# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: anubis, nautilusbot, alcon builder, zanubis

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/google-play-apps-drop-anubis-banking-malware-use-motion-based-evasion-tactics/

areadozemode.space
aserogeege.space
dingpsounda.space
dosandiq.space
firstdoxed.space
hdfuckedin18.top
nihaobrazzzahit.top
oauth3.html5100.com
privateanbshouse.space
project2anub.xyz
projectpredator.space
protect4juls.space
scradm.in
seconddoxed.space
selectnew25mode.space
taiprotectsq.xyz
twethujsnu.cc
uwannaplaygame.space
wantddantiprot.space
wijariief.space

# Reference: https://twitter.com/0xabc0/status/1072523751902842882

androidclay.net
companiesaasental.work
dawrawscyas.com
fhasadadu.in
finatop25.space
justdomain.space

# Reference: https://www.fortinet.com/blog/threat-research/new-wave-bianlian-malware.html
# Reference: https://www.virustotal.com/gui/ip-address/178.132.78.147/relations
# Reference: https://www.virustotal.com/gui/file/bcd06138c32c72d7805e7586410aa22110cc4dbd68fe23c0bd3713640eda623c/detection

creative-cool.net
hookah.works
divan.services
legal-life.foundation
ozelders-ahmethoca.casa
tombaba.club
tomcat-1.to
tomcat-us.com
tomcat.best
tomcat.live
tomcat.to
tomscat.to
uzipool.pw
tomcatdomains.page.link

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/anubis-android-malware-returns-with-over-17000-samples/
# Reference: https://otx.alienvault.com/pulse/5d2395b2c7176db2a979b938

blackleaf.top
firstdoxed.space
ktosdelaetskrintotpidor.com
lskbfidsbvkjsfgakfjsdffsdfupdate.net	
marksteylor.us
ndudetto.top 
playclints1.space
sositehuypidarasi.com

# Reference: https://twitter.com/PRODAFT/status/1108263404781912064

colbrte.top

# Reference: https://twitter.com/PRODAFT/status/1110807911280922624

boxtools.net

# Reference: https://twitter.com/ViriBack/status/1139714810092904448

hannnnax.top

# Reference: https://twitter.com/0bfusCat/status/1191293661415428096
# Reference: https://www.virustotal.com/gui/ip-address/27.254.33.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/35.188.192.191/relations

http://27.254.33.56
http://35.188.192.191

# Reference: https://www.virustotal.com/gui/domain/yuyuhakusho.info/relations
# Reference: https://www.virustotal.com/gui/file/3fb55b8a5e613c3eb8354796ab3e0c4927686568da00815fa6af1e08ce01c571/detection

yuyuhakusho.info

# Reference: https://www.virustotal.com/gui/file/5b48d6813adf43b784b273ecc93d1ca071b79ac3b0d7ab3579e16f791e8d5c34/detection

vityamuibk.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/d787a51abfa7113c0b7260793ab54fe6fd3c0121d6d75ff57af0064deab6fd24/detection

svetaperov.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/domain/sss17sss.ru/relations

sss17sss.ru

# Reference: https://www.virustotal.com/gui/domain/sss10sss.ru/relations

sss10sss.ru

# Reference: https://www.virustotal.com/gui/domain/3n0rmous.xyz/relations

3n0rmous.xyz

# Reference: https://www.virustotal.com/gui/ip-address/47.56.114.152/relations

aasd.xyz
firebug.online
pozhsoyuz.site

# Reference: https://twitter.com/dubstard/status/1237282412054413312
# Reference: https://twitter.com/LukasStefanko/status/1237300467161538560

santander-movilsecure.info
r7ssh1ng.xyz

# Reference: https://twitter.com/500mk500/status/1237402626532278275

zxc.global

# Reference: https://twitter.com/JAMESWT_MHT/status/1238375580057419778

coronaviruscovid19-information.com

# Reference: https://twitter.com/1ZRR4H/status/1239751485312970753

coronavirus-apps.com

# Reference: https://twitter.com/ESETresearch/status/1239820488110718976

coronavirusapp.site

# Reference: https://twitter.com/LukasStefanko/status/1239899416598843393

update-apk.net

# Reference: https://www.virustotal.com/gui/ip-address/8.208.19.185/relations

rootbot.ug
vor.ug

# Reference: https://twitter.com/m0br3v/status/1243822579196088320
# Reference: https://twitter.com/LukasStefanko/status/1257696107406204928

v-lert.com
mandamientos.ga

# Reference: https://twitter.com/DrStache_/status/1244580484073623552

botnew.ug

# Reference: https://twitter.com/DrStache_/status/1244699819500806147
# Reference: https://pastebin.com/u0tmn67x

http://185.117.90.9
http://147.135.170.169
http://162.241.65.149
http://185.20.184.50
http://194.58.92.30
http://195.230.23.26
http://198.23.236.114
http://209.250.239.168
http://217.107.34.192
http://217.12.208.13
http://34.90.99.193
http://45.159.188.44
http://46.17.104.140
http://5.39.217.240
http://5.45.70.149
http://54.38.175.231
http://63.250.42.96
http://63.250.45.48
http://94.103.94.56
http://95.217.32.209
adsenseservices.online
aliexpress.spb.ru
aloproton.top
bestmix.ga
yobit.press
superbeer1989.top

# Reference: https://twitter.com/ReBensk/status/1243895116097560587

dw.mailbux.site
vestwareta.temp.swtest.ru

# Reference: https://twitter.com/ReBensk/status/1243889895136997376

betaavantajlari.com

# Reference: https://twitter.com/ReBensk/status/1242820463031726080

weatherr.xyz

# Reference: https://twitter.com/apkdetect/status/1246459199460171776

vestna1975.xyz

# Reference: https://www.virustotal.com/gui/domain/hertzo.xyz/relations

hertzo.xyz

# Reference: https://twitter.com/ReBensk/status/1249645490192281601

rapmusicstyle.xyz

# Reference: https://twitter.com/pr3wtd/status/1250096277276315650

subesizislemlercom.cf

# Reference: https://www.virustotal.com/gui/file/0ab6fb467983a230a2bff00c29bfcbaee76cfe2dfa2ec71d77570e56f0ab2e0b/detection

your-truth.club

# Reference: https://www.virustotal.com/gui/domain/sytkalona.com/relations

sytkalona.com

# Reference: https://twitter.com/SmashTheKernel/status/1250788303512756225

covid-saglikbakanligi.com

# Reference: https://twitter.com/LukasStefanko/status/1250815254914895875

http://192.243.102.56

# Reference: https://twitter.com/ReBensk/status/1251202340830556161
# Reference: https://www.virustotal.com/gui/domain/medikalipla34zza11.com/relations

keeplive2.cc
medikalipla34zza11.com

# Reference: https://twitter.com/SmashTheKernel/status/1251204405506039808

ozkandan.com

# Reference: https://twitter.com/SmashTheKernel/status/1251546640806219780

evndekalkap8gb.com

# Reference: https://twitter.com/SmashTheKernel/status/1251592343117053952

evdekal20gbdestektr.com

# Reference: https://twitter.com/dubstard/status/1251745907147710464

xn--evdekalsengblardusunme-0ld.com

# Reference: https://twitter.com/SmashTheKernel/status/1251958264700510210

gazolcer.com
hayatevesigarturkiye.com

# Reference: https://twitter.com/SmashTheKernel/status/1251969918075113474
# Reference: https://www.virustotal.com/gui/file/5a5ec74af1b5638f343aafb27d79f55c6af366a31d361beaab027865ad1c8a19/detection

hayatevesigarturkcell.com
subesizbankabasvurusu.ml

# Reference: https://twitter.com/malwrhunterteam/status/1252549899381608449

ortakoporotör.com

# Reference: https://twitter.com/mertcangokgoz/status/1252907971866251269

hediyegapsinternet.com
tryagain.beget.tech

# Reference: https://twitter.com/mertcangokgoz/status/1252999575188758530

dedecom.ga
sosyaldestekcom.ga

# Reference: https://twitter.com/ReBensk/status/1253185302673289217

malgagarsos.sc.ug
worlgarebudd.ga

# Reference: https://twitter.com/mertcangokgoz/status/1253244997530419201

evdekalan20gbkazaniyor.com

# Reference: https://twitter.com/ReBensk/status/1253303545681625091

evdeinternetinvar.com

# Reference: https://twitter.com/ecarlesi/status/1253441825593085953
# Reference: https://twitter.com/500mk500/status/1253446081029046273
# Reference: https://www.virustotal.com/gui/file/707ecce8a160caf203c624629b0fa207cf6b57a1929aa795a9631129cc2949a4/detection

sabunlu.com

# Reference: https://twitter.com/mertcangokgoz/status/1253606439106600960

hediyeinternetpaketim.com

# Reference: https://twitter.com/mertcangokgoz/status/1253608999024558081

evdekal20kapgb.com

# Reference: https://twitter.com/mertcangokgoz/status/1253610464950603776

hayatevesigar-10gbnetkazan.com

# Reference: https://twitter.com/ReBensk/status/1254035434436308992

hayatevesigarturkiyem.com
subesizbankabasvurusu.ml

# Reference: https://twitter.com/AdemOzcan68/status/1254507257427001345

10bwr.com
sendekurtul.com

# Reference: https://twitter.com/malwrhunterteam/status/1254851984873738242
# Reference: https://www.virustotal.com/gui/file/bdfff045b60c28c2a8b8bbc21affd27dac725b506aaa8be1c891ce9aea3242f8/detection

durancamberk.com
kampanyainternetbasvuruevindekal.com

# Reference: https://twitter.com/malwrhunterteam/status/1255014881687941120

hediye-internet-saglik.org

# Reference: https://www.virustotal.com/gui/file/94b0ce7f4772f14203318fac3ef734d548583101756651cbc8327559aa8e87f3/detection
# Reference: https://www.virustotal.com/gui/file/4ff87869291823ebd48a52547327fdc6fa5d9f7aa5b12e64188cb6ab877d1c9b/detection
# Reference: https://www.virustotal.com/gui/file/9939fd0cc06eb401f9cd0dfeea84548b2f3dd1080db5ff808a99a5ab684b54eb/detection
# Reference: https://www.virustotal.com/gui/ip-address/8.208.10.238/relations
# Reference: https://twitter.com/500mk500/status/1255107451755642881
# Reference: https://pastebin.com/iA2rCVWM

aircool.club
bigbi.club
bigmomy.club
bigpapy.club
buckett.club
corpuss.club
da-blay.club
daayfaan.club
deepcooling.club
doom-hammer.club
ebaka.club
erivberiuvvr4.club
eyser.club
faandaay.club
farfors.club
hapy.club
hebdnesjnjdjnsnn.club
karantin.club
klaviatura.club
lamabot.club
logitekh.club
makakaka.club
mixjuice1.club
monitorer.club
morpeh.club
nehodi.club
netrogai.club
oblochniytchelovek.club
odins.club
ozeroo.club
perevodchiks.club
platina3.club
popugai.club
pothta.club
proton236.club
raketas.club
raskolbas.club
sport219.club
sutrablin.club
tailand.club
tchelovekoblako.club
thailands.club
tututu.club
vards.club
vitel.club
your-truth.club
zadrots.club
zaebali.club
zalman.club
zlos.club
zotac.club

# Reference: https://twitter.com/ReBensk/status/1255733724831870976

muhtesem20gb.xyz

# Reference: https://twitter.com/mertcangokgoz/status/1255769217376419846

kazanin20gbturkiye.com

# Reference: https://twitter.com/mertcangokgoz/status/1255771473295413248

hediye-internet.site

# Reference: https://twitter.com/mertcangokgoz/status/1255770609503657990

xn--20gb-tanmla-kullan-l0c.com

# Reference: https://twitter.com/malwrhunterteam/status/1255776900926095360

updateflashplayer.link

# Reference: https://twitter.com/mertcangokgoz/status/1255834722699182082

hediyem20gb-internet.org

# Reference: https://twitter.com/mertcangokgoz/status/1255841829481824256

www-ecimer-uygulamayukleme-govtr.com

# Reference: https://twitter.com/mertcangokgoz/status/1255885022923554819
# Reference: https://www.virustotal.com/gui/file/5f04f7b808154a6ee2fe058b68c0078ee6fea308e80e05062a83b82d9fb70ee5/detection

saglikodemelerinial.org

# Reference: https://www.virustotal.com/gui/ip-address/91.211.247.69/relations

0090ofis.com
01aga01.com
10ajans.com
10bpy.com
10bwr.com
112165.com
1161253.com
123043.com
138070.com
1498tl-devletdestegi.com
16brs61.com
175ttt.com
1via1.com
2300empire.com
27ank37.com
2bky.com
2fikrr.com
2va2.com
331363.com
34aga34.com
34bbv87.com
34brs07.com
34brs45.com
3jsufi.com
3nazi.com
3zer0.com
444blue.com
4545544m.com
4ensik.com
50meetnik.com
512sup.com
77996688.com
858961.com
905mma.com
971970.com
9fail.com
akeirde.com
akemirde.com
akerede.com
akimadern.com
akrde.com
akrede.com
akserl.com
alabeni.com
alacaa.com
albaros.com
apakdryi.com
ardenlev.com
asemi2.com
asemi3.com
asemi4.com
asemiler.com
asemiler1.com
ashleywalkerfuns.com
aslanyarim.com
aslemir.com
aslemirem.com
aslemiren.com
asmadern.com
asmadernli.com
asmiller1.com
asmiller2.com
azdkrede.com
azkrede.com
baykuus.com
benceee.com
biterzi.com
boyartemi.com
bulacaa.com
bulakaa.com
cakirim.com
calliofis.com
catemik.com
ceekicc.com
cemhayta.com
cenyhub.com
cirmik.com
clogwars.com
curaxpertiz.com
dedelik.com
derick43.com
diray26.com
direksiyondersiozel.com
dizindir.com
durubey.com
efrisuren.com
ekopaket-turkcell.com
elievarsen.ru
enuygunkaskovesigorta.com
eserkafes.com
filekeso.com
filojones.com
finecures.com
fiyaxper.com
fuluxpeer.com
gamefilo.com
gazolcer.com
gelberiberi.com
gelinciik.com
gidabilem.com
gobigonbig.info
gocmenyapi.com
grepolis-download.space
halasturizm.com
hangikapi.com
hangisaat.com
hanimkadin.com
haszemin.com
havug.net
havuj.net
havum.net
havup.net
havux.net
hawua.net
hawue.net
hawur.net
hawus.net
hawuw.net
hepimizbirolduk.com
hispanoles.com
iadebasvuru-uygulamasi.com
imailz.site
iqos06.com
isbrs.com
izcimedya.com
izlema.com
izleseneq.com
izniksanat.com
kadzimagenius.com
kaktuus.com
kamborus.com
kapsla.com
karacaa.com
katemik.com
kayinbirader1453.com
kayinco1453.com
kaynana1453.com
kirkiladze.com
kitkattt.com
ledger-live.com
legendoffline.com
loraw.net
lpgci.com
lusiform.com
madernl.com
madernli.com
makaraa.com
marilem.com
maritosrickytos.com
matemik.com
meetnik.com
menendi.com
mkerli.com
mkerli1.com
mkerli2.com
mkerli3.com
mkerli4.com
mkrle2.com
mkrle3.com
modakombini.com
mrkerli4.com
mrkerli5.com
muhtarcim.com
nebube.com
nebuterso.com
nogmorba.com
offlinelegendsworld.com
ofismiz.com
onelegends.com
onlinearabul.com
oyunkafesi.com
oyunmekanin.com
palyoncoduragi.com
panoarmarf.com
parfumodax.com
pastayapimi.com
pataraa.com
peribotici.com
petbor.com
pirkettin.com
playme.lt
posfatura.com
profotomotiv.com
pwuclan.com
qiguanz.com
rahatolla.com
rahaxper.com
rentacarkiralama.com
rimbelzi.com
ruhsatsepeti.com
ruyaxper.com
saansaar.com
sabunlu.com
saglikgovtr-destek-basvuru.com
sahinkucuk.com
seawtex.com
seercee.com
sefburada.com
semrdf.com
sendekurtul.com
sepinoza.com
silenceoffmusic.com
silencoffhub.com
sinavbasarisi.com
sintakper.com
sivonsaki.com
smadernli.com
spaltindustries.com
swaatex.com
swatsheeel.com
swatsheel.com
syzsernfl.com
takasii.com
tircekici.com
tizamedya.com
toorunn.com
ucuzataksi.com
ucuzbilisim.com
unimasa.icu
ustalaryapi.com
uzaybilgi.com
uzunparlamentpolat.com
vault.ug
viktor2.com
winyor.com
wmkolik.com
xblunter.com
xshapo.com
yakacaa.com
yapmabe.com
yawak.net
yazpet.com
yerax.net
yerox.net
yetisge.com
yewax.net
yutmak.com
yuvamkonut.com
zennabe.com
zennabe1.com
zermnf.com
zermnfl.com
zernfl.com
zhrtarif.com
zilekezo.com
zinfaktoreliz.com
zizaxper.com
zlwkn.com
zmkrle1.com
zmkrle2.com
zsernfl.com
zukaxper.com

