{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/google-disrupts-unc2814-gridtide-campaign-chinese-apt-breaches-53-organizations-across-42-countries/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:34Z",
    "total": 435,
    "categories": 4
  },
  "iocs": {
    "IPv4": [
      "130.94.6.228",
      "139.180.219.115",
      "139.84.236.237",
      "149.28.128.128",
      "149.28.139.125",
      "178.79.188.181",
      "195.123.211.70",
      "195.123.226.235",
      "202.59.10.122",
      "207.148.73.18",
      "38.180.205.14",
      "38.54.112.184",
      "38.54.31.146",
      "38.54.32.244",
      "38.54.37.196",
      "38.54.82.69",
      "38.60.171.242",
      "38.60.194.21",
      "38.60.224.25",
      "38.60.252.66",
      "45.76.157.113",
      "45.76.184.214",
      "45.77.254.168",
      "45.90.59.129",
      "5.34.176.6",
      "65.20.104.91"
    ],
    "Domains": [
      "1cv2f3d5s6a9w.ddnsfree.com",
      "Boemobww.ddnsfree.com",
      "DCLCWPDTSDCC.ddnsfree.com",
      "Kaushalya.freeddns.org",
      "Microsoft.bumbleshrimp.com",
      "Mosplosaq.accesscam.org",
      "Npeoples.theworkpc.com",
      "PRIFTP.kozow.com",
      "PolicyAgent.theworkpc.com",
      "Scopps.ddnsgeek.com",
      "Smartfren.giize.com",
      "USOShared1.ddnsfree.com",
      "accesscam.org",
      "admina.freeddns.org",
      "afsaces.accesscam.org",
      "ancisesic.accesscam.org",
      "applebox.camdvr.org",
      "appler.kozow.com",
      "asdad21ww.freeddns.org",
      "aw2o25forsbc.camdvr.org",
      "awcc001jdaigfwdagdcew.giize.com",
      "bab2o25com.accesscam.org",
      "babaji.accesscam.org",
      "babi5599ss.ddnsgeek.com",
      "balabalabo.mywire.org",
      "bggs.giize.com",
      "bibabo.freeddns.org",
      "binmol.webredirect.org",
      "bioth.giize.com",
      "brcallletme.theworkpc.com",
      "btbtutil.theworkpc.com",
      "btltan.ooguy.com",
      "bumbleshrimp.com",
      "camcampkes.ddnsfree.com",
      "camdvr.org",
      "camsqewivo.kozow.com",
      "casacam.net",
      "ccammutom.ddnsgeek.com",
      "cdnvmtools.theworkpc.com",
      "cloacpae.ddnsfree.com",
      "cmwwoods1.theworkpc.com",
      "cnrpaslceas.freeddns.org",
      "codemicros12.gleeze.com",
      "cressmiss.ooguy.com",
      "cvabiasbae.ddnsfree.com",
      "cvnoc01da1cjmnftsd.accesscam.org",
      "cvpc01aenusocirem.accesscam.org",
      "cvpc01cgsdfn53hgd.giize.com",
      "ddnsfree.com",
      "ddnsgeek.com",
      "dlpossie.ddnsfree.com",
      "dnsfreedb.ddnsfree.com",
      "doboudix1024.mywire.org",
      "dynuddns.net",
      "evilginx2.loseyourip.com",
      "examp1e.webredirect.org",
      "faeelt.giize.com",
      "fakjcsaeyhs.ddnsfree.com",
      "fasceadvcva3.gleeze.com",
      "ffosies2024.camdvr.org",
      "fgdedd1dww.gleeze.com",
      "filipinet.ddnsgeek.com",
