{
  "aliases": [
    "gridtide"
  ],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 211,
    "url": 1
  },
  "first_seen": {
    "domain": {
      "1cv2f3d5s6a9w.ddnsfree.com": "2026-02-25",
      "admina.freeddns.org": "2026-02-25",
      "afsaces.accesscam.org": "2026-02-25",
      "ancisesic.accesscam.org": "2026-02-25",
      "apiotc.duckdns.org": "2026-02-25",
      "applebox.camdvr.org": "2026-02-25",
      "appler.kozow.com": "2026-02-25",
      "asdad21ww.freeddns.org": "2026-02-25",
      "aw2o25forsbc.camdvr.org": "2026-02-25",
      "awcc001jdaigfwdagdcew.giize.com": "2026-02-25",
      "bab2o25com.accesscam.org": "2026-02-25",
      "babaji.accesscam.org": "2026-02-25",
      "babi5599ss.ddnsgeek.com": "2026-02-25",
      "balabalabo.mywire.org": "2026-02-25",
      "bggs.giize.com": "2026-02-25",
      "bibabo.freeddns.org": "2026-02-25",
      "binmol.webredirect.org": "2026-02-25",
      "bioth.giize.com": "2026-02-25",
      "bitel.mywire.org": "2026-02-25",
      "boemobww.ddnsfree.com": "2026-02-25",
      "brcallletme.theworkpc.com": "2026-02-25",
      "btbtutil.theworkpc.com": "2026-02-25",
      "btltan.ooguy.com": "2026-02-25",
      "camcampkes.ddnsfree.com": "2026-02-25",
      "camsqewivo.kozow.com": "2026-02-25",
      "ccammutom.ddnsgeek.com": "2026-02-25",
      "ccel.kozow.com": "2026-02-25",
      "cdnvmtools.theworkpc.com": "2026-02-25",
      "cloacpae.ddnsfree.com": "2026-02-25",
      "cmwwoods1.theworkpc.com": "2026-02-25",
      "cnrpaslceas.freeddns.org": "2026-02-25",
      "codemicros12.gleeze.com": "2026-02-25",
      "cp02odjaic.kozow.com": "2026-02-25",
      "cressmiss.ooguy.com": "2026-02-25",
      "cvabiasbae.ddnsfree.com": "2026-02-25",
      "cvnoc01da1cjmnftsd.accesscam.org": "2026-02-25",
      "cvpc01aenusocirem.accesscam.org": "2026-02-25",
      "cvpc01cgsdfn53hgd.giize.com": "2026-02-25",
      "dclcwpdtsdcc.ddnsfree.com": "2026-02-25",
      "dlpossie.ddnsfree.com": "2026-02-25",
      "dnsfreedb.ddnsfree.com": "2026-02-25",
      "doboudix1024.mywire.org": "2026-02-25",
      "docla1rocodetellkadihewfnt3.kozow.com": "2026-02-25",
      "entel.kozow.com": "2026-02-25",
      "evilginx2.loseyourip.com": "2026-02-25",
      "examp1e.webredirect.org": "2026-02-25",
      "faeelt.giize.com": "2026-02-25",
      "fakjcsaeyhs.ddnsfree.com": "2026-02-25",
      "fasceadvcva3.gleeze.com": "2026-02-25",
      "ffosies2024.camdvr.org": "2026-02-25",
      "fgdedd1dww.gleeze.com": "2026-02-25",
      "filipinet.ddnsgeek.com": "2026-02-25",
      "freeios.theworkpc.com": "2026-02-25",
      "ftpuser14.gleeze.com": "2026-02-25",
      "ftpzpak.kozow.com": "2026-02-25",
      "gam00v4fric4omv.camdvr.org": "2026-02-25",
      "globoss.kozow.com": "2026-02-25",
      "gogo2025up.ddnsfree.com": "2026-02-25",
      "googlel.gleeze.com": "2026-02-25",
      "googles.accesscam.org": "2026-02-25",
      "googles.ddnsfree.com": "2026-02-25",
      "googlett.camdvr.org": "2026-02-25",
      "googllabwws.gleeze.com": "2026-02-25",
      "gtaldps31c.ddnsfree.com": "2026-02-25",
      "hamkorg.kozow.com": "2026-02-25",
      "honidoo.loseyourip.com": "2026-02-25",
