# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.talosintelligence.com/2018/06/my-little-formbook.html?m=1

drylipc.com
handanzhize.info
bddxpso.info
atopgixn.info
cretezzy.com
casiinoeuros.info
newraxz.com

# Reference: https://twitter.com/avman1995/status/1038285919219068928
# Reference: https://pastebin.com/6MRD35Pq

http://136.144.52.99
http://47.91.170.222
lotochain.com
n01.tech
ourcrazyveterans.com
sy-adm.com
yinuxw.info

# Reference: https://twitter.com/dms1899/status/1038276577254146049
# Reference: https://pastebin.com/4pDsDuxn

http://5.101.78.222
http://5.255.94.75
0day4today.com
commercekorea.net
magnagrecia.net
npromo.eu
southsidenewhomes.com

# Reference: https://twitter.com/voidm4p/status/1037294325091250177

handanzhize.info

# Reference: https://twitter.com/ps66uk/status/1036782703788605440

ghazicraft.com

# Reference: https://twitter.com/ps66uk/status/1036773879321190400

truemusclesnow.com

# Reference: https://twitter.com/ps66uk/status/1036773694243332096

sosmedplus.com

# Reference: https://twitter.com/ps66uk/status/1036781260516061184

newd4y.com/sp/

# Reference: https://twitter.com/malware_traffic/status/957956818906632192

boosterfx.com
cabel-ispoffers.market
conditionalmachines.com
derekblasberg.net
exoticlocale.com
idlevents.com
fhsdjhfsdkj.com
lynkieevents.com
mansiobbok.com
wshamg.com
yougethosted.com

# Reference: https://pastebin.com/bEqJKZfZ

peliculainfantiles.com
vanzundertconsulting.com

# Reference: https://twitter.com/nullcookies/status/1046929109811630081

derwamanojaz.com

# Reference: https://twitter.com/James_inthe_box/status/1046864076624646144

graimmer.com
ww7.keygirl.site

# Reference: https://twitter.com/pollo290987/status/1044947696451235840

high5fundraising.net
lechevalierorange.com
returnlostitem.com
sftpcomponent.net

# Reference: https://twitter.com/James_inthe_box/status/1044580953912266758

aldocompliance.com

# Reference: https://twitter.com/James_inthe_box/status/1044324089714724870

graimmer.com

# Reference: https://twitter.com/nullcookies/status/1046924081591988224

bharimatrasay.com

# Reference: https://twitter.com/James_inthe_box/status/1047488230763913216

d.coka.la/ORg1ie.jpg
d.coka.la/BI0asY.jpg
jgc.com.mx/dat/heavy.jpg
jgc.com.mx/dat/mila.jpg
nothernpridecommunications.net
mrawesomescloset.com

# Reference: https://twitter.com/James_inthe_box/status/1047846258239401986

graimmer.com
refractoriesdirectory.com

# Reference: https://twitter.com/dvk01uk/status/1107851408269824000

higcaf.com

# Reference: https://twitter.com/dvk01uk/status/1098070906029723649

symtual.com

# Reference: https://twitter.com/dvk01uk/status/1091013599018000386

funguythings.com

# Reference: https://twitter.com/dvk01uk/status/1089807824731947009

humanytc.com

# Reference: https://twitter.com/dvk01uk/status/1089748801571700737

zinrop.com

# Reference: https://twitter.com/James_inthe_box/status/1108064849651601408

melendyou.com/rm/

# Reference: https://twitter.com/James_inthe_box/status/1110579161884577792

liongrooming.com

# Reference: https://twitter.com/makflwana/status/1068015579586453504
# Reference: https://pastebin.com/TurChwaE

jeycop.com
scubaarabia.com
journeystudentcamp.com
niger-online.com
simplegreenhabits.net
essayontime.science
frankandmidori.com
525pwz.info
check-or-wreck.com
purdomlnc.com

