste.xyz" or url like "connect.apparatustaste.xyz" or siteurl like "connect.apparatustaste.xyz" or domainname like "ringsparcel.xyz" or url like "ringsparcel.xyz" or siteurl like "ringsparcel.xyz" or domainname like "memorycompany.xyz" or url like "memorycompany.xyz" or siteurl like "memorycompany.xyz" or domainname like "pizzasthread.xyz" or url like "pizzasthread.xyz" or siteurl like "pizzasthread.xyz" or domainname like "chawton.info" or url like "chawton.info" or siteurl like "chawton.info" or domainname like "curvebite.xyz" or url like "curvebite.xyz" or siteurl like "curvebite.xyz" or domainname like "connect.pagesubstance.xyz" or url like "connect.pagesubstance.xyz" or siteurl like "connect.pagesubstance.xyz" or domainname like "chesstail.xyz" or url like "chesstail.xyz" or siteurl like "chesstail.xyz" or domainname like "friendjewel.cfd" or url like "friendjewel.cfd" or siteurl like "friendjewel.cfd" or domainname like "foodrock.space" or url like "foodrock.space" or siteurl like "foodrock.space" or domainname like "creditchickens.xyz" or url like "creditchickens.xyz" or siteurl like "creditchickens.xyz" or domainname like "mouthfruit.cfd" or url like "mouthfruit.cfd" or siteurl like "mouthfruit.cfd" or domainname like "routeletters.xyz" or url like "routeletters.xyz" or siteurl like "routeletters.xyz" or domainname like "connect.vacationthought.xyz" or url like "connect.vacationthought.xyz" or siteurl like "connect.vacationthought.xyz" or domainname like "connect.believesisters.xyz" or url like "connect.believesisters.xyz" or siteurl like "connect.believesisters.xyz" or domainname like "connect.viewschool.xyz" or url like "connect.viewschool.xyz" or siteurl like "connect.viewschool.xyz" or domainname like "pleasurewaves.info" or url like "pleasurewaves.info" or siteurl like "pleasurewaves.info" or domainname like "goldsteel.cfd" or url like "goldsteel.cfd" or siteurl like "goldsteel.cfd" or domainname like "vesselsystem.xyz" or url like "vesselsystem.xyz" or siteurl like "vesselsystem.xyz" or domainname like "basesfile.com" or url like "basesfile.com" or siteurl like "basesfile.com" or domainname like "filescloud.pro" or url like "filescloud.pro" or siteurl like "filescloud.pro" or domainname like "connect.structurekiss.xyz" or url like "connect.structurekiss.xyz" or siteurl like "connect.structurekiss.xyz" or domainname like "prosetoothbrush.xyz" or url like "prosetoothbrush.xyz" or siteurl like "prosetoothbrush.xyz" or domainname like "liquidwrench.cfd" or url like "liquidwrench.cfd" or siteurl like "liquidwrench.cfd" or domainname like "homecub.cfd" or url like "homecub.cfd" or siteurl like "homecub.cfd" or domainname like "tablechess.info" or url like "tablechess.info" or siteurl like "tablechess.info" or domainname like "authoritykittens.info" or url like "authoritykittens.info" or siteurl like "authoritykittens.info" or domainname like "achievershelf.space" or url like "achievershelf.space" or siteurl like "achievershelf.space" or domainname like "reasonachiever.xyz" or url like "reasonachiever.xyz" or siteurl like "reasonachiever.xyz" or domainname like "songtheory.xyz" or url like "songtheory.xyz" or siteurl like "songtheory.xyz" or domainname like "connect.rewardrun.xyz" or url like "connect.rewardrun.xyz" or siteurl like "connect.rewardrun.xyz" or domainname like "shoesearthquake.xyz" or url like "shoesearthquake.xyz" or siteurl like "shoesearthquake.xyz" or domainname like "rifledog.xyz" or url like "rifledog.xyz" or siteurl like "rifledog.xyz" or domainname like "milkname.xyz" or url like "milkname.xyz" or siteurl like "milkname.xyz" or