# Reference: https://app.validin.com/detail?find=185.38.19.64%2F28&type=ip&ref_id=f9d7e4535b7#tab=resolutions (# 2025-06-16)

150fbblun.com
1800drycleanrochester.com
1to19.com
1w-wwwbbvacontinentalpe.com
1xbet98668.com
22mils.com
240options.com
28aol.com
28smile.com
2barron.com
2shakupac.com
2vscorp.com
388sports.com
3ds-casa.com
3dychy.com
3g1g.com
3m1m.com
4042bets10.com
419scamexpert.com
4ve4.com
aaitin.com
ahlialey.com
ahmajarine.com
aleleca.com
alloeca.com
amancoian.com
anabith.com
anerloe.com
ankaseney.com
auconmin.com
avehayander.com
benairiel.com
briliean.com
brisoria.com
brybrinity.com
caropher.com
casydelfer.com
ccajais.com
cehunline.com
cofairon.com
cojesson.com
coleegail.com
dajesea.com
dechhaylie.com
denjengail.com
dieronon.com
ditianna.com
drdanalyn.com
dyrahnorssa.com
elthyayla.com
ewlie.com
exaanyah.com
fiaalyony.com
ganchroriel.com
ganjoren.com
grajasrian.com
hiwuz.com
ianoliley.com
iapatam.com
jalaunie.com
jasganah.com
joashmn.com
jorchgeson.com
julerson.com
lebrine.com
leelella.com
leluridan.com
lieraan.com
lilemian.com
lilierick.com
liteahatt.com
liyatt.com
llahnaphia.com
loahvin.com
luthoen.com
lynelica.com
lynmaden.com
mabeexan.com
maexteline.com
mahamaea.com
mamerine.com
manlynph.com
mekejuscas.com
mimianiel.com
nahmnry.com
namarlymuel.com
natianxis.com
radiain.com
riasonlie.com
rodcu.com
saneamren.com
senanity.com
senaronssa.com
stellaleo.com
taicaly.com
thtoley.com
tianharon.com
trianmin.com
zaayla.com
zavieram.com

# Reference: https://twitter.com/mertcangokgoz/status/1256137772060102665

ramazanda20gb.xyz

# Reference: https://twitter.com/mertcangokgoz/status/1256134646997438470

ramazanda20.site

# Reference: https://twitter.com/mertcangokgoz/status/1256133761911193600

20gbinternet.gratis

# Reference: https://twitter.com/mertcangokgoz/status/1256159729581244417

20gb-internet-kullan.com

# Reference: https://twitter.com/mertcangokgoz/status/1256160173137301504
# Reference: https://twitter.com/ReBensk/status/1256206619303526401

20gbkazanmafirsati.com

# Reference: https://twitter.com/mertcangokgoz/status/1256161070311505925

evdehayatvar-20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1256161999505043457

faturali-faturasiz20gb.com

# Reference: https://twitter.com/malwrhunterteam/status/1256307456260689920

http://81.177.140.138

# Reference: https://www.virustotal.com/gui/ip-address/81.177.140.138/relations

xyz5xyz.ru

# Reference: https://twitter.com/mertcangokgoz/status/1256508745749798917

saglikbakanligi-destek.org

# Reference: https://twitter.com/mertcangokgoz/status/1256504467186487297

ramazan20gbinternet.com

# Reference: https://twitter.com/mertcangokgoz/status/1256505382542991362

hediye20gb.online

# Reference: https://twitter.com/malwrhunterteam/status/1256484118566785024

kimbaktiprofilime.com

# Reference: https://twitter.com/W3B_B3ND3R/status/1237694235748577280
# Reference: https://www.virustotal.com/gui/ip-address/27.254.33.56/relations

/Anubis%202.5/

# Reference: https://twitter.com/mertcangokgoz/status/1256855384901464065

hediyepaket20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1256932429044109314

saglikbakanli-hediyeinternet.org

# Reference: https://twitter.com/malwrhunterteam/status/1257194073330507781

donoffermaster.best

# Reference: https://twitter.com/ReBensk/status/1257150225291988992

ramazangeldi20gbinternet.com

# Reference: https://twitter.com/ReBensk/status/1257149765810180097

kcc.earth

# Reference: https://twitter.com/mertcangokgoz/status/1257242805174505472

hediyeinternetpaket.com

# Reference: https://twitter.com/mertcangokgoz/status/1257242452970344448

xn--20gb-hediyefrsati-nvc.com

# Reference: https://twitter.com/mertcangokgoz/status/1257273505483231235
# Reference: https://twitter.com/mertcangokgoz/status/1256225541495173123

1000tl-iade-aidatodeme.com
1000tldesteksistemi.com
10gbps.store
1498tldevletdestegi.com
1gb-internet.hemenyukle.online
20gb-evdekaldiye.com
20gb-gratis-telecomunicazioni.org
20gb-internet-kullan.com
20gb-internet.org
20gb-internett-kullan.com
20gb-korona2020.com
20gb-tanımla-kullan.com
20gbaktiflestirturkiye.com
20gbhayatevesigar.com
20gbhediye-internet.com	
20gbhediye-internet.net
20gbhediye-saglikbakanligi-onayli.com
20gbhediye-saglikbakanligi-onayli.online
20gbhediye-yukle.com
20gbhediyeanindasende.com
20gbhediyeinternetim.site
20gbhediyepaket.com
20gbhediyesaglikbakanligionayli.com
20gbhediyeyukle.com
20gbhediyeyukle.online
20gbhediyeyukle.org
20gbinternet-evdekal.com
20gbinternet-hediyem.net
20gbinternet.gratis
20gbinternet.online
20gbkazanmafirsati.com
20gbkazanturkiye.com
20gbramazanhdyesi.online
2500tl-kartaidatlarini3dileode.org
30gbinternet.com
30gbinternet.online
30gbpaket.net
40gb-internet.com
aninda30gb.com
aninda30gb.info
bedava20gbramazan.info
campangna20gb.gratis
cimer-20gbhediyeinternet.com
cimer-2500tlonlinekartsorgulamagovtr.com
cimer20gbinternetpaketi.tk
devletonayli-20gbyukle.tk
devletonayli20gbhediye.tk
evdehayatvar-20gb.com
evdekal-20gb.com
evdekal-20gbkazan.com
evdekal-birysel-giristr.net
evdekal-kampanyasi20gbhediye.com
evdekal-kampanyasi20gbhediye.org
evdekal20gbkampanya.tk
evdekal20gbkampanyamerkezi.tk
evdekal20gbkazan.com
evdekal20gbkazan.net
evdekal20gbyukle.tk
evdekaldiye.com
evdekaldiye20gb.com
faturali-faturasiz20gb.com
hayatevdevar20gb.com
hayatevesigar-20gb.com
hediy20gb-internet-online.net
hediye20gb.online
hediyeinter.net
hediyeinternet.website
hediyeinternet20gb.com
hediyeler10gb-ramazan.net
hediyelerkazan-evdekalturkiye.org
hediyem-20gbinternet.org
hediyem20gb-internet.net
hediyem20gb-internet.org
iletisimbaskanligi20gbpaket.com	
indirtanimlagelsn20gb.net
info20gb.com
internet-20gb-saglik.com
internet-20gb-saglik.online
kazanin20gbturkiye.com
kazanturkiye20gb.com
kazanturkiyem20gb.com
mobil-internetpaket20gb.com
muhtesem20gb.xyz
muhtessemramazan20gb.com
mujdepaket20gb.com
ramazan-hediyesi10gb.net
ramazan20.site
ramazan20gbinternet.com
ramazanayihediyesi3aylar.net
ramazanda20.site
ramazanda20gb-trtr.com
ramazanda20gb.xyz
ramazanda20gbhdye.online
ramazanda20gbkampanyasi.com
ramazanda20gbsizlerehediye.com
ramazanda20gbsizlerehediyelerimiz.com
ramazanhediyeniz20gb.com
ramazanhediyenizialin.com
ramazaninternethediyesi.com
saglikliramazanda20gb.com
sende-yararlan20gb.com
sendeyararlan20gbdan.com
sendeyararlannturkiye20gb.com
sendeyararlanturkiye20gb.com
sinirsizpaket-heryone20gb.com
sizdeyararlanin20gbdan.com
sizeozel20gbinternet.com
tumoperatorlere20gb.com
turkcell20gbinternetiniz.net
turkcellden20gbsizlere.net
turkcelldeninternet20gb.net
uygulamahediyelerimiz-20gb.net
uygulamahediyelerimiz20gb.org
xn--20gb-hediyefrsati-nvc.com
xn--20gbhediye-interneti-karma-ekc68r.net
xn--maliyebakanl-20gbhediye-ned36bb.net
xn--salkbknl20gb-hediye-6ucg40bfb.net

# Reference: https://twitter.com/ReBensk/status/1257290843419009025

www-cimer-mobiluygulama.com

# Reference: https://twitter.com/malwrhunterteam/status/1257651750082920449

tellerbackseat.club

# Reference: https://twitter.com/mertcangokgoz/status/1257646190881116161

10bpy.com
20-gbinternetbedava.net
20gbnetim-bedava.net
campana20gb.com
ektarifem20gb-indirimli-turkcell.com
evde-kal20gb.online
iletisim20gbmobil.com
paketlerimiz20gb.com
ramazanayihediyesi10gbcepte.net
ramazandaiadeleriniz.online
ramazandestekyardimlasma.net
ramazanhediyesi-10gbhediye.net
resmi-aidat-iade-alma.org
saglik-bakanligi-20gb-hediye.online
saglik-bakanligi-20gb.com
www-cimer-mobilgirisyeni-gov-tr.com
www-internet-20gb-saglik.online
xn--campaa20gb-x9a.com

# Reference: https://twitter.com/malwrhunterteam/status/1257728763913175040

yandexclou.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/ip-address/8.209.72.246/relations

keeplive2.cc

# Reference: https://twitter.com/malwrhunterteam/status/1258300139372007424
# Reference: https://www.virustotal.com/gui/domain/xyz7xyz.ru/relations

xyz7xyz.ru

# Reference: https://twitter.com/ReBensk/status/1258368269720797190
# Reference: https://www.virustotal.com/gui/file/a2c69b3dec41122fef36c061d26ac69a2234f0ecab1ee6876d801dca52800efc/detection

www-cimer-mobilapk.com

# Reference: https://twitter.com/SmashTheKernel/status/1258641094369251328

20gbinternetevdekal.com
blueeyes.top
silverain.top

# Reference: https://twitter.com/malwrhunterteam/status/1258666135412715520

bizbizeyeteriz20gb-hediye.net

# Reference: https://twitter.com/ReBensk/status/1258999729222008835

saglikbakanligindan-destek.net

# Reference: https://twitter.com/mertcangokgoz/status/1258772156474851328

1000tlpandemibasvurusu.com
1000tlpotdemibasvurusu.org
20-gbinternetevdekal.com
2023iade-taleplerims.org
20gb-evdekal.com
20gb-evdekalbirlikteyiz.com
20gbinternet-senevdekal.com
20gbinternetevdekal.com
20gbnet-paketim.net
20gbpaket-indirimli-turkcell.com
20gbtarife-indirimli-turkcell.com
20gbucretsizinternetkampanyasi.com
30gbhediye.com
30gbinternethediye.com
30gbsanaozel.com
aidatodeme-hizmeti.com
ailesosyalyardimbakanligi-sosyaldestek.org
anketkurumsal.com
anketkurumsal.xyz
bolbol25gb.net
evde-kal-turkiye.com
evde-kal20gbkazan.com
evde-kaldiye20gb.com
evdekal-20gbinternet.com
evdekal20-gbkazan.com
evdekal20gb-hediye.com
evdekal20gb-internet.com
evdekal20gb-kazan.com
evdekal20gbhediye.com
evdekal20gbyukle.com
evdekalana20gb.online
evdekalbedavainternetinikap.com
evdekaldiyebedavanet.com
evdekaltowel.com
evdekalyeter.online
hediye-kutusu20gb.net
hediye30gb.com
hediye30gbinternet.com
hediyebahari.net
hediyesesepeti.xyz
ikramiramazan10gbtrweb.com
indirimli-20gb-turkcell.com
indirimli-20gbinternet-turkcell.com
indirimli-20gbpaket-turkcell.com
mobile20gbgratis-internet.com
ramazan-hediyeniz10gb.com
ramazanhediyeleriniz10gb.com
ramazanhediyesi-10gbinternet.net
sanaozel30gb.com
sarayhediye.com
seferberlik20gb.com
sen-evdekal20gbkazan.com
senevde-kal20gbkazan.com
senevdekal20-gbkazan.com
senevdekal20gb-kazan.com
senevdekal20gbkazan.com
sosyaldesteknet.com
sosyaldestektaleplerionline.org
sosyeldestekonlineislemlerim.net
tc20gb-desteknetpaketi.org
tr-hizmetlerim-kontrol.org
tr-kontrolhizmetlerim.org
trthizmetleri.com
tumoperatorlere20gbdestek.com
tumoperatorlere20gbhediye.com
turkcellhizmet.com
turkishgovtr.org
turkiye-evdekal.com
vatandasdestek.com
xn--evde-kal-trkiye-8vb.com
xn--saglkbakanlg20gb-dqchb.com

# Reference: https://twitter.com/ReBensk/status/1259146097978564609

boxberry1.ru
promo-betcity.info

# Reference: https://twitter.com/malwrhunterteam/status/1259158214517633024

evdekalinternetinbizden.com

# Reference: https://twitter.com/malwrhunterteam/status/1259165644475547651

edevlet-destek20gb.net

# Reference: https://twitter.com/ReBensk/status/1259483496327729159

5ka-bonus.ru
steam.ug

# Reference: https://www.virustotal.com/gui/ip-address/217.8.117.7/relations
# Reference: https://twitter.com/malwrhunterteam/status/1271873903955193857

http://217.8.117.7
android.ug
cheat.ug
hvncroot.ug
loaderprivate.ug
superbot.ug

# Reference: https://twitter.com/ReBensk/status/1259742801060753408

senevdekaldiye-hediyeinternet.com

# Reference: https://otx.alienvault.com/pulse/5eb5dc29f93f6c29a4d710fa

aboutyukle.net

# Reference: https://twitter.com/ReBensk/status/1259767180486467585

reklamunet70.xyz

# Reference: https://twitter.com/SmashTheKernel/status/1259802866522488832

binsletr.net
yuklesm.org

# Reference: https://twitter.com/SmashTheKernel/status/1259801643748667392

besieged.top
sen-evdekal20gbkazan.com

# Reference: https://twitter.com/malwrhunterteam/status/1259805343544156160

btc-chenger.site

# Reference: https://twitter.com/mertcangokgoz/status/1259808237064458241

saglikgovtr-aileleredestek.net

# Reference: https://twitter.com/ReBensk/status/1259812051737772032

yandexmai3.temp.swtest.ru

# Reference: https://twitter.com/mertcangokgoz/status/1259791288582488064

10gb-evdekal-duyurutrweb.com
1498tldevlettendestek.com
1ogbevdekal-duyuru-webtr.com
1ogbvevde-kaltrgiris-duyuru.com
2023iade-bilgilerims.com
2023iade-talep-bilgilerim.com
20gbhediye.com
20gbinternetbizdensizleregelsin.com
20gbtarifem-indirimli-turkcell.com
20gbtarifen-indirimli-turkcell.com
30tlbedavabonus.site
aidat-geri-odeme-basvurusu.com
aidat-geri-odemesi-basvuru.com
aidatbasvurgirisi-turkiyegovtr.com
aidatbasvurmagiris-turkiyegovtr.com
aidatbasvurugirisi-turkiyegovtr.com
aidatbasvurulari-turkiyegovtr.com
aidatbasvurumerkezi-turkiyegovtr.com
aidatgeriiadebasvur.com
aidatiadedevlet.com
aidatsistemhizlmetleri-online.com
bankakampanyalari.net
bedava-host.com
bedavaweb.net
bilisimcumhuriyeti.com
cumhurbaskanlik1002.com
e-basvuru-islemi.com
e-govtr-karaname.net
edevlet-aidatodeme.com
edevletbankakredimerkeziaidatiadeleri.com
edevletbasvurulari-hibedestek.com
edevletdestek-paketlerionline.com
edevletimaidem.com
enparaozel-8yil.com
enparaozel8yil.com
eporta-aidathizmeti-gov-tr.com
eportal-aidatodeme-gov-tr.com
ettnet-kampanya.site
evdekal-tr10-gbweb.com
evdekal20gbcimer.com
evdekal20gboperator.com
evdekaldiyeturkiye.com
evdekalinternetinbizden.com
evdekl50gbkznn.net
fenomenkampanya.com
finansbanka.com
garantilialisveris.com
hazinebakanligivatandasportal.com
hediye20gbtr.com
heray-internetbizden20gb.com
herkese20gbveriyoruz.com
indirimli20gb-internet.com
indirturkiye.com
instapaketim.com
kartaidatsistemionline-hizmetler.com
kartiadeaidatmujde.com
kolaymobilodemebozdur.com
krediet-online.com
kurumsalfinans.net
lg-destek-servisi.com
limitsiz20gb-paket.com
maliyehazinebakanligi.com
netal10gbkampanyanet.com
ramazanbereketi10gbhediye.com
ramazanda-evdekaldiye10gb.com
ramazandaiadelerbasladi.com
ramazanhediyepaketi10gb.com
ramazanpaketi10gb.com
ramazansenlikleri1ogb-webtr.com
saglik-bakanligi-evdekal-20-gb-kazan.com
saglik-bakanligi-evdekal-20gb-kazan.com
seferlik-20gb.com
sende20gbkazan.com
senevdekal-turkiye.com
seninbedavahostingin.com
trttkatkipayigovtr.com
tumoperatorlere20gb-devletten.com
turkcell.tel
turkiyesaglikbankasi.com
www-cimer-mobiluygulama-govtr.com
www-cimer-mobiluygulamasi-govtr.com
www-garantibbva-yenilenenmobilesube.com
ziraat-maliyebakanligi.com
ziraatiledevletfon.com
ziraatmaliyebakanligi.com