      "huygdr12.loseyourip.com": "2026-02-25",
      "icekancusjhea.ddnsgeek.com": "2026-02-25",
      "idstandsuui.kozow.com": "2026-02-25",
      "indoodchat.theworkpc.com": "2026-02-25",
      "jarvis001.freeddns.org": "2026-02-25",
      "kaushalya.freeddns.org": "2026-02-25",
      "khyes001ndfpnuewdm.kozow.com": "2026-02-25",
      "kskxoscieontrolanel.gleeze.com": "2026-02-25",
      "ksv01sokudwongsj.theworkpc.com": "2026-02-25",
      "lcskiecjj.loseyourip.com": "2026-02-25",
      "lcskiecs.ddnsfree.com": "2026-02-25",
      "losiesca.ddnsgeek.com": "2026-02-25",
      "lps2staging.ddnsfree.com": "2026-02-25",
      "lsls.casacam.net": "2026-02-25",
      "ltiuys.ddnsgeek.com": "2026-02-25",
      "ltiuys.kozow.com": "2026-02-25",
      "lxym.hlsx.xyz": "2026-02-25",
      "mailsdy.gleeze.com": "2026-02-25",
      "maliclick1.ddnsfree.com": "2026-02-25",
      "mauritasszddb.ddnsfree.com": "2026-02-25",
      "meetls.kozow.com": "2026-02-25",
      "microsoft.bumbleshrimp.com": "2026-02-25",
      "ml3.freeddns.org": "2026-02-25",
      "mlksucnayesk.kozow.com": "2026-02-25",
      "mlkzongking2024.kozow.com": "2026-02-25",
      "mmmfaco2025.mywire.org": "2026-02-25",
      "mms.bumbleshrimp.com": "2026-02-25",
      "mmvmtools.giize.com": "2026-02-25",
      "modgood.gleeze.com": "2026-02-25",
      "mosplosaq.accesscam.org": "2026-02-25",
      "mtnngservice.ddnsguru.com": "2026-02-25",
      "mysql.casacam.net": "2026-02-25",
      "myzrzy2026.ddnsfree.com": "2026-02-25",
      "nenigncagvawr.giize.com": "2026-02-25",
      "nenignenigoncqvoo.ooguy.com": "2026-02-25",
      "nenigoncqnutgo.accesscam.org": "2026-02-25",
      "nenigoncuopzc.giize.com": "2026-02-25",
      "nims.gleeze.com": "2026-02-25",
      "nisaldwoa.theworkpc.com": "2026-02-25",
      "nmszablogs.ddnsfree.com": "2026-02-25",
      "nodekeny11.freeddns.org": "2026-02-25",
      "nodjs2o25nodjs.giize.com": "2026-02-25",
      "npeoples.theworkpc.com": "2026-02-25",
      "officeshan.kozow.com": "2026-02-25",
      "okkstt.ddnsgeek.com": "2026-02-25",
      "oldatain1.ddnsgeek.com": "2026-02-25",
      "onlyosun.ooguy.com": "2026-02-25",
      "osix.ddnsgeek.com": "2026-02-25",
      "ovmmiuy.mywire.org": "2026-02-25",
      "palamolscueajfvc.gleeze.com": "2026-02-25",
      "pawanp.kozow.com": "2026-02-25",
      "pcmainecia.ddnsfree.com": "2026-02-25",
      "pcvmts3.kozow.com": "2026-02-25",
      "peisuesacae.loseyourip.com": "2026-02-25",
      "peowork.ddnsgeek.com": "2026-02-25",
      "pepesetup.ddnsfree.com": "2026-02-25",
      "pewsus.freeddns.org": "2026-02-25",
      "plcoaweniva.ddnsgeek.com": "2026-02-25",
      "plscsscapsclapclspac.ddnsfree.com": "2026-02-25",
      "policyagent.theworkpc.com": "2026-02-25",
      "polokinyea.gleeze.com": "2026-02-25",
      "pplodsssead222.loseyourip.com": "2026-02-25",
      "pplosad231.kozow.com": "2026-02-25",
      "ppsabedon.gleeze.com": "2026-02-25",
      "prdanjana01.ddnsfree.com": "2026-02-25",
      "prepaid127.freeddns.org": "2026-02-25",
      "priftp.kozow.com": "2026-02-25",
      "prihxlcs.ddnsfree.com": "2026-02-25",
      "prihxlcsw.theworkpc.com": "2026-02-25",