      "freeddns.org",
      "freeios.theworkpc.com",
      "ftpuser14.gleeze.com",
      "ftpzpak.kozow.com",
      "giize.com",
      "gleeze.com",
      "globoss.kozow.com",
      "gogo2025up.ddnsfree.com",
      "googlel.gleeze.com",
      "googles.accesscam.org",
      "googles.ddnsfree.com",
      "googlett.camdvr.org",
      "googllabwws.gleeze.com",
      "gtaldps31c.ddnsfree.com",
      "hamkorg.kozow.com",
      "honidoo.loseyourip.com",
      "huygdr12.loseyourip.com",
      "icekancusjhea.ddnsgeek.com",
      "idstandsuui.kozow.com",
      "indoodchat.theworkpc.com",
      "jarvis001.freeddns.org",
      "khyes001ndfpnuewdm.kozow.com",
      "kozow.com",
      "kskxoscieontrolanel.gleeze.com",
      "ksv01sokudwongsj.theworkpc.com",
      "lcskiecjj.loseyourip.com",
      "lcskiecs.ddnsfree.com",
      "loseyourip.com",
      "losiesca.ddnsgeek.com",
      "lps2staging.ddnsfree.com",
      "lsls.casacam.net",
      "ltiuys.ddnsgeek.com",
      "ltiuys.kozow.com",
      "mailsdy.gleeze.com",
      "maliclick1.ddnsfree.com",
      "mauritasszddb.ddnsfree.com",
      "meetls.kozow.com",
      "ml3.freeddns.org",
      "mlksucnayesk.kozow.com",
      "mmmfaco2025.mywire.org",
      "mms.bumbleshrimp.com",
      "mmvmtools.giize.com",
      "modgood.gleeze.com",
      "mysql.casacam.net",
      "mywire.org",
      "nenigncagvawr.giize.com",
      "nenignenigoncqvoo.ooguy.com",
      "nenigoncqnutgo.accesscam.org",
      "nenigoncuopzc.giize.com",
      "nims.gleeze.com",
      "nisaldwoa.theworkpc.com",
      "nmszablogs.ddnsfree.com",
      "nodekeny11.freeddns.org",
      "nodjs2o25nodjs.giize.com",
      "officeshan.kozow.com",
      "okkstt.ddnsgeek.com",
      "oldatain1.ddnsgeek.com",
      "onlyosun.ooguy.com",
      "ooguy.com",
      "osix.ddnsgeek.com",
      "ovmmiuy.mywire.org",
      "palamolscueajfvc.gleeze.com",
      "pawanp.kozow.com",
      "pcmainecia.ddnsfree.com",
      "pcvmts3.kozow.com",
      "peisuesacae.loseyourip.com",
      "peowork.ddnsgeek.com",
      "pepesetup.ddnsfree.com",
      "pewsus.freeddns.org",
      "plcoaweniva.ddnsgeek.com",
      "polokinyea.gleeze.com",
      "pplodsssead222.loseyourip.com",
      "pplosad231.kozow.com",
      "ppsaBedon.gleeze.com",
      "prdanjana01.ddnsfree.com",
      "prepaid127.freeddns.org",
      "prihxlcs.ddnsfree.com",
      "prihxlcsw.theworkpc.com",
      "pxlaxvvva.freeddns.org",
      "quitgod2023luck.giize.com",
      "rabbit.ooguy.com",
      "rsm323.kozow.com",
      "saf3asg.giize.com",
      "sdhite43.ddnsfree.com",
      "sdsuytoins63.kozow.com",
      "selfad.gleeze.com",
      "serious.kozow.com",
      "setupcodpr2.freeddns.org",
      "sgsn.accesscam.org",
      "sn0son4t31bbsvopou.camdvr.org",
      "sn0son4t31opc.freeddns.org",
      "soovuy.gleeze.com",
      "styuij.mywire.org",