# Reference: https://twitter.com/SmashTheKernel/status/1259829607638933505
# Reference: https://www.virustotal.com/gui/ip-address/8.208.89.250/relations

hemamasm.com
mklammna.com
yasimmena.tech
topleamna.com
krazmnnat.com
code-maj.com
senbugundeevdekaldiye.com

# Reference: https://twitter.com/ReBensk/status/1260056152965918720

ispartatr.com
yukletm.org

# Reference: https://twitter.com/DrStache_/status/1260183433168461824

brazzersmobil.tk

# Reference: https://twitter.com/ReBensk/status/1260426747771846656

backbone.top
nospoils.top

# Reference: https://twitter.com/ReBensk/status/1260502947680698368

20gbhediyetr.com

# Reference: https://twitter.com/ReBensk/status/1260530474583306240

alfabanksecurity.ru

# Reference: https://twitter.com/ReBensk/status/1260791061301137409

atakanhadixx.com
vatandas20gbportal.com

# Reference: https://www.virustotal.com/gui/file/b8d245b62fdb7370aaef0133b62c25c3eb60d2d0f15d8170b2255c26d489a589/detection

yerax.net
yerox.net
yewax.net

# Reference: https://twitter.com/mertcangokgoz/status/1261230003481608193
# Reference: https://twitter.com/mertcangokgoz/status/1261232094044475392

xn--saglk-bakanlg-20gbaktivasyon-1geib.com
yazpet.com

# Reference: https://twitter.com/mertcangokgoz/status/1261592317082906625

herkez20gbnetpaketi.com

# Reference: https://twitter.com/mertcangokgoz/status/1261628251044265984
# Reference: https://www.virustotal.com/gui/file/2a3beb3bd616facd2af9f19edda47128bfbc6229b1de0d82cac72a35d26da283/detection

1498tl-devletdestegi.com
dedelik.com

# Reference: https://twitter.com/mertcangokgoz/status/1262049550472065024

20gb-etkinligi.com
sevdi4485.beget.tech

# Reference: https://twitter.com/mertcangokgoz/status/1262058727726886912

xn--20gbnternethedyendowland-tvdk.com

# Reference: https://twitter.com/mertcangokgoz/status/1262107661857959942

saglikgovtr-destek1498tl.com

# Reference: https://twitter.com/mertcangokgoz/status/1262358998076002304

saglik-20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1262358999598596097

evdekal20gbdestek.net
yukle20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1262359001548931072

duyururamazan-x.com

# Reference: https://twitter.com/ReBensk/status/1262676640074657793

acsknight.com
hdfuckedin18.top

# Reference: https://twitter.com/malwrhunterteam/status/1262745341448732673

btkappmobil.com

# Reference: https://twitter.com/ReBensk/status/1262965621920280577

usyukle.com

# Reference: https://twitter.com/yusaerguven/status/1264056288591437824

alabeni.com
alacaa.com
benceee.com
bulacaa.com
izleseneq.com
karacaa.com
kitkattt.com
winyor.com
yapmabe.com
yetisge.com
uayukle.com
uyukle.com
uyukle.info

# Reference: https://twitter.com/yusaerguven/status/1264846690424623104

1498tlsosyallyardim.com

# Reference: https://twitter.com/ReBensk/status/1265865097966235648

aktivasyon20gbtanimlama.com

# Reference: https://twitter.com/jorgemieres/status/1266444202554114053

http://104.154.85.112

# Reference: https://twitter.com/ReBensk/status/1268144797149286407

20gb-kampanya.cf

# Reference: https://twitter.com/ReBensk/status/1268149780607369216

ramazanbayrami-20gb.cf

# Reference: https://twitter.com/ReBensk/status/1268390655732129793

hertanaotel.com

# Reference: https://twitter.com/ReBensk/status/1268798391355654144

bedava2020internet.cf

# Reference: https://twitter.com/yusaerguven/status/1268844182396952582

btkziraat.com
ziraatbtk.com

# Reference: https://twitter.com/malwrhunterteam/status/1268899165070860290

client876.4bo.ru

# Reference: https://twitter.com/ReBensk/status/1268916810272907265

http://185.212.131.244

# Reference: https://twitter.com/ReBensk/status/1269138543072489474
# Reference: https://www.virustotal.com/gui/file/82d91a59da4098406748ec6c46baad76b96678deb4fba7a1df19089abb56d699/detection
# Reference: https://blacklist.cyberthreatcoalition.org/vetted/url.txt

binsyukle.com
binsyukle.net
binsyukle.org
baykuus.com
bulakaa.com
ceekicc.com
evdekalinternetinhediyenet.com
iletisimbakanligi20gb.com
saansaar.com
seercee.com
takasii.com
toorunn.com
yakacaa.com

# Reference: https://twitter.com/ReBensk/status/1269603217861742592

btkdestekweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1269998642921910274

zap537679-1.plesk11.zap-webspace.com

# Reference: https://twitter.com/makflwana/status/1270605407765983232
# Reference: https://www.virustotal.com/gui/file/40fe3763fa3ccce836b38d7a1950450c306e892e10d84c255fcb4874fea49ca6/detection

annsuaa.xyz

# Reference: https://twitter.com/ReBensk/status/1272431573732937729

cumhur-sizee.com

# Reference: https://twitter.com/malwrhunterteam/status/1272560136981229575
# Reference: https://www.virustotal.com/gui/ip-address/185.33.87.29/relations

algfoo.info
appfw.info
aslfo.info
ddysff.info
dkkdglk.info
dskjds.info
eepepo.info
gercex.info
ggsduuee.info
hertzo.xyz
huygo.info
iieokk.info
iieuuw.info
iisusudo.info
iwwff.info
jehehyr.info
jjiuio.info
jjskdodo.info
jskfyy.info
kksleo.info
kksvoo.info
klllttre.info
kslllaoo.info
lewertop.info
lssme.info
ooeuroio.info
ooorty.info
oorecc.info
oppsppf.info
qalslo.info
qoodo.info
qoodpal.info
reeuruy.info
sllsoodl.info
tentus.info
tudfdsf.info
tyyeis.info
usdfiusdi.info
uukflk.info

# Reference: https://twitter.com/malwrhunterteam/status/1272847315762634753

aleynatilkiporn.com

# Reference: https://twitter.com/ReBensk/status/1273118838243168256

pandemi-destek-hizmeti.net

# Reference: https://twitter.com/malwrhunterteam/status/1275111481386950657

http://102.130.120.91

# Reference: https://twitter.com/benkow_/status/1275404262990807041
# Reference: https://pastebin.com/RqKJAP3G

http://31.210.173.212
http://37.46.131.122
http://45.10.219.8
http://45.141.84.36
http://46.30.41.186
http://5.8.88.193
http://51.68.106.164
http://91.218.114.11
http://91.243.80.13
http://91.243.83.121
http://91.243.83.145
http://91.243.83.16
http://91.243.83.34
http://91.243.83.72
http://92.63.192.163
http://92.63.192.55
http://92.63.192.82
http://92.63.192.89
http://92.63.192.90
http://92.63.197.136
http://92.63.197.42
http://130.0.235.205
http://176.119.1.94
http://185.130.104.241
http://185.139.70.14
http://185.189.13.46
http://185.224.132.254
http://185.254.120.127
http://185.254.121.178
http://185.254.121.28
http://185.254.121.36
http://185.254.121.82
http://185.254.121.87
http://185.8.177.138
http://185.81.99.228
http://188.130.135.50
10bwm.com
2dakkadadomain.com
abdola.host
androidsupdate.com
annsuaa.xyz
anu-send-bis.com
anubbbis.xyz
anubissaveurl.xyz
anubsavessl.xyz
anubupdate.xyz
auupdate.eu
baklaa31la.com
bankowo.biz
billdrop.la
borjomi-ge.club
br0unj.club
broundim.club
bumerbume2.temp.swtest.ru
cashbackfix.com
cashbacksend.com
cashbackstep.com
cashbackwork.com
cleanandr00.com
clockwartimes.hk
crazyfasting.icu
crazymonkey777.com
d3nbrabus.club
d4ft4rd4t.club
d8rabus.club
daayfaan.club
deathstars.lc
dedelik.com
doktorlar.com
domimantus.club
dominantuss.club
dopingself.cymru
dr1ft0n.club
dr44nfargu5.club
dramrainbow.top
ebuvseh.com
elka929.club
enterandquit.com
erestanperraxd.xyz
estopchik.top
ewrwsdfas.in
f4rgu5gr44n.club
f4td4ft4r.club
faandaay.club
flashnew111.top
floatbackjack.com
fress.xyz
fruss.site
genjutsu.ga
gethighreuus.xyz
giro69basss.top
gr1p0n.club
haadrigeh.xyz
hawue.net
hidra.club
hiyahowa.at
hiydra.club
iadebasvuru-uygulamasi.com
icecreamvanila.xyz
id1971723.xyz
id1971724.xyz
judnbas.eu
juzzgzazws.org
ksrfgcontstant.xyz
lastver4563.top
legalyusedstuffs.xyz
liuekk3ui.hk
loraw.net
lowermopejfgakvfhdjdj.site
melisacocuk.com
newtest456678.top
nnpowe.ug
opally.xyz
orishaoko.ml
pawanub.xyz
pestola.online
pinpong.top
piton77cm.top
pothta.club
pox1932kakoy.top
prenet.xyz
qestero.xyz
randomsage.work
rewwaresrm.temp.swtest.ru
rgcheaplogic.xyz
rumblll.xyz
rxetcryvtubyinurxetcryvtubyinumcryvetucaybnu.com
saveback.xyz
schvhost.us
sendback.xyz
setixx.xyz
sevdi4485.beget.tech
simplecashback.org
sonic-querry.com
sotermas.icu
sotermas.xyz
superbeer1989.top
sutrablin.club
tasteofseafood.xyz
tchelovekoblako.club
truesigma.wales
trytomyself.com
tvrp.pw
twitchggs.com
u36317.test93w.ru
vitel.top
yatinlan.com
yerax.net
yourdarkside.club
zones.systems
zxxxz.uno

# Reference: https://www.virustotal.com/gui/ip-address/84.38.183.65/relations

anubupdate.xyz
pawanub.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1276189703591604225

hesislemleri.com

# Reference: https://twitter.com/malwrhunterteam/status/1277680036510945282
# Reference: https://www.virustotal.com/gui/file/3a8f31b438fb9791c2e9ee56b3352cd6961e6de4658f7cb973eba0fb5cb402de/detection

alemmcukur.com

# Reference: https://twitter.com/andsyn1/status/1278304796076802048

www-ecimer-destek.com

# Reference: https://twitter.com/malwrhunterteam/status/1279301100512968704

5k-card.ru

# Reference: https://twitter.com/ReBensk/status/1279391963159179264

safepage.cloud

# Reference: https://twitter.com/ReBensk/status/1280121056141901829
# Reference: https://twitter.com/malwrhunterteam/status/1301141047679094784
# Reference: https://www.virustotal.com/gui/ip-address/160.119.253.194/relations
# Reference: https://www.virustotal.com/gui/ip-address/85.95.240.191/relations
# Reference: https://twitter.com/malwrhunterteam/status/1290633704176521216
# Reference: https://www.virustotal.com/gui/file/c2e5b10c477eab186af357c770bb899316eb7e5e9f02dd3caccd5df10863a974/detection

abodeaplayer.xyz
abodebplayer.xyz
abodecplayer.xyz
abodedplayer.xyz
abodeflaash.xyz
abodeflahsplay.com
abodeflahsplayare.xyz
abodeflahsplayere.xyz
abodeflahsplayire.xyz
abodeflahsplayre.xyz
abodeflahss.xyz
abodeflahsups.xyz
abodeflashplayre.xyz
abodeflasplayer.xyz
abodegplayer.xyz
abodehplayer.xyz
abodeiplayer.xyz
abodemplayer.xyz
abodenplayer.xyz
abodeoplayer.xyz
adbflplayers.xyz
adobe-player.biz
adobeaplayer.xyz
adobeaplayre.xyz
adobebbplayer.xyz
adobebplayer.xyz
adobebplayre.xyz
adobeccplayer.xyz
adobecplayer.xyz
adobecplayre.xyz
adobedplayer.xyz
adobedplayre.xyz
adobeeeplayer.xyz
adobeeflashplayer.xyz
adobeeplaayer.xyz
adobeeplayer.xyz
adobefaplayer.xyz
adobefbplayer.xyz
adobefcplayer.xyz
adobefdplayer.xyz
adobeffplayer.xyz
adobefgplayer.xyz
adobeflahsply.com
adobeflahsplyr.com
adobeflahssplayer.xyz
adobeflahsupdate.com
adobeflashplayerup.com
adobefllashplayer.xyz
adobeflplayer.com
adobeflshplyer.xyz
adobefplayer.xyz
adobefplayre.xyz
adobeggplayer.xyz
adobegplayer.xyz
adobegplayre.xyz
adobehplayer.xyz
adobeiplayer.xyz
adobekplayer.xyz
adobelfplayer.xyz
adobelplayer.xyz
adobeplaayer.xyz
adobeplayerfl.xyz
adobeplayernew.com
adobeupdateplayre.com
adoobeflashplayer.xyz
adoobeplayer.xyz
androdflashupdate.xyz
androdiflashupdate.xyz
androflashupdate.xyz
androidflashupdate.xyz
downlaodflashupdate.xyz
downlaodflashupdater.xyz
downlaodflashupdatera.xyz
downlaodflashupdatere.xyz
downlaodflashupdates.xyz
downloadflashplayere.xyz
downloadflashplayre.xyz
esracaner.com
fiashplayer.xyz
flaahsplayer.xyz
flaahsplayre.xyz
flaashplayer.xyz
flaheseplayer.xyz
flahesplayer.xyz
flahsaplayer.xyz
flahsbplayer.xyz
flahscplayer.xyz
flahsdplayer.xyz
flahsgplayer.xyz
flahsoplayer.xyz
flahsplaayer.xyz
flahsplayadb.xyz
flahsplayeradobe.xyz
flahsplayerdownload.xyz
flahsplayere.xyz
flahsplayerupdate.com
flahsplayerups.xyz
flahsplayradb.xyz
flahsplayre.com
flahsplayre.xyz
flahsplayredown.com
flahsplayreupdate.xyz
flahsplyr.xyz
flahsrplayer.xyz
flahssplayer.xyz
flahsupdatere.xyz
flash-aplayer.xyz
flash-bplayer.xyz
flash-dplayer.xyz
flash-playera.xyz
flash-playerb.xyz
flash-playerc.xyz
flash-playeri.xyz
flash-playre.xyz
flashabodeplay.xyz
flashabodeplayer.com
flashaplayer.xyz
flashapllayer.xyz
flashbpllayer.xyz
flashcplayer.xyz
flashcpllayer.xyz
flasheplayer.xyz
flasheplayre.xyz
flashepllayer.xyz
flashhpllayer.xyz
flashiplayer.xyz
flashkplayer.xyz
flashliveplayer.xyz
flashmplayer.xyz
flashoplayer.xyz
flashopllayer.xyz
flashplaayer.xyz
flashplaayre.xyz
flashplaier.xyz
flashplayera.xyz
flashplayerap.xyz
flashplayerapp.xyz
flashplayerbe.xyz
flashplayerdown.com
flashplayereupdada.pw
flashplayereupdata.pw
flashplayereupdate.pw
flashplayernet.xyz
flashplayernew.com
flashplayernew.info
flashplayerre.xyz
flashplayerservice.info
flashplayerupd.xyz
flashplayerupdadt.xyz
flashplayerupdat.xyz
flashplayerupdata.xyz
flashplayerupdate.top
flashplayerupdated.site
flashplayerupdaterd.xyz
flashplayerupdates.site
flashplayerupdatet.site
flashplayerupdatet.xyz
flashplayerupdato.xyz
flashplayerupdatt.xyz
flashplayerupdatu.xyz
flashplayerupdayt.xyz
flashplayerupdet.xyz
flashplayerupdeta.xyz
flashplayerupp.xyz
flashplayerupt.xyz
flashplayerve.xyz
flashplayr.xyz
flashplayrae.xyz
flashplayrbe.xyz
flashplayrce.xyz
flashplayrde.xyz
flashplayreabode.xyz
flashplayredownload.com
flashplayredownload.xyz
flashplayreguncel.xyz
flashplayreup.com
flashplayreupdate.com
flashplayrfe.xyz
flashplayrge.xyz
flashplayrhe.xyz
flashplayrle.xyz
flashplayrne.xyz
flashplayrre.xyz
flashplayrve.xyz
flashplayyre.xyz
flashpleyar.xyz
flashpllayer.xyz
flashpllayler.xyz
flashplyer.xyz
flashpplayer.xyz
flashrplayer.xyz
flashsplayer.xyz
flashsplayerupdate.xyz
flashsupdate.xyz
flashupdateplyr.xyz
flashuplayer.xyz
flashyplayer.xyz
flasshhplayer.xyz
flasshplayer.xyz
flasshpllayer.xyz
flhasplayer.xyz
fllashplayere.xyz
flplayerdownload.xyz
flshpladobeup.xyz
flshplayer.xyz
flshplyr.xyz
googleplaysevrice.com
myflashplayer.xyz
newflashplayer.xyz
phlashplayer.xyz
playeradopedown.xyz
playereflash.xyz
playerupservice.com
playreflahs.xyz
playreupdate.com
playservice.info
playserviceup.xyz
playsrv.xyz
playsrveup.xyz
playupdate.info
playupdate.xyz
playupdater.xyz
updateaflashplayer.xyz
updatebflashplayer.xyz
updatecflashplayer.xyz
updatedflashplayer.xyz
updatefflashplayer.xyz
updategflashplayer.xyz
updatehflashplayer.xyz
updatekflashplayer.xyz
updatelflashplayer.xyz
updaterflahs.xyz
updatesrv.info
uyapevrak.xyz

