SofosFO Exploit Kit

Community name, idk official name.

HTTP Request Method = GET
HTTP Domain = *.org

regex URI for “^[a-z-.]{50,}”

Example Chain:

hxxp://birthplace-admissions.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org/apologistsrichardson.html > GATE
hxxp://birthplace-admissions.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org/507ecc12c05d802048047bf2/1,6,0,31/9,3,0,0 > Plugin Enum?
hxxp://birthplace-admissions.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org/507ecc1bc05d802048047d66/30491834/onsero.pdf > PDF
hxxp://birthplace-admissions.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org/507ecc1bc05d802048047d66/396340842/171347709 > EXE

Example Domains:

ceymmmfhnhxf.takefilms-wyz-pez-dvt.org
fgqrrohdzlo.insertstringnmookrm-lsx.org
kpfgbiycifowo.freevip-bvg-nxnv-iacb.org
ldisvingc.panel-lines-krvo-arumylc.org
leeqispspvv.middle-white-kcetdkbub.org
hails-tokeniazsvwfi.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org
nglvuhfox.orangevideodobfdxf-khds.org
nkuvloxgbpix.cat-email-ceepgm-mfm.org
orebpgfcnebo.juice-elite-yqtplorywub.org
ovlnzqaum.juice-elite-yqtplorywub.org
oxhyyenqbvrap.catonline-witt-imzw-piuz.org
birthplace-admissions.sutter-iyeyeibokfuvhhqqaaeslsralphdput.org

Comments are closed.