      "pxlaxvvva.freeddns.org": "2026-02-25",
      "quitgod2023luck.giize.com": "2026-02-25",
      "rabbit.ooguy.com": "2026-02-25",
      "rsm323.kozow.com": "2026-02-25",
      "saf3asg.giize.com": "2026-02-25",
      "sb01bmobile01nypovdfs.kozow.com": "2026-02-25",
      "sbbm0bil301nypovdfs183.kozow.com": "2026-02-25",
      "scopps.ddnsgeek.com": "2026-02-25",
      "sdhite43.ddnsfree.com": "2026-02-25",
      "sdsuytoins63.kozow.com": "2026-02-25",
      "selfad.gleeze.com": "2026-02-25",
      "sensordataesp.duckdns.org": "2026-02-25",
      "serious.kozow.com": "2026-02-25",
      "setupcodpr2.freeddns.org": "2026-02-25",
      "sgsn.accesscam.org": "2026-02-25",
      "skytel.kozow.com": "2026-02-25",
      "smartfren.giize.com": "2026-02-25",
      "sn0son4t31bbsvopou.camdvr.org": "2026-02-25",
      "sn0son4t31opc.freeddns.org": "2026-02-25",
      "soovuy.gleeze.com": "2026-02-25",
      "styuij.mywire.org": "2026-02-25",
      "supceasfg1.loseyourip.com": "2026-02-25",
      "systemsz.kozow.com": "2026-02-25",
      "szg0vqe2d23d.kozow.com": "2026-02-25",
      "t31c0mjumpcuyerop.ooguy.com": "2026-02-25",
      "t31c0mopamcuiomx.kozow.com": "2026-02-25",
      "t31c0mopmiuewklg.webredirect.org": "2026-02-25",
      "t31c0mopocuveop.accesscam.org": "2026-02-25",
      "t3lc0mcanyqbfac.loseyourip.com": "2026-02-25",
      "t3lc0mczmoihwc.camdvr.org": "2026-02-25",
      "t3lc0mh4udncifw.casacam.net": "2026-02-25",
      "t3lc0mhasvnctsk.giize.com": "2026-02-25",
      "t3lm0rtlcagratu.kozow.com": "2026-02-25",
      "tch.giize.com": "2026-02-25",
      "telcomn.giize.com": "2026-02-25",
      "telen.bumbleshrimp.com": "2026-02-25",
      "telkom.ooguy.com": "2026-02-25",
      "telkomcel.kozow.com": "2026-02-25",
      "telkomservices.theworkpc.com": "2026-02-25",
      "thbio.kozow.com": "2026-02-25",
      "timpe.kozow.com": "2026-02-25",
      "timpe.webredirect.org": "2026-02-25",
      "tlse001hdfuwwgdgpnn.theworkpc.com": "2026-02-25",
      "tltlsktelko.ddnsfree.com": "2026-02-25",
      "transport.dynuddns.net": "2026-02-25",
      "trvcl.bumbleshrimp.com": "2026-02-25",
      "ttsiou12.loseyourip.com": "2026-02-25",
      "ua2o25yth.ddnsgeek.com": "2026-02-25",
      "udieyg.gleeze.com": "2026-02-25",
      "unnjunnani.ddnsfree.com": "2026-02-25",
      "updatamail.kozow.com": "2026-02-25",
      "updatasuccess.ddnsgeek.com": "2026-02-25",
      "updateservices.kozow.com": "2026-02-25",
      "updatetools.giize.com": "2026-02-25",
      "uscplxsecjs.ddnsgeek.com": "2026-02-25",
      "usoshared1.ddnsfree.com": "2026-02-25",
      "vals.bumbleshrimp.com": "2026-02-25",
      "vass.ooguy.com": "2026-02-25",
      "vass2025.casacam.net": "2026-02-25",
      "vmtools.camdvr.org": "2026-02-25",
      "vmtools.loseyourip.com": "2026-02-25",
      "vosies.ddnsfree.com": "2026-02-25",
      "vpaspmine.freeddns.org": "2026-02-25",
      "wdlcamaakc.ooguy.com": "2026-02-25",
      "winfoss1.kozow.com": "2026-02-25",
      "ysiohbk.camdvr.org": "2026-02-25",
      "zammffayhd.ddnsfree.com": "2026-02-25",
      "zeitoon.duckdns.org": "2026-02-25",
      "zmcmvmbm.ddnsfree.com": "2026-02-25",
