### Tenorshare

*Data, password recovery, video conversion, and PDF conversion spam. Has various other names such as SmartKey. Considering the scale of the spam and the fact that multiple malware programs have been found on these IP addresses, it is probable that this is a criminal organization.*

**IP addresses:** 

- [54.201.153.20][1]
- [184.168.229.155][2]
- [54.69.177.37][3]
- [67.20.74.163][4]
- [50.87.141.154][5]

**Domains:**

- tenorshare.com
- advancedpdfconverter.com
- androiddatarecoverypro.com
- any-data-recovery.com
- card-data-recovery.com
- excel-password-recovery.net
- fix-computer.net
- lost-password.net
- lostwindowspassword.com
- macvideoconverterpro.com
- password-master.net
- photorecovery-formac.com
- powerpointpasswordrecovery.net
- rarpasswordunlocker.net
- recover-windows-password.net
- recoverlostpassword.com
- sqlpassword-recovery.com
- windows7-password-reset.net
- windowspasswordcracker.com
- windowspasswordrecovery.net
- windowspasswordreset.net
- windowspasswordsrecovery.com
- wordpassword-recovery.com
- youtubedownloaderconverter.net


  [1]: https://www.virustotal.com/en/ip-address/54.201.153.20/information/
  [2]: https://www.virustotal.com/en/ip-address/184.168.229.155/information/
  [3]: https://www.virustotal.com/en/ip-address/54.69.177.37/information/
  [4]: https://www.virustotal.com/en/ip-address/67.20.74.163/information/
  [5]: https://www.virustotal.com/en/ip-address/50.87.141.154/information/