The following is a set of OSINT artifacts courtesy of the Conti Ransomware gang.

  • hxxp://cc2-btc.cc
  • hxxp://dyncheck.com
  • hxxp://luxchecker.pw
  • hxxp://major.ms
  • hxxp://securecall.club
  • hxxp://securecall.top
  • hxxp://checkzilla.io

Including the following two XMPP/Jabber accounts: