Skip to content

Instantly share code, notes, and snippets.

@JohnHammond
Last active December 13, 2022 21:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JohnHammond/4e7f0690e619139323d25ac3eb586b7f to your computer and use it in GitHub Desktop.
Save JohnHammond/4e7f0690e619139323d25ac3eb586b7f to your computer and use it in GitHub Desktop.
Phishing domains and IP addresses reported on from ConnectWise Control social engineering attempts.
155.138.240.251
176.111.173.40
9115[.]to
9195[.]ru
adasmarket[.]to
azzbackend[.]xyz
basco[.]best
bhelp[.]us
bmhelp[.]us
crispy[.]best
csfrq[.]xyz
dcare[.]pro
dentista[.]life
dentista[.]live
desktophelp[.]live
firsto[.]top
foodfun[.]shop
gksqback[.]xyz
healthcenter[.]live
help247[.]us
hideit01[.]xyz
hideit02[.]xyz
hideit03[.]xyz
hideit04[.]xyz
hideit05[.]xyz
hideit06[.]xyz
hideit07[.]xyz
hideit08[.]xyz
hideit09[.]xyz
kassistback[.]xyz
marian[.]ink
medino[.]life
ncsupport[.]xyz
ntxdr[.]xyz
ogana[.]shop
ogani[.]world
onbxr[.]xyz
onlogin01[.]xyz
onlogin02[.]xyz
onlogin03[.]xyz
onlogin04[.]xyz
onlogin05[.]xyz
onlogin06[.]xyz
onlogin07[.]xyz
onlogin08[.]xyz
onlogin09[.]xyz
pahelp[.]us
palpay[.]online
pchelpsupport[.]us
pdhelp[.]info
phelp[.]pro
restoran[.]world
rhelp[.]us
rsupport[.]us
sup2[.]24780[.]org
vfix[.]live
win01[.]xyz
win03[.]life
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment