Reconnecting to live updates…
BengalSEO Part 1: Anatomy of the Operation
Severity: mediumType: Malware
In March 2026, a sophisticated SEO poisoning campaign was identified leading to malware distribution and tech support scams. Operating since at least 2015, this operation is attributed to individuals and IT service providers in Rajasthan, India, collectively tracked as BengalSEO. Two primary entities were identified: WeConnect Solutions LLC operates tech support call centers, while Garage2Global develops malicious web infrastructure. The group leverages extensive black hat SEO techniques including backlink generation, DOM injection, and keyword stuffing to promote lure pages mimicking legitimate technical support portals. A custom Traffic Distribution System routes victims through rotating redirector domains, utilizing Matomo analytics for tracking and fingerprinting. The operation deploys custom malware named MayaBot to further enable scam activities. Infrastructure analysis revealed hundreds of domains registered primarily through Spaceship and Namecheap, hosted via Cloudflare and Hostmaza, with GitHub e...
AI Analysis
Technical Summary
BengalSEO is a sophisticated SEO poisoning and tech support scam operation attributed to groups in Rajasthan, India, active since at least 2015 and publicly detailed in 2026. The campaign employs extensive black hat SEO methods such as backlink generation, DOM injection, and keyword stuffing to drive traffic to malicious lure pages mimicking legitimate tech support sites. A custom Traffic Distribution System with rotating redirector domains and Matomo analytics is used for victim routing and tracking. The operation deploys a custom malware named MayaBot to enable scam activities. Infrastructure analysis reveals hundreds of domains registered primarily through Spaceship and Namecheap, hosted on Cloudflare and Hostmaza, and leveraging GitHub for malicious content hosting. The campaign is not a software vulnerability but a complex threat actor operation involving malware distribution and social engineering scams.
Potential Impact
The BengalSEO operation facilitates malware distribution and tech support scams, potentially leading to victim compromise through social engineering and malware infection. The use of custom malware MayaBot and sophisticated traffic routing increases the effectiveness of scams. The campaign can cause financial loss and data compromise for victims who engage with the malicious tech support portals. There is no direct software vulnerability exploited; the impact is through deception and malware delivery.
Mitigation Recommendations
This is a threat actor campaign rather than a software vulnerability; therefore, no software patch or fix applies. Defenders should focus on user awareness to recognize tech support scams, block known malicious domains and IPs associated with BengalSEO infrastructure, and employ web filtering to detect SEO poisoning and malicious redirectors. Monitoring for indicators of compromise related to MayaBot malware and black hat SEO techniques is recommended. Since no official vendor advisory or patch exists, continuous threat intelligence updates are critical.
Indicators of Compromise
- domain: brotherprinter-drivers.com
- domain: freetechsupport.org
- domain: iconnectpc.com
- domain: itunes-download.com
- domain: amazoncom-mytv.com
- domain: digitallinkup.com
- domain: anjaymedical.com
- domain: msnbclivestreaming.com
- domain: tdameritradecom.com
- domain: 4jio.com
- domain: printer.business
- domain: hulu-comactivate.com
- domain: digicareinc.com
- domain: youtubecomstart.com
- domain: greatmovies.xyz
- domain: setup2.com
- domain: activate-apple.com
- domain: amazo7n.com
- domain: oculus-app.com
- domain: rekkbitllc.com
- domain: tellmenew.com
- domain: installturbotax.online
- domain: tax-com.com
- domain: taxsoftwarelicense.com
- domain: xn--ida.online
- domain: dukeenergybillpay.com
- domain: yforu.com
- domain: turbotax2025.com
- domain: icsrr.com
- domain: extvr.com
- domain: activatebycode.com
- domain: begin.rest
- domain: officecom.store
- domain: tytaa.com
- domain: rekkbit.com
- domain: centerpointenergybillpay.com
- domain: llaa.us
- domain: webconnectus.com
- domain: life2vec.io
- domain: us99.org
- domain: verifying.info
- domain: breachsaver.com
- domain: setup.cam
- domain: sections.map
- domain: ts.remdos.com
- domain: tx.newredir.com
- domain: to.ghredir.com
- domain: tx.platdir.com
- domain: link72.com
- domain: us00.net
- domain: url90.com
- domain: flosyr.com
- domain: stats.us3.org
- url: https://stats.us3.org/matomo.php
- url: https://oculus-app.com/
- domain: ustechnio.com
- domain: tax.dll.lat
- domain: u320.my
- domain: reficon.pro
- domain: pltechoo.pro
- domain: cp1.hostmaza.co.in
- domain: wapp.live
- domain: sasta.holiday
- domain: garage2global.com
- domain: ustechnio100.com
- domain: ajax.googleapis.com.co
- domain: 0xc004f050.com
- domain: 123hpcomsetup.net
- domain: 1act.cfd
- domain: 1uhcact.shop
- domain: 2act.shop
- domain: 5dmarketing.in
- domain: activate.cam
- domain: activatetax.pro
- domain: activateuhc.us