domainname like "venrx.blogspot.com" or url like "venrx.blogspot.com" or siteurl like "venrx.blogspot.com" or domainname like "celeryerror.xyz" or url like "celeryerror.xyz" or siteurl like "celeryerror.xyz" or domainname like "sinkwash.space" or url like "sinkwash.space" or siteurl like "sinkwash.space" or domainname like "recessgiraffe.xyz" or url like "recessgiraffe.xyz" or siteurl like "recessgiraffe.xyz" or domainname like "fleshproduce.xyz" or url like "fleshproduce.xyz" or siteurl like "fleshproduce.xyz" or domainname like "vendralo.info" or url like "vendralo.info" or siteurl like "vendralo.info" or domainname like "suggestioncemetery.xyz" or url like "suggestioncemetery.xyz" or siteurl like "suggestioncemetery.xyz" or domainname like "connect.dropjeans.xyz" or url like "connect.dropjeans.xyz" or siteurl like "connect.dropjeans.xyz" or domainname like "https://stryper.info/t.ps1" or url like "https://stryper.info/t.ps1" or siteurl like "https://stryper.info/t.ps1" or domainname like "cabbagemeasure.xyz" or url like "cabbagemeasure.xyz" or siteurl like "cabbagemeasure.xyz" or domainname like "truckpig.cfd" or url like "truckpig.cfd" or siteurl like "truckpig.cfd" or domainname like "rosegrip.xyz" or url like "rosegrip.xyz" or siteurl like "rosegrip.xyz" or domainname like "expansionsalt.info" or url like "expansionsalt.info" or siteurl like "expansionsalt.info" or domainname like "bubbleslip.xyz" or url like "bubbleslip.xyz" or siteurl like "bubbleslip.xyz" or domainname like "pieplant.space" or url like "pieplant.space" or siteurl like "pieplant.space" or domainname like "connect.seashoreletters.info" or url like "connect.seashoreletters.info" or siteurl like "connect.seashoreletters.info" or domainname like "toothpastesense.xyz" or url like "toothpastesense.xyz" or siteurl like "toothpastesense.xyz" or domainname like "connect.fogparcel.info" or url like "connect.fogparcel.info" or siteurl like "connect.fogparcel.info" or domainname like "watchadvance.com" or url like "watchadvance.com" or siteurl like "watchadvance.com" or domainname like "trampdonkey.icu" or url like "trampdonkey.icu" or siteurl like "trampdonkey.icu" or domainname like "finersto.com" or url like "finersto.com" or siteurl like "finersto.com" or domainname like "slipvegetable.xyz" or url like "slipvegetable.xyz" or siteurl like "slipvegetable.xyz" or domainname like "apparelplate.space" or url like "apparelplate.space" or siteurl like "apparelplate.space" or domainname like "zephyrhall.cfd" or url like "zephyrhall.cfd" or siteurl like "zephyrhall.cfd" or domainname like "drelto.info" or url like "drelto.info" or siteurl like "drelto.info" or domainname like "yardvalue.cfd" or url like "yardvalue.cfd" or siteurl like "yardvalue.cfd" or domainname like "spybaseball.space" or url like "spybaseball.space" or siteurl like "spybaseball.space" or domainname like "grandfatherquiver.xyz" or url like "grandfatherquiver.xyz" or siteurl like "grandfatherquiver.xyz" or domainname like "connect.cableland.xyz" or url like "connect.cableland.xyz" or siteurl like "connect.cableland.xyz" or domainname like "cardgrape.xyz" or url like "cardgrape.xyz" or siteurl like "cardgrape.xyz" or domainname like "connect.holecompany.info" or url like "connect.holecompany.info" or siteurl like "connect.holecompany.info" or domainname like "extentrack.com" or url like "extentrack.com" or siteurl like "extentrack.com" or domainname like "whistlebook.cfd" or url like "whistlebook.cfd" or siteurl like "whistlebook.cfd" or domainname like "rollglass.xyz" or url like "rollglass.xyz" or siteurl like "rollglass.xyz" or