Campaigns
Back to Campaigns
The Pegasus Project

The Pegasus Project

PegasusNSO
The Pegasus Project is a collaborative investigation into NSO Group, an Israeli “cyber intelligence” company that sells sophisticated spyware to governments around the world.

Indicators of Compromise

myfreecharge.online
instangram.com.mx
the-only-way-out.com
theshopclub.org
mcel.info
internetmobilespeed.com
hracingtips.com
web-config.org
igiheonline.com
nouvelles247.com
ineediscounts.com
mybrightidea.co
politicalpress.org
investigationews.com
rockstarpony.com
mykaspi.com
telecom-info.com
newsportal24.online
clubmovistar.com
indrive.info
maghrebfoot.com
topten-news.info
newworld-news.com
rss-me.com
nightevents.info
lifedonor.net
ilovemybeatifulnails.com
shoppingdailydeals.net
adsmetrics.co
leleader.org
urlsync.com
istgr-foto.com
in-weather.com
yourgreatestsmartphone.com
remove-client.com
appsjuegos.com.mx
pay-city.com
prikol-girls.com
lookitupnow.website
muzicclips.com
touristvaca.com
howisurday.com
newnhotapps.com
nosalternatives.com
bytlo.com
remove-subscription.com
tlgr-me.org
tastyteaflavors.com
my-privacy.co
pizzatoyourplace.com
privo7799add.net
accountsecurities.org
loschismescalientes.com
newmodel.online
mylovelypet.net
kra.center
onthegoodtime.com
noonstore.sale
khilafah-islamic.com
utensils.pro
xn--nissn-3jc.com
top10leadsgen.com
add-client.com
onlygossip.info
localgreenflowers.com
noti-hot.com
mygreathat.com
keyindoors.com
uptownfun.co
rockmusic4u.com
videosdownload.co
tommyfame.com
blackberry.org.mx
lesbonnesaffaires.online
hotels-review.org
xchange4u.net
mozsafety.com
xchangerates247.net
tradeexchanging.com
onetreeinheaven.com
posta.news
newarrivals.club
gdfr.online
holiday-sun.net
yourbestefforts.com
odnoklass-profile.com
upgrade-sim-card.com
newsofthemoment.net
yummyfoodallover.com
playwithusonline.com
hotelsauto.co
adjustlocalsettings.net
one-isnot-enough.com
miles-club.com
icecreamlovesme.com
mobileweatherweb.com
vastdealsnow.com
wewantflowersnow.com
notisms.net
wonderfulinsights.com
shia-voice.com
puffyteddybear.com
site-redirecting.com
syncmap.org
akhbar-islamyah.com
onlineshopzm.com
sportupdates.info
viedechretien.org
moneyxchanges.com
highclassdining.net
same-old.net
intim-media.net
upload-now.net
pine-sales.com
massagetax.co
howtoexplorebirds.com
nnews.co
t-support.net
rentmotors.net
purple-enveloppe.com
newandroidapps.net
moz-noticias.com
welovemorningcoffees.com
travel-foryou.online
pochta-info.com
smarttarfi.com
zm-weather.com
whats-new.org
talabatt.net
whatcanidowithbirds.com
noti-global.com
normal-brain.com
erty.online
regionews.net
whereismyhand.com
nation24.info
income-tax.online
bulksender.info
promotionlove.co
paynfly.info
thehoteloffers.com
offresimmobilier.com
iwantitallnow.com
islam-today.info
tobepure.com
m-resume.com
outletsaroundme.com
mercedesbenz-vip.com
hona-alrabe3.com
stopsms.biz
mosque-salah.net
service-update.online
trackyourfedexpackage.net
xtremelivesupport.com
mosque-salah.com
welovebigcakes.com
reseufun.com
medical-updates.com
moh-online.com
takethat.co
login-service.net
insta-foto.net
al7erak247.com
nouveau-president.com
signpetition.co
thecoffeeilove.com
vanillaandcream.com
newsdirect.online
newdailycoupons.com
myshoesforever.com
supportonline4me.com
lonely-place.com
network190.com
noloveforyou.com
awizo.info
windyone.net
stopmysms.com
al-nusr.net
rainingcats.net
savemoretime.co
yourbestvaca.com
leggingsjustforyou.com