- domain: activateuhc0.com
- domain: activateuhccom.com
- domain: activateuhccom.online
- domain: activateuhccom.us
- domain: activateuhccom.xyz
- domain: activationerror.com
- domain: activationerror.net
- domain: activationerror.org
- domain: actpro.cc
- domain: actpro.click
- domain: akams.my
- domain: akamsaccountrecovery.com
- domain: amazonprim-e.com
- domain: aski.help
- domain: assign.help
- domain: bbccomaccounttv.com
- domain: begin.lat
- domain: begin.support
- domain: bestcreditcards.cc
- domain: bing.bz
- domain: bluemountaincoffee.cc
- domain: brotherprinterdrivers.us
- domain: businesscard-s.com
- domain: cancer.sbs
- domain: cancer.shiksha
- domain: cancervaccine.cc
- domain: cancervaccine.in
- domain: canonoobe.com
- domain: canva-login.com
- domain: capcutdownloadpc.com
- domain: cashapp-taxes.com
- domain: ccricutdesignspace.com
- domain: cheapflights.cam
- domain: comactivate.cc
- domain: cpafirmwc.org
- domain: cpafirmweconnect.org
- domain: cpaweconnect.com
- domain: creditcardcompare.net
- domain: cric-cricut.com
- domain: dwnload.online
- domain: fix-connections.com
- domain: fixaprinter.com
- domain: fixconnections.net
- domain: flightsondeals.com
- domain: freetutorial.in
- domain: fubo-tvconnect.com
- domain: googleapis.com.co
- domain: hbomaxsign.com
- domain: hbomaxsignin.us
- domain: hbomaxtv.us
- domain: hpsmart.cc
- domain: hulucomforgot.com
- domain: i-forgotapple.com
- domain: ijnbu.com
- domain: ijstm.com
- domain: install-turbo.com
- domain: installtaxturbo.com
- domain: installturbotax-2024.com
- domain: installturbotax-com.com
- domain: installturbotax.cc
- domain: installturbotax.info
- domain: installturbotax.net
- domain: installturbotax.org
- domain: installturbotax.us
- domain: installturbotax2019.com
- domain: installturbotax2022.com
- domain: installturbotax2024.com
- domain: installturbotaxcom.biz
- domain: installturbotaxcom.net
- domain: insttallturbo-tax.com
- domain: insurance.ug
- domain: ipaid.us
- domain: isecurellc.org
- domain: krtwj.com
- domain: linkapple.cc
- domain: linked.help
- domain: logmein123r.com
- domain: lotter-y.com
- domain: lowessyfcomactivate.com
- domain: mega-millions.us
- domain: megamillionswinningnumber-s.com
- domain: mgmpluscomactivate.com
- domain: mosser.ink
- domain: msofficesetup.us
- domain: my5tvactivate.cc
- domain: myefiling.online
- domain: myitassist.com
- domain: myuhc.cc
- domain: myustech12.com
- domain: myustech20.com
- domain: myustechn30.com
- domain: myustechn35.com
- domain: netspend.cc
- domain: niniteinstaller.com
- domain: nortoncombestbuy.com
- domain: ns-cloudflare.org
- domain: offi-ce.com
- domain: officecom-setup.com
- domain: officesetup.net
- domain: ohaoo.com
- domain: onlyfor.help
- domain: opuityerqw.com
- domain: opuityerqw.info
- domain: paramountplus.cc
- domain: phonelinkqrc.net
- domain: pltech.my
- domain: pltech1.my
- domain: pltech10.my
- domain: pltech15.my
- domain: pltech5.my
- domain: portal-office-365.com
- domain: portal4.site
- domain: printer.com.co
- domain: printerdriver-s.com
- domain: printerssetup.com
- domain: printersupport.io
- domain: printredir.com
- domain: prokiot.pro
- domain: psnzr.com
- domain: quickbooks-download.com
- domain: quickbooks.cc
- domain: rebzs.com
- domain: redditdownloader.us
- domain: redeem.cam
- domain: redircomms.com
- domain: redircoms.com
- domain: roku.cam
- domain: settings.help
- domain: shopprimetv.com
- domain: silhouettestudio.cc
- domain: silhouettestudioo.com
- domain: slingcomsamsung.com
- domain: taxlicenseturbo.tax
- domain: taxredir.online
- domain: taxslayer.cc
- domain: taxslayerpro.cc
- domain: techfonews.com
- domain: tooldownload.net
- domain: torrentranking.top
- domain: turbo-tax-license.com
- domain: turbotax.com.co
- domain: tyughb.com
- domain: uact11.info
- domain: uact12.info
- domain: uact13.info
- domain: uact14.info
- domain: uact15.info
- domain: uact16.info
- domain: uact17.info
- domain: uact18.info
- domain: uact19.info
- domain: uact2.info
- domain: uact20.info
- domain: uact3.info
- domain: uact5.info
- domain: uact6.info
- domain: uact7.info
- domain: uact8.info
- domain: uact9.info
- domain: uhact.info
- domain: uhcactivate.com
- domain: url19.com
- domain: us00.us
- domain: us110.my
- domain: us115.my
- domain: us130.my
- domain: us135.my
- domain: us202.my
- domain: us203.my
- domain: us210.my
- domain: us215.my
- domain: us220.my
- domain: us225.my
- domain: us228.my
- domain: us230.my
- domain: us30.my
- domain: us300.my
- domain: us302.my
- domain: us305.my
- domain: us31.my
- domain: us310.my
- domain: us315.my
- domain: us32.my
- domain: us320.my
- domain: us33.my
- domain: us34.my
- domain: us35.my
- domain: us350.my
- domain: us355.my
- domain: us400.my
- domain: us50.my
- domain: us500.my
- domain: us501.cc
- domain: us503.my
- domain: us505.my
- domain: us506.my
- domain: us51.my
- domain: us52.my
- domain: us53.my
- domain: us54.my
- domain: us55.my
- domain: us60.my
- domain: us600.my
- domain: us603.my
- domain: us605.cc
- domain: us605.my
- domain: us61.my
- domain: us610.my
- domain: us62.my
- domain: us63.my
- domain: us64.my