      "zwmn350n3o1fsdf3gs.kozow.com": "2026-02-25",
      "zwmn350n3o1ugety2xbe.camdvr.org": "2026-02-25",
      "zwmn350n3o1vsdrggs.ddnsfree.com": "2026-02-25",
      "zwt310n3o1unety2kab.webredirect.org": "2026-02-25",
      "zwt310n3o2unety6a3k.kozow.com": "2026-02-25",
      "zwt31n3t0nidoqmve.camdvr.org": "2026-02-25",
      "zwt3ln3t1aimckalw.theworkpc.com": "2026-02-25"
    },
    "url": {
      "http://130.94.6.228": "2026-02-25"
    }
  },
  "first_seen_precision": {
    "domain": {},
    "url": {}
  },
  "first_seen_range": {
    "earliest": "2026-02-25",
    "latest": "2026-02-25"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "1cv2f3d5s6a9w.ddnsfree.com",
      "admina.freeddns.org",
      "afsaces.accesscam.org",
      "ancisesic.accesscam.org",
      "apiotc.duckdns.org",
      "applebox.camdvr.org",
      "appler.kozow.com",
      "asdad21ww.freeddns.org",
      "aw2o25forsbc.camdvr.org",
      "awcc001jdaigfwdagdcew.giize.com",
      "bab2o25com.accesscam.org",
      "babaji.accesscam.org",
      "babi5599ss.ddnsgeek.com",
      "balabalabo.mywire.org",
      "bggs.giize.com",
      "bibabo.freeddns.org",
      "binmol.webredirect.org",
      "bioth.giize.com",
      "bitel.mywire.org",
      "boemobww.ddnsfree.com",
      "brcallletme.theworkpc.com",
      "btbtutil.theworkpc.com",
      "btltan.ooguy.com",
      "camcampkes.ddnsfree.com",
      "camsqewivo.kozow.com",
      "ccammutom.ddnsgeek.com",
      "ccel.kozow.com",
      "cdnvmtools.theworkpc.com",
      "cloacpae.ddnsfree.com",
      "cmwwoods1.theworkpc.com",
      "cnrpaslceas.freeddns.org",
      "codemicros12.gleeze.com",
      "cp02odjaic.kozow.com",
      "cressmiss.ooguy.com",
      "cvabiasbae.ddnsfree.com",
      "cvnoc01da1cjmnftsd.accesscam.org",
      "cvpc01aenusocirem.accesscam.org",
      "cvpc01cgsdfn53hgd.giize.com",
      "dclcwpdtsdcc.ddnsfree.com",
      "dlpossie.ddnsfree.com",
      "dnsfreedb.ddnsfree.com",
      "doboudix1024.mywire.org",
      "docla1rocodetellkadihewfnt3.kozow.com",
      "entel.kozow.com",
      "evilginx2.loseyourip.com",
      "examp1e.webredirect.org",
      "faeelt.giize.com",
      "fakjcsaeyhs.ddnsfree.com",
      "fasceadvcva3.gleeze.com",
      "ffosies2024.camdvr.org",
      "fgdedd1dww.gleeze.com",
      "filipinet.ddnsgeek.com",
      "freeios.theworkpc.com",
      "ftpuser14.gleeze.com",
      "ftpzpak.kozow.com",
      "gam00v4fric4omv.camdvr.org",
      "globoss.kozow.com",
      "gogo2025up.ddnsfree.com",
      "googlel.gleeze.com",
      "googles.accesscam.org",
      "googles.ddnsfree.com",
      "googlett.camdvr.org",
      "googllabwws.gleeze.com",
      "gtaldps31c.ddnsfree.com",
      "hamkorg.kozow.com",
      "honidoo.loseyourip.com",
      "huygdr12.loseyourip.com",
      "icekancusjhea.ddnsgeek.com",
      "idstandsuui.kozow.com",
      "indoodchat.theworkpc.com",
      "jarvis001.freeddns.org",
      "kaushalya.freeddns.org",
      "khyes001ndfpnuewdm.kozow.com",
      "kskxoscieontrolanel.gleeze.com",
      "ksv01sokudwongsj.theworkpc.com",
      "lcskiecjj.loseyourip.com",
      "lcskiecs.ddnsfree.com",
      "losiesca.ddnsgeek.com",