      "supceasfg1.loseyourip.com",
      "systemsz.kozow.com",
      "t31c0mjumpcuyerop.ooguy.com",
      "t31c0mopamcuiomx.kozow.com",
      "t31c0mopmiuewklg.webredirect.org",
      "t31c0mopocuveop.accesscam.org",
      "t3lc0mcanyqbfac.loseyourip.com",
      "t3lc0mczmoihwc.camdvr.org",
      "t3lc0mh4udncifw.casacam.net",
      "t3lc0mhasvnctsk.giize.com",
      "t3lm0rtlcagratu.kozow.com",
      "tch.giize.com",
      "telcomn.giize.com",
      "telen.bumbleshrimp.com",
      "telkom.ooguy.com",
      "telkomservices.theworkpc.com",
      "thbio.kozow.com",
      "theworkpc.com",
      "timpe.kozow.com",
      "timpe.webredirect.org",
      "tlse001hdfuwwgdgpnn.theworkpc.com",
      "tltlsktelko.ddnsfree.com",
      "transport.dynuddns.net",
      "trvcl.bumbleshrimp.com",
      "ttsiou12.loseyourip.com",
      "ua2o25yth.ddnsgeek.com",
      "udieyg.gleeze.com",
      "unnjunnani.ddnsfree.com",
      "updatamail.kozow.com",
      "updatasuccess.ddnsgeek.com",
      "updateservices.kozow.com",
      "updatetools.giize.com",
      "uscplxsecjs.ddnsgeek.com",
      "vals.bumbleshrimp.com",
      "vass.ooguy.com",
      "vass2025.casacam.net",
      "vmtools.camdvr.org",
      "vmtools.loseyourip.com",
      "vosies.ddnsfree.com",
      "vpaspmine.freeddns.org",
      "wdlcamaakc.ooguy.com",
      "webredirect.org",
      "winfoss1.kozow.com",
      "ysiohbk.camdvr.org",
      "zammffayhd.ddnsfree.com",
      "zmcmvmbm.ddnsfree.com",
      "zwmn350n3o1fsdf3gs.kozow.com",
      "zwmn350n3o1ugety2xbe.camdvr.org",
      "zwmn350n3o1vsdrggs.ddnsfree.com",
      "zwt310n3o1unety2kab.webredirect.org",
      "zwt310n3o2unety6a3k.kozow.com",
      "zwt31n3t0nidoqmve.camdvr.org",
      "zwt3ln3t1aimckalw.theworkpc.com"
    ],
    "URLs": [
      "1cv2f3d5s6a9w.ddnsfree.com",
      "Boemobww.ddnsfree.com",
      "DCLCWPDTSDCC.ddnsfree.com",
      "Kaushalya.freeddns.org",
      "Microsoft.bumbleshrimp.com",
      "Mosplosaq.accesscam.org",
      "Npeoples.theworkpc.com",
      "PRIFTP.kozow.com",
      "PolicyAgent.theworkpc.com",
      "Scopps.ddnsgeek.com",
      "Smartfren.giize.com",
      "USOShared1.ddnsfree.com",
      "admina.freeddns.org",
      "afsaces.accesscam.org",
      "ancisesic.accesscam.org",
      "applebox.camdvr.org",
      "appler.kozow.com",
      "asdad21ww.freeddns.org",
      "aw2o25forsbc.camdvr.org",
      "awcc001jdaigfwdagdcew.giize.com",
      "bab2o25com.accesscam.org",
      "babaji.accesscam.org",
      "babi5599ss.ddnsgeek.com",
      "balabalabo.mywire.org",
      "bggs.giize.com",
      "bibabo.freeddns.org",
      "binmol.webredirect.org",
      "bioth.giize.com",
      "brcallletme.theworkpc.com",
      "btbtutil.theworkpc.com",
      "btltan.ooguy.com",
      "camcampkes.ddnsfree.com",
      "camsqewivo.kozow.com",
      "ccammutom.ddnsgeek.com",