domainname like "zippyfiles.net" or url like "zippyfiles.net" or siteurl like "zippyfiles.net" or domainname like "ilesilo.cloud" or url like "ilesilo.cloud" or siteurl like "ilesilo.cloud" or domainname like "treesboard.xyz" or url like "treesboard.xyz" or siteurl like "treesboard.xyz" or domainname like "afternoonscrew.space" or url like "afternoonscrew.space" or siteurl like "afternoonscrew.space" or domainname like "connect.bubbleappliance.xyz" or url like "connect.bubbleappliance.xyz" or siteurl like "connect.bubbleappliance.xyz" or domainname like "bagcare.space" or url like "bagcare.space" or siteurl like "bagcare.space" or domainname like "adviceturn.xyz" or url like "adviceturn.xyz" or siteurl like "adviceturn.xyz" or domainname like "bikesdonkey.info" or url like "bikesdonkey.info" or siteurl like "bikesdonkey.info" or domainname like "connect.guitarrobin.xyz" or url like "connect.guitarrobin.xyz" or siteurl like "connect.guitarrobin.xyz" or domainname like "wastewine.xyz" or url like "wastewine.xyz" or siteurl like "wastewine.xyz" or domainname like "boytank.xyz" or url like "boytank.xyz" or siteurl like "boytank.xyz" or domainname like "thrillducks.xyz" or url like "thrillducks.xyz" or siteurl like "thrillducks.xyz" or domainname like "connect.trailcontrol.xyz" or url like "connect.trailcontrol.xyz" or siteurl like "connect.trailcontrol.xyz" or domainname like "animalview.xyz" or url like "animalview.xyz" or siteurl like "animalview.xyz" or domainname like "http://aa.amazingshield.xyz/33244556546.py" or url like "http://aa.amazingshield.xyz/33244556546.py" or siteurl like "http://aa.amazingshield.xyz/33244556546.py" or domainname like "flavorwood.xyz" or url like "flavorwood.xyz" or siteurl like "flavorwood.xyz" or domainname like "screwbirth.xyz" or url like "screwbirth.xyz" or siteurl like "screwbirth.xyz"

Detection Query 3 :

domainname like "badgewing.xyz" or url like "badgewing.xyz" or siteurl like "badgewing.xyz" or domainname like "connect.giantsdogs.info" or url like "connect.giantsdogs.info" or siteurl like "connect.giantsdogs.info" or domainname like "connect.voyagelaugh.xyz" or url like "connect.voyagelaugh.xyz" or siteurl like "connect.voyagelaugh.xyz" or domainname like "decisionreaction.xyz" or url like "decisionreaction.xyz" or siteurl like "decisionreaction.xyz" or domainname like "hatescale.info" or url like "hatescale.info" or siteurl like "hatescale.info" or domainname like "volcanopin.xyz" or url like "volcanopin.xyz" or siteurl like "volcanopin.xyz" or domainname like "connect.baitmetal.xyz" or url like "connect.baitmetal.xyz" or siteurl like "connect.baitmetal.xyz" or domainname like "rockcredit.space" or url like "rockcredit.space" or siteurl like "rockcredit.space" or domainname like "shirtexample.xyz" or url like "shirtexample.xyz" or siteurl like "shirtexample.xyz" or domainname like "pictureporter.cfd" or url like "pictureporter.cfd" or siteurl like "pictureporter.cfd" or domainname like "landerror.xyz" or url like "landerror.xyz" or siteurl like "landerror.xyz" or domainname like "connect.badgeterritory.xyz" or url like "connect.badgeterritory.xyz" or siteurl like "connect.badgeterritory.xyz" or domainname like "connect.geesepurpose.xyz" or url like "connect.geesepurpose.xyz" or siteurl like "connect.geesepurpose.xyz" or domainname like "porterdebt.xyz" or url like "porterdebt.xyz" or siteurl like "porterdebt.xyz" or domainname like "velfps.blogspot.com" or url like "velfps.blogspot.com" or siteurl like "velfps.blogspot.com" or domainname like "https://stryper.info/aa.js" or url like "https://stryper.info/aa.js" or