← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CosmicSting attack & defense overview
WHITE CyberHunter_NL 2024-10-16 Modified: 2024-11-15
400
IOCs
HIGH VOLUME
CosmicSting (aka CVE-2024-34102) is the worst bug to hit Magento and Adobe Commerce stores in two years. Sansec observes that stores are getting hacked at a rate of 3 to 5 per hour. Merchants need to implement these counter measures as soon as possible.
adobe commercemagentocosmicstingjavascriptcms blockmagento apisanseccnextcve20242961scoring systemjuneexecution
Indicators of Compromise (400)
All URL CVE domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL https://javaninja.shop/get/ — 2024-10-16
CVE CVE-2024-2961 — 2024-10-16
CVE CVE-2024-34102 — 2024-10-16
URL ftp://89.110.84.168:21/d3d3LmptcGJ0ZWlsZS5kZQ==/Li4vYXBwL2V0Yy9lbnYucGhw/%d — 2024-10-16
URL http://159.223.136.255 — 2024-10-16
URL http://89.110.84.168/docs?id=d3d3LmptcGJ0ZWlsZS5kZQ==&m=1&f=Li4vYXBwL2V0Yy9lbnYucGhw — 2024-10-16
URL http://accept.bar/common — 2024-10-16
URL http://amocha.xyz/common — 2024-10-16
URL http://app.chwine.dev/us/ — 2024-10-16
URL http://cd.iconstaff.top/m — 2024-10-16
URL http://cdn-webstats.com/ls — 2024-10-16
URL http://cdn.iconstaff.top/common — 2024-10-16
URL http://cdn.inspectdlet.net/ws — 2024-10-16
URL http://cdn.myshopper.io/bo/ — 2024-10-16
URL http://clearnetfab.net/common — 2024-10-16
URL http://cloudflare-stat.net/common — 2024-10-16
URL http://fallodick87-78.sbs/common — 2024-10-16
URL http://fatrade.net/re/ — 2024-10-16
URL http://hostnotify.io/mu/ — 2024-10-16
URL http://iconstaff.top/common — 2024-10-16
URL http://img.wisepops.co/mo/ — 2024-10-16
URL http://infiniboosts.com/bu/ — 2024-10-16
URL http://itsemma.io/gb/ — 2024-10-16
URL http://jgueurystatic.xyz:8101 — 2024-10-16
URL http://jquerypackageus.com/common — 2024-10-16
URL http://jqueryuslibs.com/common — 2024-10-16
URL http://jstatic201.com/common — 2024-10-16
URL http://lererikal.org/common — 2024-10-16
URL http://m.bingforce.org/jo/ — 2024-10-16
URL http://m.bingforce.org/to/ — 2024-10-16
URL http://mamatmavali.ru/common — 2024-10-16
URL http://nothingillegal.bond/common — 2024-10-16
URL http://paie-locli.com/s — 2024-10-16
URL http://rextension.net/za/ — 2024-10-16
URL http://sellerstat.site/wss — 2024-10-16
URL http://servicetoast.net/ne/ — 2024-10-16
URL http://shoponlinemelike.shop/common — 2024-10-16
URL http://sourcetrap.net/tu/ — 2024-10-16
URL http://statsseo.com/common — 2024-10-16
URL http://statstoday.org/common — 2024-10-16
URL http://subsales.net/qe/ — 2024-10-16
URL http://t.gearplace.net/fe/ — 2024-10-16
URL http://tag.convertpro.org/be/ — 2024-10-16
URL http://tag.wealthleaderinc.com/da/ — 2024-10-16
URL http://tr.hostnotify.io/nr/ — 2024-10-16
URL http://vincaolet.xyz/socket — 2024-10-16
URL http://web.bystats.io/he/ — 2024-10-16
URL http://web.foptimize.net/we/ — 2024-10-16
URL http://webexcelsior.org/common — 2024-10-16
URL http://www.consentime.com/br/ — 2024-10-16
URL http://www.ge4cdn.com/vu/ — 2024-10-16
URL http://www.myshopper.io/gb/ — 2024-10-16
URL http://www.youpilot.org/pg/ — 2024-10-16
URL https://106.14.40.200/?prod_hash= — 2024-10-16
URL https://advertiq.shop/get/ — 2024-10-16
URL https://advertispro.com/get/ — 2024-10-16
URL https://advertls.shop/get/ — 2024-10-16
URL https://analytisgroup.com/img/ — 2024-10-16
URL https://analytisweb.com/img/ — 2024-10-16
URL https://artickon.shop/get/ — 2024-10-16
URL https://articon.shop/get/ — 2024-10-16
URL https://artistryhab.shop/get/ — 2024-10-16