securesmsing.com
nbrowser.org
vkan-profile.com
traveltogether.link
look-outsidenow.com
traffic-updates.info
nationalleagues.net
housesfurniture.com
mondaymornings.co
akhbarnew.com
mamba-live.com
khaleejtimes.online
mideast-today.com
updatedchargers.com
zm-banks.com
sale-2019.com
soccerstreamingstars.com
so-this-is.com
al-taleanewsonline.net
megacenter.info
hotelstax.co
weatherapi.co
vie-en-islam.com
license-updater.com
pastesbin.com
lost-n-found.net
leprotestant.com
travelight.online
losnegocios.biz
housing-update.com
jaimelire.net
youcantpass.com
mysuperheadphones.co
tengrinews.co
mobile-update.online
starbuckscoffeeweb.com
loveandhatenow.com
hotelsurvey.info
rewards-club.info
saladsaroundme.com
restaurantsstar.com
whatsappsupport.net
secure-access10.mx
vivrechezsoi.info
viewhdvideos.com
remove-from-mailing-list.com
findgroupon.com
leadersnews.org
only-news.net
start2playnow.com
yourbestclothes.com
track-your-fedex-package.com
sergek.info
al7eraknews.com
top10gifts4men.com
snoweverywhere.com
maghrebfunny.biz
megaticket.info
holiday4u.work
mobi-up.net
reseausocialsolutions.co
nuevaidea.co
tiketon.info
urspanishteacher.net
surprising-sites.com
topbraingames4u.com
moh-followup.com
muftyat.com
ok-group.org
bestday-sales.com
waffleswithnutella.com
yourhotelreservation.info
fbsecurity.co
verify-app.online
sputnik-news.info
ourorder.info
movie-tickets.online
theway2get.com
mysadaga.com
orange-updates.com
web-viewer.online
mangoutlet.net
ticket-aviata.info
onlinefreework.com
xn--telegrm-qbd.com
myukadventures.com
islam-world.net
noor-alhedaya.com
onlytoday.biz
novosti247.com
noextramoney.com
noti-hoy.co
howtomakeavocadotoastandegg.com
mobile-updates.info
appsgratis.com.mx
mapupdatezone.com
wintertimes.co
woodhome4u.com
resolutionsbox.com
host-one-more.com
russian4u.net
readingbooksnow.com
moneycoincurrency.com
shuturl.com
watersport4u.net
miralo-rapidamente.com
unsubscribed.co
loading-pag.net
phonering4you.com
reservationszone.com
news-gazette.info
tablereservation.info
revolution-news.co
kingdom-deals.com
rosesforus.com
pickcard.info
pathtogo.net
weather4free.com
statisticsdb.net
mymobile-cell.com
xn--noki-t5b.com
photo-my.net
infospress.com
quitmyjob.xyz
viva-droid.com
cozmo-store.net
info24.live
just-one-left.com
ilovemymilf.com
welovelollipops.com
services-sync.com
kurjerserviss.com
sportupdates.online
klientuserviss.com
mypostservice.online
labonneforme.net
newandfresh.com
hellomymommy.com
news-alert.org
politiques-infos.info
mcel-update.com
tvshowcusting.com
like-the-rest.com
qaoffers.net
updateapps.net
koramaghreb.com
thespaclub.net
starting-from0.com
picture4us.com
chistedeldia.mx
url-redirect.com
newcooking.org
twiitter.com.mx
newsofficial.info
hmizat.co
vider-image.com
homemadecandies.net
hothdwallpaperz.com
traffic-pay.com
mobile-softs.com
sync-cdn.com
top100vidz.com
sunday-deals.com
moyfoto.net
myshop4u.net
statsads.co
redirstats.com
whereisthehat.com
ppcisdead.com
motordeal.info
sms-center.info
homeishere.co
moneydigitalcurrency.com
muslim-world.info
vipmasajes.com
urbestfriends.com
operatingnews.com
live-once.net
unlockaccount.net
specialgifts4all.com
social-life.info
zednewszm.com
karbalaeyat.com
paywithcrytpo.com
nomorewarnow.com
loading-images.com
theastafrican.com
online-dailynews.com
trililihihi.com
reklamas.info
park4free.info
arabia-islamion.com
vamizi.info
liam-ryan.co
kaidee.info
islamiyaat.com
websites4yourhost.com
