Malicious ScreenConnect domains (molatori/unc5952)

UNC5952

85.239.34[.]190
203.189.137[.]125
yell64u[.]top - UNC5952 (Molatori) 
uphelp[.]top - UNC5952 (Molatori) 
numolatori[.]icu - UNC5952 (Molatori) 
beri1[.]com 
fposhelp[.]com 
remoteconnection[.]com 
molatorisy[.]icu - UNC5952 (Molatori) 
6559464[.]com 
itmanagers[.]io 
screen[.]support 
csupport[.]ch 
12support[.]top 
tgvhelp[.]top 
t7m[.]top 
molatoriora[.]cyou - UNC5952 (Molatori) 
vrehelp[.]top 
icrm-tr3[.]top 
mohamedsisyxyz[.]com 
secure[.]kinglues[.]com 
kryzuxyzhosting[.]com 
moqadiski[.]com 
gajrokerware[.]icu 
clmhelp[.]top 
gajrokerist[.]icu 
elioua5[.]top 
plphelp[.]top 
cogajroker[.]icu 
support[.]vitamail[.]se 
gajrokerring[.]icu 
gomolatori[.]cyou - UNC5952 (Molatori) 
wplhelp[.]top 
mr26panel[.]top 
edg-rt1[.]top 
support[.]vitamail[.]dk 
wothelp[.]top 
awedinetwork[.]com 
pnbf-gv[.]top 
onmolatori[.]icu - UNC5952 (Molatori) 
ricpnew1[.]top 
mghelp[.]top 
promolatori[.]icu - UNC5952 (Molatori) 
support[.]websecurityplatform[.]com 
wjhelp[.]top 
atmolatori[.]icu - UNC5952 (Molatori) 
medion-001-site1[.]ctempurl[.]com 
wesupportdevice[.]top 
rgbxyzhosting[.]com 
voicemail-lakeleft[.]top 
skahelp[.]top 
nwpihelp[.]top 
tetoxyzhosting[.]com 
accesspoint[.]cc 
qdhy5-pr[.]top 
pzhelp[.]top 
molatorila[.]cyou - UNC5952 (Molatori) 
secret[.]wathnan[.]qa 
lecartomtsuiporto[.]org 
kaptohelp[.]top 
molatorisy[.]cyou - UNC5952 (Molatori) 
gxclp2[.]top 
jxhelp[.]top 
sreencont[.]com 
sxzer-rt[.]top 
molatoripro[.]cyou - UNC5952 (Molatori) 
exnpanel1[.]top 
molatoriora[.]icu - UNC5952 (Molatori) 
atgajroker[.]icu 
ytfpyehpyt[.]me 
regajroker[.]icu 
samolatori[.]cyou - UNC5952 (Molatori) 
rtkhelp[.]top 
molatoripro[.]icu - UNC5952 (Molatori) 
molatorier[.]icu - UNC5952 (Molatori) 
zx4qtc[.]me 
zkang-ws[.]top 
samolatori[.]icu - UNC5952 (Molatori) 
ttlhelp[.]top 
voicemail-twisters[.]top 
yhbvt-pw[.]top 
rjpanelplus[.]top 
omvtr-ud[.]top 
ziadversionthree[.]com 
molatorier[.]cyou - UNC5952 (Molatori) 
cxhelp[.]online 
pothelp[.]top 
mgbhelp[.]top 
trustedsitepartner[.]com 
gethelpfast[.]net 
mkpanel[.]connectagent[.]online 
glueconnect[.]com 
ptbhelp[.]top 
u9b[.]top 
helpmysupport[.]top 
anderione[.]com 
snhelp[.]top 
dshelp[.]top 
xshelp[.]top 
cloud[.]vshell[.]io 
uwhelp[.]top 
xohelp[.]top 
support[.]vitamail[.]fi 
support[.]trustedsitepartner[.]com 
zghelp[.]top 
orhelp[.]top 
do68iyckuy[.]emerge[.]co[.]zw 
support[.]accuratetechnologies[.]com 
support[.]gyldendal[.]dk 
lwhelp[.]top 
admin[.]flywidus[.]co 
lowcarbsupport[.]nl 
nphelp[.]top 
qc3699[.]kafinora[.]cyou 
xkhelp[.]top 
support[.]americanroads[.]com 
support[.]dyson[.]com[.]au 
srceconnect[.]com 
qc3699[.]jadonparod[.]cyou 
gthelp[.]top 
cqhelp[.]top 
wnhelp[.]top 
dealr[.]help 
help26[.]ca 
jjghelp[.]top 
otohelp[.]top 
nonopanel[.]top 
supportusnow[.]top 
upphelp[.]top 
lamolatori[.]cyou - UNC5952 (Molatori) 
onmolatori[.]cyou - UNC5952 (Molatori) 
promolatori[.]cyou - UNC5952 (Molatori) 
atmolatori[.]cyou - UNC5952 (Molatori) 
numolatori[.]cyou - UNC5952 (Molatori) 
lamolatori[.]icu - UNC5952 (Molatori) 
gomolatori[.]icu - UNC5952 (Molatori) 
molatoriline[.]cyou - UNC5952 (Molatori) 
molatoriism[.]cyou - UNC5952 (Molatori) 
molatoriup[.]cyou - UNC5952 (Molatori) 
molatorister[.]cyou - UNC5952 (Molatori) 
molatoriit[.]cyou - UNC5952 (Molatori) 
molatoriist[.]cyou - UNC5952 (Molatori) 
molatorimax[.]cyou - UNC5952 (Molatori) 
molatoriby[.]cyou - UNC5952 (Molatori) 
molatorila[.]icu - UNC5952 (Molatori) 
molatoriline[.]icu - UNC5952 (Molatori) 
molatoriism[.]icu - UNC5952 (Molatori) 
molatoriup[.]icu - UNC5952 (Molatori) 
molatorister[.]icu - UNC5952 (Molatori) 
molatoriit[.]icu - UNC5952 (Molatori) 
molatoriist[.]icu - UNC5952 (Molatori) 
molatorimax[.]icu - UNC5952 (Molatori) 
molatoriby[.]icu - UNC5952 (Molatori)