#domain,ioc,uri_path,ip
1.win-faw.win,Possible Cobalt Strike C2 Domain,/js/assets/CmtImgPreview.mmbxv64dbecec011.js,68.64.176.76
178-128-196-79.sslip.io,Possible Cobalt Strike C2 Domain,/push,209.38.82.85
3se9ewodke339f0e83.connectivitytests.com,Possible Cobalt Strike C2 Fronted Domain,/jquery-3.3.1.min.js,27.71.16.98
agent.cloudfiledisk.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,144.172.68.200
api.imageprovidjs.shop,Possible Cobalt Strike C2 Fronted Domain,/jquery-3.3.1.min.js,82.158.89.75
api.zhimawithyou.top,Possible Cobalt Strike C2 Fronting Domain,/api/v1/node/check,165.154.225.239
asusupdateserver.asuscomm.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,38.54.112.234
at1.227api.com,Possible Cobalt Strike C2 Domain,/ga.js,154.83.12.132
at2.227api.com,Possible Cobalt Strike C2 Domain,/dpixel,154.83.12.132
at3.227api.com,Possible Cobalt Strike C2 Domain,/dpixel,154.83.12.132
bbb.0101011010010111001.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,175.124.145.102
bgfi-groupe.com,Possible Cobalt Strike C2 Fronted Domain,/jquery-3.3.1.min.js,64.89.161.183
cf.lala1.lat,Possible Cobalt Strike C2 Domain,/api/v1/get,154.12.94.16
check.judicical.ml,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,67.219.102.244
check1.judicical.ml,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,67.219.102.244
ck.erloro.com,Possible Cobalt Strike C2 Domain,/__utm.gif,137.220.194.15
complianceportals.com,Possible Cobalt Strike C2 Domain,/IE9CompatViewList.xml,46.19.140.50
cs.tpedu2metricstw.dpdns.org,Possible Cobalt Strike C2 Domain,/api/v1/get,45.87.53.6
cstest.mucfc.store,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,159.75.211.248
d14hh3kwt0vf8s.cloudfront.net,Possible Cobalt Strike C2 Fronting Domain,/jquery-3.3.1.min.js,64.89.161.183
dev.useimage.sbs,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,82.158.89.214
dianqi1.dianqi2.jiayongdianqi.xyz,Possible Cobalt Strike C2 Domain,/home/,45.154.12.150
dianqi1.jiayongdianqi.xyz,Possible Cobalt Strike C2 Domain,/home/,45.154.12.150
dianqi2.dianqi1.jiayongdianqi.xyz,Possible Cobalt Strike C2 Domain,/home/,45.154.12.150
dianqi2.jiayongdianqi.xyz,Possible Cobalt Strike C2 Domain,/home/,45.154.12.150
dns1.dreamls.com,Possible Cobalt Strike C2 Domain,/updates,47.113.98.42
dns2.dreamls.com,Possible Cobalt Strike C2 Domain,/updates,47.113.98.42
file.sangfor.com.cn,Possible Cobalt Strike C2 Fronted Domain,/dist/css/bootstrap.min.css,47.94.56.71
financiales-groupe.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,46.151.182.190
hsjs.net,Possible Cobalt Strike C2 Fronting Domain,/api/v2/telemetry/config.js,47.92.208.27
i.gckni.com,Possible Cobalt Strike C2 Domain,/activity,85.11.182.104
imageprovidjs.shop,Possible Cobalt Strike C2 Fronting Domain,/jquery-3.3.1.min.js,82.158.89.75
index.searchchinas.top,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,192.227.171.206
jkzprb4y.yuncdn.site,Possible Cobalt Strike C2 Fronted Domain,/api/v1/get,154.12.86.154
jnceabyk.yuncdn.site,Possible Cobalt Strike C2 Fronted Domain,/api/v1/get,154.12.86.154
lab.google-analytcis.com,Possible Cobalt Strike C2 Domain,/assets/i18n/js/jquery-3.3.1.min.js,43.199.78.142
meritphilips.fans,Possible Cobalt Strike C2 Domain,/cdn/assets/app.min.js,91.92.47.99
miss.singinas.com,Possible Cobalt Strike C2 Fronted Domain,/sugrec,154.37.218.73
missmovie.lol,Possible Cobalt Strike C2 Domain,/api/3,8.159.146.72
n1.google-analytcis.com,Possible Cobalt Strike C2 Domain,/assets/i18n/js/jquery-3.3.1.min.js,43.199.78.142
n2.google-analytcis.com,Possible Cobalt Strike C2 Domain,/assets/i18n/js/jquery-3.3.1.min.js,43.199.78.142
n3.google-analytcis.com,Possible Cobalt Strike C2 Domain,/assets/i18n/js/jquery-3.3.1.min.js,43.199.78.142