newscurrent.info
sms-zone.org
kaspi-payment.com
untoldinfo.net
mydailycooking.net
sms-sending.net
mystulchik.com
facebook-accounts.com.mx
islamic-news-today.com
thebestclassicalmusic.net
politica504.com
videotubbe.net
hotinfosource.com
oneadjump.com
maymknch2026.co
ticket-selections.com
looking-for-two.com
123tramites.com
quran-quote.com
smscentro.com
un-limitededitions.com
whereismybonus.com
volcanosregion.com
mosquesfinder.com
saveurday.net
updatedcharges.net
unsubscribeinhere.com
research-archive.com
loginverify.net
cell-mcel.info
legyelvodas.com
lesportail.biz
papers2go.co
hot-motors.com
remove-from-mailinglist.com
promosdereve.com
turismo-aqui.com
outletstore.tech
smsmensaje.mx
postainf.net
kingdom-news.com
mymensaje-sms.com
myfiles.photos
nothernkivu.com
akhbar-almasdar.com
rosegoldjewerly.com
statsupplier.com
mobiles-security.net
infoquiz.net
loisiragogo.com
notresante-infos.com
unsubscribe-now.net
thehighesttemple.com
somuchrain.com
alrainew.com
shortfb.com
zsports-info.com
infospotpro.com
tricksinswiss.com
newsofgames.com
legyelvodas.net
stars4sale.co
bestcandyever.com
squaretables.net
e-prokuror.info
redirect-connection.com
stationfunds.net
weakdistance.com
ajelnews.net
cashandlife.com
simplycode.co
actu24.online
buildurlife.net
webpageupdate.co
allthecolorsyoulike.com
unionofteenagers.com
akhbara-aalawsat.com
url-redirect.net
telephonequality.com
silverodgone.com
bestadventures4u.com
cdnwa.com
halal-place.com
fastfixs.net
reachcomputer.com
reception-desk.net
foodiez.online
revoke-dashboard.com
roadwide.net
umbrellacover.net
trade-agreement.com
web-hoster.co
shipment-status.org
brighttooth.net
urlregistrar.net
redirecting-url.com
qualityfeeling.net
startupsservices.net
breaking-news.co
fiestamaghreb.com
timeofflife.com
br-hashtags.com
buymanuel.co
donateaflower.com
redirect2url.net
dinneraroundyou.com
webresourcer.com
productsview.co
safecrusade.com
freshsaladtoday.com
couponshops.info
goodcookingonline.com
bestpresents4all.net
event-reg.info
site-lock.net
redirectprotocol.net
bestperfumesnow.com
akhbar-arabia.com
searchunit.net
akhbar-aliqtisad.com
fishingtrickz.com
800health.net
seriousprotection.net
url-configure.com
beautifulhousesaroundme.com
urlupdates.com
redirect-link.com
randomlane.net
standartsheet.com
webexaminer.net
3driving.com
gadgetsshop.info
bestfoods.co
afriquenouvelle.com
redirect-service.net
bargainservice.online
allthesongsyoulike.com
foto-top.info
wasted-nights.com
br-travels.com
better-deal.info
catfoodstorage.net
welcomehosting.net
walkerpost.net
cellularupdates.info
funinat.com
eurosportnews.info
upkeepno.com
redirecteur.net
websconnector.co
free-local-events.info
easybett.online
social-rights.com
goodthoughts4u.com
e-sveiciens.com
cryptocurrecny.com
files-downloads.com
alluneed4home.net
funintheuk.com
topoems.com
urlredirect.net
servingshade.com
extrahoney.net
webprotocol.net
redirigir.net
findmyfriendsnow.com
sendingurl.net
goroskop.co
puttylearning.com
hairdresseraroundme.com
varietyregistrar.com
raresound.org
clickrighthere.online
breakthenews.net
productsall.net
redirect-systems.com
web-only.net
rapidredirecting.com
breakfastisgood.com
findmymind.co
browser-update.online
urlconnection.net
superlinks4u.com
flights-todays.com
cryptopcoinz.com
witness-delay.com
wishdownget.com
transfer-rate.com
webupdater.net
reloadinput.com
toggletools.com
android-updates.net
web-loading.com
web-spider.net
fashionpark.info