- domain: us65.my
- domain: us70.my
- domain: us700.my
- domain: us705.my
- domain: us706.cc
- domain: us707.cc
- domain: us708.my
- domain: us71.my
- domain: us710.my
- domain: us72.my
- domain: us73.my
- domain: us74.my
- domain: us75.my
- domain: us800.cc
- domain: us800.my
- domain: us801.my
- domain: us802.my
- domain: us803.my
- domain: us804.my
- domain: us805.my
- domain: us807.my
- domain: us810.my
- domain: us815.my
- domain: us900.cc
- domain: us900.my
- domain: us902.my
- domain: us905.my
- domain: us906.my
- domain: us91.my
- domain: us910.my
- domain: us915.my
- domain: us92.my
- domain: us93.my
- domain: us94.my
- domain: us95.my
- domain: us951.cc
- domain: us96.my
- domain: usact1.my
- domain: usact2.info
- domain: usact2.my
- domain: usact3.info
- domain: usact3.my
- domain: usact4.info
- domain: usact4.my
- domain: usact5.info
- domain: usact5.my
- domain: usact6.my
- domain: ustechnio10.com
- domain: ustechnio20.com
- domain: ustechnio30.com
- domain: ustechnio50.com
- domain: ustechnio60.com
- domain: ustechnio70.com
- domain: ustechnio80.com
- domain: ustechno.cc
- domain: ustechno.my
- domain: ustechno1.com
- domain: ustechno100.cc
- domain: ustechno151.cc
- domain: ustechno25.cc
- domain: ustechno5.com
- domain: ustechno50.cc
- domain: vanillagiftcardbalanc-e.com
- domain: vbnmlp.com
- domain: vista-print.us
- domain: vistaprin-t.com
- domain: viziocomsetup.com
- domain: weassist.cc
- domain: webactivate-apple.com
- domain: webactivate.cam
- domain: webbing.bz
- domain: webconnectuss.com
- domain: webfreetechsupport.org
- domain: webinstallturbotax.org
- domain: weblinkapple.cc
- domain: webmyuhc.cc
- domain: webslingcomsamsung.com
- domain: websolutions.llc
- domain: webverifying.info
- domain: webviziocomsetup.com
- domain: webwwwrobloxcomredeem.com
- domain: whatsappweb.ca
- domain: whatsappweb.co.in
- domain: whatsappwebcom.com
- domain: windows12.download
- domain: windows12.io
- domain: windows12download.net
- domain: www-akamsphonelinkqrc.com
- domain: wwwrobloxcomredeem.com
- domain: xn--ida.link
- domain: youtube.gs
- domain: yttomp3.io
- domain: zsolution.com.au
- domain: 2024estimat0r.installturbo.tax
- domain: activate.turblicense.tax
- domain: activate.uhc.my
- domain: activatebestbuyaccountonlinecom.weebly.com
- domain: activatecapitalonecom.dorik.io
- domain: activatecapitalonecom.weebly.com
- domain: activation-support-freetechsupport-org.xn--l-fka.site
- domain: activation-support.aioure.com
- domain: activation-support.freetechsupport.org
- domain: activation.begin.lat
- domain: activation.begin.rest
- domain: activation.begin.support
- domain: amaz0nturb0.taxlicense.tax
- domain: amazon.co-m.info
- domain: amazonmytv.lotter-y.com
- domain: apitechno.us1.my
- domain: bankers-fidelity-provider-portal.readthedocs-hosted.com
- domain: betfairlogin.weebly.com
- domain: brotherprinterdriversmac.weebly.com
- domain: busi-nessturb.installtaxturbo.tax
- domain: canada0nline.turbo-license.tax
- domain: canon.printerdriver-s.com
- domain: cash-apptaxes.weebly.com
- domain: cd.turboinstall.tax
- domain: codeturbo.taxlicenseturbo.tax
- domain: convertturb.license-turbo.tax
- domain: crunchyrollcomactivate.weebly.com
- domain: d-downl0ad.turbotaxinstall.tax
- domain: d-ownload.taxturbotaxlicense.tax
- domain: ddownload.turb-license.tax
- domain: delldriversupdate.weebly.com
- domain: discovercomactivate.weebly.com
- domain: disneyplus-combegin.dorik.io
- domain: disneypluscom-begin.weebly.com
- domain: disneypluscombegin.dorik.io
- domain: downlad-amaz0n.licenseturbotax.tax
- domain: download.taxturbolicense.tax
- domain: downloadturb.taxlicenseturbo.tax
- domain: downloadturbotax2022.weebly.com
- domain: downloadturbotax2024.weebly.com
- domain: dynamictrans.us4.my
- domain: enginetop.us3.my
- domain: enter.turb-license.tax
- domain: entercode.taxturbotaxlicense.tax
- domain: entertur0.installtax.tax
- domain: enterturbo.tax-license.com
- domain: freetaxusa2024.uvdesk.com
- domain: freetaxusalogin.weebly.com
- domain: garmincomexpress.dorik.io
- domain: geeksquadgeeksquad.dorik.io
- domain: geeksquadphonenumber.dorik.io
- domain: googledriveforpc.weebly.com
- domain: homedepotmycard.weebly.com
- domain: id.verifying.info
- domain: ijstart.canonoobe.com
- domain: in-stalturb.turbo-license.com
- domain: infosession123.data.blog
- domain: install-tturb.turbo-license.com
- domain: install-turb0.tax-com.com
- domain: install-turbotax-with-license-code.weebly.com
- domain: installturb0.taxlicenseturbo.tax
- domain: installturbo.tax-turbotax.com
- domain: installturbotax.licensetax.com
- domain: installturbotaxcom.uncrn.co
- domain: installturbotaxcom2019withlicensecode.uncrn.co
- domain: installturbotaxcom2019withlicensecode.weebly.com
- domain: jcpenney.uvdesk.com
- domain: jcpsyfcomactivate.weebly.com
- domain: jcpsyfhelpcenter.onsitesupport.io
- domain: license-turbo.tax-turbotax.com
- domain: licensec0de.installtaxturbo.tax
- domain: lowessyfcomactivatecard.dorik.io
- domain: mail.viziocomsetup.com
- domain: multiple-downloadturb.taxlicense.tax
- domain: my5tvactivate.uvdesk.com
- domain: my5tvactivatetv.weebly.com
- domain: mycignacomactivate.uvdesk.com
- domain: myprepaidcentercom.dorik.io
- domain: netgearrouterloginip.weebly.com
- domain: office.setup2.com
- domain: officesetupcom.weebly.com
- domain: officesetupkey.weebly.com
- domain: plextvlinkentercode.weebly.com
- domain: provider-portal-bankers-fidelity.readthedocs-hosted.com
- domain: quickbooksdownload.dorik.io
- domain: quicken-helpdesk.uvdesk.com
- domain: quickenkb.onsitesupport.io
- domain: road-runneremail.weebly.com
- domain: roadrunneremaillogin.uncrn.co
- domain: roadrunneremaillogin.uvdesk.com
- domain: setupbrother-com.weebly.com
- domain: sywaccountonlinecom.weebly.com
- domain: taa8canada.tax-com.com
- domain: targetgiftcardbalance.dorik.io
- domain: taxact-login.turbo-license.com
- domain: taxslayerprologinmyaccount.weebly.com
- domain: taxtutorial.onsitesupport.io
- domain: taxxlogin.taxinstallturbo.com
- domain: tntdramacomactivatee.weebly.com
- domain: toffin.us1.my
- domain: totallii.us1.my
- domain: trbb-0.tax-license.com
- domain: tturbo.tax-license.com
- domain: tur-rbo.tax-license.com
- domain: turb-0.tax-licenseturbo.com
- domain: turb00.taxinstallturbo.com
- domain: turb00tax.licensetax.com
- domain: turb0t-tax.tax-license.com
- domain: turb0taxenter.licenseturbtax.tax
- domain: turb0taxx.turbo-license.com
- domain: turb0ttax.tax-license.com
- domain: turbb-taxx.turbo-license.com
- domain: turbo-code.tax-com.com
- domain: turbo.tax-license.com
- domain: turbootax.tax-license.com
- domain: turbotax-canada.ca-taxdown.com
- domain: turbotax-download.turbo-license.com
- domain: turbotaxcanada2026.weebly.com
- domain: turbotaxdownload2023withlicensecode.weebly.com
- domain: turbotaxdownload2026withlicensecode.weebly.com
- domain: turbttax.tax-license.com
- domain: turrb-tax.tax-license.com
- domain: turrb-ttax.tax-license.com
- domain: tuurboo.tax-licenses.com
- domain: tv.youtubecomstart.com
- domain: v.wvvw.site
- domain: vanilla-gift-balance.dorik.io
- domain: vanillagiftbalancecheck.weebly.com
- domain: verifying.info.setup.cam
- domain: visa-gift-card-balance.weebly.com
- domain: visagiftcardbalance.weebly.com
- domain: viziocomsetup.uvdesk.com
- domain: viziosmarttv.onsitesupport.io
- domain: w.wvvw.site
- domain: walmart-giftcardbalance.weebly.com
- domain: walmartgiftcardbalanceonline.weebly.com
- domain: whatsappsupport.weebly.com
- domain: whatsappweb.dcms.site
- domain: windows12download.weebly.com
- domain: www-install-turbo.tax-com.com
- domain: wwwakams.phonelinkqrc.net
- url: http://stats.us3.org/matomo.php
- domain: 2026-08-24-bengalseo-part-1-anatomy-of-the-operation.md
- domain: beehiv.com
- domain: slimfaq.com
BengalSEO Part 1: Anatomy of the Operation
0
MediumMalwareseo poisoningweconnectgarage2globalmayabotblack hat seogithub infrastructuretech support scammatomo analyticstdsindiat1059.007t1594t1204.002t1566.002t1608.004t1586.002t1608.001t1583.001t1596t1090t1608.005t1583.006t1588.002t1571t1585.001t1027t1573t1189t1071.001
Published: 09/06/2026 (09/06/2026, 07:32:55 UTC)
Source: AlienVault OTX General
Description
In March 2026, a sophisticated SEO poisoning campaign was identified leading to malware distribution and tech support scams. Operating since at least 2015, this operation is attributed to individuals and IT service providers in Rajasthan, India, collectively tracked as BengalSEO. Two primary entities were identified: WeConnect Solutions LLC operates tech support call centers, while Garage2Global develops malicious web infrastructure. The group leverages extensive black hat SEO techniques including backlink generation, DOM injection, and keyword stuffing to promote lure pages mimicking legitimate technical support portals. A custom Traffic Distribution System routes victims through rotating redirector domains, utilizing Matomo analytics for tracking and fingerprinting. The operation deploys custom malware named MayaBot to further enable scam activities. Infrastructure analysis revealed hundreds of domains registered primarily through Spaceship and Namecheap, hosted via Cloudflare and Hostmaza, with GitHub e...
AI-Powered Analysis
Machine-generated threat intelligence
AILast updated: 09/07/2026, 10:38:11 UTC
Technical Analysis
BengalSEO is a sophisticated SEO poisoning and tech support scam operation attributed to groups in Rajasthan, India, active since at least 2015 and publicly detailed in 2026. The campaign employs extensive black hat SEO methods such as backlink generation, DOM injection, and keyword stuffing to drive traffic to malicious lure pages mimicking legitimate tech support sites. A custom Traffic Distribution System with rotating redirector domains and Matomo analytics is used for victim routing and tracking. The operation deploys a custom malware named MayaBot to enable scam activities. Infrastructure analysis reveals hundreds of domains registered primarily through Spaceship and Namecheap, hosted on Cloudflare and Hostmaza, and leveraging GitHub for malicious content hosting. The campaign is not a software vulnerability but a complex threat actor operation involving malware distribution and social engineering scams.