      "lps2staging.ddnsfree.com",
      "lsls.casacam.net",
      "ltiuys.ddnsgeek.com",
      "ltiuys.kozow.com",
      "lxym.hlsx.xyz",
      "mailsdy.gleeze.com",
      "maliclick1.ddnsfree.com",
      "mauritasszddb.ddnsfree.com",
      "meetls.kozow.com",
      "microsoft.bumbleshrimp.com",
      "ml3.freeddns.org",
      "mlksucnayesk.kozow.com",
      "mlkzongking2024.kozow.com",
      "mmmfaco2025.mywire.org",
      "mms.bumbleshrimp.com",
      "mmvmtools.giize.com",
      "modgood.gleeze.com",
      "mosplosaq.accesscam.org",
      "mtnngservice.ddnsguru.com",
      "mysql.casacam.net",
      "myzrzy2026.ddnsfree.com",
      "nenigncagvawr.giize.com",
      "nenignenigoncqvoo.ooguy.com",
      "nenigoncqnutgo.accesscam.org",
      "nenigoncuopzc.giize.com",
      "nims.gleeze.com",
      "nisaldwoa.theworkpc.com",
      "nmszablogs.ddnsfree.com",
      "nodekeny11.freeddns.org",
      "nodjs2o25nodjs.giize.com",
      "npeoples.theworkpc.com",
      "officeshan.kozow.com",
      "okkstt.ddnsgeek.com",
      "oldatain1.ddnsgeek.com",
      "onlyosun.ooguy.com",
      "osix.ddnsgeek.com",
      "ovmmiuy.mywire.org",
      "palamolscueajfvc.gleeze.com",
      "pawanp.kozow.com",
      "pcmainecia.ddnsfree.com",
      "pcvmts3.kozow.com",
      "peisuesacae.loseyourip.com",
      "peowork.ddnsgeek.com",
      "pepesetup.ddnsfree.com",
      "pewsus.freeddns.org",
      "plcoaweniva.ddnsgeek.com",
      "plscsscapsclapclspac.ddnsfree.com",
      "policyagent.theworkpc.com",
      "polokinyea.gleeze.com",
      "pplodsssead222.loseyourip.com",
      "pplosad231.kozow.com",
      "ppsabedon.gleeze.com",
      "prdanjana01.ddnsfree.com",
      "prepaid127.freeddns.org",
      "priftp.kozow.com",
      "prihxlcs.ddnsfree.com",
      "prihxlcsw.theworkpc.com",
      "pxlaxvvva.freeddns.org",
      "quitgod2023luck.giize.com",
      "rabbit.ooguy.com",
      "rsm323.kozow.com",
      "saf3asg.giize.com",
      "sb01bmobile01nypovdfs.kozow.com",
      "sbbm0bil301nypovdfs183.kozow.com",
      "scopps.ddnsgeek.com",
      "sdhite43.ddnsfree.com",
      "sdsuytoins63.kozow.com",
      "selfad.gleeze.com",
      "sensordataesp.duckdns.org",
      "serious.kozow.com",
      "setupcodpr2.freeddns.org",
      "sgsn.accesscam.org",
      "skytel.kozow.com",
      "smartfren.giize.com",
      "sn0son4t31bbsvopou.camdvr.org",
      "sn0son4t31opc.freeddns.org",
      "soovuy.gleeze.com",
      "styuij.mywire.org",
      "supceasfg1.loseyourip.com",
      "systemsz.kozow.com",
      "szg0vqe2d23d.kozow.com",
      "t31c0mjumpcuyerop.ooguy.com",
      "t31c0mopamcuiomx.kozow.com",
      "t31c0mopmiuewklg.webredirect.org",
      "t31c0mopocuveop.accesscam.org",
      "t3lc0mcanyqbfac.loseyourip.com",
      "t3lc0mczmoihwc.camdvr.org",
      "t3lc0mh4udncifw.casacam.net",
      "t3lc0mhasvnctsk.giize.com",
      "t3lm0rtlcagratu.kozow.com",
      "tch.giize.com",
      "telcomn.giize.com",
      "telen.bumbleshrimp.com",
      "telkom.ooguy.com",
      "telkomcel.kozow.com",
      "telkomservices.theworkpc.com",
      "thbio.kozow.com",
      "timpe.kozow.com",
      "timpe.webredirect.org",
      "tlse001hdfuwwgdgpnn.theworkpc.com",