redirectconnection.net
atlaslions.info
globalsupporteam.com
sweetcup.co
scriptsinstallers.com
updating-url.net
hdsoccerstream.com
teachskate.com
fitness-for-ever.com
chubaka.org
unusualneighbor.com
chocolateicecreamlovers.com
starreturned.com
redirectking.net
456h612i458g.com
url2all.net
delivery-24-7.com
whereismytree.net
redemptionphrase.com
cars-to-buy.com
urlpush.net
short-address.com
cheapapartmentsaroundme.com
publishbig.net
primarystrike.net
funinthesun4u.com
somewarmremember.com
redirect-tunnel.net
securedloading.com
web-url.net
autodiscount.info
skillsforest.net
ezdropshipping.net
updating-link.com
tomorrowpastno.com
wordstore.net
breakingnewsasia.com
arab-share.com
egov-sergek.info
beststores4u.com
benjamin-taganga.info
check-my-internetspeed.com
reflectextension.net
readirectly.com
relatedspams.net
freshandsoftbread.com
securlaw.com
trendsymbol.net
911hig11carcay959454.com
severalheroes.com
albumphotopro.biz
calendarsapp.com
updatingpage.com
coolasiankitchen.com
14-tracking.com
storelive.co
quota-reader.net
economic-news.co
fashion-online.net
casia-news.info
redirectit.net
secured-url.net
redirection-url.net
domainsearching.net
strangegloom.net
uniquesite.co
sslbind.com
activate-discount.com
allthegamesyouneed.com
proudmorale.com
url-hoster.com
web-developper.net
besthotelsaroundme.com
yourlastchance.net
websupporter.co
redirectool.com
deportesinfo.com
smallperfumerain.com
arabworldnews.info
reload-url.net
fwupdating.com
banca-movil.com
url-loading.com
waterforplants.net
appointments-online.com
allafricaninfo.com
redirect-webpage.net
social-artist.net
coupedumondepro.com
1minto-start.com
sendhtml.net
redirect-protocol.com
tripleclickpays.com
ar-tweets.com
thankstossl.com
carrefour-des-affaires.com
fundum8430.com
eltiempo-news.com
done.events
storageseminar.net
catsndogsproducts.com
staysystem.net
apiwacdn.com
webview-redirect.com
suitcasesmellnice.com
pub-dns.com
urldefender.net
fofopiko.org
breaking-extranews.online
urlpage-redirect.com
editorscolumn.net
around-theglobe.co
discountmarkets.info
chocollife.me
coolbbqtools.net
buypresent4me.net
24-7clinic.com
handcreamforyou.com
getphotosinstant.net
reload-url.com
thoughtfulbundle.com
beethoventopsymphonies.com
cellular-updates.com
url-direct.com
cool-smartphone-apps.com
walkhatclock.com
raininscreen.com
csomagodjott.com
emonitoring-paczki.pl
smallridebar.com
diaspora-news.com
shortredirect.com
web-loading.net
getagift.info
do-itonyour-own.com
daily-sport.news
dental-care-spa.net
redirectingurl.org
glassesofwine.com
updating-url.com
thesimplestairs.com
righttriangle.net
transferlights.com
send2url.com
redirectdoor.com
timelesscelebrity.com
purchaseusingcoins.com
thefuturearticle.net
handymanwood.com
sockstubename.com
summermover.com
foudefoot.live
good-games.org
eura-cell.com
scaryaudience.com
web-check.co
sunsetdnsnow.com
bestheadphones4u.com
walltome.com
redirectload.com
sunrise-brink.net
dogfoodstorage.net
smokeshowshoe.com
rhymeshey.com
colorsoflife.online
web-scanner.co
cheaptransporting.net
redirectshare.com
redirectcheck.net
booking-tables.com
topadblocker.net
web-page.co
bestsalesaroundme.com
fadi7apress.com
trianglerank.net
bunchi.club
strategyroles.com
yousunhard.com
sharepassageset.com
saltyapplepie.com
biggunsarefun.com
willpurpleshe.com
gulf-financials.com
scannerservices.net
allladiesloveme.com
theappanalytics.com
gulfca.net
business-today.info
go-trip.online