Potential Impact
The BengalSEO operation facilitates malware distribution and tech support scams, potentially leading to victim compromise through social engineering and malware infection. The use of custom malware MayaBot and sophisticated traffic routing increases the effectiveness of scams. The campaign can cause financial loss and data compromise for victims who engage with the malicious tech support portals. There is no direct software vulnerability exploited; the impact is through deception and malware delivery.
Defensive Guidance
This is a threat actor campaign rather than a software vulnerability; therefore, no software patch or fix applies. Defenders should focus on user awareness to recognize tech support scams, block known malicious domains and IPs associated with BengalSEO infrastructure, and employ web filtering to detect SEO poisoning and malicious redirectors. Monitoring for indicators of compromise related to MayaBot malware and black hat SEO techniques is recommended. Since no official vendor advisory or patch exists, continuous threat intelligence updates are critical.
Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro
Technical Details
- Author
- AlienVault
- Tlp
- white
- References
- ["https://thedfirreport.com/2026/08/24/bengalseo-part-1-anatomy-of-the-operation/"]
- Adversary
- BengalSEO
- Pulse Id
- 6a9d1727de29faddfa1c2a91
- Threat Score
- null
Indicators of Compromise
Domain
| Value | Description | Copy |
|---|---|---|
domainbrotherprinter-drivers.com | — | |
domainfreetechsupport.org | — | |
domainiconnectpc.com | — | |
domainitunes-download.com | — | |
domainamazoncom-mytv.com | — | |
domaindigitallinkup.com | — | |
domainanjaymedical.com | — | |
domainmsnbclivestreaming.com | — | |
domaintdameritradecom.com | — | |
domain4jio.com | — | |
domainprinter.business | — | |
domainhulu-comactivate.com | — | |
domaindigicareinc.com | — | |
domainyoutubecomstart.com | — | |
domaingreatmovies.xyz | — | |
domainsetup2.com | — | |
domainactivate-apple.com | — | |
domainamazo7n.com | — | |
domainoculus-app.com | — | |
domainrekkbitllc.com | — | |
domaintellmenew.com | — | |
domaininstallturbotax.online | — | |
domaintax-com.com | — | |
domaintaxsoftwarelicense.com | — | |
domainxn--ida.online | — | |
domaindukeenergybillpay.com | — | |
domainyforu.com | — | |
domainturbotax2025.com | — | |
domainicsrr.com | — | |
domainextvr.com | — | |
domainactivatebycode.com | — | |
domainbegin.rest | — | |
domainofficecom.store | — | |
domaintytaa.com | — | |
domainrekkbit.com | — | |
domaincenterpointenergybillpay.com | — | |
domainllaa.us | — | |
domainwebconnectus.com | — | |
domainlife2vec.io | — | |
domainus99.org | — | |
domainverifying.info | — | |
domainbreachsaver.com | — | |
domainsetup.cam | — | |
domainsections.map | — | |
domaints.remdos.com | — | |
domaintx.newredir.com | — | |
domainto.ghredir.com | — | |
domaintx.platdir.com | — | |
domainlink72.com | — | |
domainus00.net | — | |
domainurl90.com | — | |
domainflosyr.com | — | |
domainstats.us3.org | — | |
domainustechnio.com | — | |
domaintax.dll.lat | — | |
domainu320.my | — | |
domainreficon.pro | — | |
domainpltechoo.pro | — | |
domaincp1.hostmaza.co.in | — | |
domainwapp.live | — | |
domainsasta.holiday | — | |
domaingarage2global.com | — | |
domainustechnio100.com | — | |
domainajax.googleapis.com.co | — | |
domain0xc004f050.com | — | |
domain123hpcomsetup.net | — | |
domain1act.cfd | — | |
domain1uhcact.shop | — | |
domain2act.shop | — | |
domain5dmarketing.in | — | |
domainactivate.cam | — | |
domainactivatetax.pro | — | |
domainactivateuhc.us | — | |
domainactivateuhc0.com | — | |
domainactivateuhccom.com | — | |
domainactivateuhccom.online | — | |
domainactivateuhccom.us | — | |
domainactivateuhccom.xyz | — | |
domainactivationerror.com | — | |
domainactivationerror.net | — | |
domainactivationerror.org | — | |
domainactpro.cc | — | |
domainactpro.click | — | |
domainakams.my | — | |
domainakamsaccountrecovery.com | — | |
domainamazonprim-e.com | — | |
domainaski.help | — | |
domainassign.help | — | |
domainbbccomaccounttv.com | — | |
domainbegin.lat | — | |
domainbegin.support | — | |
domainbestcreditcards.cc | — | |
domainbing.bz | — | |
domainbluemountaincoffee.cc | — | |
domainbrotherprinterdrivers.us | — | |
domainbusinesscard-s.com | — | |
domaincancer.sbs | — | |
domaincancer.shiksha | — | |
domaincancervaccine.cc | — | |
domaincancervaccine.in | — | |
domaincanonoobe.com | — | |
domaincanva-login.com | — | |
domaincapcutdownloadpc.com | — | |
domaincashapp-taxes.com | — | |
domainccricutdesignspace.com | — | |
domaincheapflights.cam | — | |
domaincomactivate.cc | — | |
domaincpafirmwc.org | — | |
domaincpafirmweconnect.org | — | |
domaincpaweconnect.com | — | |
domaincreditcardcompare.net | — | |
