{
  "aliases": [],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 94
  },
  "first_seen": {
    "domain": {
      "1877.krd": "2023-05-06",
      "1877.team": "2023-05-06",
      "4567987654345265.tk": "2023-05-06",
      "asadohostma.cf": "2023-05-06",
      "asadohostma.tk": "2023-05-06",
      "balotelaras.gq": "2023-05-06",
      "bjigcdrfbbcx.ml": "2023-05-06",
      "bjigcdrfbbcx.tk": "2023-05-06",
      "bruthoosbxyxio.gq": "2023-05-06",
      "bruthoosbxyxio.tk": "2023-05-06",
      "bsidbxiooohzu.ga": "2023-05-06",
      "bsidbxiooohzu.gq": "2023-05-06",
      "bsidbxiooohzu.ml": "2023-05-06",
      "buhgdkurd444.ga": "2023-05-06",
      "coalermallwive.ga": "2023-05-06",
      "dxfcvhhgfgcv.dnsfailover.net": "2023-05-06",
      "facebookmessages.serveuser.com": "2023-05-06",
      "facebooktie.faqserv.com": "2023-05-06",
      "forever0g.tk": "2023-05-06",
      "gartytrgfredsw.sexidude.com": "2023-05-06",
      "gatasawatoyo.dumb1.com": "2023-05-06",
      "ghiiidueebsxiis.ml": "2023-05-06",
      "ghiiidueebsxiis.tk": "2023-05-06",
      "hgtgerfdrty.onedumb.com": "2023-05-06",
      "hsushzidooonsnx.gq": "2023-05-06",
      "htetryfugyioiyut.ml": "2023-05-06",
      "hunchifigkf.wikaba.com": "2023-05-06",
      "huncho.ml": "2023-05-06",
      "hunchooo.zzux.com": "2023-05-06",
      "hunchoooof.2waky.com": "2023-05-06",
      "incxzsdcuuwqag.serveuser.com": "2023-05-06",
      "inlinkedlnmessagesdigiter.serveuser.com": "2023-05-06",
      "jagajaga.ga": "2023-05-06",
      "jfueytg7yghg.ga": "2023-05-06",
      "jhdfgdjkdg.dynamic-dns.net": "2023-05-06",
      "jhssales.dynamic-dns.net": "2023-05-06",
      "jhuyghft.dynamic-dns.net": "2023-05-06",
      "jihugkyfjtdsrytsrd.cf": "2023-05-06",
      "jihugkyfjtdsrytsrd.gq": "2023-05-06",
      "jnhbvgcfxdzsdzdsxd.dns2.us": "2023-05-06",
      "juyhtrdwski.sexidude.com": "2023-05-06",
      "kbbkbkuu.dynamic-dns.net": "2023-05-06",
      "kjuhygtrfdewsa.onedumb.com": "2023-05-06",
      "linkedlndeed.fartit.com": "2023-05-06",
      "linkup.pics": "2023-05-06",
      "mail.bsabshjlinacafs.serveuser.com": "2023-05-06",
      "mail.facebookmessages.serveuser.com": "2023-05-06",
      "mail.guyyyeyb.youdontcare.com": "2023-05-06",
      "mail.inlinkedlnmessagesdigiter.serveuser.com": "2023-05-06",
      "mail.jhdfgdjkdg.dynamic-dns.net": "2023-05-06",
      "mail.jhuyghft.dynamic-dns.net": "2023-05-06",
      "mail.juyhtrdwski.sexidude.com": "2023-05-06",
      "mail.kasawaraswgu.yourtrap.com": "2023-05-06",
      "mail.mnfdxcvbn.cleansite.info": "2023-05-06",
      "mail.ohssbxxwaqmbccxk.x24hr.com": "2023-05-06",
      "mail.oiytiuopiuy.almostmy.com": "2023-05-06",
      "mail.roboroboo.dumb1.com": "2023-05-06",
      "mail.rywrhsg.dns05.com": "2023-05-06",
      "mail.sdhgdfth.zzux.com": "2023-05-06",
      "mail.snhyjhakua.x24hr.com": "2023-05-06",
      "makolo.ml": "2023-05-06",
      "mangersales.zyns.com": "2023-05-06",
      "marketingadmin.port25.biz": "2023-05-06",
      "mnjgyutjfo.longmusic.com": "2023-05-06",
      "mssjhgwe.toh.info": "2023-05-06",
      "nmjvutdwrw.dns04.com": "2023-05-06",
      "oiuryhgyefdter.gq": "2023-05-06",
      "salogo.gq": "2023-05-06",
      "saqwijfde4ojhbyvubi.b0tnet.com": "2023-05-06",
      "servercheck.zyns.com": "2023-05-06",
      "shop.1877.team": "2023-05-06",
      "social.1877.team": "2023-05-06",
      "steetdre6iazwed.tk": "2023-05-06",
      "stiwebbro.ml": "2023-05-06",
      "stupuviijvftuiu.cf": "2023-05-06",
      "supplypurchase.dns04.com": "2023-05-06",
      "sxdfcghvjhbkkredirec.serveusers.com": "2023-05-06",
      "tgfr43e98uj43ef.ml": "2023-05-06",
      "tools.1877.team": "2023-05-06",
      "torontos.ga": "2023-05-06",