      "cdnvmtools.theworkpc.com",
      "cloacpae.ddnsfree.com",
      "cmwwoods1.theworkpc.com",
      "cnrpaslceas.freeddns.org",
      "codemicros12.gleeze.com",
      "cressmiss.ooguy.com",
      "cvabiasbae.ddnsfree.com",
      "cvnoc01da1cjmnftsd.accesscam.org",
      "cvpc01aenusocirem.accesscam.org",
      "cvpc01cgsdfn53hgd.giize.com",
      "dlpossie.ddnsfree.com",
      "dnsfreedb.ddnsfree.com",
      "doboudix1024.mywire.org",
      "evilginx2.loseyourip.com",
      "examp1e.webredirect.org",
      "faeelt.giize.com",
      "fakjcsaeyhs.ddnsfree.com",
      "fasceadvcva3.gleeze.com",
      "ffosies2024.camdvr.org",
      "fgdedd1dww.gleeze.com",
      "filipinet.ddnsgeek.com",
      "freeios.theworkpc.com",
      "ftpuser14.gleeze.com",
      "ftpzpak.kozow.com",
      "globoss.kozow.com",
      "gogo2025up.ddnsfree.com",
      "googlel.gleeze.com",
      "googles.accesscam.org",
      "googles.ddnsfree.com",
      "googlett.camdvr.org",
      "googllabwws.gleeze.com",
      "gtaldps31c.ddnsfree.com",
      "hamkorg.kozow.com",
      "honidoo.loseyourip.com",
      "http://130.94.6.228/amp.tar.gz",
      "http://130.94.6.228/apt.tar.gz",
      "http://130.94.6.228/update.tar.gz",
      "huygdr12.loseyourip.com",
      "icekancusjhea.ddnsgeek.com",
      "idstandsuui.kozow.com",
      "indoodchat.theworkpc.com",
      "jarvis001.freeddns.org",
      "khyes001ndfpnuewdm.kozow.com",
      "kskxoscieontrolanel.gleeze.com",
      "ksv01sokudwongsj.theworkpc.com",
      "lcskiecjj.loseyourip.com",
      "lcskiecs.ddnsfree.com",
      "losiesca.ddnsgeek.com",
      "lps2staging.ddnsfree.com",
      "lsls.casacam.net",
      "ltiuys.ddnsgeek.com",
      "ltiuys.kozow.com",
      "mailsdy.gleeze.com",
      "maliclick1.ddnsfree.com",
      "mauritasszddb.ddnsfree.com",
      "meetls.kozow.com",
      "ml3.freeddns.org",
      "mlksucnayesk.kozow.com",
      "mmmfaco2025.mywire.org",
      "mms.bumbleshrimp.com",
      "mmvmtools.giize.com",
      "modgood.gleeze.com",
      "mysql.casacam.net",
      "nenigncagvawr.giize.com",
      "nenignenigoncqvoo.ooguy.com",
      "nenigoncqnutgo.accesscam.org",
      "nenigoncuopzc.giize.com",
      "nims.gleeze.com",
      "nisaldwoa.theworkpc.com",
      "nmszablogs.ddnsfree.com",
      "nodekeny11.freeddns.org",
      "nodjs2o25nodjs.giize.com",
      "officeshan.kozow.com",
      "okkstt.ddnsgeek.com",
      "oldatain1.ddnsgeek.com",
      "onlyosun.ooguy.com",
      "osix.ddnsgeek.com",
      "ovmmiuy.mywire.org",
      "palamolscueajfvc.gleeze.com",
      "pawanp.kozow.com",
      "pcmainecia.ddnsfree.com",
      "pcvmts3.kozow.com",
      "peisuesacae.loseyourip.com",
      "peowork.ddnsgeek.com",
      "pepesetup.ddnsfree.com",
      "pewsus.freeddns.org",
      "plcoaweniva.ddnsgeek.com",
      "polokinyea.gleeze.com",
      "pplodsssead222.loseyourip.com",