# Reference: https://twitter.com/ReBensk/status/1280361803957055489

www-ecimer-destekpaketi.com
yuvamkonut.com

# Reference: https://twitter.com/ReBensk/status/1280368722935525376

gamefilo.com
www-ecimer-destek2020.com

# Reference: https://twitter.com/malwrhunterteam/status/1280533384352202753

covid19-pandemidesteklerimiztrweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1281175775824273409

flashplayerdown.com

# Reference: https://twitter.com/malwrhunterteam/status/1283035532772220934
# Reference: https://twitter.com/LukasStefanko/status/1283045245685501958
# Reference: https://www.virustotal.com/gui/domain/thepeoplenew.org/relations

thepeoplenew.org

# Reference: https://twitter.com/ReBensk/status/1284727682861805575

http://77.245.158.32
e-pandemiwebbasvurulari.com

# Reference: https://twitter.com/malwrhunterteam/status/1286389244072792067
# Reference: https://www.virustotal.com/gui/file/84d581892e7279dc398fb9fec60ad1f3e808b8c08b8d521afb84383ed29452d1/detection

atlanaserx.temp.swtest.ru
yandexmau2.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/401b6d3378a1e2faf322f4ef7d8fb16bc9b9e80b9e31bfad7bbf21397f1b8928/detection

atlantkre5.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/ba89fa49121538b01a4aacf9c22790f8c05d8e8b47419ca01494634e4def1691/detection

viberupda5.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/e89e7ca87d8718c138ffe0732b1716670b989c7b10a34ce58130c778809346e9/detection

yandexma26.temp.swtest.ru

# Reference: https://twitter.com/malwrhunterteam/status/1286618384008990721

qnbfinansenparacepsube2020.com

# Reference: https://twitter.com/malwrhunterteam/status/1288171205011398656

androidyazilimguncelleme.com

# Reference: https://www.virustotal.com/gui/file/95571296179f71c044103fd61b42bf57a89e088004676199dcd2750ed32231b0/detection

jjshddd.top

# Reference: https://www.virustotal.com/gui/file/6f54147d0032b8243cc8fcddb110026fbd8d4157a772409d00df5f58a392828c/detection

athan.ru

# Reference: https://www.virustotal.com/gui/file/7f6b94fda63b7133834aca7b2155cfc6be6cb0cecafa3658856a8bfa45cca9a7/detection

helaa.com

# Reference: https://twitter.com/pr3wtd/status/1100010818568159238

keylisttr.pw
olumadamolunlan.pw

# Reference: https://twitter.com/0bfusCat/status/1074926166891470849

dawrawscyas.org

# Reference: https://twitter.com/0bfusCat/status/1036245731953319937

biz.bot.nu

# Reference: https://twitter.com/LukasStefanko/status/1037951727411097600

aqszbo.igg.biz
fgbhn2.usa.cc

# Reference: https://twitter.com/ViriBack/status/1139714810092904448

hannnnax.top

# Reference: https://twitter.com/PRODAFT/status/1138360435432972288
boxtools.net

# Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Anubis)

http://199.192.29.145
http://81.177.180.138

# Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Anubis)

anusbus.store
find4youphone.online
hyggo.net
new99year.xyz
newwinter.xyz
old22bobby.xyz
zamfuzz.net

# Reference: https://twitter.com/x42x5a/status/1107674030897799168

http://45.67.14.206

# Reference: https://www.virustotal.com/gui/ip-address/8.208.80.114/relations

bigslice.top
# corpleaks.net (# Note: Under investigation: https://twitter.com/500mk500/status/1325359823387570176)
dopemob.top
fitolday.site
goodtimes.top
howtodoit.top
isntlev.site
lasttrone.top
liberlov.site
likok.top
longstory.top
mekilent.site
newhunters.top
nightblues.top
nowknowhow.top
rixkom.top
sdsx.site
yirpow.xyz

# Reference: https://www.virustotal.com/gui/file/7e54df9c16c87e6918307ef1bb5e8760ac9001cfa6e0e8763616e3cb2cc00558/detection

nindo.info

# Reference: https://twitter.com/malwrhunterteam/status/1291372842316111873
# Reference: https://twitter.com/malwrhunterteam/status/1298948484771520512
# Reference: https://www.virustotal.com/gui/ip-address/193.36.63.146/relations

adbflashplyr.com
adbflashplyr.info
adbflashplyr.life
adbflashplyr.net
adbflashplyr.xyz
adbflplayer.info
adbflsplyr.biz
adbflsplyr.info
adbflsplyr.xyz
adobeflashplayerupdate.xyz
adobeflashplayerupdateservice.xyz
adobeflshplyr.biz
adobeflshplyr.live
adobeflshplyr.world
adobeflshplyr.xyz
bestadbflshplyrupdte.com
flashcloaker.info
flashplayer-guncellemesi.xyz
flashplayerupdater.info
serviceflashplayer.info

# Reference: https://twitter.com/ReBensk/status/1291661242864742405

e-pandemigiriswepsiteleri.com
parfumoda.com

# Reference: https://twitter.com/malwrhunterteam/status/1293492413391089664
# Reference: https://www.virustotal.com/gui/file/3ba97156dcdece1e5532931f0098d916f6684d38a9e0ba177fa1203e00630944/detection

tr-netflix.com

# Reference: https://www.virustotal.com/gui/file/2c24caa7c50347699df23fbad8a2d83c329312f8206f9cd08a27a6876ab73bd0/detection

emrshoes.cf

# Reference: https://twitter.com/B0rys_Grishenko/status/1293817549210124288
# Reference: https://www.virustotal.com/gui/ip-address/8.208.84.18/relations
# Reference: https://www.virustotal.com/gui/file/0067771d350cc8bd376b9356fa1ffc61b070f09fcb789241de8ab107055535e1/detection

apkallegrplay.net
apxover.cn
baqusda.xyz
barracudanow.ga
beeftexs.com
blctrsb.site
corpleaks.net
cv2020.space
fcurewardsus.com
fexfil.xyz
fitolday.site
flexfil.site
flexfil.top
fresscored.cn
goldine.xyz
horosua.xyz
joriswelst.site
lan-up.date
leftzir.xyz
lookupsky.net
luxuryboutique.top
providset.xyz
regisbrow.site
ruropos.xyz
scrot.site
shabukenke.ga
stelfkin.site
thefredoos.site
theostingros.site
treymart.xyz
trustcneck.com
tuseguridadylamia.ga
updateflashplayer.network
vaxton.pw
visfrola.site
vistagep.site
vredfow.site
xvttpivpxvtt.site
xyggo.xyz
yenkos.xyz
yopotff.xyz
yulot.xyz
zebelli.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1293828988964675587

aksigortaailem.com

# Reference: https://twitter.com/Cengiz86035319/status/1293983337376288768
# Reference: https://www.virustotal.com/gui/ip-address/8.209.107.107/relations

darkwhitechoco.top
jungfokijoklofk.top
lexluthor.top
privatevideo.digital
privatevideo.live
privatevideo.online
slimdenim.top
strykercrp.com
welcometocity.top

# Reference: https://twitter.com/Cengiz86035319/status/1292530868758761472

bayionline.xyz

# Reference: https://twitter.com/ReBensk/status/1295393427354419201

beskerebesden.com

# Reference: https://twitter.com/malwrhunterteam/status/1295410668791910401

pandemi-destekfonyardimibasvurukatilimi.com

# Reference: https://twitter.com/ReBensk/status/1297072158292811782
# Reference: https://www.virustotal.com/gui/file/fee8dad99d767d8d07ad7e46e18b8d9a4ff8a92a8d7743f8919585d327258e11/detection

sagliklievdekaliniz.com

# Reference: https://twitter.com/ReBensk/status/1297554727576702977
# Reference: https://www.virustotal.com/gui/ip-address/5.149.248.2/relations

20gb-hediye-internet-aktivasyon-tanimlama.ml
20gb-hediye-internet-aktivasyon-tanimlama.tk
20gbhediyeleribasladi.ml
cimmmer-iaderleri-baslamistir.ml
cimmmer-iaderleri-baslamistir.tk
cukurrentcarskartelimdfer.tk
ifsazzers-video-platformu.ml
ifsazzers-video-platformu.tk
katiroglurentcarskirlma.com
kestanezamani-saglik.tk
martilerrentcarskirolrte.com
pandertosbalar.ml
pandertosbalar.tk
saglik-20gb-hediye-tanimla.ml
saglik-20gb-hediye-tanimla.tk
saglik-20gb-hediye.tk
serysaglik.ml
serysaglik.tk
tc-saglikbaknaligi-20gb-hediye-internet.ml
tr-online-subem-giris-mobil.tk
webkatiroglurentcarskirlma.com
pandemi-destek-fon-yardimi-basvuru-katilimi.com

# Reference: https://twitter.com/ReBensk/status/1297567472854458368

sosyaldestekonbasvuru.com

# Reference: https://twitter.com/ReBensk/status/1297865674983968768

web-onlinetr-covid19tr.com

# Reference: https://twitter.com/ganeshnathan28/status/1297924135650308100

anubiscode.fun

# Reference: https://twitter.com/ReBensk/status/1298292652845211653

guzelbilisimdengeldik.com

# Reference: https://twitter.com/ReBensk/status/1298291170347491329

cepteinternet20gb.com

# Reference: https://twitter.com/ReBensk/status/1298564082686201856

giris-anasayfa-coviddestegi-basvuruwebtr.com

# Reference: https://twitter.com/malwrhunterteam/status/1298952237063049219

opetkampanya.club

# Reference: https://twitter.com/ReBensk/status/1299211942427602945

1000tlbasvuru-destek.com

# Reference: https://twitter.com/malwrhunterteam/status/1299631670623121413
# Reference: https://www.virustotal.com/gui/file/28d26c83efdaa1f4a3d6693eedb4e0f0687425e2be5322e4c9e33987011b466e/detection

passionhd-porn.com

# Reference: https://twitter.com/ReBensk/status/1299977916508499968
# Reference: https://www.virustotal.com/gui/file/669e5bc3e1117a229aeeadb37a740aaee3a5ee4e07f6f789518c3716e3fd7a33/detection

sb-tedbirwebgiristr.com

# Reference: https://twitter.com/malwrhunterteam/status/1300477554445430784

hdpornpassion.xyz

# Reference: https://twitter.com/alamutepesi/status/1296491465875558400

destekolunvengali.xyz

# Reference: https://twitter.com/alamutepesi/status/1295449807557992448

fazpandemidestekyardimi.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1295372607282384897

fazpandemidestekyardimial.ezyro.com

# Reference: https://twitter.com/alamutepesi/status/1295449686975942657

saglikdestekbasvuru-gov.online

# Reference: https://twitter.com/alamutepesi/status/1295373106492641281

20gb-hediye-turkcel-kampanyalari-katilim.com

# Reference: https://twitter.com/alamutepesi/status/1295372910916521985

pandemi-ssyaal-destek.com

# Reference: https://twitter.com/alamutepesi/status/1295372771292258304

pandemidesteks.xyz

# Reference: https://twitter.com/alamutepesi/status/1295058294244028421

pandemidestekleri.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1295058151864242182

pandemidesteklericovidd19.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1295057943596081152

pandemidestekyardimiz.ezyro.com

# Reference: https://twitter.com/alamutepesi/status/1295057727732035586

pandemidesteklerialim.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1294328059957596161

pandemidestekyardimial.ezyro.com

# Reference: https://twitter.com/alamutepesi/status/1294327868852502533

pandemidestekyardimal.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1294327502484246528

pandemidestekevdekal.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1292834207123808256

bayrampandemidestkelerim.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1292833874842734595

pandemidestekleyardimi.unaux.com

# Reference: https://twitter.com/alamutepesi/status/1294326682741071875

iletisimddestekbasvuruindir.online

# Reference: https://twitter.com/alamutepesi/status/1293965288745115648

aksigortaileindirimler.tk

# Reference: https://twitter.com/alamutepesi/status/1293888777950306305

sosyalakillidestekbasvuru.online

# Reference: https://twitter.com/alamutepesi/status/1292834056376324096

beda-va-20-gb-inter-net.com

# Reference: https://twitter.com/alamutepesi/status/1292500717958242304

pandemievdekaldestek.ezyro.com

# Reference: https://twitter.com/alamutepesi/status/1301215752175980551

ailecalismavesoyalguvenlik.ezyro.com

# Reference: https://twitter.com/alamutepesi/status/1301215858023378947

pandemi1000tldestekvakti.rf.gd

# Reference: https://twitter.com/alamutepesi/status/1301216020514955264

destekbintlpanedim.rf.gd

# Reference: https://twitter.com/alamutepesi/status/1292500400961191943

pandem-i-destk-sosyal.com

# Reference: https://twitter.com/ReBensk/status/1301126841651036162
# Reference: https://www.virustotal.com/gui/file/ea105af915d4b7f164097a567945c4461bb3f290a0e27777a6b280f97b8ce325/detection

tc-sosyaldestekler.ml
xxxxxalangoyaxxxxx.ml

# Reference: https://twitter.com/malwrhunterteam/status/1301138153936486404

roj-club.ru

# Reference: https://twitter.com/alamutepesi/status/1301221980507697152

http://51.140.166.245

# Reference: https://twitter.com/ReBensk/status/1301812942099435521

standartgiristr-web.com

# Reference: https://twitter.com/ReBensk/status/1301902103347068934
# Reference: https://twitter.com/alamutepesi/status/1301898444114726920

lastknight.xyz
obenimherseyim.tk
pubgonline.live

# Reference: https://www.virustotal.com/gui/file/e87d1a448cfd5a73737276b2b1bcf2c102565c197b13451e1c05f9792f94ac44/detection

zonsex.online

# Reference: https://www.virustotal.com/gui/file/c64234654c4b8fdadeca5ef5f65b208145f050637df5a690f88e86a5840bb427/detection

zonescim.com

# Reference: https://twitter.com/malwrhunterteam/status/1302141910518202368

irtibatplat-girweb-form.com

# Reference: https://twitter.com/malwrhunterteam/status/1302140508270190593

ev-gir-onlinewebtrsb.com

# Reference: https://twitter.com/ReBensk/status/1302871277430996993
# Reference: https://twitter.com/Cengiz86035319/status/1303044605731049474
# Reference: https://www.virustotal.com/gui/file/72fdb50667e307b3cca0e8d578495f86ad494168cab81fac3f0d72c7b3fb2631/detection

http://52.151.19.35
whatsapp-aile.tk

# Reference: https://twitter.com/malwrhunterteam/status/1302972454244102145
# Reference: https://twitter.com/apkdetect/status/1302984450276503552

on-linegirisplatformirtibattrweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1303042615085019145

wh494386.ispot.cc

# Reference: https://twitter.com/ReBensk/status/1303262902133174272

hijyentedbir-kuralgirisweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1303337990576635905

