Gift Cardsharks IOCs

Network Indicators

adfs-ssl.com
b2bmerchant.online
bhnetwork.online
cisco-vpn-client.com
cisco-vpn.online
corporate-ciscovpn.com
ducacorp.com
efaxmakeronline.com
encrypt-email.online
encrypted-mail.center
encrypted-mail.global
encrypted-message.cloud
encrypted-message.online
encryptedmail.online
hrsurveypro.com
hrsurveyservice.com
ifileupload.com
imail-auth.com
imail-secure.com
imail-ssl.com
internal-message.app
internal-message.online
itunesrewardscode.com
mcafee-scan.com
mcafeeonlinescanner.com
microsoftonline-secure-login.com
online-microsoft-update.com
outlook-auth.com
searscorporategiftcard.com
seccmail-corp.com
seccmail-online.com
seccmail-ssl.com
seccmail.online
secmail-us.com
secure-mail.global
secure-message.online
secure-ssl.online
secure-vpn.online
secured-mail.online
secureimailonline.com
securemail-data.com
securemail-ssl.com
securessl-vpn.com
ssl-account.online
ssl-login.online
ssl-secure.online
ssl-upgrade.online
sso-signon.com
sso-ssl.com
ssofiles.online
vpn-ssl.com
vsecuremail.com
webex-ssl.com
wu-signon.com
xmail-auth.com
xmail-ssl.com
xsecuremail.com
achievers.hrsurveyservice.com
affiniongroup.hrsurveyservice.com
affiniongroup.webex-cloud.net
bestbuy.com.seccmail-ssl.com
bestbuy.vpn-ssl.com
blackhawk.secureimailonline.com
blank.securemail-ssl.com
businesscenter.valuelink.biz.internal-message.app
capgemini.xsecuremail.com
cardcash.secure-vpn.online
corpmail.expedia.com.secure-message.online
corpmail.expediagroup.com.secure-message.online
corpmail.incomm.com.secure-message.online
corpmail.octanner.com.secure-message.online
corporate.vpn-ssl.com
costco.xsecuremail.com
cpanel.xsecuremail.com
dotdigitalgroup.seccmail-corp.com
encrypted-mail.center
encrypted-message.cloud
encrypted-message.online
euronetworldwide.hrsurveyservice.com
federation.gamestop.com.secure-message.online
files.onlinefaxmaker.com.imail-ssl.com
fs-prod.octanner.com.adfs-ssl.com
ftp.ifileupload.com
ftp.securemail-data.com
host.xsecuremail.com
hr.euronetworldwide.com.secure-message.online
imail-ssl.com
incomm.com.securemail-ssl.com
incomm.mcafeeonlinescanner.com
infosys.xsecuremail.com
insideview.com.seccmail-ssl.com
insideview.vpn-ssl.com
mail.adfs-ssl.com
mail.cisco-vpn-client.com
mail.efaxmakeronline.com
mail.encrypt-email.online
mail.encrypted-mail.center
mail.encrypted-message.cloud
mail.encrypted-message.online
mail.hrsurveypro.com
mail.ifileupload.com
mail.imail-auth.com
mail.imail-ssl.com
mail.internal-message.app
mail.internal-message.online
mail.mcafeeonlinescanner.com
mail.microsoftonline-secure-login.com
mail.outlook-auth.com
mail.secure-message.online
mail.secured-mail.online
mail.secureimailonline.com
mail.securemail-data.com
mail.securemail-ssl.com
mail.sso-ssl.com
mail.xmail-auth.com
mail.xmail-ssl.com
manager.cashstar.com.b2bmerchant.online
mcafeeonlinescanner.com
message.agoda.com.secure-mail.global
message.bestbuy.com.encrypted-mail.center
messagelab.insideview.com.secured-mail.online
messagelab.zoominfo.com.secured-mail.online
microsoftonline-secure-login.com
moneygram.imail-secure.com
ns.hrsurveyservice.com
ns.mcafee-scan.com
ns.seccmail-ssl.com
ns.vpn-ssl.com
ns1.adfs-ssl.com
ns1.b2bmerchant.online
ns1.bhnetwork.online
ns1.cert-ssl.com
ns1.cisco-vpn-client.com
ns1.cisco-vpn.online
ns1.efaxmakeronline.com
ns1.encrypt-email.online
