Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
store.alignfrisco[.]com (SocGholish)
-->
www[.]publynx[.]com/profileLayout (SocGholish JS C2)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
store.alignfrisco[.]com (SocGholish)
-->
images.nashbashracing[.]com/profileLayout (SocGholish JS C2)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
store.alignfrisco[.]com (SocGholish)
-->
files.fnomworldwide[.]com/profileLayout (SocGholish JS C2)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
store.alignfrisco[.]com (SocGholish)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
store.alignfrisco[.]com (SocGholish)
-->
phpmyadmin.emeraldpineventures[.]com/profileLayout (SocGholish JS C2)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
clients.dedicatedservicesusa[.]com (SocGholish)

Detected #ParrotTDS infection chain

Compromised site
-->
trust.scriptobject[.]com/init.js (ParrotTDS)
-->
premium.davidabostic[.]com (SocGholish)

Detected #ParrotTDS infection chain

Compromised site
-->
source.scriptsafedata[.]com/init.js (ParrotTDS)
-->
premium.davidabostic[.]com (SocGholish)

Detected #ParrotTDS infection chain

Compromised site
-->
jsincloud[.]com/adv.min.js (ParrotTDS)
-->
premium.davidabostic[.]com (SocGholish)

Detected #ParrotTDS infection chain

Compromised site
-->
jswebcloud[.]net/ui_static.js (ParrotTDS)
-->
premium.davidabostic[.]com (SocGholish)