      "tltlsktelko.ddnsfree.com",
      "transport.dynuddns.net",
      "trvcl.bumbleshrimp.com",
      "ttsiou12.loseyourip.com",
      "ua2o25yth.ddnsgeek.com",
      "udieyg.gleeze.com",
      "unnjunnani.ddnsfree.com",
      "updatamail.kozow.com",
      "updatasuccess.ddnsgeek.com",
      "updateservices.kozow.com",
      "updatetools.giize.com",
      "uscplxsecjs.ddnsgeek.com",
      "usoshared1.ddnsfree.com",
      "vals.bumbleshrimp.com",
      "vass.ooguy.com",
      "vass2025.casacam.net",
      "vmtools.camdvr.org",
      "vmtools.loseyourip.com",
      "vosies.ddnsfree.com",
      "vpaspmine.freeddns.org",
      "wdlcamaakc.ooguy.com",
      "winfoss1.kozow.com",
      "ysiohbk.camdvr.org",
      "zammffayhd.ddnsfree.com",
      "zeitoon.duckdns.org",
      "zmcmvmbm.ddnsfree.com",
      "zwmn350n3o1fsdf3gs.kozow.com",
      "zwmn350n3o1ugety2xbe.camdvr.org",
      "zwmn350n3o1vsdrggs.ddnsfree.com",
      "zwt310n3o1unety2kab.webredirect.org",
      "zwt310n3o2unety6a3k.kozow.com",
      "zwt31n3t0nidoqmve.camdvr.org",
      "zwt3ln3t1aimckalw.theworkpc.com"
    ],
    "url": [
      "http://130.94.6.228"
    ]
  },
  "last_modified": "2026-02-25T16:10:59+00:00",
  "maltrail_groups": [
    "UNC2814"
  ],
  "references": [
    "https://cloud.google.com/blog/topics/threat-intelligence/disrupting-gridtide-global-espionage-campaign"
  ],
  "related": [],
  "slug": "UNC2814",
  "timeline": [
    {
      "counts": {
        "domain": 211,
        "url": 1
      },
      "first_seen": "2026-02-25",
      "indicators": {
        "domain": [
          "1cv2f3d5s6a9w.ddnsfree.com",
          "admina.freeddns.org",
          "afsaces.accesscam.org",
          "ancisesic.accesscam.org",
          "apiotc.duckdns.org",
          "applebox.camdvr.org",
          "appler.kozow.com",
          "asdad21ww.freeddns.org",
          "aw2o25forsbc.camdvr.org",
          "awcc001jdaigfwdagdcew.giize.com",
          "bab2o25com.accesscam.org",
          "babaji.accesscam.org",
          "babi5599ss.ddnsgeek.com",
          "balabalabo.mywire.org",
          "bggs.giize.com",
          "bibabo.freeddns.org",
          "binmol.webredirect.org",
          "bioth.giize.com",
          "bitel.mywire.org",
          "boemobww.ddnsfree.com",
          "brcallletme.theworkpc.com",
          "btbtutil.theworkpc.com",
          "btltan.ooguy.com",
          "camcampkes.ddnsfree.com",
          "camsqewivo.kozow.com",
          "ccammutom.ddnsgeek.com",
          "ccel.kozow.com",
          "cdnvmtools.theworkpc.com",
          "cloacpae.ddnsfree.com",
          "cmwwoods1.theworkpc.com",
          "cnrpaslceas.freeddns.org",
          "codemicros12.gleeze.com",
          "cp02odjaic.kozow.com",
          "cressmiss.ooguy.com",
          "cvabiasbae.ddnsfree.com",
          "cvnoc01da1cjmnftsd.accesscam.org",
          "cvpc01aenusocirem.accesscam.org",
          "cvpc01cgsdfn53hgd.giize.com",
          "dclcwpdtsdcc.ddnsfree.com",
          "dlpossie.ddnsfree.com",
          "dnsfreedb.ddnsfree.com",
          "doboudix1024.mywire.org",
          "docla1rocodetellkadihewfnt3.kozow.com",
          "entel.kozow.com",