      "pplosad231.kozow.com",
      "ppsaBedon.gleeze.com",
      "prdanjana01.ddnsfree.com",
      "prepaid127.freeddns.org",
      "prihxlcs.ddnsfree.com",
      "prihxlcsw.theworkpc.com",
      "pxlaxvvva.freeddns.org",
      "quitgod2023luck.giize.com",
      "rabbit.ooguy.com",
      "rsm323.kozow.com",
      "saf3asg.giize.com",
      "sdhite43.ddnsfree.com",
      "sdsuytoins63.kozow.com",
      "selfad.gleeze.com",
      "serious.kozow.com",
      "setupcodpr2.freeddns.org",
      "sgsn.accesscam.org",
      "sn0son4t31bbsvopou.camdvr.org",
      "sn0son4t31opc.freeddns.org",
      "soovuy.gleeze.com",
      "styuij.mywire.org",
      "supceasfg1.loseyourip.com",
      "systemsz.kozow.com",
      "t31c0mjumpcuyerop.ooguy.com",
      "t31c0mopamcuiomx.kozow.com",
      "t31c0mopmiuewklg.webredirect.org",
      "t31c0mopocuveop.accesscam.org",
      "t3lc0mcanyqbfac.loseyourip.com",
      "t3lc0mczmoihwc.camdvr.org",
      "t3lc0mh4udncifw.casacam.net",
      "t3lc0mhasvnctsk.giize.com",
      "t3lm0rtlcagratu.kozow.com",
      "tch.giize.com",
      "telcomn.giize.com",
      "telen.bumbleshrimp.com",
      "telkom.ooguy.com",
      "telkomservices.theworkpc.com",
      "thbio.kozow.com",
      "timpe.kozow.com",
      "timpe.webredirect.org",
      "tlse001hdfuwwgdgpnn.theworkpc.com",
      "tltlsktelko.ddnsfree.com",
      "transport.dynuddns.net",
      "trvcl.bumbleshrimp.com",
      "ttsiou12.loseyourip.com",
      "ua2o25yth.ddnsgeek.com",
      "udieyg.gleeze.com",
      "unnjunnani.ddnsfree.com",
      "updatamail.kozow.com",
      "updatasuccess.ddnsgeek.com",
      "updateservices.kozow.com",
      "updatetools.giize.com",
      "uscplxsecjs.ddnsgeek.com",
      "vals.bumbleshrimp.com",
      "vass.ooguy.com",
      "vass2025.casacam.net",
      "vmtools.camdvr.org",
      "vmtools.loseyourip.com",
      "vosies.ddnsfree.com",
      "vpaspmine.freeddns.org",
      "wdlcamaakc.ooguy.com",
      "winfoss1.kozow.com",
      "ysiohbk.camdvr.org",
      "zammffayhd.ddnsfree.com",
      "zmcmvmbm.ddnsfree.com",
      "zwmn350n3o1fsdf3gs.kozow.com",
      "zwmn350n3o1ugety2xbe.camdvr.org",
      "zwmn350n3o1vsdrggs.ddnsfree.com",
      "zwt310n3o1unety2kab.webredirect.org",
      "zwt310n3o2unety6a3k.kozow.com",
      "zwt31n3t0nidoqmve.camdvr.org",
      "zwt3ln3t1aimckalw.theworkpc.com"
    ],
    "sha256": [
      "01fc3bd5a78cd59255a867ffb3dfdd6e0b7713ee90098ea96cc01c640c6495eb",
      "4eb994b816a1a24cf97bfd7551d00fe14b810859170dbf15180d39e05cd7c0f9",
      "669917bad46a57e5f2de037f8ec200a44fb579d723af3e2f1be1e8479a267966",
      "ce36a5fc44cbd7de947130b67be9e732a7b4086fb1df98a5afd724087c973b47",
      "d25024ccea8eac85a9522289cfb709f2ed4e20176dd37855bacc2cd75c995606",
      "eb08c840f4c95e2fa5eff05e5f922f86c766f5368a63476f046b2b9dbffc2033"
    ]
  }
}