domaincric-cricut.com | — | |
domaindwnload.online | — | |
domainfix-connections.com | — | |
domainfixaprinter.com | — | |
domainfixconnections.net | — | |
domainflightsondeals.com | — | |
domainfreetutorial.in | — | |
domainfubo-tvconnect.com | — | |
domaingoogleapis.com.co | — | |
domainhbomaxsign.com | — | |
domainhbomaxsignin.us | — | |
domainhbomaxtv.us | — | |
domainhpsmart.cc | — | |
domainhulucomforgot.com | — | |
domaini-forgotapple.com | — | |
domainijnbu.com | — | |
domainijstm.com | — | |
domaininstall-turbo.com | — | |
domaininstalltaxturbo.com | — | |
domaininstallturbotax-2024.com | — | |
domaininstallturbotax-com.com | — | |
domaininstallturbotax.cc | — | |
domaininstallturbotax.info | — | |
domaininstallturbotax.net | — | |
domaininstallturbotax.org | — | |
domaininstallturbotax.us | — | |
domaininstallturbotax2019.com | — | |
domaininstallturbotax2022.com | — | |
domaininstallturbotax2024.com | — | |
domaininstallturbotaxcom.biz | — | |
domaininstallturbotaxcom.net | — | |
domaininsttallturbo-tax.com | — | |
domaininsurance.ug | — | |
domainipaid.us | — | |
domainisecurellc.org | — | |
domainkrtwj.com | — | |
domainlinkapple.cc | — | |
domainlinked.help | — | |
domainlogmein123r.com | — | |
domainlotter-y.com | — | |
domainlowessyfcomactivate.com | — | |
domainmega-millions.us | — | |
domainmegamillionswinningnumber-s.com | — | |
domainmgmpluscomactivate.com | — | |
domainmosser.ink | — | |
domainmsofficesetup.us | — | |
domainmy5tvactivate.cc | — | |
domainmyefiling.online | — | |
domainmyitassist.com | — | |
domainmyuhc.cc | — | |
domainmyustech12.com | — | |
domainmyustech20.com | — | |
domainmyustechn30.com | — | |
domainmyustechn35.com | — | |
domainnetspend.cc | — | |
domainniniteinstaller.com | — | |
domainnortoncombestbuy.com | — | |
domainns-cloudflare.org | — | |
domainoffi-ce.com | — | |
domainofficecom-setup.com | — | |
domainofficesetup.net | — | |
domainohaoo.com | — | |
domainonlyfor.help | — | |
domainopuityerqw.com | — | |
domainopuityerqw.info | — | |
domainparamountplus.cc | — | |
domainphonelinkqrc.net | — | |
domainpltech.my | — | |
domainpltech1.my | — | |
domainpltech10.my | — | |
domainpltech15.my | — | |
domainpltech5.my | — | |
domainportal-office-365.com | — | |
domainportal4.site | — | |
domainprinter.com.co | — | |
domainprinterdriver-s.com | — | |
domainprinterssetup.com | — | |
domainprintersupport.io | — | |
domainprintredir.com | — | |
domainprokiot.pro | — | |
domainpsnzr.com | — | |
domainquickbooks-download.com | — | |
domainquickbooks.cc | — | |
domainrebzs.com | — | |
domainredditdownloader.us | — | |
domainredeem.cam | — | |
domainredircomms.com | — | |
domainredircoms.com | — | |
domainroku.cam | — | |
domainsettings.help | — | |
domainshopprimetv.com | — | |
domainsilhouettestudio.cc | — | |
domainsilhouettestudioo.com | — | |
domainslingcomsamsung.com | — | |
domaintaxlicenseturbo.tax | — | |
domaintaxredir.online | — | |
domaintaxslayer.cc | — | |
domaintaxslayerpro.cc | — | |
domaintechfonews.com | — | |
domaintooldownload.net | — | |
domaintorrentranking.top | — | |
domainturbo-tax-license.com | — | |
domainturbotax.com.co | — | |
domaintyughb.com | — | |
domainuact11.info | — | |
domainuact12.info | — | |
domainuact13.info | — | |
domainuact14.info | — | |
domainuact15.info | — | |
domainuact16.info | — | |
domainuact17.info | — | |
domainuact18.info | — | |
domainuact19.info | — | |
domainuact2.info | — | |
domainuact20.info | — | |
domainuact3.info | — | |
domainuact5.info | — | |
domainuact6.info | — | |
domainuact7.info | — | |
domainuact8.info | — | |
domainuact9.info | — | |
domainuhact.info | — | |
domainuhcactivate.com | — | |
domainurl19.com | — | |
domainus00.us | — | |
domainus110.my | — | |
domainus115.my | — | |
domainus130.my | — | |
domainus135.my | — | |
domainus202.my | — | |
domainus203.my | — | |
domainus210.my | — | |
domainus215.my | — | |
domainus220.my | — | |
domainus225.my | — | |
domainus228.my | — | |
domainus230.my | — | |
domainus30.my | — | |
domainus300.my | — | |
domainus302.my | — | |
domainus305.my | — | |
domainus31.my | — | |
domainus310.my | — | |
domainus315.my | — | |
domainus32.my | — | |
domainus320.my | — | |
domainus33.my | — | |
domainus34.my | — | |
domainus35.my | — | |
domainus350.my | — | |
domainus355.my | — | |
domainus400.my | — | |
domainus50.my | — | |
domainus500.my | — | |
domainus501.cc | — | |
domainus503.my | — | |
domainus505.my | — | |
domainus506.my | — | |
domainus51.my | — | |
domainus52.my | — | |
domainus53.my | — | |
domainus54.my | — | |
domainus55.my | — | |
domainus60.my | — | |
domainus600.my | — | |
domainus603.my | — | |
domainus605.cc | — | |
domainus605.my | — | |
domainus61.my | — | |
domainus610.my | — | |
domainus62.my | — | |
domainus63.my | — | |