          "evilginx2.loseyourip.com",
          "examp1e.webredirect.org",
          "faeelt.giize.com",
          "fakjcsaeyhs.ddnsfree.com",
          "fasceadvcva3.gleeze.com",
          "ffosies2024.camdvr.org",
          "fgdedd1dww.gleeze.com",
          "filipinet.ddnsgeek.com",
          "freeios.theworkpc.com",
          "ftpuser14.gleeze.com",
          "ftpzpak.kozow.com",
          "gam00v4fric4omv.camdvr.org",
          "globoss.kozow.com",
          "gogo2025up.ddnsfree.com",
          "googlel.gleeze.com",
          "googles.accesscam.org",
          "googles.ddnsfree.com",
          "googlett.camdvr.org",
          "googllabwws.gleeze.com",
          "gtaldps31c.ddnsfree.com",
          "hamkorg.kozow.com",
          "honidoo.loseyourip.com",
          "huygdr12.loseyourip.com",
          "icekancusjhea.ddnsgeek.com",
          "idstandsuui.kozow.com",
          "indoodchat.theworkpc.com",
          "jarvis001.freeddns.org",
          "kaushalya.freeddns.org",
          "khyes001ndfpnuewdm.kozow.com",
          "kskxoscieontrolanel.gleeze.com",
          "ksv01sokudwongsj.theworkpc.com",
          "lcskiecjj.loseyourip.com",
          "lcskiecs.ddnsfree.com",
          "losiesca.ddnsgeek.com",
          "lps2staging.ddnsfree.com",
          "lsls.casacam.net",
          "ltiuys.ddnsgeek.com",
          "ltiuys.kozow.com",
          "lxym.hlsx.xyz",
          "mailsdy.gleeze.com",
          "maliclick1.ddnsfree.com",
          "mauritasszddb.ddnsfree.com",
          "meetls.kozow.com",
          "microsoft.bumbleshrimp.com",
          "ml3.freeddns.org",
          "mlksucnayesk.kozow.com",
          "mlkzongking2024.kozow.com",
          "mmmfaco2025.mywire.org",
          "mms.bumbleshrimp.com",
          "mmvmtools.giize.com",
          "modgood.gleeze.com",
          "mosplosaq.accesscam.org",
          "mtnngservice.ddnsguru.com",
          "mysql.casacam.net",
          "myzrzy2026.ddnsfree.com",
          "nenigncagvawr.giize.com",
          "nenignenigoncqvoo.ooguy.com",
          "nenigoncqnutgo.accesscam.org",
          "nenigoncuopzc.giize.com",
          "nims.gleeze.com",
          "nisaldwoa.theworkpc.com",
          "nmszablogs.ddnsfree.com",
          "nodekeny11.freeddns.org",
          "nodjs2o25nodjs.giize.com",
          "npeoples.theworkpc.com",
          "officeshan.kozow.com",
          "okkstt.ddnsgeek.com",
          "oldatain1.ddnsgeek.com",
          "onlyosun.ooguy.com",
          "osix.ddnsgeek.com",
          "ovmmiuy.mywire.org",
          "palamolscueajfvc.gleeze.com",
          "pawanp.kozow.com",
          "pcmainecia.ddnsfree.com",
          "pcvmts3.kozow.com",
          "peisuesacae.loseyourip.com",
          "peowork.ddnsgeek.com",
          "pepesetup.ddnsfree.com",
          "pewsus.freeddns.org",
          "plcoaweniva.ddnsgeek.com",
          "plscsscapsclapclspac.ddnsfree.com",
          "policyagent.theworkpc.com",
          "polokinyea.gleeze.com",
          "pplodsssead222.loseyourip.com",
          "pplosad231.kozow.com",
          "ppsabedon.gleeze.com",
          "prdanjana01.ddnsfree.com",
          "prepaid127.freeddns.org",