ns.1.3.0o0.foo,Possible Cobalt Strike C2 Domain,/g.pixel,47.129.171.26
ns.1.4.0o0.foo,Possible Cobalt Strike C2 Domain,/updates.rss,47.129.171.26
ns1.akawowfast.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,139.180.189.95
ns1.cmbchina.top,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,8.219.78.159
ns1.cryptwechat.com,Possible Cobalt Strike C2 Domain,/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books,107.174.115.43
ns1.gygiuh.online,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,47.129.2.130
ns1.kcsc.tf,Possible Cobalt Strike C2 Domain,/load,14.225.212.124
ns1.microoosoft.com,Possible Cobalt Strike C2 Domain,/Manag_backend/jquery-3.3.1.min.js,47.236.159.248
ns1.nsebseshop.cloud,Possible Cobalt Strike C2 Domain,/v/741823546921,47.236.130.154
ns1.yukklzwo.vip,Possible Cobalt Strike C2 Domain,/en_US/all.js,141.98.11.205
ns2.akawowfast.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,139.180.189.95
ns2.cmbchina.top,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,8.219.78.159
ns2.cryptwechat.com,Possible Cobalt Strike C2 Domain,/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books,107.174.115.43
ns2.kcsc.tf,Possible Cobalt Strike C2 Domain,/en_US/all.js,14.225.212.124
ns2.microoosoft.com,Possible Cobalt Strike C2 Domain,/Manag_backend/jquery-3.3.1.min.js,47.236.159.248
ns2.nsebseshop.cloud,Possible Cobalt Strike C2 Domain,/v/741823546921,47.236.130.154
ns2.yukklzwo.vip,Possible Cobalt Strike C2 Domain,/j.ad,141.98.11.205
ns3.akawowfast.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,139.180.189.95
ns3.nsebseshop.cloud,Possible Cobalt Strike C2 Domain,/ms/625478102395,47.236.130.154
osce12-0-sc.url.asiainfo-sec.com,Possible Cobalt Strike C2 Fronted Domain,/dist/css/bootstrap.min.css,47.95.201.24
ossb6.oss-cn-beijing.aliyuncs.com,Possible Cobalt Strike C2 Domain,/images/logo.png,38.76.183.197
p7xcq2yw.yuncdn.site,Possible Cobalt Strike C2 Fronted Domain,/api/v1/get,154.12.86.154
pull.portal.10086.cn,Possible Cobalt Strike C2 Fronted Domain,/jquery-3.3.1.min.js,101.133.225.51
skynet-i.asuscomm.com,Possible Cobalt Strike C2 Domain,/zOMGAPT,85.175.101.203
test.officeplustool.top,Possible Cobalt Strike C2 Domain,/ca,47.86.184.71
update.inteldrives.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,206.237.4.234
update.microsoftapply.com,Possible Cobalt Strike C2 Domain,/en_US/all.js,154.38.114.115
update.microsofthk.com,Possible Cobalt Strike C2 Domain,/dot.gif,45.207.8.36
update.microsoftkernel.com,Possible Cobalt Strike C2 Domain,/ca,45.207.8.36
update.mloadspring.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,70.34.196.238
updatesrv.net,Possible Cobalt Strike C2 Domain,/___utm.gif,169.239.128.43
upgrade.mloadspring.com,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,70.34.196.238
ux85qfba.yuncdn.site,Possible Cobalt Strike C2 Fronted Domain,/api/v1/get,154.12.86.154
vs.exactcloud.info,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,149.104.27.46
web-analyzer-serv32.com,Possible Cobalt Strike C2 Domain,/___utm.gif,169.239.128.43
www.chinagasholdings.space,Possible Cobalt Strike C2 Domain,/cm,101.133.229.117
www.dyshop.online,Possible Cobalt Strike C2 Domain,/login.js,111.229.4.108
www.eurocommerce.top,Possible Cobalt Strike C2 Fronted Domain,/jquery-3.3.1.easing.min.js,101.35.247.212
www.mfmni.shop,Possible Cobalt Strike C2 Fronting Domain,/jquery-3.3.1.min.js,27.71.16.98
www.microsslcheck.com,Possible Cobalt Strike C2 Domain,/load/main.js,104.143.204.78
www.qkshhdjrbd.work,Possible Cobalt Strike C2 Domain,/jquery-3.3.1.min.js,43.138.116.60
zhimawithyou.top,Possible Cobalt Strike C2 Fronted Domain,/api/v1/node/check,165.154.225.239