URL https://artvislon.shop/get/ — 2024-10-16
URL https://bellanatura.shop/health_check.php — 2024-10-16
URL https://branchbrookpharmacy.com/pub/health_check.php — 2024-10-16
URL https://brandilift.com/get/ — 2024-10-16
URL https://brandixi.shop/get/ — 2024-10-16
URL https://bytesbazar.com/get/ — 2024-10-16
URL https://bytesbazar.com/img/ — 2024-10-16
URL https://byyvonn.nl/health_check.php — 2024-10-16
URL https://cantes.com.br/pub/health_check.php — 2024-10-16
URL https://casamilanoitaly.com/health_check.php — 2024-10-16
URL https://cdnstatics.net/index.php?zz= — 2024-10-16
URL https://cdnstatics.net/lib.js — 2024-10-16
URL https://chartify.shop/get/ — 2024-10-16
URL https://chartismart.com/get/ — 2024-10-16
URL https://chartismart.com/get/?s= — 2024-10-16
URL https://checkout.lat/log.xml — 2024-10-16
URL https://codcraft.shop/get/ — 2024-10-16
URL https://codecarawan.com/get/ — 2024-10-16
URL https://codecarawan.com/img/ — 2024-10-16
URL https://codegenesis.shop/get/ — 2024-10-16
URL https://codemingle.shop/get/ — 2024-10-16
URL https://countilancer.com/get/?s= — 2024-10-16
URL https://countora.shop/get/ — 2024-10-16
URL https://creativeslim.com/img/ — 2024-10-16
URL https://creatls.com/get/ — 2024-10-16
URL https://creatls.com/get/?s= — 2024-10-16
URL https://creatlva.shop/get/ — 2024-10-16
URL https://cssmagic.shop/get/ — 2024-10-16
URL https://cssmagic.shop/get/?s= — 2024-10-16
URL https://cssmagic.shop/img/ — 2024-10-16
URL https://datagen.shop/get/ — 2024-10-16
URL https://datawiz.shop/get/ — 2024-10-16
URL https://datifyny.com/img/ — 2024-10-16
URL https://dealhunt.website/get/ — 2024-10-16
URL https://dealhunt.website/get/?s= — 2024-10-16
URL https://designlq.com/get/ — 2024-10-16
URL https://desiqnia.shop/get/ — 2024-10-16
URL https://desiqnia.shop/img/ — 2024-10-16
URL https://deslgnhq.com/ — 2024-10-16
URL https://desynlabtech.com/get/ — 2024-10-16
URL https://desynlabtech.com/img/ — 2024-10-16
URL https://evaluatemingle.com/get/ — 2024-10-16
URL https://fars.ee/WuBQ.dtd — 2024-10-16
URL https://feedbackharvest.com/get/ — 2024-10-16
URL https://galantha.nl/health_check.php — 2024-10-16
URL https://getstylify.com/get/ — 2024-10-16
URL https://getstylify.com/get/?s= — 2024-10-16
URL https://gettinfo.com/get/?s= — 2024-10-16
URL https://giftboxedwines.com/health_check.php — 2024-10-16
URL https://graphig.shop/get/ — 2024-10-16
URL https://graphiqsw.com/get/ — 2024-10-16
URL https://graphiqsw.com/img/ — 2024-10-16
URL https://graphisprintstudio.com/get/ — 2024-10-16
URL https://graphize.shop/get/ — 2024-10-16
URL https://graphlq.shop/get/ — 2024-10-16
URL https://happyllfe.online/get/ — 2024-10-16
URL https://happyllfe.online/get/?s= — 2024-10-16
URL https://happynast.shop/get/ — 2024-10-16
URL https://happywave.shop/get/ — 2024-10-16
URL https://horlzonhub.com/get/ — 2024-10-16
URL https://horlzonhub.com/get/?s= — 2024-10-16
URL https://insightharvesters.com/get/ — 2024-10-16
URL https://javaninja.shop/get/?s= — 2024-10-16
URL https://joyfullday.shop/get/ — 2024-10-16
URL https://larecetta.com/pub/health_check.php — 2024-10-16
URL https://luckipath.shop/get/ — 2024-10-16
URL https://luckkystar.shop/get/ — 2024-10-16
URL https://luckycharm.website/get/ — 2024-10-16
URL https://m37gg41n.c5.rs/?exploited=%data; — 2024-10-16
URL https://magiglide.nl/health_check.php — 2024-10-16
URL https://marketexpert.site/get/ — 2024-10-16
URL https://marketiqhub.com/get/ — 2024-10-16
URL https://marketiqhub.com/img/ — 2024-10-16
URL https://marketro.shop/get/ — 2024-10-16