platformdur-girisirtibatr.com

# Reference: https://twitter.com/ReBensk/status/1303563072859115520

yeni-platformwebtrgiris.com

# Reference: https://twitter.com/malwrhunterteam/status/1303654025649426440

hijyeniktedbirgirislerwebtr.com

# Reference: https://twitter.com/malwrhunterteam/status/1303653441974214657

loginor-girtrwebanasayfaplatform.com

# Reference: https://twitter.com/mertcangokgoz/status/1303673163742670848

anapage-yenigiriswebtr.com

# Reference: https://twitter.com/ReBensk/status/1304302448022925312

pandemidestek-2400tl.com

# Reference: https://twitter.com/NtSetDefault/status/1271412422776180737

mobil-dijital-platform.tk
prolifefitness.tk

# Reference: https://twitter.com/malwrhunterteam/status/1304666270097436672

winnautalpmagramssig.tk

# Reference: https://twitter.com/malwrhunterteam/status/1304665753329729536
# Reference: https://www.virustotal.com/gui/file/6fdb50980187421d85c35aeca51d5f54e9789299285259789b3408b063610bae/detection

webpage-girisiniztr.com

# Reference: https://twitter.com/ReBensk/status/1304747765440942081
# Reference: https://www.virustotal.com/gui/file/b06c808ec6e084f3b4b745aea87b4dd8a1bc3134fa7f39c208d72fd0e769d84f/detection

mobil-egiris-basvurular.ml

# Reference: https://twitter.com/malwrhunterteam/status/1304751989058830337

basvuru-yap-3000tl.com

# Reference: https://twitter.com/ReBensk/status/1305059706428325888

evpage-trirtibatplatformweb.com

# Reference: https://twitter.com/ReBensk/status/1305525848930504712

e-pandemiislesimsitesi.epizy.com
haberajansi.email

# Reference: https://twitter.com/ReBensk/status/1305531443922247680

http://116.203.104.194

# Reference: https://twitter.com/malwrhunterteam/status/1305544924683735048

platformpage-trweb-girisirtibat.com

# Reference: https://www.virustotal.com/gui/ip-address/162.0.232.231/relations

tr-page-irtibatplatformweb.com

# Reference: https://twitter.com/alamutepesi/status/1305847463316795392

irtibat-web2020giris-platformtr.com

# Reference: https://twitter.com/ReBensk/status/1305885647568334851

page2020-irtibatplatformtrweb.com

# Reference: https://twitter.com/alamutepesi/status/1305849112135372800

http://167.71.52.117
ailecalismavesosylguvenlik.ezyro.com

# Reference: https://twitter.com/malwrhunterteam/status/1309890006312513536

bdva-kampanyalar.net

# Reference: https://twitter.com/malwrhunterteam/status/1309912504747929601

pandemigirisdestek99.com

# Reference: https://twitter.com/ReBensk/status/1310459690367815680
# Reference: https://www.virustotal.com/gui/file/07d1c2d03aeb7ddb4981bd15fe0654723eba9507e6e9b010ec4b0d8158183913/detection

pandemiyardim.org
tutkularmerkezi.com

# Reference: https://twitter.com/Vlad86317048/status/1310679421280382977

aile-destek-paketleri.ml

# Reference: https://twitter.com/Vlad86317048/status/1309940301788712960
# Reference: https://www.virustotal.com/gui/ip-address/161.117.184.181/relations

cimerekapdesteksiadenizsorgu.com
pandemigirisdestek106.com
parfudmoda.com
drrmyuu.cn
felinculticas.online
freelacular.online
longlonghair.top
ttsrbmq.cn

# Reference: https://twitter.com/Vlad86317048/status/1309431523632803840
# Reference: https://www.virustotal.com/gui/file/b6dceb051866632a457ea22d195631e1d4b1ba5d995b503535d4c33879cf9085/detection

http://52.229.20.115
berkataman1.tk
pandemigirisdestek88.com

# Reference: https://twitter.com/Vlad86317048/status/1305587540175413248

destekbirimimiz-pandemi2.com

# Reference: https://twitter.com/malwrhunterteam/status/1311375105155575815

yenitrirtibat-pagehomeplatform.com

# Reference: https://twitter.com/malwrhunterteam/status/1314501660799053824
# Reference: https://www.virustotal.com/gui/file/bd506d1cb146bf28da6a310a776463e4b16287b0e8ef1776799b81d524f40da5/detection

alevlicerenim.com

# Reference: https://twitter.com/Cengiz86035319/status/1317531824025894912
# Reference: https://www.virustotal.com/gui/file/2cfb746301151cfeba11520bcae34e412e9b4ac55482d59f60554ccb82f30a8a/detection
# Reference: https://www.virustotal.com/gui/file/450accfcb34d369f06971984f7f61f00d99f102e7425f65084c006266044b1a2/detection

http://107.172.195.114

# Reference: https://twitter.com/malwrhunterteam/status/1318279623881461766

birlikkalite-webplatdiyalogtr.com

# Reference: https://twitter.com/malwrhunterteam/status/1318540945734983686
# Reference: https://www.virustotal.com/gui/file/44f8f7dc1d0d44671f27aa75e8484b2f0c3c9fb0bc02ff8a39a41b7698135d76/detection

birlikkalite-platformirtibattrweb.com

# Reference: https://www.virustotal.com/gui/file/844d9368e64fce1d6d4b6fd1d885db5134a33f0a6c0c0c8a8caae5608f66da45/detection
# Reference: https://www.virustotal.com/gui/domain/izmirsiber.com/relations

izmirsiber.com

# Reference: https://www.virustotal.com/gui/file/844d9368e64fce1d6d4b6fd1d885db5134a33f0a6c0c0c8a8caae5608f66da45/detection
# Reference: https://twitter.com/Cengiz86035319/status/1319158191385698304

http://35.202.138.30

# Reference: https://twitter.com/ReBensk/status/1313085907575148546

trtrwebler-diyalogu-irtibat.com

# Reference: https://twitter.com/malwrhunterteam/status/1321809682789474304

realpornohp.com

# Reference: https://twitter.com/malwrhunterteam/status/1321812643565473794
# Reference: https://www.virustotal.com/gui/file/2e0981203540b9ed780930fa16c6d0ebc25841339fba94ef859cd79d0e0c2934/detection

hakkural-irtinziba-webtr.com

# Reference: https://www.virustotal.com/gui/file/6f2523c6c3528fce06a44c7fe2f04c92581d56912178cf8fea680d5c6c0d74cd/detection

zonles666.tk

# Reference: https://twitter.com/Vlad86317048/status/1322293282395758592

ekim-ayi-destekleri-kararname.tk
prolifeesscancsrn.tk

# Reference: https://twitter.com/malwrhunterteam/status/1323730505012051969
# Reference: https://www.virustotal.com/gui/file/381416ac62df5a1d6d7ea8cf3e118f98af48f394cd2782a1289ad5233a31703d/detection

gokkan.site
myporhd.com

# Reference: https://www.virustotal.com/gui/file/ce344348372a7ecd52445887a3fea17627d9df88b639f52937aa864d3c825fa1/detection

veggymar.top

# Reference: https://www.virustotal.com/gui/file/7aac900ed3af1700d55b9c58b66efd0062199cd90c5904287a5b249f1a5779a5/detection

keruplist.com

# Reference: https://www.virustotal.com/gui/file/d0ccc5928a1efa5ccf5ff1a8442daa9a8e318109c681ec1cd29f6ad86c2a70aa/detection

kovintros.top

# Reference: https://twitter.com/Vlad86317048/status/1324740355602870272

destekidevlet.ml

# Reference: https://twitter.com/Vlad86317048/status/1324881213002117123
# Reference: https://www.virustotal.com/gui/ip-address/162.62.7.46/relations

falsedecoere.com
muhbirnejdet.com
phandamidesteksbasvurus.tk

# Reference: https://twitter.com/Vlad86317048/status/1325731439174852608
# Reference: https://twitter.com/Vlad86317048/status/1326142180289777665
# Reference: https://www.virustotal.com/gui/file/43b3500e7064033a264b2ee6fbf0d70ce485f05710a556dc76e89d0a093efd3e/detection

724calisinparalazim.com
bireysel-basvuru-destek-kampanyalari.xyz
bireysel-indir-destek-basvurularim.xyz
griyapim.com

# Reference: https://twitter.com/ReBensk/status/1326465457356828672
# Reference: https://www.virustotal.com/gui/ip-address/2.56.62.203/relations
# Reference: https://www.virustotal.com/gui/file/7dd8cbf05e2a836987af1e8f44d2ee8d8e4b1ec85eca3150db99ebe893b543a4/detection

3xpl0itbotnet.tk
copyrightofcenter.tk
demotestkeygen.tk
e-kredi.net
edevlet-aidatkredidestek.tk
halka-sinirsizdestek.tk
halkadestekkredisi.com
izmirdeprem.com
keygenmarket.tk
keygenpanel.tk
keygenpanel2.tk
keygenpanel3.tk
keygenpnl.tk
krediade.com
pandemi-engelsizhayat.tk
phellaw.tk
poseidonpanell.tk
toplumsalyardim.net
xn--turkhalknadestek-hqc.com
yardimpaket.com
yardimsandigi.ml
yardimsandigi.tk

# Reference: https://www.virustotal.com/gui/file/8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e/detection

sosyalkampanya2.tk

# Reference: https://twitter.com/malwrhunterteam/status/1328397724866195456

deprembilgilendirme.com

# Reference: https://twitter.com/ReBensk/status/1328573630394085383

anita1898kurovsk1.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1329879627721039873

bizim-guzel-resim-sayfa.com

# Reference: https://twitter.com/Vlad86317048/status/1330404770788552704

http://45.80.151.20/inj/

# Reference: https://www.virustotal.com/gui/file/014125c9418f9240bba7d6e2eb2411cd9e7cabd16f83703a3a7c38a4b53351b3/detection

http://52.247.252.64

# Reference: https://twitter.com/Vlad86317048/status/1330504476986286081

http://52.250.124.188

# Reference: https://twitter.com/Vlad86317048/status/1342967177096282117

http://52.229.11.184
destekpandemikredisi.com

# Reference: https://twitter.com/Vlad86317048/status/1331579406263808002
# Reference: https://www.virustotal.com/gui/file/12416f1309c3675b39e612cd923922d10a4d8b96971bb420c068c6d86cf75841/detection

2020-destek.com
lahkeblogger.org
zeromex.com

# Reference: https://twitter.com/malwrhunterteam/status/1333467968458682369
# Reference: https://twitter.com/midnight_comms/status/1333469866376871943
# Reference: https://www.virustotal.com/gui/file/eb1e2a680b61e9bf1cd0ca1aa2013e61e616b40659bc02e6dcbd0c98870869c9/detection
# Reference: https://www.virustotal.com/gui/file/8536ecf1d99e83a7b9132061dec168a1c1ffbccbcd79d4b01630b4ae0122095a/detection

nj0tic.pw

# Reference: https://www.virustotal.com/gui/file/4c826e83a121a8cdeb364116b9949a1fde896c1c7f5dbb63033616459632f11c/detection

cameragems.com

# Reference: https://www.virustotal.com/gui/ip-address/176.121.14.173/relations

anu-psk.in
anu-save-bis.net
anus-send.info
bhullaa.in
bhullaa.nl
dasqqq.in
dasqqq.nl
joloanbb.info
petucuz.biz

# Reference: https://www.virustotal.com/gui/file/ebcbf83861224896c6b6b01a2cd68a8edadde793a6329038c3597945c064469e/detection

j1120440.myjino.ru

# Reference: https://twitter.com/malwrhunterteam/status/1335321602901340161
# Reference: https://twitter.com/MrHazum/status/1336234475546701825
# Reference: https://www.virustotal.com/gui/file/b77adec6e50e884b03750944f41d539213d7cc1e9cadd86e76fa0cacf83ad9ed/detection

reazy.dev

# Reference: https://twitter.com/malwrhunterteam/status/1336413129572560898

birlikteliğimizbizletr.com
xn--birlikteliimizbizletr-i4c.com

# Reference: https://twitter.com/ANeilan/status/1337253648632524802

onlinebanking0.duckdns.org
/Anubis_2.5.rar

# Reference: https://twitter.com/malwrhunterteam/status/1338948269809033223

birlikolmazamanıtrgiriş.com
xn--birlikolmazamantrgiri-ygd87h.com

# Reference: https://twitter.com/malwrhunterteam/status/1339669858653499400

tedbirsağlıkmutlulukgetirir.com
xn--tedbirsalkmutlulukgetirir-mnd10c.com

# Reference: https://twitter.com/malwrhunterteam/status/1340320124667097096

mutlulukzamanısağlıktedbir.com
xn--mutlulukzamansalktedbir-qed16be.com

# Reference: https://twitter.com/Vlad86317048/status/1340459455893233665

benim-kendi-resim-sayfam-ozel.com
birey-kampanya-ozel-destek-basvurusu.com

# Reference: https://www.virustotal.com/gui/file/592b16109708b5b429f062c7786c4af6dcf0074e09323602cd385c5ba0f59049/detection

vasya.pw

# Reference: https://twitter.com/makflwana/status/1278972077459083269

u374911.test93w.ru

# Reference: https://www.virustotal.com/gui/file/4d770df58baa5e994c0dd449238a875d8120334cee7c73e4a1ef8bf65e4f8021/detection
# Reference: https://www.virustotal.com/gui/file/cb9e665e6c1c58214626041dc751ba4eee2379bcf985f5f37262f27b30a03041/detection

noudnayed.at

# Reference: https://twitter.com/Vlad86317048/status/1342884508614344704

e-devlet3000tldestek.com
atsda43243223.com
aysen3241.com

# Reference: https://twitter.com/malwrhunterteam/status/1344560506737221632

cryrootsbe.tk

# Reference: https://twitter.com/Vlad86317048/status/1344784379227242496

herkese10000tldestek.com

# Reference: https://twitter.com/Cengiz86035319/status/1346536831890960385
# Reference: https://www.virustotal.com/gui/file/963962c50fbbdbdb751553724a70bd1feff33d7f527bfd7d657a10dcc9c05a69/detection

prolifeesscan.tk

# Reference: https://twitter.com/malwrhunterteam/status/1349320823979565057
# Reference: https://www.virustotal.com/gui/file/a2456608feb4080a775f2a7ddbf6e78f4e08bd66a9e0134eb6096bfe50c654a9/detection

rtube.online

# Reference: https://twitter.com/RickyLafleur1/status/1210220749744672768
# Reference: https://www.virustotal.com/gui/file/4c736a4e1c029da46d0047d02d30b591ceedec192352ee99be2ef0896efa8a97/detection

bedava-kazan.com

# Reference: https://twitter.com/RickyLafleur1/status/1145644052710379520
# Reference: https://www.virustotal.com/gui/file/fc45cd699eb461fd58abb259e4d754a754a5cb75209d83293b6370d7f0265504/detection

tikitok-app.ru

# Reference: https://twitter.com/RickyLafleur1/status/1140974369033859072
# Reference: https://www.virustotal.com/gui/file/0b79c55a8a3158ef11a79c98a13827f7af22bb1ebc86c7c27e35472f6fe05165/detection

hediyeinternet.ga
sonkurtbukucu.tk

# Reference: https://twitter.com/RickyLafleur1/status/1140903039164997633
# Reference: https://twitter.com/RickyLafleur1/status/1140897276572950528
# Reference: https://www.virustotal.com/gui/file/c3cd110ae3c76a132211d05dd5faa9f4898ab685d123cf207734162d0a035f5d/detection
# Reference: https://www.virustotal.com/gui/file/8569b19b87a786f9ffbfbc3467ea07621adaa54d3f4c8771b59746793720f890/detection

kazanmakcokkolaybea.cf
turkcell-10gb.com
turkcell10gbgnc.com

# Reference: https://twitter.com/RickyLafleur1/status/1140898124363370496

turkcellhediyeservisleri.com

# Reference: https://twitter.com/RickyLafleur1/status/1095313849920745477

kashfccanandroidsyusyupdtrrwr.com
tomupdate.host
tomandblue.host

# Reference: https://twitter.com/RickyLafleur1/status/1088794537034690560
# Reference: https://www.virustotal.com/gui/file/10ad180b4a01c2a2a916c4d52e1e7576edeb788c6ecd60a82d618cadbd7d80f4/detection

dtdydsjskdyddddwgyugyufgtgedtdtd.net
euquicksecurity.com

# Reference: https://twitter.com/RickyLafleur1/status/1085552176993308673

whatsapp-mobile.work

# Reference: https://twitter.com/RickyLafleur1/status/1072883644539252736

grafiker.pro
whatsapp-androids.com

# Reference: https://twitter.com/RickyLafleur1/status/1072881455381012480

mainwebvideo.com

# Reference: https://twitter.com/RickyLafleur1/status/1060575113618296834

hq-adultin18.com

# Reference: https://twitter.com/RickyLafleur1/status/1051773092199104512

badmorty.tk
bryablock.tk

# Reference: https://twitter.com/RickyLafleur1/status/1034728213367451648

bestdigital-music.ru

# Reference: https://twitter.com/Nethanella/status/1017331965324857344

redtek0.com

# Reference: https://twitter.com/RickyLafleur1/status/1014110412147699718

postofficeaahead.com

# Reference: https://www.virustotal.com/gui/file/863f4ecacb5a084a4f8e47d52ebc66ecc7fea2eebac7efd15b27320c85555b4b/detection

f0316480.xsph.ru

# Reference: https://twitter.com/HandanG93391703/status/1355522882957438982

covid19bilgilendirme.epizy.com

# Reference: https://www.virustotal.com/gui/file/8a15e745e8de3f1e246c6b8c7546c2301a3ce2ea0a510d1b112eb45daac52a89/detection

intraxisinfo.info/images/folder/private/tuk_tuk.php

# Reference: https://twitter.com/malwrhunterteam/status/1357438575764262912
# Reference: https://twitter.com/B0rys_Grishenko/status/1357448899485724676
# Reference: https://www.virustotal.com/gui/file/af118162f24118e6b93c54a1ff2f6bc4a30f4b37795bdd3990a99ee33d707029/detection

http://45.145.185.12
kwarantannadomowa.com

# Reference: https://twitter.com/malwrhunterteam/status/1357977640318173185
# Reference: https://www.virustotal.com/gui/file/e98d28716919c6dd1e16d85613eb40b2e55729c2a3831dd2cf4bd4aef9e4a552/detection

achitik2.work

# Reference: https://www.virustotal.com/gui/ip-address/35.246.13.62/relations

gneks.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1363243103939870726
# Reference: https://www.virustotal.com/gui/file/8e5de20a087da6b0899c6d36ba774db787db52d871d9345ac1f1df734e0b3ec6/detection

flashdownloader.westus2.cloudapp.azure.com

# Reference: https://twitter.com/ReBensk/status/1364624123503108096

1000tl-basvuruyap-govtr.tk
berkatamans6667sburdas.tk

# Reference: https://twitter.com/malwrhunterteam/status/1369009181051805705
# Reference: https://www.virustotal.com/gui/file/050596fed6378a05872c5fcce7bb1bdb519a78ba11806f07e898cd4ed2341526/detection
# Reference: https://www.virustotal.com/gui/file/e998cac92e8ea415979d184d863a9328c9dc783b3027815445352c4e6db82afb/detection

paypal1.cloud

# Reference: https://www.virustotal.com/gui/file/4e01de903235aca28af3fb3648eac94c71b63b72ea23ff7783e7d47cc95c9974/detection