          "priftp.kozow.com",
          "prihxlcs.ddnsfree.com",
          "prihxlcsw.theworkpc.com",
          "pxlaxvvva.freeddns.org",
          "quitgod2023luck.giize.com",
          "rabbit.ooguy.com",
          "rsm323.kozow.com",
          "saf3asg.giize.com",
          "sb01bmobile01nypovdfs.kozow.com",
          "sbbm0bil301nypovdfs183.kozow.com",
          "scopps.ddnsgeek.com",
          "sdhite43.ddnsfree.com",
          "sdsuytoins63.kozow.com",
          "selfad.gleeze.com",
          "sensordataesp.duckdns.org",
          "serious.kozow.com",
          "setupcodpr2.freeddns.org",
          "sgsn.accesscam.org",
          "skytel.kozow.com",
          "smartfren.giize.com",
          "sn0son4t31bbsvopou.camdvr.org",
          "sn0son4t31opc.freeddns.org",
          "soovuy.gleeze.com",
          "styuij.mywire.org",
          "supceasfg1.loseyourip.com",
          "systemsz.kozow.com",
          "szg0vqe2d23d.kozow.com",
          "t31c0mjumpcuyerop.ooguy.com",
          "t31c0mopamcuiomx.kozow.com",
          "t31c0mopmiuewklg.webredirect.org",
          "t31c0mopocuveop.accesscam.org",
          "t3lc0mcanyqbfac.loseyourip.com",
          "t3lc0mczmoihwc.camdvr.org",
          "t3lc0mh4udncifw.casacam.net",
          "t3lc0mhasvnctsk.giize.com",
          "t3lm0rtlcagratu.kozow.com",
          "tch.giize.com",
          "telcomn.giize.com",
          "telen.bumbleshrimp.com",
          "telkom.ooguy.com",
          "telkomcel.kozow.com",
          "telkomservices.theworkpc.com",
          "thbio.kozow.com",
          "timpe.kozow.com",
          "timpe.webredirect.org",
          "tlse001hdfuwwgdgpnn.theworkpc.com",
          "tltlsktelko.ddnsfree.com",
          "transport.dynuddns.net",
          "trvcl.bumbleshrimp.com",
          "ttsiou12.loseyourip.com",
          "ua2o25yth.ddnsgeek.com",
          "udieyg.gleeze.com",
          "unnjunnani.ddnsfree.com",
          "updatamail.kozow.com",
          "updatasuccess.ddnsgeek.com",
          "updateservices.kozow.com",
          "updatetools.giize.com",
          "uscplxsecjs.ddnsgeek.com",
          "usoshared1.ddnsfree.com",
          "vals.bumbleshrimp.com",
          "vass.ooguy.com",
          "vass2025.casacam.net",
          "vmtools.camdvr.org",
          "vmtools.loseyourip.com",
          "vosies.ddnsfree.com",
          "vpaspmine.freeddns.org",
          "wdlcamaakc.ooguy.com",
          "winfoss1.kozow.com",
          "ysiohbk.camdvr.org",
          "zammffayhd.ddnsfree.com",
          "zeitoon.duckdns.org",
          "zmcmvmbm.ddnsfree.com",
          "zwmn350n3o1fsdf3gs.kozow.com",
          "zwmn350n3o1ugety2xbe.camdvr.org",
          "zwmn350n3o1vsdrggs.ddnsfree.com",
          "zwt310n3o1unety2kab.webredirect.org",
          "zwt310n3o2unety6a3k.kozow.com",
          "zwt31n3t0nidoqmve.camdvr.org",
          "zwt3ln3t1aimckalw.theworkpc.com"
        ],
        "url": [
          "http://130.94.6.228"
        ]
      },
      "precision": "exact",
      "references": [
        "https://cloud.google.com/blog/topics/threat-intelligence/disrupting-gridtide-global-espionage-campaign"
      ],
      "total": 212
    }
  ]
}