URL https://marketrom.shop/get/?s= — 2024-10-16
URL https://marketsoilmart.com/get/ — 2024-10-16
URL https://marketsoilmart.com/img/ — 2024-10-16
URL https://markettz.com/ — 2024-10-16
URL https://mercadoespiao.com.br/health_check.php — 2024-10-16
URL https://merchifly.shop/get/ — 2024-10-16
URL https://metricelevate.com/get/ — 2024-10-16
URL https://metricsy.shop/get/ — 2024-10-16
URL https://metricsy.shop/get/?s= — 2024-10-16
URL https://missy-x.com/pub/health_check.php — 2024-10-16
URL https://myhapperflowers.com/get/ — 2024-10-16
URL https://novastraem.com/get/ — 2024-10-16
URL https://novastraem.com/get/?s= — 2024-10-16
URL https://pixelia.shop/get/ — 2024-10-16
URL https://pixella.shop/get/ — 2024-10-16
URL https://pixelsmith.shop/get/ — 2024-10-16
URL https://protocolhubinfo.com/get/?s= — 2024-10-16
URL https://quantunnquest.com/img/ — 2024-10-16
URL https://radlantroots.com/get/ — 2024-10-16
URL https://radlantroots.com/get/?s= — 2024-10-16
URL https://reviewharborhub.com/get/ — 2024-10-16
URL https://salesguru.online/get/ — 2024-10-16
URL https://secunnet.shop/get/ — 2024-10-16
URL https://seilsmart.shop/get/ — 2024-10-16
URL https://sellifypro.com/get/ — 2024-10-16
URL https://sellifypro.com/get/?s= — 2024-10-16
URL https://selllify.shop/get/ — 2024-10-16
URL https://selloria.shop/get/ — 2024-10-16
URL https://sellwisehub.com/get/?s= — 2024-10-16
URL https://statify.online/get/?s= — 2024-10-16
URL https://statify.shop/get/ — 2024-10-16
URL https://statistall.com/get/ — 2024-10-16
URL https://statlstic.shop/get/ — 2024-10-16
URL https://statlstic.shop/get/?s= — 2024-10-16
URL https://statmaster.shop/get/ — 2024-10-16
URL https://statspots.com/get/ — 2024-10-16
URL https://statspots.com/get/?s= — 2024-10-16
URL https://styllize.shop/get/?s= — 2024-10-16
URL https://techtnee.com/get/ — 2024-10-16
URL https://techtnee.com/get/?s= — 2024-10-16
URL https://trendgurupro.com/get/ — 2024-10-16
URL https://trendgurupro.com/get/?s= — 2024-10-16
URL https://trendor.website/img/ — 2024-10-16
URL https://trendori.shop/get/ — 2024-10-16
URL https://trendori.shop/get/?s= — 2024-10-16
URL https://trendset.website/get/ — 2024-10-16
URL https://venum.com.cn/log.txt/xxe.xml — 2024-10-16
URL https://vizualis.online/get/?s= — 2024-10-16
URL https://vodog.shop/get/ — 2024-10-16
URL https://www.decentcustom.com/pub/health_check.php — 2024-10-16
URL https://www.derickdesign.com/health_check.php — 2024-10-16
URL https://www.dianahunt.hu/pub/health_check.php — 2024-10-16
URL https://www.efashionwholesale.com/pub/health_check.php — 2024-10-16
URL https://www.hakpro.nl/pub/health_check.php — 2024-10-16
URL https://www.hebery.com/pub/health_check.php — 2024-10-16
URL https://www.rtechmx.com/pub/health_check.php — 2024-10-16
URL https://zetabg.com/pub/health_check.php — 2024-10-16
domain accept.bar — 2024-10-16
domain advertiq.shop — 2024-10-16
domain advertispro.com — 2024-10-16
domain advertls.shop — 2024-10-16
domain amocha.xyz — 2024-10-16
domain anality-google.com — 2024-10-16
domain analytisgroup.com — 2024-10-16
domain analytisweb.com — 2024-10-16
domain artickon.shop — 2024-10-16
domain articon.shop — 2024-10-16
domain artistryhab.shop — 2024-10-16
domain artvislon.shop — 2024-10-16
domain bellanatura.shop — 2024-10-16
domain bingforce.org — 2024-10-16
domain branchbrookpharmacy.com — 2024-10-16
domain brandilift.com — 2024-10-16
domain brandixi.shop — 2024-10-16
domain bystats.io — 2024-10-16
domain bytesbazar.com — 2024-10-16
domain byyvonn.nl — 2024-10-16