domainus64.my | — | |
domainus65.my | — | |
domainus70.my | — | |
domainus700.my | — | |
domainus705.my | — | |
domainus706.cc | — | |
domainus707.cc | — | |
domainus708.my | — | |
domainus71.my | — | |
domainus710.my | — | |
domainus72.my | — | |
domainus73.my | — | |
domainus74.my | — | |
domainus75.my | — | |
domainus800.cc | — | |
domainus800.my | — | |
domainus801.my | — | |
domainus802.my | — | |
domainus803.my | — | |
domainus804.my | — | |
domainus805.my | — | |
domainus807.my | — | |
domainus810.my | — | |
domainus815.my | — | |
domainus900.cc | — | |
domainus900.my | — | |
domainus902.my | — | |
domainus905.my | — | |
domainus906.my | — | |
domainus91.my | — | |
domainus910.my | — | |
domainus915.my | — | |
domainus92.my | — | |
domainus93.my | — | |
domainus94.my | — | |
domainus95.my | — | |
domainus951.cc | — | |
domainus96.my | — | |
domainusact1.my | — | |
domainusact2.info | — | |
domainusact2.my | — | |
domainusact3.info | — | |
domainusact3.my | — | |
domainusact4.info | — | |
domainusact4.my | — | |
domainusact5.info | — | |
domainusact5.my | — | |
domainusact6.my | — | |
domainustechnio10.com | — | |
domainustechnio20.com | — | |
domainustechnio30.com | — | |
domainustechnio50.com | — | |
domainustechnio60.com | — | |
domainustechnio70.com | — | |
domainustechnio80.com | — | |
domainustechno.cc | — | |
domainustechno.my | — | |
domainustechno1.com | — | |
domainustechno100.cc | — | |
domainustechno151.cc | — | |
domainustechno25.cc | — | |
domainustechno5.com | — | |
domainustechno50.cc | — | |
domainvanillagiftcardbalanc-e.com | — | |
domainvbnmlp.com | — | |
domainvista-print.us | — | |
domainvistaprin-t.com | — | |
domainviziocomsetup.com | — | |
domainweassist.cc | — | |
domainwebactivate-apple.com | — | |
domainwebactivate.cam | — | |
domainwebbing.bz | — | |
domainwebconnectuss.com | — | |
domainwebfreetechsupport.org | — | |
domainwebinstallturbotax.org | — | |
domainweblinkapple.cc | — | |
domainwebmyuhc.cc | — | |
domainwebslingcomsamsung.com | — | |
domainwebsolutions.llc | — | |
domainwebverifying.info | — | |
domainwebviziocomsetup.com | — | |
domainwebwwwrobloxcomredeem.com | — | |
domainwhatsappweb.ca | — | |
domainwhatsappweb.co.in | — | |
domainwhatsappwebcom.com | — | |
domainwindows12.download | — | |
domainwindows12.io | — | |
domainwindows12download.net | — | |
domainwww-akamsphonelinkqrc.com | — | |
domainwwwrobloxcomredeem.com | — | |
domainxn--ida.link | — | |
domainyoutube.gs | — | |
domainyttomp3.io | — | |
domainzsolution.com.au | — | |
domain2024estimat0r.installturbo.tax | — | |
domainactivate.turblicense.tax | — | |
domainactivate.uhc.my | — | |
domainactivatebestbuyaccountonlinecom.weebly.com | — | |
domainactivatecapitalonecom.dorik.io | — | |
domainactivatecapitalonecom.weebly.com | — | |
domainactivation-support-freetechsupport-org.xn--l-fka.site | — | |
domainactivation-support.aioure.com | — | |
domainactivation-support.freetechsupport.org | — | |
domainactivation.begin.lat | — | |
domainactivation.begin.rest | — | |
domainactivation.begin.support | — | |
domainamaz0nturb0.taxlicense.tax | — | |
domainamazon.co-m.info | — | |
domainamazonmytv.lotter-y.com | — | |
domainapitechno.us1.my | — | |
domainbankers-fidelity-provider-portal.readthedocs-hosted.com | — | |
domainbetfairlogin.weebly.com | — | |
domainbrotherprinterdriversmac.weebly.com | — | |
domainbusi-nessturb.installtaxturbo.tax | — | |
domaincanada0nline.turbo-license.tax | — | |
domaincanon.printerdriver-s.com | — | |
domaincash-apptaxes.weebly.com | — | |
domaincd.turboinstall.tax | — | |
domaincodeturbo.taxlicenseturbo.tax | — | |
domainconvertturb.license-turbo.tax | — | |
domaincrunchyrollcomactivate.weebly.com | — | |
domaind-downl0ad.turbotaxinstall.tax | — | |
domaind-ownload.taxturbotaxlicense.tax | — | |
domainddownload.turb-license.tax | — | |
domaindelldriversupdate.weebly.com | — | |
domaindiscovercomactivate.weebly.com | — | |
domaindisneyplus-combegin.dorik.io | — | |
domaindisneypluscom-begin.weebly.com | — | |
domaindisneypluscombegin.dorik.io | — | |
domaindownlad-amaz0n.licenseturbotax.tax | — | |
domaindownload.taxturbolicense.tax | — | |
domaindownloadturb.taxlicenseturbo.tax | — | |
domaindownloadturbotax2022.weebly.com | — | |
domaindownloadturbotax2024.weebly.com | — | |
domaindynamictrans.us4.my | — | |
domainenginetop.us3.my | — | |
domainenter.turb-license.tax | — | |
domainentercode.taxturbotaxlicense.tax | — | |
domainentertur0.installtax.tax | — | |
domainenterturbo.tax-license.com | — | |
domainfreetaxusa2024.uvdesk.com | — | |
domainfreetaxusalogin.weebly.com | — | |
domaingarmincomexpress.dorik.io | — | |
domaingeeksquadgeeksquad.dorik.io | — | |
domaingeeksquadphonenumber.dorik.io | — | |
domaingoogledriveforpc.weebly.com | — | |
