# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.group-ib.com/prometheus-tds
# Reference: https://otx.alienvault.com/pulse/6110f20e4c97acd477823083

http://109.248.11.132
http://109.248.11.204
http://109.248.11.67
http://109.248.11.85
http://109.248.203.10
http://109.248.203.112
http://109.248.203.168
http://109.248.203.198
http://109.248.203.202
http://109.248.203.207
http://109.248.203.23
http://109.248.203.33
http://109.248.203.50
http://139.162.190.64
http://139.162.190.91
http://155.94.193.10
http://172.104.151.55
http://185.158.114.121
http://185.186.142.191
http://185.186.142.32
http://185.186.142.59
http://185.186.142.67
http://185.186.142.77
http://188.130.138.130
http://188.130.138.16
http://188.130.138.22
http://188.130.138.236
http://188.130.138.57
http://188.130.138.61
http://188.130.138.63
http://188.130.138.70
http://188.130.139.103
http://188.130.139.158
http://188.130.139.203
http://188.130.139.228
http://188.130.139.5
http://188.130.139.88
http://195.123.220.220
http://195.123.222.26
http://195.123.241.180
http://195.62.53.109
http://46.8.210.13
http://46.8.210.30
http://51.15.27.25
http://62.138.0.68
http://85.90.247.25
abouniteta.ru
afternearde.ru
anumessensan.ru
aramiglobal.com
cametateleb.ru
counivicop.ru
deciopywlon.com
denazao.info
desuctoette.ru
divelerevol.com
diverbsez.ru
ementincied.com
eviddinlahal.com
froursmonesed.com
fyz10eijkl03mytjfb.com
gloporiente.ru
goodherbwebmart.com
grectedparices.ru
honeyminer.live
hotaiddeal.su
huvpn.com
inpulsion.net
intaticducalso.ru
invoicesecure.net
lationvold.com
ludiesibut.ru
maarselectrical.com
matuattheires.ru
mymooney.ru
nepila.com
noriblerughly.ru
nuencres.com
obvionsweyband.ru
pdfsecure.net
polionallas.ru
pocketstay.com
popubjettor.ru
purecaremarket.su
refinedwebs.com
saisepsdrablis.ru
sameastar.ru
satursed.com
secure-doc-viewer.com
securepdfviewer.com
shifiticans.com
speritentz.com
thabilemithe.ru
tricilidiany.com
twotimercvac.uno
watoredprocaus.ru
xn--keynvigatorkey-yp8g.com
yourmedsquality.su
de-id-19dhjb732ba9nabcz29acb78s21acz19icnba7s.xyz
de-id1877au901501fj82a7fn3a54dx2gsboac8s02bauc248naxx.xyz
de-id1877au901501fj82a7fnat9bhwhboa8ss02bauc248naxx.xyz
de-id1877au901501fj82ca7cf2nas9bswsdfhaswhboa802bauc248naxx.xyz
de-id1877au901501fj82ca7fnas9sbssdfhswahboa802bauc248naxx.xyz
de-id1897ajje9021ucn9021345345b0juah10zb1092uhda.xyz
de-id1897ajjed9021uc421sn9345514ah10zb4351092uhda.xyz
4107e577.payment.refinedwebs.com
banking.sparkasse.de-id-19dhjb732ba9nabcz29acb78s21acz19icnba7s.xyz
banking.sparkasse.de-id1877au901501fj82a7fn3a54dx2gsboac8s02bauc248naxx.xyz
banking.sparkasse.de-id1877au901501fj82a7fnat9bhwhboa8ss02bauc248naxx.xyz
banking.sparkasse.de-id1877au901501fj82ca7cf2nas9bswsdfhaswhboa802bauc248naxx.xyz
banking.sparkasse.de-id1877au901501fj82ca7fnas9sbssdfhswahboa802bauc248naxx.xyz
banking.sparkasse.de-id1897ajje9021ucn9021345345b0juah10zb1092uhda.xyz
banking.sparkasse.de-id1897ajjed9021uc421sn9345514ah10zb4351092uhda.xyz
e186aeb2.news.pocketstay.com
ella.purecaremarket.su
webworks.nepila.com
windscribe.s3.us-east-2.amazonaws.com