ns1.encrypted-mail.center
ns1.encrypted-message.cloud
ns1.encrypted-message.online
ns1.hrsurveypro.com
ns1.hrsurveyservice.com
ns1.ifileupload.com
ns1.imail-auth.com
ns1.imail-ssl.com
ns1.internal-message.app
ns1.internal-message.online
ns1.itunesrewardscode.com
ns1.mcafee-scan.com
ns1.mcafeeonlinescanner.com
ns1.microsoftonline-secure-login.com
ns1.online-microsoft-update.com
ns1.outlook-auth.com
ns1.searscorporategiftcard.com
ns1.secmail-us.com
ns1.secure-mail.global
ns1.secure-message.online
ns1.secured-mail.online
ns1.secureimailonline.com
ns1.securemail-data.com
ns1.securemail-ssl.com
ns1.securessl-vpn.com
ns1.ssl-account.online
ns1.ssl-secure.online
ns1.ssl-upgrade.online
ns1.sso-signon.com
ns1.vpn-ssl.com
ns1.vsecuremail.com
ns1.webex-cloud.net
ns1.wu-signon.com
ns1.xmail-ssl.com
ns1.xsecuremail.com
ns14.hrsurveyservice.com
ns15.cert-ssl.com
ns15.hrsurveyservice.com
ns16.cert-ssl.com
ns2.adfs-ssl.com
ns2.b2bmerchant.online
ns2.bhnetwork.online
ns2.cert-ssl.com
ns2.cisco-vpn-client.com
ns2.cisco-vpn.online
ns2.efaxmakeronline.com
ns2.encrypt-email.online
ns2.encrypted-mail.center
ns2.encrypted-message.cloud
ns2.encrypted-message.online
ns2.hrsurveypro.com
ns2.hrsurveyservice.com
ns2.ifileupload.com
ns2.imail-auth.com
ns2.imail-ssl.com
ns2.internal-message.app
ns2.internal-message.online
ns2.itunesrewardscode.com
ns2.mcafee-scan.com
ns2.mcafeeonlinescanner.com
ns2.microsoftonline-secure-login.com
ns2.ns1.online-microsoft-update.com
ns2.online-microsoft-update.com
ns2.outlook-auth.com
ns2.searscorporategiftcard.com
ns2.secmail-us.com
ns2.secure-mail.global
ns2.secure-message.online
ns2.secured-mail.online
ns2.secureimailonline.com
ns2.securemail-data.com
ns2.securemail-ssl.com
ns2.securessl-vpn.com
ns2.ssl-account.online
ns2.ssl-secure.online
ns2.ssl-upgrade.online
ns2.sso-signon.com
ns2.vpn-ssl.com
ns2.vsecuremail.com
ns2.webex-cloud.net
ns2.wu-signon.com
ns2.xmail-ssl.com
ns3.efaxmakeronline.com
ns3.encrypted-message.online
ns3.hrsurveyservice.com
ns3.ifileupload.com
ns3.itunesrewardscode.com
ns3.microsoftonline-secure-login.com
ns3.online-microsoft-update.com
ns3.seccmail-ssl.com
ns3.secure-message.online
ns3.ssl-login.online
ns3.ssl-secure.online
ns3.sso-signon.com
ns3.sso-ssl.com
ns3.ssofiles.online
ns3.webex-ssl.com
ns4.efaxmakeronline.com
ns4.encrypted-message.online
ns4.hrsurveyservice.com
ns4.ifileupload.com
ns4.itunesrewardscode.com
ns4.microsoftonline-secure-login.com
ns4.online-microsoft-update.com
ns4.seccmail-ssl.com
ns4.secure-message.online
ns4.ssl-login.online
ns4.ssl-secure.online
ns4.sso-signon.com
ns4.sso-ssl.com
ns4.ssofiles.online
ns4.webex-ssl.com
ns5.imail-ssl.com
ns5.online-microsoft-update.com
ns5.seccmail-ssl.com
ns5.seccmail.online
ns6.imail-ssl.com
ns6.online-microsoft-update.com
ns6.seccmail-ssl.com
ns6.seccmail.online
ns7.secure-ssl.online
ns8.secure-ssl.online
online-microsoft-update.com
paysafe.com.securemail-ssl.com
rackerlogin.fedsso.rackspace.com.webex-ssl.com
rackspace.co.uk.cisco-vpn.online
rackspace.com.securemail-ssl.com
rackspace.seccmail-corp.com
rackspace.secureimailonline.com
sdfsd.seccmail-corp.com
sears.securemail-ssl.com
secure-mail.global
secure.agoda.com.internal-message.online
secure.booking.com.internal-message.online
secure.bridge2solutions.com.internal-message.app
secure.capgemini.com.encrypted-message.cloud