updatingwebpage.com
coffecups.online
adeal4u.co
working-online.net
transferbase.co
select-edition.net
ex-forexlive.com
vault-encryption.com
findmyass.org
smoothurl.com
hellomydaddy.com
egov-segek.info
cellular-updates.online
receiptpending.net
reloadpage.net
allbeautifularts.com
whypillyellow.com
bl33pon6373.com
wallagainsthall.com
dancinglife.co
securisurf.com
redirectgate.com
towebsite.net
rockbreakdown.com
robotscan.net
projectgoals.net
weddingbandsoft.com
freelancers-team.org
winter-balance.com
urlviaweb.com
alldaycooking.co
secureyouradd.com
sportssaint.net
webprotector.co
golf-news.live
ecommerce-ads.org
gostatspro.com
urlconfig.net
trialvariable.net
discountstores.info
youintelligence.com
addmyid.net
youliehow.com
bicyclerentalnow.com
health-club.online
redirectingurl.net
sweet-water.org
renewal-control.net
recordinglamping.com
theredirect.net
without-additional.com
discoveredworld-news.com
findmylunch.org
face-image.com
rentalindustries.com
accountnotify.com
techhelping.net
classic-furnitures.com
doitformom.com
redirect-net.com
tookcheckout.com
scriptincluded.com
eurasianupdate.com
standstock.net
reloading-page1.com
finditout-now.com
unavailableentry.com
cdnupdateweb.com
cpr-appointments.com
android-core.org
7style.org
prioritytrail.net
goodflowersinside.com
bestsushiever.com
fantastic-gardens.com
findavoucher.online
redirect-traffic.net
sparepresence.com
systemtrees.com
redirectchannel.net
aircraftsxhibition.com
gulf-news.info
ehistorybooks.com
coffee2go.org
blackwhitebags.com
tinyurler.com
coolmath4us.net
wedding-strategy.com
varietyjobspaid.org
takecarhomes.com
websitetosubmit.com
cheapsolutions4u.com
safe-mondays.net
urlscanner.net
cellphonesprices.com
webtunnels.net
femmedaffaire.com
businesssupportme.com
dogopics.com
brownandblueeyes.com
funnytvclips.com
whynotyesterday.com
getoutofyourmind.com
findouthere.org
arabnews365.com
cell-abonnes.com
donateabox.co
cheapmotelz.net
sec-checker.com
cryptokoinz.com
elitecarz.net
fabric-shops.com
actorsshop.net
speedservicenow.com
findmyplants.com
all-sales.info
redirectnet.net
results-house.net
speechenforce.com
centrasia-news.com
realmythtrend.com
youaresostupid.net
template-iso.net
urlreload.net
regularhours.net
redirectweburl.com
domain-security.org
tentrosegain.com
related-ads.com
fashion-live.net
syncingprocess.com
workshopmanager.net
winfoxflip.com
redirectingpage.net
easy-pay.info
alive2plunge.com
freedominfo.net
wraptext.net
todoinfonet.com
foodforyou.info
dowhatyouneed.com
flying-free.online
happiness4us.com
user-registration.com
flights-report.com
egov-online.com
transferkeep.com
sendingurl.com
domain-redirect.com
bussybeesallover.com
bestfriendneedshelp.com
searchjustdont.net
redirectmotion.org
web-domain.net
spiritualbrakes.com
allfadiha.co
colorfulnotebooks.com
volcanodistance.com
viewstracker.com
doitforthefame-now.com
dynamic-dns.net
boysrbabies.co
tunnelprotocol.net
apiapple.com
raw-console.com
takemallelectric.com
webstrings.net
entertainmentinat.com
findgoodfood.co
social-exercise.com
pridetomyself.net
websiteeco.com
sunnydaylight.com
arabworld.biz
columbus-parking.com
allthemakeupyouneed.com
deal4unow.com
cheaphostingtoday.com
domesticwindow.com
carpetdignity.com
keynotepalm.com
layerprotect.com
gettingurl.com
classstylemap.com
damanhealth.online
magicalipone.com
latest-songs.com
opposedarrangement.net
cloudads.net
directurl-loading.com
clients-access.com
asrararablya.com