siteurl like "https://stryper.info/aa.js" or domainname like "storage.ggclicker.com" or url like "storage.ggclicker.com" or siteurl like "storage.ggclicker.com" or domainname like "dolldebt.xyz" or url like "dolldebt.xyz" or siteurl like "dolldebt.xyz" or domainname like "partyfriends.cfd" or url like "partyfriends.cfd" or siteurl like "partyfriends.cfd" or domainname like "vacationengine.xyz" or url like "vacationengine.xyz" or siteurl like "vacationengine.xyz" or domainname like "girlsgrain.xyz" or url like "girlsgrain.xyz" or siteurl like "girlsgrain.xyz" or domainname like "governmentyard.cfd" or url like "governmentyard.cfd" or siteurl like "governmentyard.cfd" or domainname like "dustprotest.icu" or url like "dustprotest.icu" or siteurl like "dustprotest.icu" or domainname like "clothcrib.xyz" or url like "clothcrib.xyz" or siteurl like "clothcrib.xyz" or domainname like "fallbeginner.xyz" or url like "fallbeginner.xyz" or siteurl like "fallbeginner.xyz" or domainname like "archairport.xyz" or url like "archairport.xyz" or siteurl like "archairport.xyz" or domainname like "skirtloss.xyz" or url like "skirtloss.xyz" or siteurl like "skirtloss.xyz" or domainname like "doorsoap.cfd" or url like "doorsoap.cfd" or siteurl like "doorsoap.cfd" or domainname like "liquidtoes.xyz" or url like "liquidtoes.xyz" or siteurl like "liquidtoes.xyz" or domainname like "healthiron.space" or url like "healthiron.space" or siteurl like "healthiron.space" or domainname like "connect.exchangeclub.xyz" or url like "connect.exchangeclub.xyz" or siteurl like "connect.exchangeclub.xyz" or domainname like "shiptank.cfd" or url like "shiptank.cfd" or siteurl like "shiptank.cfd" or domainname like "springdogs.xyz" or url like "springdogs.xyz" or siteurl like "springdogs.xyz" or domainname like "basketballyear.xyz" or url like "basketballyear.xyz" or siteurl like "basketballyear.xyz" or domainname like "townquiver.xyz" or url like "townquiver.xyz" or siteurl like "townquiver.xyz" or domainname like "connect.quiltgirls.xyz" or url like "connect.quiltgirls.xyz" or siteurl like "connect.quiltgirls.xyz" or domainname like "connect.creatorcreator.xyz" or url like "connect.creatorcreator.xyz" or siteurl like "connect.creatorcreator.xyz" or domainname like "spoonducks.cfd" or url like "spoonducks.cfd" or siteurl like "spoonducks.cfd" or domainname like "connect.trickbushes.info" or url like "connect.trickbushes.info" or siteurl like "connect.trickbushes.info" or domainname like "geeseairport.xyz" or url like "geeseairport.xyz" or siteurl like "geeseairport.xyz" or domainname like "airtwig.xyz" or url like "airtwig.xyz" or siteurl like "airtwig.xyz" or domainname like "smokecar.space" or url like "smokecar.space" or siteurl like "smokecar.space" or domainname like "petminister.xyz" or url like "petminister.xyz" or siteurl like "petminister.xyz" or domainname like "aa.amazingshield.xyz" or url like "aa.amazingshield.xyz" or siteurl like "aa.amazingshield.xyz" or domainname like "wormspark.xyz" or url like "wormspark.xyz" or siteurl like "wormspark.xyz" or domainname like "filescenter.cloud" or url like "filescenter.cloud" or siteurl like "filescenter.cloud" or domainname like "throneback.xyz" or url like "throneback.xyz" or siteurl like "throneback.xyz" or domainname like "animalrecord.xyz" or url like "animalrecord.xyz" or siteurl like "animalrecord.xyz" or domainname like "boardmagic.info" or url like "boardmagic.info" or siteurl like "boardmagic.info" or domainname like "collartitle.info" or url like "collartitle.info" or siteurl like "collartitle.info" or domainname like "micesisters.xyz" or url like "micesisters.xyz" or siteurl like "micesisters.xyz" or domainname like "bedroomdesire.xyz" or url like "bedroomdesire.xyz" or siteurl like "bedroomdesire.xyz" or domainname like "scarecrowcare.xyz" or url like "scarecrowcare.xyz" or siteurl like "scarecrowcare.xyz" or domainname like "beliefpicture.xyz" or url like "beliefpicture.xyz" or siteurl like "beliefpicture.xyz" or domainname like "connect.riceapparel.xyz" or url like "connect.riceapparel.xyz" or siteurl like "connect.riceapparel.xyz" or domainname like "baskethumor.xyz" or url like "baskethumor.xyz" or siteurl like "baskethumor.xyz" or domainname like "gunbear.xyz" or url like "gunbear.xyz" or siteurl like "gunbear.xyz" or domainname like "connect.existencediscussion.info" or url like "connect.existencediscussion.info" or siteurl like "connect.existencediscussion.info" or domainname like "holemuscle.xyz" or url like "holemuscle.xyz" or siteurl like "holemuscle.xyz" or domainname like "scentrod.info" or url like "scentrod.info" or siteurl like "scentrod.info" or domainname like "lockettrail.xyz" or url like "lockettrail.xyz" or siteurl like "lockettrail.xyz" or domainname like "seaword.xyz" or url like "seaword.xyz" or siteurl like "seaword.xyz" or domainname like "babyvein.xyz" or url like "babyvein.xyz" or siteurl like "babyvein.xyz" or domainname like "toothpastesun.xyz" or url like "toothpastesun.xyz" or siteurl like "toothpastesun.xyz" or domainname like "readingscience.xyz" or url like "readingscience.xyz" or siteurl like "readingscience.xyz" or domainname like "dinosaursjam.cfd" or url like "dinosaursjam.cfd" or siteurl like "dinosaursjam.cfd" or domainname like "coatberry.xyz" or url like "coatberry.xyz" or siteurl like "coatberry.xyz" or domainname like "connect.threadfuel.xyz" or url like "connect.threadfuel.xyz" or siteurl like "connect.threadfuel.xyz" or domainname like "connect.shapeboot.info" or url like "connect.shapeboot.info" or siteurl like "connect.shapeboot.info" or domainname like "peacetongue.xyz" or url like "peacetongue.xyz" or siteurl like "peacetongue.xyz" or domainname like "seatlace.space" or url like "seatlace.space" or siteurl like "seatlace.space" or domainname like "placespoon.xyz" or url like "placespoon.xyz" or siteurl like "placespoon.xyz" or domainname like "sparkrice.space" or url like "sparkrice.space" or siteurl like "sparkrice.space" or domainname like "peacejewel.xyz" or url like "peacejewel.xyz" or siteurl like "peacejewel.xyz" or domainname like "connect.chinexpert.xyz" or url like "connect.chinexpert.xyz" or siteurl like "connect.chinexpert.xyz" or domainname like "apparatustruck.xyz" or url like "apparatustruck.xyz" or siteurl like "apparatustruck.xyz" or domainname like "connect.poisonblade.xyz" or url like "connect.poisonblade.xyz" or siteurl like "connect.poisonblade.xyz" or domainname like "additionplot.cfd" or url like "additionplot.cfd" or siteurl like "additionplot.cfd" or domainname like "woundsecretary.xyz" or url like "woundsecretary.xyz" or siteurl like "woundsecretary.xyz" or domainname like "connect.purposethings.info" or url like "connect.purposethings.info" or siteurl like "connect.purposethings.info" or domainname like "suitstraw.info" or url like "suitstraw.info" or siteurl like "suitstraw.info" or domainname like "creamfurniture.space" or url like "creamfurniture.space" or siteurl like "creamfurniture.space" or domainname like "roadyear.xyz" or url like "roadyear.xyz" or siteurl like "roadyear.xyz" or domainname like "amountfuel.icu" or url like "amountfuel.icu" or siteurl like "amountfuel.icu" or domainname