domain cantes.com.br — 2024-10-16
domain casamilanoitaly.com — 2024-10-16
domain cdn-webstats.com — 2024-10-16
domain cdnstatics.net — 2024-10-16
domain cdnstatistics.net — 2024-10-16
domain chartify.shop — 2024-10-16
domain chartismart.com — 2024-10-16
domain checkout.lat — 2024-10-16
domain clearnetfab.net — 2024-10-16
domain cloudflare-stat.net — 2024-10-16
domain codcraft.shop — 2024-10-16
domain codecarawan.com — 2024-10-16
domain codegenesis.shop — 2024-10-16
domain codemingle.shop — 2024-10-16
domain countilancer.com — 2024-10-16
domain countora.shop — 2024-10-16
domain creativeslim.com — 2024-10-16
domain creatls.com — 2024-10-16
domain creatlva.shop — 2024-10-16
domain cssmagic.shop — 2024-10-16
domain cssucess.com — 2024-10-16
domain datageen.com — 2024-10-16
domain datagen.shop — 2024-10-16
domain datallqs.com — 2024-10-16
domain datawiz.shop — 2024-10-16
domain datifyny.com — 2024-10-16
domain dealhunt.website — 2024-10-16
domain desiginfest.com — 2024-10-16
domain designlq.com — 2024-10-16
domain designmetrlcs.com — 2024-10-16
domain designospro.com — 2024-10-16
domain desiqnia.shop — 2024-10-16
domain deslgnhq.com — 2024-10-16
domain desynifynet.com — 2024-10-16
domain desynlabtech.com — 2024-10-16
domain desynsy.com — 2024-10-16
domain easttrack.net — 2024-10-16
domain ecomscan.com — 2024-10-16
domain evaluatemingle.com — 2024-10-16
domain fallodick87-78.sbs — 2024-10-16
domain fars.ee — 2024-10-16
domain fatrade.net — 2024-10-16
domain feedbackharvest.com — 2024-10-16
domain foptimize.net — 2024-10-16
domain galantha.nl — 2024-10-16
domain gearplace.net — 2024-10-16
domain getstylify.com — 2024-10-16
domain gettinfo.com — 2024-10-16
domain giftboxedwines.com — 2024-10-16
domain graphig.shop — 2024-10-16
domain graphiqsw.com — 2024-10-16
domain graphisprintstudio.com — 2024-10-16
domain graphize.shop — 2024-10-16
domain graphlq.shop — 2024-10-16
domain graphorix.com — 2024-10-16
domain graphwebpro.com — 2024-10-16
domain happyllfe.online — 2024-10-16
domain happynast.shop — 2024-10-16
domain happywave.shop — 2024-10-16
domain horlzonhub.com — 2024-10-16
domain hostnotify.io — 2024-10-16
domain htmledge.com — 2024-10-16
domain iconstaff.top — 2024-10-16
domain infiniboosts.com — 2024-10-16
domain insightharvesters.com — 2024-10-16
domain itsemma.io — 2024-10-16
domain javaninja.shop — 2024-10-16
domain jgueurystatic.xyz — 2024-10-16
domain joyfullday.shop — 2024-10-16
domain jquerypackageus.com — 2024-10-16
domain jqueryuslibs.com — 2024-10-16
domain jstatic201.com — 2024-10-16
domain larecetta.com — 2024-10-16
domain lererikal.org — 2024-10-16
domain luckipath.shop — 2024-10-16
domain luckkystar.shop — 2024-10-16
domain luckycharm.website — 2024-10-16
domain magiglide.nl — 2024-10-16
domain mamatmavali.ru — 2024-10-16
domain marketexpert.site — 2024-10-16
domain marketgoweb.com — 2024-10-16
domain marketicsy.com — 2024-10-16
domain marketiqhub.com — 2024-10-16
domain marketprome.com — 2024-10-16
domain marketro.shop — 2024-10-16
domain marketrom.shop — 2024-10-16
domain marketsoilmart.com — 2024-10-16
domain markettz.com — 2024-10-16
domain mercadoespiao.com.br — 2024-10-16
domain merchifly.shop — 2024-10-16
domain metricelevate.com — 2024-10-16
domain metricsy.shop — 2024-10-16
domain missy-x.com — 2024-10-16
domain myhapperflowers.com — 2024-10-16
domain nothingillegal.bond — 2024-10-16
domain novastraem.com — 2024-10-16
domain paie-locli.com — 2024-10-16
domain pixelia.shop — 2024-10-16
domain pixella.shop — 2024-10-16