      "tradefaregoods.dns04.com": "2023-05-06",
      "tube.1877.team": "2023-05-06",
      "ukyudrst.zyns.com": "2023-05-06",
      "unconditional.gq": "2023-05-06",
      "uqjswjwswsjwsh.serveuser.com": "2023-05-06",
      "uytresgfgh.changeip.co": "2023-05-06",
      "vanuboutst.cf": "2023-05-06",
      "vanuboutst.ml": "2023-05-06",
      "wpojgbjffy444.cf": "2023-05-06",
      "yjksvjdbjdbjjda.cf": "2023-05-06",
      "yjksvjdbjdbjjda.ga": "2023-05-06",
      "yjksvjdbjdbjjda.ml": "2023-05-06",
      "yjksvjdbjdbjjda.tk": "2023-05-06",
      "zone.1877.team": "2023-05-06"
    }
  },
  "first_seen_precision": {
    "domain": {}
  },
  "first_seen_range": {
    "earliest": "2023-05-06",
    "latest": "2023-05-06"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "1877.krd",
      "1877.team",
      "4567987654345265.tk",
      "asadohostma.cf",
      "asadohostma.tk",
      "balotelaras.gq",
      "bjigcdrfbbcx.ml",
      "bjigcdrfbbcx.tk",
      "bruthoosbxyxio.gq",
      "bruthoosbxyxio.tk",
      "bsidbxiooohzu.ga",
      "bsidbxiooohzu.gq",
      "bsidbxiooohzu.ml",
      "buhgdkurd444.ga",
      "coalermallwive.ga",
      "dxfcvhhgfgcv.dnsfailover.net",
      "facebookmessages.serveuser.com",
      "facebooktie.faqserv.com",
      "forever0g.tk",
      "gartytrgfredsw.sexidude.com",
      "gatasawatoyo.dumb1.com",
      "ghiiidueebsxiis.ml",
      "ghiiidueebsxiis.tk",
      "hgtgerfdrty.onedumb.com",
      "hsushzidooonsnx.gq",
      "htetryfugyioiyut.ml",
      "hunchifigkf.wikaba.com",
      "huncho.ml",
      "hunchooo.zzux.com",
      "hunchoooof.2waky.com",
      "incxzsdcuuwqag.serveuser.com",
      "inlinkedlnmessagesdigiter.serveuser.com",
      "jagajaga.ga",
      "jfueytg7yghg.ga",
      "jhdfgdjkdg.dynamic-dns.net",
      "jhssales.dynamic-dns.net",
      "jhuyghft.dynamic-dns.net",
      "jihugkyfjtdsrytsrd.cf",
      "jihugkyfjtdsrytsrd.gq",
      "jnhbvgcfxdzsdzdsxd.dns2.us",
      "juyhtrdwski.sexidude.com",
      "kbbkbkuu.dynamic-dns.net",
      "kjuhygtrfdewsa.onedumb.com",
      "linkedlndeed.fartit.com",
      "linkup.pics",
      "mail.bsabshjlinacafs.serveuser.com",
      "mail.facebookmessages.serveuser.com",
      "mail.guyyyeyb.youdontcare.com",
      "mail.inlinkedlnmessagesdigiter.serveuser.com",
      "mail.jhdfgdjkdg.dynamic-dns.net",
      "mail.jhuyghft.dynamic-dns.net",
      "mail.juyhtrdwski.sexidude.com",
      "mail.kasawaraswgu.yourtrap.com",
      "mail.mnfdxcvbn.cleansite.info",
      "mail.ohssbxxwaqmbccxk.x24hr.com",
      "mail.oiytiuopiuy.almostmy.com",
      "mail.roboroboo.dumb1.com",
      "mail.rywrhsg.dns05.com",
      "mail.sdhgdfth.zzux.com",
      "mail.snhyjhakua.x24hr.com",
      "makolo.ml",
      "mangersales.zyns.com",
      "marketingadmin.port25.biz",
      "mnjgyutjfo.longmusic.com",
      "mssjhgwe.toh.info",
      "nmjvutdwrw.dns04.com",
      "oiuryhgyefdter.gq",
      "salogo.gq",
      "saqwijfde4ojhbyvubi.b0tnet.com",
      "servercheck.zyns.com",
      "shop.1877.team",
      "social.1877.team",
      "steetdre6iazwed.tk",
      "stiwebbro.ml",
      "stupuviijvftuiu.cf",
      "supplypurchase.dns04.com",
      "sxdfcghvjhbkkredirec.serveusers.com",
      "tgfr43e98uj43ef.ml",
      "tools.1877.team",
      "torontos.ga",
      "tradefaregoods.dns04.com",
      "tube.1877.team",
      "ukyudrst.zyns.com",
      "unconditional.gq",
      "uqjswjwswsjwsh.serveuser.com",
      "uytresgfgh.changeip.co",
      "vanuboutst.cf",
      "vanuboutst.ml",
      "wpojgbjffy444.cf",
      "yjksvjdbjdbjjda.cf",
      "yjksvjdbjdbjjda.ga",
      "yjksvjdbjdbjjda.ml",
      "yjksvjdbjdbjjda.tk",
      "zone.1877.team"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "1877TEAM"