domainhomedepotmycard.weebly.com | — | |
domainid.verifying.info | — | |
domainijstart.canonoobe.com | — | |
domainin-stalturb.turbo-license.com | — | |
domaininfosession123.data.blog | — | |
domaininstall-tturb.turbo-license.com | — | |
domaininstall-turb0.tax-com.com | — | |
domaininstall-turbotax-with-license-code.weebly.com | — | |
domaininstallturb0.taxlicenseturbo.tax | — | |
domaininstallturbo.tax-turbotax.com | — | |
domaininstallturbotax.licensetax.com | — | |
domaininstallturbotaxcom.uncrn.co | — | |
domaininstallturbotaxcom2019withlicensecode.uncrn.co | — | |
domaininstallturbotaxcom2019withlicensecode.weebly.com | — | |
domainjcpenney.uvdesk.com | — | |
domainjcpsyfcomactivate.weebly.com | — | |
domainjcpsyfhelpcenter.onsitesupport.io | — | |
domainlicense-turbo.tax-turbotax.com | — | |
domainlicensec0de.installtaxturbo.tax | — | |
domainlowessyfcomactivatecard.dorik.io | — | |
domainmail.viziocomsetup.com | — | |
domainmultiple-downloadturb.taxlicense.tax | — | |
domainmy5tvactivate.uvdesk.com | — | |
domainmy5tvactivatetv.weebly.com | — | |
domainmycignacomactivate.uvdesk.com | — | |
domainmyprepaidcentercom.dorik.io | — | |
domainnetgearrouterloginip.weebly.com | — | |
domainoffice.setup2.com | — | |
domainofficesetupcom.weebly.com | — | |
domainofficesetupkey.weebly.com | — | |
domainplextvlinkentercode.weebly.com | — | |
domainprovider-portal-bankers-fidelity.readthedocs-hosted.com | — | |
domainquickbooksdownload.dorik.io | — | |
domainquicken-helpdesk.uvdesk.com | — | |
domainquickenkb.onsitesupport.io | — | |
domainroad-runneremail.weebly.com | — | |
domainroadrunneremaillogin.uncrn.co | — | |
domainroadrunneremaillogin.uvdesk.com | — | |
domainsetupbrother-com.weebly.com | — | |
domainsywaccountonlinecom.weebly.com | — | |
domaintaa8canada.tax-com.com | — | |
domaintargetgiftcardbalance.dorik.io | — | |
domaintaxact-login.turbo-license.com | — | |
domaintaxslayerprologinmyaccount.weebly.com | — | |
domaintaxtutorial.onsitesupport.io | — | |
domaintaxxlogin.taxinstallturbo.com | — | |
domaintntdramacomactivatee.weebly.com | — | |
domaintoffin.us1.my | — | |
domaintotallii.us1.my | — | |
domaintrbb-0.tax-license.com | — | |
domaintturbo.tax-license.com | — | |
domaintur-rbo.tax-license.com | — | |
domainturb-0.tax-licenseturbo.com | — | |
domainturb00.taxinstallturbo.com | — | |
domainturb00tax.licensetax.com | — | |
domainturb0t-tax.tax-license.com | — | |
domainturb0taxenter.licenseturbtax.tax | — | |
domainturb0taxx.turbo-license.com | — | |
domainturb0ttax.tax-license.com | — | |
domainturbb-taxx.turbo-license.com | — | |
domainturbo-code.tax-com.com | — | |
domainturbo.tax-license.com | — | |
domainturbootax.tax-license.com | — | |
domainturbotax-canada.ca-taxdown.com | — | |
domainturbotax-download.turbo-license.com | — | |
domainturbotaxcanada2026.weebly.com | — | |
domainturbotaxdownload2023withlicensecode.weebly.com | — | |
domainturbotaxdownload2026withlicensecode.weebly.com | — | |
domainturbttax.tax-license.com | — | |
domainturrb-tax.tax-license.com | — | |
domainturrb-ttax.tax-license.com | — | |
domaintuurboo.tax-licenses.com | — | |
domaintv.youtubecomstart.com | — | |
domainv.wvvw.site | — | |
domainvanilla-gift-balance.dorik.io | — | |
domainvanillagiftbalancecheck.weebly.com | — | |
domainverifying.info.setup.cam | — | |
domainvisa-gift-card-balance.weebly.com | — | |
domainvisagiftcardbalance.weebly.com | — | |
domainviziocomsetup.uvdesk.com | — | |
domainviziosmarttv.onsitesupport.io | — | |
domainw.wvvw.site | — | |
domainwalmart-giftcardbalance.weebly.com | — | |
domainwalmartgiftcardbalanceonline.weebly.com | — | |
domainwhatsappsupport.weebly.com | — | |
domainwhatsappweb.dcms.site | — | |
domainwindows12download.weebly.com | — | |
domainwww-install-turbo.tax-com.com | — | |
domainwwwakams.phonelinkqrc.net | — | |
domain2026-08-24-bengalseo-part-1-anatomy-of-the-operation.md | — | |
domainbeehiv.com | — | |
domainslimfaq.com | — |
Url
| Value | Description | Copy |
|---|---|---|
urlhttps://stats.us3.org/matomo.php | — | |
urlhttps://oculus-app.com/ | — | |
urlhttp://stats.us3.org/matomo.php | — |
Threat ID: 6a9e9063acd9273b4963a795
Added to database: 09/07/2026, 10:22:27 UTC
Last enriched: 09/07/2026, 10:38:11 UTC
Last updated: 09/07/2026, 11:23:25 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Sort by
Loading community insights…
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
PRO
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Please log in to the Console to use AI analysis features.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Breach by OffSeqOFFSEQFRIENDS — 25% OFF
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
OffSeq TrainingCredly Certified
Lead Pen Test Professional
Technical5-day eLearningPECB Accredited