971970.com

# Reference: https://www.virustotal.com/gui/file/156b18f79e9509f79631c7a31cdf577f3fec01fdd2d0e1b7889054b365c0ef7c/detection

331363.com

# Reference: https://www.virustotal.com/gui/file/2ddb413a4bcfc6f7b03b4a4ef416396fcbb3540e25cdabbbf42fd8cdac9599c8/detection

enuygunkaskovesigorta.com

# Reference: https://www.virustotal.com/gui/file/44cb26623ca79594eaba29585ab7ed58f4414344d3e4c6911918cf4d77cbad17/detection

1161253.com

# Reference: https://www.virustotal.com/gui/file/32eab86034de3e356cd2946f52cfa875ea7b4490b6f32d8b136f7a49e2713fc8/detection

34brs45.com

# Reference: https://www.virustotal.com/gui/file/c2af621caca0a93d5ffea8eca1f8253f984a4115fc2aadb74fe55df7b0104338/detection

112165.com

# Reference: https://twitter.com/pmmkowalczyk/status/1372216697801834500
# Reference: https://www.virustotal.com/gui/file/62cbb443275e550ab22fb8e2e5866a606a8016825b8440a890bad9214b78166e/detection

manage-your-ads.win

# Reference: https://www.virustotal.com/gui/file/0a5e9f7a955a5f90a048597b6ca9abbc9a486378ac7d002965aefb753ff94304/detection

123043.com

# Reference: https://www.virustotal.com/gui/file/fff248d71abea14b78101ca1e8338a6ba2ae52af08f7f83664b9fc937f7c68c9/detection
# Reference: https://www.virustotal.com/gui/file/b920ec175138ae59b6fc7fb259413b87613ae5c81f3bde3bb1a34229f031fcf1/detection

go-b.club
/qSlwaY/
/WhSf7f/PFD58o.php
/R52v9D/eCidWM.php
/OxkntD/R6Mgc5.php
/sDlp6m/sYftHE.php

# Reference: https://www.virustotal.com/gui/file/ad0ef2689a91d8f21d4d0703af28ce577a1832e6d1fc9d3ac2f54d7a5d02a051/detection

spidermancave.club
/qSlwaY/WhSf7f/
/WhSf7f/
/qSlwaY/WhSf7f/PFD58o.php
/qSlwaY/R52v9D/eCidWM.php
/qSlwaY/OxkntD/R6Mgc5.php

# Reference: https://www.virustotal.com/gui/domain/gansandroses.club/detection

gansandroses.club

# Reference: https://www.virustotal.com/gui/file/7d7313faec91917dfb756ee6364ef45eb6c1223fbc901ed2f6eb3a03f798c89e/detection

hediye30gbkatilimformicintikla.com

# Reference: https://www.virustotal.com/gui/file/91626f199242e98148ea4d9cae51038f58214544018243e80a51930c1858d27e/detection

opafky.club

# Reference: https://www.virustotal.com/gui/file/aee145c1d11ab714c1ac428be17814f8e3538768d2c9d09863bd320d3de954ea/detection

ixox.xyz

# Reference: https://www.virustotal.com/gui/file/8b00328d52d657689d68fd793bee2e3919a388ab5462132c8779a6e8649f5383/detection

jerssy.xyz

# Reference: https://www.virustotal.com/gui/ip-address/34.65.191.100/relations
# Reference: https://www.virustotal.com/gui/ip-address/35.246.175.123/relations
# Reference: https://www.virustotal.com/gui/ip-address/46.17.250.103/relations
# Reference: https://www.virustotal.com/gui/file/73b9ee5eeceffdd5d270333f2a2cf07c18e4867c895073e89e7b2530ec722263/detection
# Reference: https://www.virustotal.com/gui/file/92e901c224c9b55ed271e7c6e50a5c91cfac32c3cfc157d2f3735b1d62593be2/detection
# Reference: https://www.virustotal.com/gui/file/9ef12fb2c58910af5b0ba2199200f987af99077628f351e1a66cd3b21b9e803e/detection
# Reference: https://www.virustotal.com/gui/file/24f1d20e9b520eb96c1ff3ac06279ba459e9375699f491ab9aafbde19509b32b/detection

bigfun.xyz
givetest.xyz
gutos.xyz
hword.xyz
hzaz.xyz
jooot.xyz
julion.xyz
kussux.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1380592422175047682
# Reference: https://www.virustotal.com/gui/ip-address/3.64.165.162/relations
# Reference: https://www.virustotal.com/gui/file/c495f1ff02b9ff84f3446dda5a59130325a7b8972f1cbef5331b20644f36e4a8/detection
# Reference: https://www.virustotal.com/gui/file/f26a7375fc5baf8c22d5de50f86ceb8d9178d162390a32e5422c75c77a597460/detection
# Reference: https://www.virustotal.com/gui/file/19049f1c34b51a6e576a53e531e18a0b54bc05e560518f056146c7b735ab3b85/detection
# Reference: https://www.virustotal.com/gui/file/dcacd11a11564605517fb8b3a4a2bf2fe420b9f728e0e9cdd09572f7d4df0a67/detection
# Reference: https://www.virustotal.com/gui/file/92d93c5e470c4323d4ab543b5184212f627b84aa5a42832af45804b3f74af232/detection

berkataman.com
berkatamans6667s.tk
berkatamans6667sburda.tk
fenomen.market
turkcell-digital.com
zonesv2.com

# Reference: https://twitter.com/pr3wtd/status/994581442222022657
# Reference: https://www.virustotal.com/gui/file/7f6799d4fc35759485ee5346ae767e4f9ed6432f053071a760810486f1e73a80/detection
# Reference: https://www.virustotal.com/gui/file/63f716bb51055fc26ea40826d775be3373b0215b9694c278251c7f981b79fe2c/detection

http://31.184.234.30
194.165.16.28:81

# Reference: https://www.virustotal.com/gui/file/837c616a8a183d9a8667ef031ebeab1f1fc496d3ae4eb3ad84bf62bec1f0922d/detection

lorens.xyz

# Reference: https://twitter.com/ReBensk/status/1387298655028146183
# Reference: https://twitter.com/ReBensk/status/1387306767202209792
# Reference: https://www.virustotal.com/gui/file/34bec3b2747ed7531993c73f04968c56e79f05f3b26b91cad256c9bbd5cf1beb/detection

avastpremium.xyz
darkweb.bitcoingen.store

# Reference: https://www.virustotal.com/gui/file/96238caaf883e346305809dd0c7c84d3aeed095d649b805104e36599b0a41935/detection

fopelnes.site

# Reference: https://twitter.com/ReBensk/status/1389542110089687042
# Reference: https://www.virustotal.com/gui/file/3a14c73bad386f3387c6df15fb02f49f22a1b5972ce324fe58243c8213b79c66/detection

2021sahurdestegi.com

# Reference: https://www.virustotal.com/gui/file/06e3a5cf4b45bd4efebc628471e37c627150e0d28eaaf21d7464803f17e75eb7/detection

monodo.xyz

# Reference: https://www.virustotal.com/gui/file/63ecf1f3064963f5243419d8ac40ffe86995aa836f12c1c28e47f00b84748fca/detection

justiceforthesyriankids.xyz

# Reference: https://twitter.com/pmmkowalczyk/status/1414904589560815616
# Reference: https://www.virustotal.com/gui/file/b52903924e741b45452659892117bb3a7bf2a40e8483c3c4d4de6ccb5c00b17f/detection

bolkotts.club

# Reference: https://www.virustotal.com/gui/file/cd19fc75e3b915eb54caf7239b8c83b111d556bb0dbbccc5b4d8daad67a6570a/detection

id1998172.xyz

ugenvo.xyz

# Reference: https://twitter.com/ni_fi_70/status/1254998802399997953

id1998172.xyz

# Reference: https://twitter.com/ni_fi_70/status/1231842663961387009

id813217.xyz

# Reference: https://twitter.com/ni_fi_70/status/1182248520033718272

id187146.xyz

# Reference: https://twitter.com/ni_fi_70/status/1092809540284891136
# Reference: https://www.virustotal.com/gui/ip-address/35.196.221.42/details
# Reference: https://www.virustotal.com/gui/file/6f2d6e5bcb7450ab0ff0b50b285f3d18e0356c35f41a91e83a612261d807f0f3/detection
# Reference: https://www.virustotal.com/gui/file/47269b8e9b6e502145557432c5f00ea0530319d49fb66fb5be8f4a3b75764a3a/detection
# Reference: https://www.virustotal.com/gui/file/1c10ab8bebaf2a3dc4658ae132ba1e4a2305b9b46990380a81f3d16a8443d0ee/detection
# Reference: https://www.virustotal.com/gui/file/71a04321efbbc881a3955ad372c6f2d04a66f58761a800ae1a704e3b51f1d5a5/detection
# Reference: https://www.virustotal.com/gui/file/357a4a8ca7a42685a35baaed9fe9b1e7d3c0e6696e003de3ed4a8ebd3f1dc87c/detection
# Reference: https://www.virustotal.com/gui/file/27b63e8a4220fcc155b2e91e487d755a8f49f75e713dbd3e4cb0c0ad223d5bbf/detection
# Reference: https://www.virustotal.com/gui/file/f2a4687297a7f4d6de7fc831268bbbae6c63ce4571b16db610a9331a3abf4a13/detection

aamousntw.work
belongedtasa.site
hundredsmatena.site
malifalinali.work
mektanevtessek.site
/dsadwdax12sax2123xa11c1/
/dsadwdax12sax2123xa11c1/check.php

# Reference: https://twitter.com/ni_fi_70/status/1075028741116624897

at-kreditkarte108102.in
id917716.pw

# Reference: https://www.virustotal.com/gui/file/bf4027f3938897fde77a91c52d888d146f4a394a58294d349e992674b62cf09d/detection

otsosiytraktoristaa.com

# Reference: https://www.virustotal.com/gui/file/5823a2055771edbacd7928f9c07d491e623195bda4ac15193b16bc158dcd1c64/detection

limboswosh.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1420697771032682499
# Reference: https://www.virustotal.com/gui/file/ad2053bc0cf1cc54c5a0f7e6de4653b8012ba349219ac56b27e26e6cf2b96077/detection
# Reference: https://www.virustotal.com/gui/file/d0e684dedd320a8b1838dab6c94e97384058fb18b831ceb3f479aea849d83811/detection

http://188.225.33.92
buratino.tokyo

# Reference: https://www.virustotal.com/gui/file/e78a2e99ebf6a368385b3d85ce1868a8aaf9e92b68beeee6fdcd13356f6c6e01/detection

http://84.252.73.12
blackglocks.com
fitsguccibag.top
representedball.net
/yHA0h8dY015G5/

# Reference: https://twitter.com/pr3wtd/status/1438561145485504519
# Reference: https://www.virustotal.com/gui/file/af4bfdd2776f78e4ade921526fccf6ecc17202f018daa75b973cff18c5f4e593/detection

americanpizzainrussia.ru

# Reference: https://www.virustotal.com/gui/file/4ad05e87cd296fcbd450cf425574c1edf9d4a04dce301fb517e906393d71b18b/detection

91.109.184.2:666

# Reference: https://www.virustotal.com/gui/file/c0c1e7bf972bb531af385688b42505c79facf4affe66c5fe961a3de7121807cf/detection
# Reference: https://www.virustotal.com/gui/file/b70d3af4897849d218b9288f10b49faf2e321d1e29e11adfe7e0eeff55d0b21f/detection

37.239.86.23:5552
91.109.190.7:5552

# Reference: https://www.virustotal.com/gui/file/7dbc9398adef5bb610f4261b13098878d7c9a9ee26b5e5313309c3602f45d2e9/detection

alexbbxj.beget.tech

# Reference: https://www.virustotal.com/gui/file/c6f1bdcdd149a73d92a70eb632438211956538e2ff6b25335f18e685aae0c0f1/detection
# Reference: https://www.virustotal.com/gui/file/6ff81a3afb896e6c09d5597c0a81ee62e35caf3b2b47fac6d728c24da8bc224d/detection

http://185.130.104.241

# Reference: https://twitter.com/malwrhunterteam/status/1466881196357472261
# Reference: https://twitter.com/malwrhunterteam/status/1484833290049703937
# Reference: https://twitter.com/midnight_comms/status/1466968452447580164
# Reference: https://www.virustotal.com/gui/file/b55d8f1fc7e3edd74796f4892b033030fb4b79ed5fbede8e1e002bd277b3b15a/detection
# Reference: https://www.virustotal.com/gui/file/9c539759a720ea84ceb45e58ed45f673f25ef595cc4b86523d1a46696464e234/detection
# Reference: https://www.virustotal.com/gui/file/f6467cfa9c177657d46db739afc30652b76e3308b36579e68e6253dd75b9982b/detection

shopsalle.co.uk
shopsalle.online
shopsalle.shop
xeroban.best
xeroban.click
xeroban.icu

# Reference: https://twitter.com/malwrhunterteam/status/1468563732846583816
# Reference: https://www.virustotal.com/gui/file/78c45eea53bdabbf95da044c7127a66ac2cebc679c6da2598765dd2abae80861/detection

cryptocoinbuy.club

# Reference: https://lookout.com/blog/anubis-targets-hundreds-of-financial-apps

quickbitrade.com

# Reference: https://twitter.com/0_1_0_1_0_0_0_0/status/1473251876326064138

http://45.87.154.175

# Reference: https://www.virustotal.com/gui/file/ee0e6d624a9d9b6268585e53e0e0f74bb3143c8c455e3e2f591d9fd926827a6a/detection

mtradeworld.services

# Reference: https://github.com/epigone707/Anubis_Fattura
# Reference: https://www.virustotal.com/gui/file/c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70/detection

cdnjs.su

# Reference: https://news.sophos.com/en-us/2019/05/01/how-anubis-uses-telegram-and-chinese-characters-to-phone-home/
# Reference: https://www.virustotal.com/gui/file/bfe4c7c38b2e0ed84fbe9e25f7de31aa9e190a2e2f9843ebe75e7cdfeae00005/detection

cleanwin.top
qzwrxetcryvtubynumnuybtvrcewsdcfv.com

# Reference: https://www.virustotal.com/gui/file/6eda29c11163e3bd979be02d2fe9d2929a01e780986a85ef9a6d4978db8b5584/detection

unreadablepage.at

# Reference: https://www.virustotal.com/gui/file/6cf4b52430005a0af670630fbc927db2736f4827ae7352fa30466cfef1b84f30/detection

comicwalker.at

# Reference: https://www.virustotal.com/gui/file/d681d12c01c0862d55df4a37ba7e9c2b315bb53dce93db434c0ba699735c28ec/detection

onlyplus18age-usa.mn

# Reference: https://abuse.watch/2019/10/21/online-warning-new-security-alert-a-280791/
# Reference: https://www.virustotal.com/gui/file/f6098d2d04a3657c8824e4e5a8fd102b64a8607f5637e0246c6e81fe1cf61be4/detection

gost.zadc.ru

# Reference: https://twitter.com/malwrhunterteam/status/1490982516324724736
# Reference: https://www.virustotal.com/gui/ip-address/194.135.33.8/relations
# Reference: https://www.virustotal.com/gui/file/2fb39c303c0dcd915fdb71a8dd89ec311e63a897ce5605bcb6e7c226dc316454/detection

apps-actualizarwhatsapp.com
hardworkandwork.com
updateantiviruschrome.top
updatechromelastantivirus.com