  ],
  "references": [
    "https://otx.alienvault.com/pulse/64524a56a61ad32b77d042d9"
  ],
  "related": [],
  "slug": "1877TEAM",
  "timeline": [
    {
      "counts": {
        "domain": 94
      },
      "first_seen": "2023-05-06",
      "indicators": {
        "domain": [
          "1877.krd",
          "1877.team",
          "4567987654345265.tk",
          "asadohostma.cf",
          "asadohostma.tk",
          "balotelaras.gq",
          "bjigcdrfbbcx.ml",
          "bjigcdrfbbcx.tk",
          "bruthoosbxyxio.gq",
          "bruthoosbxyxio.tk",
          "bsidbxiooohzu.ga",
          "bsidbxiooohzu.gq",
          "bsidbxiooohzu.ml",
          "buhgdkurd444.ga",
          "coalermallwive.ga",
          "dxfcvhhgfgcv.dnsfailover.net",
          "facebookmessages.serveuser.com",
          "facebooktie.faqserv.com",
          "forever0g.tk",
          "gartytrgfredsw.sexidude.com",
          "gatasawatoyo.dumb1.com",
          "ghiiidueebsxiis.ml",
          "ghiiidueebsxiis.tk",
          "hgtgerfdrty.onedumb.com",
          "hsushzidooonsnx.gq",
          "htetryfugyioiyut.ml",
          "hunchifigkf.wikaba.com",
          "huncho.ml",
          "hunchooo.zzux.com",
          "hunchoooof.2waky.com",
          "incxzsdcuuwqag.serveuser.com",
          "inlinkedlnmessagesdigiter.serveuser.com",
          "jagajaga.ga",
          "jfueytg7yghg.ga",
          "jhdfgdjkdg.dynamic-dns.net",
          "jhssales.dynamic-dns.net",
          "jhuyghft.dynamic-dns.net",
          "jihugkyfjtdsrytsrd.cf",
          "jihugkyfjtdsrytsrd.gq",
          "jnhbvgcfxdzsdzdsxd.dns2.us",
          "juyhtrdwski.sexidude.com",
          "kbbkbkuu.dynamic-dns.net",
          "kjuhygtrfdewsa.onedumb.com",
          "linkedlndeed.fartit.com",
          "linkup.pics",
          "mail.bsabshjlinacafs.serveuser.com",
          "mail.facebookmessages.serveuser.com",
          "mail.guyyyeyb.youdontcare.com",
          "mail.inlinkedlnmessagesdigiter.serveuser.com",
          "mail.jhdfgdjkdg.dynamic-dns.net",
          "mail.jhuyghft.dynamic-dns.net",
          "mail.juyhtrdwski.sexidude.com",
          "mail.kasawaraswgu.yourtrap.com",
          "mail.mnfdxcvbn.cleansite.info",
          "mail.ohssbxxwaqmbccxk.x24hr.com",
          "mail.oiytiuopiuy.almostmy.com",
          "mail.roboroboo.dumb1.com",
          "mail.rywrhsg.dns05.com",
          "mail.sdhgdfth.zzux.com",
          "mail.snhyjhakua.x24hr.com",
          "makolo.ml",
          "mangersales.zyns.com",
          "marketingadmin.port25.biz",
          "mnjgyutjfo.longmusic.com",
          "mssjhgwe.toh.info",
          "nmjvutdwrw.dns04.com",
          "oiuryhgyefdter.gq",
          "salogo.gq",
          "saqwijfde4ojhbyvubi.b0tnet.com",
          "servercheck.zyns.com",
          "shop.1877.team",
          "social.1877.team",
          "steetdre6iazwed.tk",
          "stiwebbro.ml",
          "stupuviijvftuiu.cf",
          "supplypurchase.dns04.com",
          "sxdfcghvjhbkkredirec.serveusers.com",
          "tgfr43e98uj43ef.ml",
          "tools.1877.team",
          "torontos.ga",
          "tradefaregoods.dns04.com",
          "tube.1877.team",
          "ukyudrst.zyns.com",
          "unconditional.gq",
          "uqjswjwswsjwsh.serveuser.com",
          "uytresgfgh.changeip.co",
          "vanuboutst.cf",
          "vanuboutst.ml",
          "wpojgbjffy444.cf",
          "yjksvjdbjdbjjda.cf",
          "yjksvjdbjdbjjda.ga",
          "yjksvjdbjdbjjda.ml",
          "yjksvjdbjdbjjda.tk",
          "zone.1877.team"
        ]
      },
      "precision": "exact",
      "references": [
        "https://otx.alienvault.com/pulse/64524a56a61ad32b77d042d9"
      ],
      "total": 94
    }
  ]
}