preventadmission.com
qaintqa.com
301-redirecting.com
mgifweb.com
nsoqa.com
poweredbycpanel.com
papervoice.net
authenticated-origin.com
fb-accounts.com
cleanmiddle.com
pincattape.com
nation-news.com
preventsusing.com
tibetnews365.net
mirrorgossip.com
uidebol.info
cloudbiggest.com
secretgirlfriend.net
forward-page.com
dnsprotector.net
sabafon.info
bundlestofear.com
diagram-shape.com
motiontastebad.com
adsload.co
feelbonesbag.com
poweredlock.com
clubsforus.net
keepthiseasy.com
websiteconnecting.com
pleaseusenew.com
beanbounce.net
limitedfeature.com
flynewfries.com
computer-set.com
emiratesfoundation.net
googleplay-store.com
blockedsituation.net
betterapplesearch.com
centersession.com
outgoingurl.com
financecomments.net
netstatistics.net
fallround.com
agilityprocessing.net
accountcanceled.com
possibilitytotransfer.com
cookiesoutthere.com
healthyguess.com
portredirect.net
calculatesymbols.com
forward5costume.com
alpharythme.com
glasstaken.com
gate-sync.net
nosemorningnine.com
myseesea.com
normal-strength.com
lowervalues.com
hearsmugglergarden.com
domain-routing.com
advert-track.com
univision.click
now-online.net
confusedmachine.com
birdbathmorning.com
formattingcells.com
fashioncontainer.net
preferring.org
myheartbuild.com
humblebenefit.com
practical-basis.net
dns-direct.net
pageisloading.net
ad-generator.net
levelsteelwhite.com
nightscloudwant.com
guardnotes.com
turkeynewsupdates.com
netvisualizer.com
bulk-theft.net
bitforeat.net
in2date.com
uaenews.online
securedlogin.org
todaysdeals4u.com
behindaquarium.com
data-formula.com
baramije.net
authenticangry.com
fatpop.net
knowingfun.com
link-crawler.com
designednetwork.com
humandiven.com
global-redirect.net
alljazeera.co
loading-domain.com
ideas-telcel.com.mx
eardooraround.com
blindlydivision.com
pride-industry.net
checkboxfee.com
accomodation-tastes.net
track-your-fedex-package.org
bottlehere.com
optionalshift.online
operations-delivery.com
externalprivacy.com
htmlstats.net
motivation-go.com
directbegins.com
cssgraphics.net
newredirect.net
icrcworld.com
maingreatessay.com
monawa3ate.org
adscreator.net
investormanage.net
insertfilters.net
permalinking.com
mail1.nsogroup.com
ad-switcher.com
morning-maps.com
arrowowner.com
advert-time.com
cnn-africa.co
handcraftedformat.com
displaytag.net
content-blocking.net
destinytool.net
globalcoverage.co
black-bricks.net
avocadofight.com
music-electric.org
layoutfill.com
bahrainsms.co
medicalcircle.net
fastdirect.net
offspringperform.net
donefordeal.com
performinghost.com
loadingpage4.net
managingincluded.com
management-help.com
phonemetrics.co
getspeednows.com
bankportal.net
mz-vodacom.info
music-headphones.org
accountsections.com
ooredoodeals.com
particularmechanic.net
holdmydoor.com
externaltransfers.com
closefly.com
heavy-flood.com
pleaseusenew.net
filingwarranty.com
firebulletfan.com
everyuse.org
practicehazard.com
auditorcast.com
pprocessor.net
playfantasticsplastic.com
blogreseller.net
martinipicnic.com
mailappzone.com
webadv.co
iusacell-movil.com.mx
forgetjustit.com
candlealbum.com
appleleaveit.co
functionalcover.com
bitfadepens.com
cashtowebmail.com
managedsnap.com
dns-analytics.com
manydnsnow.com
gossipsbollywoods.com
onlycart.net
365redirect.co
manoraonline.net
newtarrifs.net
exchangenerate.com
mozillaname.com
online-loading.com
alawaeltech.com
optionstoreplace.com
driventicket.com
greensmallcanvas.com
greenbusnoise.com
bulbazaur.com
panelbreed.com
