wss://qetbootstrap.com skimmer

A JavaScript injected skimmer and its domain reveal an entire ASN of suspicious servers.
united81.com skimmer

JavaScript code in the file
/media/js/js-color.min.js
on an infected Magento website loads a skimmer and then exfiltrates the stolen data to the malicious domain united81.com
.
jsdelivr.at skimmer

A JavaScript injection found on a compromised Magento website loads a skimmer from
jsdelivr.at
and then exfiltrates the stolen data back.
cdn-fonts.com skimmer

A JavaScript injection in the Magento database table core_config_data loads a skimmer and then exfiltrates the stolen data to the malicious domain
cdn-fonts.com
.
js.staticounter.net skimmer

A JavaScript based skimmer loaded from an injection in the website’s Magento database table cms_block.