secure.cashstar.com.encrypted-mail.global
secure.coinstar.com.encrypt-email.online
secure.costco.com.encrypted-message.cloud
secure.dotmailer.co.uk.cisco-vpn.online
secure.elavon.com.internal-message.app
secure.expediagroup.com.internal-message.online
secure.firstdata.com.internal-message.app
secure.globoforce.com.internal-message.online
secure.greendotcorp.com.cisco-vpn.online
secure.greendotcorp.com.encrypted-message.online
secure.infogroup.com.internal-message.online
secure.microsoftonline-secure-login.com
secure.rackspace.com.internal-message.app
secure.wipro.com.encrypted-message.cloud
secure.wipro.com.internal-message.app
secure.zoominfo.com.internal-message.online
securemail.act-on.com.sso-ssl.com
securemail.affiniongroup.com.sso-signon.com
securemail.avanade.com.internal-message.app
securemail.capgemini.com.internal-message.app
securemail.cardcash.com.imail-ssl.com
securemail.cognizant.com.internal-message.app
securemail.comdata.com.encryptedmail.online
securemail.egifter.com.encryptedmail.online
securemail.encryptedmail.online
securemail.fleetcor.com.encryptedmail.online
securemail.greendotcorp.com.internal-message.app
securemail.greendotcorp.com.xmail-auth.com
securemail.incomm.com.adfs-ssl.com
securemail.incomm.com.cert-ssl.com
securemail.incomm.com.imail-auth.com
securemail.incomm.com.xmail-auth.com
securemail.infosys.com.internal-message.app
securemail.itagroup.com.xmail-ssl.com
securemail.octanner.com.imail-ssl.com
securemail.searshc.com.internal-message.app
securemail.sigue.com.adfs-ssl.com
securemail.slalom.com.internal-message.app
securemail.staples.com.encryptedmail.online
securemail.storedvalue.com.encryptedmail.online
securemail.uaeexchange.com.adfs-ssl.com
securemail.virginpulse.com.internal-message.app
securemail.wipro.com.internal-message.app
securemail.zoominfo.com.xmail-ssl.com
sendgrid.seccmail-corp.com
servicenow.secureimailonline.com
shop.efaxmakeronline.com
shop.secureimailonline.com
smartfocus.com.vpn-ssl.com
95.183.52.99
124.248.205.18
124.248.212.166
124.248.212.233
124.248.212.250
185.104.8.160
185.104.8.162
185.104.8.163
185.104.8.164
185.104.8.165
185.104.8.166
185.104.8.167
185.104.8.168
31.148.219.59
104.193.253.2
104.193.253.3
104.193.253.33
104.193.253.34
104.193.253.4
104.193.253.5
104.193.253.6
104.193.253.7
104.193.253.8
162.244.32.143
162.244.32.88
162.244.32.94
162.244.32.95
162.244.32.96
162.244.32.220
162.244.32.90
185.159.83.16
185.159.83.17
185.159.83.18
185.159.83.21
185.159.83.23
185.159.83.24
185.159.83.25
185.159.83.26
185.159.83.9
185.180.198.29
204.155.30.104
204.155.30.184
204.155.30.185
204.155.30.186
204.155.30.187
204.155.30.188
204.155.30.189
204.155.30.190
204.155.30.191
204.155.31.10

SSL Certificates
d04f6b2157969a10c2e7421ee624075a2a5f5908
cd206f00306fb902fe25922b95da04af1028be0c
51d4b4cd19ef174a257840f3d1a419f839014f6d
62c2b7723ac79e9b009e3b0a9cb4ffa10542b9da
6e28f9ed9045abbe8321188191f92688ed064c43
93c694deec6c26acecbde4312ddbac9a0fed08e0
2a64742e32d4284640b22422c73e31ae616201be
7f0247d2f4d458ed325def12d8d7a71fc387c18a
3267f0bee5efa5dd2549722357e55fe3f4038e58

File System IOCs
dd5986339aaf23f2baf8c245923a0f69
28c806cb8c91ab66987ac1ec88344296
e2e88d6ea5d5d2a4c7b8039988644043
f6ea268c7e184f580029aec42f2a98f8
d6472dcebce348d693e68b90099d9ede
8aea2ae91cc084731a08aa231e79a430
502fbbdacada9215ed0d026c70f983e1