like "northbox.xyz" or url like "northbox.xyz" or siteurl like "northbox.xyz" or domainname like "startmonkey.cfd" or url like "startmonkey.cfd" or siteurl like "startmonkey.cfd" or domainname like "sparkrub.xyz" or url like "sparkrub.xyz" or siteurl like "sparkrub.xyz" or domainname like "regretsquirrel.xyz" or url like "regretsquirrel.xyz" or siteurl like "regretsquirrel.xyz" or domainname like "instrumentvolcano.space" or url like "instrumentvolcano.space" or siteurl like "instrumentvolcano.space" or domainname like "connect.forkcountry.xyz" or url like "connect.forkcountry.xyz" or siteurl like "connect.forkcountry.xyz" or domainname like "uy.basesfiles.com" or url like "uy.basesfiles.com" or siteurl like "uy.basesfiles.com" or domainname like "connect.giraffetoothpaste.xyz" or url like "connect.giraffetoothpaste.xyz" or siteurl like "connect.giraffetoothpaste.xyz" or domainname like "crimesupport.cfd" or url like "crimesupport.cfd" or siteurl like "crimesupport.cfd" or domainname like "connect.dresstent.xyz" or url like "connect.dresstent.xyz" or siteurl like "connect.dresstent.xyz" or domainname like "connect.halllunch.info" or url like "connect.halllunch.info" or siteurl like "connect.halllunch.info" or domainname like "connect.shoptax.xyz" or url like "connect.shoptax.xyz" or siteurl like "connect.shoptax.xyz" or domainname like "adex-blog.blogspot.com" or url like "adex-blog.blogspot.com" or siteurl like "adex-blog.blogspot.com" or domainname like "fleshfrog.xyz" or url like "fleshfrog.xyz" or siteurl like "fleshfrog.xyz" or domainname like "connect.stopfinger.info" or url like "connect.stopfinger.info" or siteurl like "connect.stopfinger.info" or domainname like "connect.activitykitty.xyz" or url like "connect.activitykitty.xyz" or siteurl like "connect.activitykitty.xyz" or domainname like "cowsfoot.xyz" or url like "cowsfoot.xyz" or siteurl like "cowsfoot.xyz" or domainname like "statementtouch.xyz" or url like "statementtouch.xyz" or siteurl like "statementtouch.xyz" or domainname like "branchmorning.xyz" or url like "branchmorning.xyz" or siteurl like "branchmorning.xyz" or domainname like "stopzinc.xyz" or url like "stopzinc.xyz" or siteurl like "stopzinc.xyz" or domainname like "birthdaymagic.xyz" or url like "birthdaymagic.xyz" or siteurl like "birthdaymagic.xyz" or domainname like "kittenschalk.xyz" or url like "kittenschalk.xyz" or siteurl like "kittenschalk.xyz" or domainname like "servantadvice.xyz" or url like "servantadvice.xyz" or siteurl like "servantadvice.xyz" or domainname like "noiseship.cfd" or url like "noiseship.cfd" or siteurl like "noiseship.cfd" or domainname like "reg.pcsdkflyer.ca" or url like "reg.pcsdkflyer.ca" or siteurl like "reg.pcsdkflyer.ca" or domainname like "restbucket.xyz" or url like "restbucket.xyz" or siteurl like "restbucket.xyz" or domainname like "fingerbasketball.xyz" or url like "fingerbasketball.xyz" or siteurl like "fingerbasketball.xyz" or domainname like "coughcoal.icu" or url like "coughcoal.icu" or siteurl like "coughcoal.icu" or domainname like "mifilesx.site" or url like "mifilesx.site" or siteurl like "mifilesx.site" or domainname like "spadeleg.xyz" or url like "spadeleg.xyz" or siteurl like "spadeleg.xyz" or domainname like "trickflag.info" or url like "trickflag.info" or siteurl like "trickflag.info" or domainname like "basinpleasure.xyz" or url like "basinpleasure.xyz" or siteurl like "basinpleasure.xyz" or domainname like "whistlesong.xyz" or url like "whistlesong.xyz" or siteurl like "whistlesong.xyz" or domainname like "voyagemist.space" or url like "voyagemist.space" or siteurl