# Reference: https://www.virustotal.com/gui/file/3e88e9c398b362e9add168ad032019eb4220fb5058522cc2c5f542498077338d/detection

chegesov28.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/272503196ef95ff0ab646734cdcd7a6f6244ec5c7bad2ff221738ba72323a668/detection

chegesov29.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/2ae6ce8d692f07f61d83b394c1820eafd803ba89c1ea863cd5d04d7ceadb5701/detection

chegesov30.temp.swtest.ru

# Reference: https://twitter.com/malwrhunterteam/status/1488834645768785920
# Reference: https://www.virustotal.com/gui/ip-address/94.140.113.77/relations
# Reference: https://www.virustotal.com/gui/file/57a82f7a3e4ee213f2c5dd913d1730e61163b2cc3262dc666a8a4359fa56682c/detection

fareyanazolal.xyz
juradannagaha.xyz
malemasenafis.xyz

# Reference: https://www.virustotal.com/gui/file/37cc0c63b8fa9862a94cf8426a53a22848a0fdbaec279b363fdc669983a0ff04/detection
# Reference: https://www.virustotal.com/gui/file/38449b61c9a8cc7ae5d5541a5a8dfa53645af57e9cc9cc0c50cc69f3f71508c1/detection
# Reference: https://www.virustotal.com/gui/file/49d38fe208686f7b5362b8141c97259113901a4898f388fa1bc3dda125e3b899/detection

okfotrfotormx162xjd.digital

# Reference: https://www.virustotal.com/gui/file/f351ec81daaaf723294c6042cc40afefe0dfd8427bcd5949f58de2fdbe9580da/detection

akvadisk.win

# Reference: https://www.virustotal.com/gui/file/02257712b9daf7319743f631eae6990b6b9ad5117afd51b97cab43fe5430ed5a/detection

tratata.space

# Reference: https://www.virustotal.com/gui/file/4e15aa62b3859fdf57a62daae303c7df7407f68e3f5d81f592bc52b3bc46dbf3/detection

hifoll.xyz

# Reference: https://www.virustotal.com/gui/file/da704b8ffbceea10fc2eef5bae017fa631fcf1e03ddbaaaed73f88f7abded021/detection

haremo.xyz

# Reference: https://www.virustotal.com/gui/file/013dfc1daf54b80985db4e8865a38497da519fafcf8a6bffd0b39e0487586497/detection

gapeko.xyz

# Reference: https://www.virustotal.com/gui/file/0f9218b34a106c195368147cd7d7aecab0e13c885586621142111d702963cca2/detection

a0613582.xsph.ru

# Reference: https://www.virustotal.com/gui/file/170ca2aa7f85ff284c644e1f5fb2f361aae9bcec3c947dd0c2f9ed1608f8d4b6/detection

exmeri.xyz

# Reference: https://www.virustotal.com/gui/file/095649e18fbb1538ebcd158aa14feebc882a735ca9e7efc53c8743624451c027/detection

ikklo.xyz

# Reference: https://www.virustotal.com/gui/file/5a6beee384e6c89985e2cccf9e66040b4c6e61037ad68a31f54c7f1d2f041b32/detection

hugne.xyz

# Reference: https://www.virustotal.com/gui/file/2b835b7669ef497315c266bdf2c70b9a3a3dd1d304d616472b1083eaa6af4fa1/detection

chegesov40.temp.swtest.ru

# Reference: https://twitter.com/entdark_/status/1579692897506840580
# Reference: https://www.virustotal.com/gui/file/4560c27d6656bcf5f5f4d101daab3ccdd5f0edd4f5b279b66464019a7cbe9aba/detection

45.80.209.219:8000

# Reference: https://twitter.com/entdark_/status/1580352650935422976
# Reference: https://www.virustotal.com/gui/file/ad729ff3963682680bbef0d1345e743938dac29792a96b6f64fd048509aea140/detection

5.252.178.55:8000

# Reference: https://www.virustotal.com/gui/file/ca5185314569406fb353271ff494c996784ed8307778fcd3b63ed9c1979c73d5/detection

5.252.178.86:8000
mibegnon.com

# Reference: https://www.virustotal.com/gui/file/000241feaa27953c50a686eb25b9e66e0b80b5fbf90c9d6d4dda0452941c2790/detection

ueghsuigfesgkayfgyegcscuigsrrvfdsr.com

# Reference: https://twitter.com/ReBensk/status/1615369592171540481
# Reference: https://blog.group-ib.com/godfather-trojan
# Reference: https://otx.alienvault.com/pulse/63a5aee2ab023fdb06264ff2
# Reference: https://www.virustotal.com/gui/ip-address/93.189.46.247/relations
# Reference: https://www.virustotal.com/gui/file/4244916a5f03ce5ee5862b9dce2db01ba34436eee312293d57e02d5ad1e3b8b2/detection

banerrokutepera.com
gagadiropeyurro.com
hareminalikorma.com
heikenmorgan.com
henkormerise.com
makurpotekinno.com
manrotekurrom.com
pluscurrencyconverter.com

# Reference: https://www.entdark.net/2022/11/zanubis-updates-with-screenshot.html

001.kidz4lifeplus.org
/389d3bf103aeec5039e30f1410d18fcd/inicio

# Reference: https://twitter.com/0xeckr/status/1627677636284620800
# Reference: https://www.virustotal.com/gui/ip-address/47.251.13.33/relations

okirovamitapora.shop
parekomitokace.shop
/g0df4th3r.php

# Reference: https://twitter.com/ReBensk/status/1662353629922091008
# Reference: https://www.virustotal.com/gui/ip-address/47.253.47.33/relations
# Reference: https://www.virustotal.com/gui/ip-address/5.178.2.171/relations

ganteropikosa.click
hannovermaret.shop
jeqorvesa.shop
menberuzakiro.click
pazeko.click
vanharemis.shop
zasekolisa.shop

# Reference: https://www.virustotal.com/gui/ip-address/62.173.145.40/relations
# Reference: https://www.virustotal.com/gui/file/ebc755cc2ddf1591df4fd6cdeb8ee99d3c1a5412cfa85514f4e9a3f3a153de6c/detection

infoservice20.top
infoserver21.top

# Reference: https://twitter.com/0x6rss/status/1697529873076531407
# Reference: https://twitter.com/malwrhunterteam/status/1702588812189188327
# Reference: https://www.virustotal.com/gui/ip-address/91.103.253.17/relations
# Reference: https://www.virustotal.com/gui/ip-address/95.214.26.35/relations
# Reference: https://www.virustotal.com/gui/ip-address/95.214.26.33/relations
# Reference: https://www.virustotal.com/gui/file/793f4c4ac93433059b610a9c2e8dd0fc238864ae2becf9a4b0b98783d5519158/detection
# Reference: https://www.virustotal.com/gui/file/77712ce9e770054c733623c7b87d072ad0b468a32d8b4fd0e837adaeacd5b862/detection

arezo.click
bappola.click
baruzatek.click
bekiza.shop
bortasy.click
burimak.click
cafirran.click
cunnate.click
curizpa.click
dacazara.click
ehtemu.click
facratnu.click
fazzare.click
fimyare.click
gamurapi.shop
gopposa.click
haneri.shop
hertanza.click
hikzami.click
hunazora.click
juzzako.click
kajjaru.click
maruzako.shop
nertun.shop
nuzzar.click
periza.click
playprotect.click
ramzartey.click
raptimoza.shop
raqerma.click
razaxera.shop
suvaro.click
tappose.click
tarezmi.shop
taviroza.click
torhamisa.click
tuyapoza.shop
wannertop.click
zoppara.click
0j8uh6papy.cafirran.click
emv1.hunazora.click
emv1.nertun.shop
mta-sts.cafirran.click
mta-sts.haneri.shop
mta-sts.periza.click

# Reference: https://www.virustotal.com/gui/file/007f0d22683293b3655db1a514a0fc54148a6521bdd87143f57a0f46d1913f98/detection

144.76.109.61:5500

# Reference: https://www.virustotal.com/gui/file/11cc9fbbd13da7a2b42a8a16c155feb61b6926ee5d3e0f637e0711198546ba0a/detection

atendimentoempresarial.digital

# Reference: https://twitter.com/h_krobot/status/1739241618182488113
# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=194.87.210.197
# Reference: https://app.validin.com/detail?find=82.97.241.207&type=ip4&ref_id=a2651285753#tab=resolutions

http://194.87.210.197
http://34.230.9.163
arimozaka.com
buzareqam.shop
easybudgetapps.com
fannamora.com
gagavusava.shop
henuyrapsa.shop
hukkomizakora.com
jukominoko.click
kennozara.com
monkasse.com
nanenura.com
posarmusza.shop
ramcazaka.shop
tajurkoza.com
tappopra.com
ujokamaza.com
vavasua.shop
yakavama.shop
yazevora.com
zakavama.shop
zamrakapata.com

# Reference: https://www.virustotal.com/gui/ip-address/158.160.1.109/relations

azumotase.com
bavraqe.shop
humizo.shop

# Reference: https://www.virustotal.com/gui/ip-address/158.160.112.216/relations

huykaro.shop
napoko.shop
rareqa.shop

# Reference: https://www.virustotal.com/gui/ip-address/193.37.70.208/relations

fassomas.com
gamkosa.shop
serumom.com

# Reference: https://www.virustotal.com/gui/ip-address/45.143.139.130/relations

varosale.com

# Reference: https://www.virustotal.com/gui/ip-address/92.53.115.155/relations

bamorosar.com
hizatermi.com
pottero.shop
yoparitam.com
zurayoza.com

# Reference: https://x.com/ReBensk/status/1801657611932066032
# Reference: https://www.virustotal.com/gui/file/a0e0c1276c5074ac6829e436e6a864c01432d81f3c32536f6d3eb656f77a01ee/detection

e-kasimaydin.xyz
v1069-guncelleme-chrome.epizy.com
/chrome-guncellemesi.apk

# Reference: https://www.virustotal.com/gui/file/c2fc5088a3dfc2878acb8f1c00a02375610a2568bfa36adae262d5cc567091ce/detection

v3ep.cf

# Reference: https://www.virustotal.com/gui/file/f99b340025803b4e70320c6f6c7e543b01c6c68ca9daaa8cc4d5cabd6ed175c2/detection

0eecd.ga

# Reference: https://www.virustotal.com/gui/file/2cbb45271781055deaa3515d4e9d85baf95a3a3bf221d4f0a58fef22bd3cfcdc/detection
# Reference: https://www.virustotal.com/gui/file/0cf96081e0f6be2dd31061e6b39e3ff2ed04a9e0806d90b911d6ec285be68983/detection

bd60.ga

# Reference: https://x.com/entdark_/status/1818892844087570800
# Reference: https://www.virustotal.com/gui/file/03cfcf7ad4dc580627e6c303dae7dde5dd483c0d09f77d6e7802eedbc15836a8/detection

147.78.103.19:8000

# Generic

/406e8b2b28b39726/login.php
/67656gtdm,mnvjuyhjfbnxhgfgWERESFFGDXSGHGbhgdrgdhgfhg/
/7k6ijun5yb4rtvevun6yi7mi6ynu5tb/
/8huayth8duye7g8hh76dt3yQS/
/989aa1996afe587dbbf6f46ec8ab514f/
/anubis/admin_panel/
/asdfgh35546fhwJYGvdfgsadsg/
/lesfyWDlg23sSHLScwrt/
/anubis/login.php
/dag/login.php
/fucksom/login.php
/mokoko/login.php
/B0UrKFg4cSL4xSgnUPPC/
/Gsh6kSNDSTfr7jdBfG/
/fullprivateanubis/
/injasdfasdfasd23/
/injclientup/
/injfull/
/verynicepussymymilf/
/YWY0M2RhNDZlZDcx/
/conf/bio.php
/conf/car.php
/api/a1.php
/api/a10.php
/api/a11.php
/api/a12.php
/api/a13.php
/api/a14.php
/api/a15.php
/api/a16.php
/api/a2.php
/api/a3.php
/api/a4.php
/api/a5.php
/api/a6.php
/api/a7.php
/api/a8.php
/api/a9.php
/d3d/a1.php
/d3d/a10.php
/d3d/a11.php
/d3d/a12.php
/d3d/a13.php
/d3d/a14.php
/d3d/a15.php
/d3d/a16.php
/d3d/a2.php
/d3d/a3.php
/d3d/a4.php
/d3d/a5.php
/d3d/a6.php
/d3d/a7.php
/d3d/a8.php
/d3d/a9.php
/d3d/a1.phpy
/d3d/a10.phpy
/d3d/a11.phpy
/d3d/a12.phpy
/d3d/a13.phpy
/d3d/a14.phpy
/d3d/a15.phpy
/d3d/a16.phpy
/d3d/a2.phpy
/d3d/a3.phpy
/d3d/a4.phpy
/d3d/a5.phpy
/d3d/a6.phpy
/d3d/a7.phpy
/d3d/a8.phpy
/d3d/a9.phpy
/inj/a1.php
/inj/a10.php
/inj/a11.php
/inj/a12.php
/inj/a13.php
/inj/a14.php
/inj/a15.php
/inj/a16.php
/inj/a2.php
/inj/a3.php
/inj/a4.php
/inj/a5.php
/inj/a6.php
/inj/a7.php
/inj/a8.php
/inj/a9.php
/inj/a1.phpy
/inj/a10.phpy
/inj/a11.phpy
/inj/a12.phpy
/inj/a13.phpy
/inj/a14.phpy
/inj/a15.phpy
/inj/a16.phpy
/inj/a2.phpy
/inj/a3.phpy
/inj/a4.phpy
/inj/a5.phpy
/inj/a6.phpy
/inj/a7.phpy
/inj/a8.phpy
/inj/a9.phpy
/inj/airbnb.php
/inj/cc_com.ubercab.php
/inj/fafa.php
/inj/grab_facebook.html
/inj/grabfacebook.php
/inj/grab1.php
/inj/grab2.php
/inj/grab3.php
/inj/grab4.php
/inj/grab5.php
/inj/grab6.php
/inj/grab7.php
/inj/grab8.php
/inj/grab9.php
/inj/grab10.php
/inj/grab11.php
/inj/grab12.php
/inj/grab13.php
/inj/grab14.php
/inj/grab15.php
/inj/grab16.php
/inj/grabfacebook.php
/inj/in_axis.php
/inj/mails_aol.php
/inj/mails_com.mail.mobile.android.mail.php
/inj/mails_mailcom.php
/inj/mails_outlook.php
/inj/malis_com.connectivityapps.hotmail.php
/inj/multi_payeer.php
/inj/multi_payoneer.php
/inj/multi_perfectmoney.php
/inj/payment_Plus500.php
/inj/payment_airbnb.php
/inj/payment_binance.php
/inj/payment_bitmarket.php
/inj/payment_blockchain.php
/inj/payment_btcturk.php
/inj/payment_coinbase.php
/inj/payment_googlepay.php
/inj/payment_googlepay1.php
/inj/payment_googlepay2.php
/inj/payment_plunien.php
/inj/payment_samsungpay.php
/inj/payment_stripe.php
/inj/payment_unocoin.php
/inj/payment_westernunion.php
/inj/xorx.php
/inj/zebpay.php
/injclientup/fafa.php
/jisjdfioasf/fafa.php
/injectfull/
/jisjdfioasf/
/kokojamba1212/
/se54ees5gse55wgsdfgdy/
/Parasitusss/
/o1o/a1.php
/o1o/a10.php
/o1o/a11.php
/o1o/a12.php
/o1o/a13.php
/o1o/a14.php
/o1o/a15.php
/o1o/a16.php
/o1o/a17.php
/o1o/a18.php
/o1o/a19.php
/o1o/a20.php
/o1o/a21.php
/o1o/a22.php
/o1o/a23.php
/o1o/a24.php
/o1o/a25.php
/o1o/a26.php
/o1o/a27.php
/o1o/a28.php
/o1o/a29.php
/o1o/a30.php
/o1o/a2.php
/o1o/a3.php
/o1o/a4.php
/o1o/a5.php
/o1o/a6.php
/o1o/a7.php
/o1o/a8.php
/o1o/a9.php
/o1o/a1.phpy
/o1o/a10.phpy
/o1o/a11.phpy
/o1o/a12.phpy
/o1o/a13.phpy
/o1o/a14.phpy
/o1o/a15.phpy
/o1o/a16.phpy
/o1o/a17.phpy
/o1o/a18.phpy
/o1o/a19.phpy
/o1o/a20.phpy
/o1o/a21.phpy
/o1o/a22.phpy
/o1o/a23.phpy
/o1o/a24.phpy
/o1o/a25.phpy
/o1o/a26.phpy
/o1o/a27.phpy
/o1o/a28.phpy
/o1o/a29.phpy
/o1o/a30.phpy
/o1o/a2.phpy
/o1o/a3.phpy
/o1o/a4.phpy
/o1o/a5.phpy
/o1o/a6.phpy
/o1o/a7.phpy
/o1o/a8.phpy
/o1o/a9.phpy
/ping/ping1.php
/ping/ping10.php
/ping/ping11.php
/ping/ping12.php
/ping/ping13.php
/ping/ping14.php
/ping/ping15.php
/ping/ping16.php
/ping/ping17.php
/ping/ping18.php
/ping/ping19.php
/ping/ping20.php
/ping/ping21.php
/ping/ping22.php
/ping/ping23.php
/ping/ping24.php
/ping/ping25.php
/ping/ping26.php
/ping/ping27.php
/ping/ping28.php
/ping/ping29.php
/ping/ping30.php
/ping/ping2.php
/ping/ping3.php
/ping/ping4.php
/ping/ping5.php
/ping/ping6.php
/ping/ping7.php
/ping/ping8.php
/ping/ping9.php
/private/add_log.php
/private/checkPanel.php
/private/tuk_tuk.php
/alexaываывnder_lace
/bektororrope
/fleegel2
/icgiyimdunyaniz
/johnmaccallist1
/misskish1190
/qweqweqwe