physicalcheetah.com
foodeveryhour.com
pickuchu.com
dnsmachinefork.com
eyestoip.com
linksnew.info
cellphone-inside.org
crowndecoration.net
addresstimeframe.com
conference-ballroom.com
getpoints.net
newipconfig.com
loading-page.net
exoticsendurance.com
greatcitymore.com
gearstereotype.com
alignmentdisabled.net
legsfriesears.com
natural-ice.com
multiplecurrencies.com
mymanagement-service.com
moneycheesecolor.com
equal-gravity.com
doorcoffeebrown.com
feature-publish.net
energy-dispatch.net
judgeauthority.com
boldconclusion.com
redstarnews.net
lizzardsnail.com
girlsyoulike.com
bullgame.net
y0utube.com.mx
asrarrarabiya.com
donateyouroldclothes.net
documentpro.org
freeshoemoon.com
pageupdate.co
dramatic-challenge.com
chatresponses.com
extractsight.com
convertedversion.com
ipjackets.com
pageredirect.co
knowseminar.com
everycolor-inside.com
deadwordsstory.com
directlyforuse.com
lifenoonkid.com
ikomek.info
whatsapp-app.com
landflatheart.com
notificationsneeded.com
network-bots.com
turkishairines.info
jeeyarworld.com
currentwestpeople.com
holecatorange.com
assembled-battery.com
autoredirect.net
accountant-audio.com
muziclovers.org
earsstrawsfive.com
dnsroof.com
redcrossworld.com
healthykids-food.com
diningip.com
shtraf.info
news-flash.net
hillsaround.com
clockmarkcoffee.com
contentsbycase.com
expired-getway.net
dearlegendseed.com
apigraphs.net
domainport.net
websitereconnecting.com
deter-individuals.com
itsthebrowser.com
littlefrogalarm.com
becomeiguana.com
adjust-local-settings.com
dns-1.co
cupscars.net
databasemeans.net
free247downloads.com
growstart.net
laptop-parts.org
biscuit-taste.net
av-scanner.com
inbox-messages.net
chormnet3.com
looklifewhite.com
feeltrail.com
mealrentyard.com
port-connection.com
oplata-shtraf.info
sms.webadv.co
active-folders.com
estatearea.net
tahmilmilafate.com
networkingloading.com
bubblesweetcake.com
conditionalcell.com
a-resolver.com
page-info.com
hitrafficip.com
asrararabiya.co
formatpainter.net
hatsampledc.com
pc-views.net
hundredsofdesigns.net
flashtraininggoal.com
detailrush.net
keepiptext.com
bdaynotes.com
brand-tech.net
onlywebsite.org
changesstarted.net
aalaan.tv
expiredsession.com
popagency.net
contacting-customer.com
link-scan.net
loading-url.net
smser.net
neutralpages.com
discountads.net
cottondecay.com
popularmessages.net
cookiescom.com
novoicenoprob.net
modifytimezone.net
bbc-africa.com
downgradeproduct.com
fallsjuice.com
opera-van.com
dhcpserver.net
expiringdate.com
news-news.co
telangana-news24.com
thainews.asia
dotroomeight.com
catbrushcable.com
crimebackfire.com
gumclockberry.com
gadgetproof.net
topcontactco.com
applicationcreation.net
openingquestion.org
companybreakfast.net
icloudcacher.com
a-redirect.com
balancewreckpoint.com
chickenwaves.com
kenyasms.org
htmlmetrics.com
cablegirls.net
industry-specialist.com
newip-info.com
effectivespeech.net
hardthinmetal.com
buildingcarpet.com
axis-indication.net
navywalls.com
loadthatpage.com
mydarkarms.com
dancersing.net
curiousrabbitgame.com
eyesunderspray.com
girlimstill.com
bulktheft.com
host-redirect.net
cornclean.com
email-plans.com
glittercases.net
exploreemail.net
babies-bottles.com
gettingchances.com
ourperfume.net
operations-shifts.com
greenwatermovement.com
methodslocal.com
newenvelope.net
enoughtoday.org
bustimer.net
unonoticias.net
painting-walls.com
mylogfrog.com
dnsclocknow.com
countrytrips.net
maphonortea.com
crownsafe.net
oneleadingchat.com