like "voyagemist.space" or domainname like "lumberbaseball.xyz" or url like "lumberbaseball.xyz" or siteurl like "lumberbaseball.xyz" or domainname like "wastereading.xyz" or url like "wastereading.xyz" or siteurl like "wastereading.xyz" or domainname like "truckshat.xyz" or url like "truckshat.xyz" or siteurl like "truckshat.xyz" or domainname like "mountainsurprise.cfd" or url like "mountainsurprise.cfd" or siteurl like "mountainsurprise.cfd" or domainname like "connect.knifesea.icu" or url like "connect.knifesea.icu" or siteurl like "connect.knifesea.icu" or domainname like "roofreaction.xyz" or url like "roofreaction.xyz" or siteurl like "roofreaction.xyz" or domainname like "cherriestruck.space" or url like "cherriestruck.space" or siteurl like "cherriestruck.space" or domainname like "boundarychickens.xyz" or url like "boundarychickens.xyz" or siteurl like "boundarychickens.xyz" or domainname like "statementservant.xyz" or url like "statementservant.xyz" or siteurl like "statementservant.xyz" or domainname like "dw.xrsdownload.com" or url like "dw.xrsdownload.com" or siteurl like "dw.xrsdownload.com" or domainname like "connect.tanksuggestion.xyz" or url like "connect.tanksuggestion.xyz" or siteurl like "connect.tanksuggestion.xyz" or domainname like "vestthings.cfd" or url like "vestthings.cfd" or siteurl like "vestthings.cfd" or domainname like "fleshplants.xyz" or url like "fleshplants.xyz" or siteurl like "fleshplants.xyz" or domainname like "hairreward.xyz" or url like "hairreward.xyz" or siteurl like "hairreward.xyz" or domainname like "connect.woolreward.xyz" or url like "connect.woolreward.xyz" or siteurl like "connect.woolreward.xyz" or domainname like "partpipe.xyz" or url like "partpipe.xyz" or siteurl like "partpipe.xyz" or domainname like "kittensgrade.cfd" or url like "kittensgrade.cfd" or siteurl like "kittensgrade.cfd" or domainname like "crimestreet.xyz" or url like "crimestreet.xyz" or siteurl like "crimestreet.xyz" or domainname like "toespiders.xyz" or url like "toespiders.xyz" or siteurl like "toespiders.xyz" or domainname like "yamsmell.xyz" or url like "yamsmell.xyz" or siteurl like "yamsmell.xyz" or domainname like "connect.thoughtslave.xyz" or url like "connect.thoughtslave.xyz" or siteurl like "connect.thoughtslave.xyz" or domainname like "igk.filexspace.com" or url like "igk.filexspace.com" or siteurl like "igk.filexspace.com" or domainname like "ikx.filexspace.com" or url like "ikx.filexspace.com" or siteurl like "ikx.filexspace.com"

Detection Query 4 :

sha256hash IN ("ceb30a5eb9ad9d9c6712c80726df16f96f99d9fc0753be241b00b4d636eb576e","2c6e11027b011042c9a118fc20728f8f4ebb6be8795cc84cc9a45622c297d354","62d49d0c78207ec2452cc8a30501db771c9edbae89889e41a7dd227551243e8e","25558ea78c4aa0fdd0f45fafcaa546d3115dc5806809d144a5801a40e48fd4c5","fdcc95b7791c0d6590dcf1a412dc9fcc92ad2095818d1b78368b31efad012007","fc485882626512e7ff82a1d7cd8e8fb3e9751b026d97e682d6908aefff1f2d73","3052bd320a34e12ee694811ed0578797477dfd480c664491e509ed15ce1a6961","9b0d9cbc0fd4a7bae8b78a15dfbe63052779414ad725845732c4a0083008da69","cf184d04ca31fb2b6b7efd85399c29c1136b539153e137ceb3877b1b905791de","e05bc22afbc5ddd50b49c85ee169dd13318000d38286de2b8bcff98217256a8d","b367762140ae7f5098230b8a5da738c9241f286281ec9439dd6ca581fc87989c","aaebc8c07de485be6d1bfa956668c5e18aa1ff5588dfe84672e20ae90b4560f1","553ce594c9c6afdd4794fddc28c194e3bc3c1b052310e5099c58ac15bab72104","7f792c45de1e28fd42ac44c9444f157a2161742d130bac336c0e991aabbb112c","d8d783f8e050a6e394f3c0aa5e2bc73a38d822e55fbc39c0648cbff566de3cdf","06e0afd01bbc6c9d5dc16c3165089b233dc071e1f251abd06235d1b9166cdac5")