# Web-injects
# Reference: https://twitter.com/bl4ckh0l3z/status/1305526216649314306
# Reference: https://twitter.com/ReBensk/status/1364624123503108096
# Reference: https://pastebin.com/w2Xfwsza

/at_at.spardat.bcrmobile.php
/at_at.spardat.netbanking.php
/at_bawag.php
/at_com.bankaustria.android.olb.php
/at_easybank.php
/at_raiffeisen.php
/at_volksbank.php
/au_SuncorpBank.php
/au_WestpacBank.php
/au_anz.php
/au_anzSingaporeDigitalBanking.php
/au_bankofqueenslandBOQ.php
/au_banksa.php
/au_bankwest.php
/au_bendigobank.php
/au_bom.php
/au_bomBank.php
/au_citibank.php
/au_commbank.php
/au_cua.php
/au_fusion.php
/au_fusionATMLocator.php
/au_imb.banking.php
/au_imb.php
/au_ingdirect.php
/au_mebank.php
/au_nab.php
/au_newcastlepermanent.php
/au_orgBanksaBank.php
/au_stgeorge.Bank.php
/au_stgeorge.php
/au_suncorp.php
/au_westpac.php
/blockchaine.php
/ca_com.bmo.mobile.php
/ca_com.cibc.android.mobi.php
/ca_com.rbc.mobile.android.php
/ca_com.scotiabank.mobile.php
/ca_com.td.php
/cc_com.ubercab.php
/com.Plus500.php
/com.amazon.mShop.android.shopping.php
/com.bitfinex.bfxapp.php
/com.bitmarket.trader.php
/com.coinbase.android.php
/com.ebay.mobile.php
/com.mycelium.wallet.php
/com.plunien.poloniex.php
/com.unocoin.unocoinwallet.php
/cz_cleverlanceCsasServis24.php
/cz_csobSmartbanking.php
/cz_cz.airbank.android.php
/cz_eu.inmite.prj.kb.mobilbank.php
/cz_sberbankcz.php
/cz_sksporoapps.php
/de_Comdirect.php
/de_CommerzBank.php
/de_Consorsbank.php
/de_DKB.php
/de_DeutscheBank.php
/de_ING_DiBa.php
/de_Postbank.php
/de_Santander.php
/de_Sparkasse.php
/de_Volksbank.php
/de_com.db.mm.norisbank.php
/de_com.db.pwcc.dbmobile.php
/de_com.targo_prod.bad.php
/de_eu.unicreditgroup.hvbapptan.php
/de_spadrat.php
/es_bancosantander.php
/es_bankia.php
/es_bbvacontigo.php
/es_bbvanetcash.php
/es_com.bankinter.launcher.php
/es_com.kutxabank.android.php
/es_com.rsi.php
/es_com.tecnocom.cajalaboral.php
/es_es.bancopopular.nbmpopular.php
/es_es.evobanco.bancamovil.php
/es_es.lacaixa.mobile.android.newwapicon.php
/es_pl_google.php
/fr_BNPParibas.php
/fr_BanquePopulaire.php
/fr_Boursorama.php
/fr_CaisseEpargne.php
/fr_LCL.php
/fr_SocieteGenerale.php
/fr_agricole.php
/fr_axa.php
/fr_cmprodfr.php
/fr_laposte.php
/fr_palatine.php
/hk_com.FubonMobileClient.php
/hk_com.MobileTreeApp.php
/hk_com.bochk.com.php
/hk_com.dbs.hk.dbsmbanking.php
/hk_com.hangseng.rbmobile.php
/hk_com.mtel.androidbea.php
/hk_com.scb.breezebanking.hk.php
/hk_hk.com.hsbc.hsbchkmobilebanking.php
/hu_com.aff.otpdirekt.php
/il_com.ideomobile.hapoalim.php
/in_co.bankofbaroda.mpassbook.php
/in_com.infrasofttech.indianBank.php
/in_com.mobikwik_new.php
/in_com.oxigen.oxigenwallet.php
/in_csam.icici.bank.imobile.php
/in_hdfcbank.hdfcquickbank.php
/in_sbi.SBFreedom.php
/in_snapwork.hdfc.php
/in_src.com.idbi.php
/in_unionbank.ecommerce.mobile.android.php
/it_com.jiffyondemand.user.php
/it_com.latuabanca_tabperandroid.php
/it_com.latuabancaperandroid.php
/it_com.lynxspa.bancopopolare.php
/it_com.unicredit.php
/it_it.bnl.apps.banking.php
/it_it.bnl.apps.enterprise.bnlpay.php
/it_it.bpc.proconl.mbplus.php
/it_it.copergmps.rt.pf.android.sp.bmps.php
/it_it.gruppocariparma.nowbanking.php
/it_it.ingdirect.app.php
/it_it.nogood.container.php
/it_it.popso.SCRIGNOapp.php
/it_posteitaliane.posteapp.apppostepay.php
/jp_jp.co.aeonbank.android.passbook.php
/jp_jp.co.netbk.php
/jp_jp.co.rakuten_bank.rakutenbank.php
/jp_jp.co.sevenbank.AppPassbook.php
/jp_jp.co.sevenbank.apppassbook.php
/jp_jp.co.smbc.direct.php
/jp_jp.mufg.bk.applisp.app.php
/ke_com.barclays.ke.mobile.android.ui.php
/nl_com.abnamro.nl.mobile.payments.php
/nl_com.triodos.bankingnl.php
/nl_ing.mobile.php
/nl_nl.asnbank.asnbankieren.php
/nl_nl.snsbank.mobielbetalen.php
/nz_nz.co.anz.android.mobilebanking.php
/nz_nz.co.asb.asbmobile.php
/nz_nz.co.bnz.droidbanking.php
/nz_nz.co.kiwibank.mobile.php
/pl_alior.bankingapp.android.php
/pl_com.comarch.mobile.banking.bgzbnpparibas.biznes.php
/pl_com.comarch.security.mobilebanking.php
/pl_com.empik.empikapp.php
/pl_com.empik.empikfoto.php
/pl_com.finanteq.finance.ca.php
/pl_com.getingroup.mobilebanking.php
/pl_com.orangefinanse.php
/pl_eu.eleader.mobilebanking.invest.php
/pl_eu.eleader.mobilebanking.pekao.firm.php
/pl_eu.eleader.mobilebanking.pekao.php
/pl_eu.eleader.mobilebanking.raiffeisen.php
/pl_pl.aliorbank.aib.php
/pl_pl.allegro.php
/pl_pl.bosbank.mobile.php
/pl_pl.bph.php
/pl_pl.bps.bankowoscmobilna.php
/pl_pl.bzwbk.bzwbk24.php
/pl_pl.bzwbk.ibiznes24.php
/pl_pl.bzwbk.mobile.tab.bzwbk24.php
/pl_pl.ceneo.php
/pl_pl.com.rossmann.centauros.php
/pl_pl.fmbank.smart.php
/pl_pl.ideabank.mobilebanking.php
/pl_pl.ing.mojeing.php
/pl_pl.ipko.mobile.php
/pl_pl.mbank.php
/pl_pl.millennium.corpApp.php
/pl_pl.orange.mojeorange.php
/pl_pl.pkobp.iko.php
/pl_pl.pkobp.ipkobiznes.php
/pl_wit.android.bcpBankingApp.millenniumPL.php
/ro_com.advantage.RaiffeisenBank.php
/ro_hr.asseco.android.jimba.mUCI.ro.php
/ro_may.maybank.android.php
/ro_ro.btrl.mobile.php
/ru_akbars_card.php
/ru_alfabank.php
/ru_alfabiznes.php
/ru_aliexpress.php
/ru_auto.php
/ru_avangard.php
/ru_avangard_card.php
/ru_avangardbiznes.php
/ru_aviasales.php
/ru_avito.php
/ru_binbank.php
/ru_booking.php
/ru_chatbank.php
/ru_com.hitsolutionlimited.hitbtc.php
/ru_dropbox.php
/ru_ebay.php
/ru_expertbank.php
/ru_facebook.php
/ru_gazprom.php
/ru_gazprom_card.php
/ru_gettaxi.php
/ru_gmail.php
/ru_googlepay.php
/ru_homecredit.html
/ru_homecredit_card.php
/ru_instagram.php
/ru_mail.php
/ru_mkb_card.php
/ru_mkb_login_card.php
/ru_modulbank.php
/ru_modulbank_card.php
/ru_mts.php
/ru_mts_card.php
/ru_odnoklassniki.php
/ru_openbank.php
/ru_openbank_card.php
/ru_playmarket.php
/ru_promsvyazbank.php
/ru_promsvyazbank_card.php
/ru_promsvyzbiznes.php
/ru_qiwi.php
/ru_raiffeisen.php
/ru_raiffeisen_card.php
/ru_raiffeisenbiznes.php
/ru_rambler.php
/ru_renessans.php
/ru_rosbank.php
/ru_rosbank_card.php
/ru_rshb_card.php
/ru_rshb_login_card.php
/ru_ru.avangard.php
/ru_ru.yandex.money.php
/ru_russkiystandart.php
/ru_samsungpay.php
/ru_sberbank_card.php
/ru_sberbank_card_antivir.php
/ru_sberbank_info.php
/ru_sberbank_login.php
/ru_sberbank_loker.php
/ru_sberbank_new.php
/ru_sberbankbiznes_card.php
/ru_sberbankbiznes_login.php
/ru_taxovichkof.php
/ru_telegram.html
/ru_tinkoff.php
/ru_tinkoff_card.php
/ru_tinkoffbiznes.php
/ru_tochkabank.php
/ru_tutu.php
/ru_twitter.php
/ru_ubercab.html
/ru_ubrir.php
/ru_ubrir_biznes.php
/ru_ubrir_card.php
/ru_ucb_card.php
/ru_vezet.php
/ru_viber.php
/ru_vkontakte.php
/ru_vostochniy_card.php
/ru_vostochniybiznes.php
/ru_vtb24_card.php
/ru_vtb24_cardlogin.php
/ru_vtb24_login.php
/ru_vtb24_new.php
/ru_vtb24biznes.php
/ru_whatsapp.php
/ru_xmr.org.freewallet.app.php
/ru_yandexmail.php
/ru_yandexmoney.php
/ru_yandextaxi.php
/tr_akbank.php
/tr_com.binance.dev.php
/tr_com.btcturk.php
/tr_com.finansbank.mobile.cepsube.html
/tr_com.finansbank.mobile.cepsube.php
/tr_com.garanti.cepsubesi.php
/tr_com.ingbanktr.ingmobil.php
/tr_com.kuveytturk.mobil.php
/tr_com.magiclick.odeabank.php
/tr_com.mobillium.papara.php
/tr_com.pozitron.albarakaturk.php
/tr_com.pozitron.iscep.php
/tr_com.teb.php
/tr_com.tmddodbtech.haldkbank.php
/tr_com.tmob.denizbank.php
/tr_com.tmobtech.halkbank.php
/tr_com.tmodbtdech.halkbank.php
/tr_com.vakifbank.mobile.html
/tr_com.vakifbank.mobile.php
/tr_com.ykb.android.php
/tr_com.ziraat.ziraatmobil.php
/tr_finansbank.enpara.php
/tr_garantibank.html
/tr_garantibank.php
/tr_halkbank.html
/tr_halkbank.php
/tr_isbank.html
/tr_isbank.php
/tr_pozitron.iscep.php
/tr_qnb_finansbank.php
/tr_tr.com.hsbc.hsbcturkey.php
/tr_tr.com.sekerbilisim.mbank.php
/tr_vakifbank.php
/tr_yapikredi.html
/tr_yapikredi.php
/tr_ziraatbanksi.html
/tr_ziraatbanksi.php
/ua_privatbank.php
/ua_privatebank.php
/uk_bankofscotland.php
/uk_barclays.php
/uk_csgcsdnmb.php
/uk_halifax.php
/uk_hsbc.php
/uk_natwest.php
/uk_royalbankofscotland.php
/uk_santander.php
/uk_tsb.php
/uk_ulster.php
/us_barclays.php
/us_bny.php
/us_bofa.php
/us_capitalone.php
/us_chase.php
/us_citi.php
/us_com.aa.android.php
/us_com.att.myWireless.php
/us_com.banksimple.php
/us_com.bcu.bcu.php
/us_com.firsttech.firsttech.php
/us_com.ifs.banking.fiid3364.php
/us_com.ifs.banking.fiid8025.php
/us_com.navyfederal.android.php
/us_com.vzw.hss.myverizon.php
/us_com.woodforest.php
/us_fifth.php
/us_fifththirdbetter.php
/us_grabber.php
/us_hsbc.php
/us_jpm.php
/us_neteller.php
/us_neteller_card.php
/us_org.vystarcu.mobilebanking.php
/us_paypal.php
/us_paypal_card.html
/us_pcn.php
/us_regions.php
/us_salliemae.php
/us_salliemae_email.php
/us_skrill.php
/us_skrill_card.php
/us_sone.mbanking.php
/us_suntrust.php
/us_td.php
/us_usaa.php
/us_usbank.html
/us_usbank.php
/us_wellsfargomobile.php

# APK

/1000TLE-DESTEK.apk
/30GB.apk
/35gb_hediye_internet.apk
/5gbeta.apk
/5kabonus.apk
/5kbonus_obf.apk
/694271_Telegram_Buratino-T.apk
/aksigorta.apk
/Android-Guncelle.apk
/AndroidGuncelleme.apk
/Astekbet_Spor_Casino.apk
/Avast%20Antivirus%20ULTIMATE%202021.apk
/basvuru_devlet_destegi.apk
/Bildirim..apk
/BMWSECURITY.apk
/btkdestek.apk
/canli%20sohbet.apk
/cheat.apk
/Chromebildirim.apk
/Cimer.apk
/cimerdestek.apk
/coin-invest.apk
/corona.apk
/Club_Romance_Mod.apk
/Club-Romance-Mod-v.1.0.6500.apk
/ddddd_obfuscated.apk
/Deprembilgi.apk
/destek.apk
/devlet_destegi_basvuru.apk
/ELVİNNEWFUD-covid-19.apk
/ePandemi.apk
/FudluDosya.apk
/googlechromversionupdatefebreary8.apk
/googlehcromeupdate23423424.apk
/googlechromupdate25enero-signed.encryt_signed.apk
/gratisnet.apk
/GULSAHINDUNYASI.apk
/GULSAHINDUNYASI..apk
/hediye10gb.apk
/hediye20gb.apk
/HES.apk
/interbank.apk
/Kwarantannadomowa.apk
/lovestory.apk
/OtoRapor-Belgesi-No-24026025.apk
/pandemisosyal.apk
/pandemi-yardimi.apk
/pandemi_basvuru.apk
/pandemi_basvurusu.apk
/pandemi_basvuru_destek.apk
/pandemi_basvuru_uygulamasi.apk
/pandemi_yardimi.apk
/PayPalPatch.apk
/RainbowVPN.apk
/realpath.apk
/Salla_Kazan.apk
/SuperSU.apk
/turk-chat.apk
/Turkcell.apk
/Ucretsiz_30_GB_.apk
/update-google.apk
/updflashplayer.apk
/Viber_IMG_3742.pdf.apk
/Whatsapp.apk