domain pixeloramy.com — 2024-10-16
domain pixelsmith.shop — 2024-10-16
domain protocolhubinfo.com — 2024-10-16
domain quantlive.net — 2024-10-16
domain quantunnquest.com — 2024-10-16
domain radlantroots.com — 2024-10-16
domain registertime.net — 2024-10-16
domain reviewharborhub.com — 2024-10-16
domain rextension.net — 2024-10-16
domain ruleslaw.org — 2024-10-16
domain saleapi.org — 2024-10-16
domain salesguru.online — 2024-10-16
domain sdtrack.io — 2024-10-16
domain secunnet.shop — 2024-10-16
domain seilsmart.shop — 2024-10-16
domain sellarcs.com — 2024-10-16
domain sellerstat.site — 2024-10-16
domain sellifypro.com — 2024-10-16
domain selllify.shop — 2024-10-16
domain sellllink.com — 2024-10-16
domain selllvibe.com — 2024-10-16
domain selloria.shop — 2024-10-16
domain sellsageapp.com — 2024-10-16
domain sellspotweb.com — 2024-10-16
domain sellwisehub.com — 2024-10-16
domain servicetoast.net — 2024-10-16
domain shoponlinemelike.shop — 2024-10-16
domain sourcetrap.net — 2024-10-16
domain stackapt.com — 2024-10-16
domain statdynanics.com — 2024-10-16
domain statibuzz.com — 2024-10-16
domain staticforce.org — 2024-10-16
domain statify.online — 2024-10-16
domain statify.shop — 2024-10-16
domain statistall.com — 2024-10-16
domain statlstic.shop — 2024-10-16
domain statmaster.shop — 2024-10-16
domain statrackers.com — 2024-10-16
domain statspots.com — 2024-10-16
domain statsseo.com — 2024-10-16
domain statstoday.org — 2024-10-16
domain styllize.shop — 2024-10-16
domain subsales.net — 2024-10-16
domain techtnee.com — 2024-10-16
domain trendgurupro.com — 2024-10-16
domain trendor.website — 2024-10-16
domain trendori.shop — 2024-10-16
domain trendset.website — 2024-10-16
domain udalzira.com — 2024-10-16
domain venum.com.cn — 2024-10-16
domain vincaolet.xyz — 2024-10-16
domain vizualis.online — 2024-10-16
domain vodog.shop — 2024-10-16
domain wealthleaderinc.com — 2024-10-16
domain webexcelsior.org — 2024-10-16
domain yotpont.com — 2024-10-16
domain zetabg.com — 2024-10-16
hostname cd.iconstaff.top — 2024-10-16
hostname cdn.iconstaff.top — 2024-10-16
hostname cdn.inspectdlet.net — 2024-10-16
hostname cdn.myshopper.io — 2024-10-16
hostname img.wisepops.co — 2024-10-16
hostname m.bingforce.org — 2024-10-16
hostname t.gearplace.net — 2024-10-16
hostname tag.convertpro.org — 2024-10-16
hostname tag.wealthleaderinc.com — 2024-10-16
hostname tr.hostnotify.io — 2024-10-16
hostname web.bystats.io — 2024-10-16
hostname web.foptimize.net — 2024-10-16
hostname www.consentime.com — 2024-10-16
hostname www.decentcustom.com — 2024-10-16
hostname www.derickdesign.com — 2024-10-16
hostname www.dianahunt.hu — 2024-10-16
hostname www.efashionwholesale.com — 2024-10-16
hostname www.ge4cdn.com — 2024-10-16
hostname www.hakpro.nl — 2024-10-16
hostname www.hebery.com — 2024-10-16
hostname www.myshopper.io — 2024-10-16
hostname www.rtechmx.com — 2024-10-16
hostname www.youpilot.org — 2024-10-16
URL https://translate.google.co.in/translate?hl=gu&sl=en&u=https://udalzira.com/.well-known/cloud.js — 2024-10-16
URL https://www.googletagmanager.com/gtm.js?id=GTM-5T7T9QNG — 2024-10-16
URL https://www.googletagmanager.com/gtm.js?id=GTM-5WG336MZ — 2024-10-16
URL https://www.googletagmanager.com/gtm.js?id=GTM-K7XN937P — 2024-10-16
URL https://www.googletagmanager.com/gtm.js?id=GTM-WTFWGVQ5 — 2024-10-16
domain h.click — 2024-10-16
hostname app.chwine.dev — 2024-10-16
hostname m37gg41n.c5.rs — 2024-10-16
References (1)
↗ https://sansec.io/research/cosmicsting#group-peschanki%3A-automated-mass-cms-block-updates