buildyourdata.com
bubblesmoke.net
connecting-to.com
myfundsdns.com
mixershake.net
com-reports.net
cartsafer.com
organicdiamonds.net
mobilebrowsing.net
leavehomego.com
entire-cases.com
awardpractice.com
normalseason.com
neverwayneck.com
domainloading.net
mainredirecter.com
flashobligation.com
loadingurl.net
pay-penalty.info
horsefingercoffee.com
waitingtoload.com
billednorth.com
noodlegray.com
networkingproperty.com
planeocean.com
betterhandsblack.com
cheapcardonline.com
dashboardprompt.com
domain-resolver.net
letyoufall.com
fetchlink.net
tahmilmilafate.info
currentscan.net
clicktrack247.com
httpaccess.com
mixsinger.com
familyabroad.net
audienceflake.com
boxes-mix.net
allergiesandcooking.com
globalnews247.net
crosslocated.net
meanspursuit.com
oldmywater.com
old-glasses.net
accounts.mx
butterdogchange.com
holdstory.com
devicer.co
dnslogs.net
clubloading.net
objectreduction.com
mygummyjelly.com
checkboxcart.com
presidentialagent.com
exchangenames.net
fadewallwine.com
preferenceviews.com
authlovebirth.com
domain-control.net
networkinfo.org
e-loading.biz
moregatesthere.com
celebrateyourdaynow.com
nicevibezaction.net
loadingpage1.net
myself-dns.com
painruncart.com
ipurlredirect.com
photo-afisha.net
noveletters.com
landstofree.com
eliminateadjust.com
net-protector.com
loading-ads.net
dns-upload.com
mobilephonesme.com
domains-resolver.net
holdingspider.com
nerdtvfan.com
pride-industry.com
additional-costs.com
parties-fun.com
lawlowvat.net
existingpass.com
last-chainleash.net
linking-page.com
checkinonlinehere.com
extend-list.net
bitanalysis.net
phonestats.net
elementscart.com
mynewbesttime.com
pourcentfilers.com
bigseatsout.net
page-host.net
mergeandcenter.com
merchant-businesses.com

APT Groups1

Stealth FalconUnited Arab Emirates
FruityArmorStealth FalconProject Raven

Campaign Guidance

Remediation, mitigation, notes, history and related intelligence


CVE-2016-4655: Information leak in kernel – A kernel base mapping vulnerability that leaks information to the attacker allowing them to calculate the kernel's location in memory.
CVE-2016-4656: Kernel memory corruption leads to jailbreak – 32 and 64 bit iOS kernel-level vulnerabilities that allow the attacker to secretly jailbreak the device and install surveillance software – details in reference.
CVE-2016-4657: Memory corruption in the webkit – A vulnerability in the Safari WebKit that allows the attacker to compromise the device when the user clicks on a link.

Google's Project Zero documented another exploit, dubbed FORCEDENTRY, in December 2021. According to Google's researchers, Pegasus sent an iMessage to its targets that contained what appeared to be GIF images, but which in fact contained a JBIG2 image. A vulnerability in the Xpdf implementation of JBIG2, re-used in Apple's iOS phone operating software, allowed Pegasus to construct an emulated computer architecture inside the JBIG2 stream which was then used to implement the zero-click attack. Apple fixed the vulnerability in iOS 14.8 in September 2021 as CVE-2021-30860.

Reports & References2

[object Object][object Object]

Observed Countries34

AE (324)
AM (270)
AZ (122)
BH (973)
DE (736)
DJ (420)
EE (750)
EG (414)
ES (938)
FI (153)
FR (503)
GB (198)
HU (329)
IL (696)
IN (665)
IQ (86)
JO (115)
KZ (792)
MA (318)
MX (363)
NL (880)
PA (953)
PL (934)
PS (726)
RW (315)
SA (261)
SV (72)
TG (913)
TH (67)
UA (395)
UG (792)
US (574)
YE (737)
ZA (248)