# Reference: https://twitter.com/dvk01uk/status/1118565721892634624

slideus.com

# Reference: https://twitter.com/pancak3lullz/status/1092534221783158784

mitafa.com
seajayssailing.com
327503788.com
michkatravel.com
recoil.world
lianglinyiyou.com
full-art.com
despasito.net
23o95.com
cultivatingimmaturity.win
dtrchampions.com

# Reference: https://twitter.com/pancak3lullz/status/1092434571889688576

w3c.ink
idreamstartup.com
tiaohuobuy.com
droptxt.com
demopex.com
thebodyshelinglogic.com
millcms.com
artframephotography.com
whitelodgingcollege.com

# Reference: https://twitter.com/pancak3lullz/status/1083019107568619521

goodies.biz
win603.com
microbreweriesassociation.com
xn--hck5aza9o8c.site
orangefirestarter.com
mmareligion.com
elhomegifts.com
mecharniser.com
xinghuategang.com

# Reference: https://twitter.com/pancak3lullz/status/1121108516637433859

/h383/?CneDl=

# Reference: https://twitter.com/pancak3lullz/status/1034149890983641089

/eu/?Lh54A=

# Reference: https://twitter.com/malware_traffic/status/1080623037471432704

/hx310/?JreXz=

# Reference: https://twitter.com/pollo290987/status/1082400417370251268

/private/?Uv1x=

# Reference: https://twitter.com/pollo290987/status/901090998343929859

click-ticke.site

# Reference: https://twitter.com/Antelox/status/895299149284999168

wow-tracking.site

# Reference: https://twitter.com/luc4m/status/1124220235656118272

arsimport.com
iniwhmya.com
molakalyva.com

# Reference: https://twitter.com/dvk01uk/status/1125703826890199040

mecharniser.info/ni8/

# Reference: https://twitter.com/luc4m/status/1126043316305506304

alabamaseosolutions.com
foodome.net
humanytc.com
shopnow1.com
wealths.us
zjydl.com

# Reference: https://app.any.run/tasks/5582d288-8fef-456e-be79-a8d80d1df829

rachelkinseyforcongress.com

# Reference: https://twitter.com/dvk01uk/status/1120628599793553408

tiboxe.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1128996781054996480
# Reference: https://app.any.run/tasks/c0094589-70db-4cbe-a7de-f1a08b79168f/

/ca/?U4kp=

# Reference: https://twitter.com/malware_traffic/status/1130450003422351360

/ha/?1b=

# Reference: https://twitter.com/dms1899/status/1138414720199864320

mypeeps.ninja  
yuchuanjz.com  
tasmanuka.online  
perryleycraftgin.com  
ttklyn.com  
pipiguan.com  
kw7ob.com

# Reference: https://twitter.com/James_inthe_box/status/1138478169755754496

explorenoblesvillehomes.com
prytherchforcouncil.com

# Reference: https://twitter.com/luc4m/status/1140979690758262784

tlkcloudem.com

# Reference: https://twitter.com/JayTHL/status/1141056334244253698

promotionzynovawillzerodacontinuegood.duckdns.org

# Reference: https://twitter.com/Racco42/status/1141672784357146624

desklink.duckdns.org

# Reference: https://twitter.com/killamjr/status/1131368397617475584

joeing.duckdns.org

# Reference: https://twitter.com/luc4m/status/1143815529079156738

srcalci.com 
paxfulk.com 
ajexin.com 
gmcpr.net 
shots.golf 
artnfoods.guru 
biocombustiveis.com 
phpcoding.life 
ncfgmm.com

# Reference: https://twitter.com/James_inthe_box/status/1146183202467303424

virtuoussnowball.com

# Reference: https://twitter.com/reecdeep/status/1149224578532741120

hsctsu.com
srilankika.com
westernenergymedicine.info
xn--5nq67dt91acob217ad91b.com
xn--fhqv52e1ueg8n.com

# Reference: https://twitter.com/1ZRR4H/status/1149282913751617536

vfxwarrior.com
protocol.life
15churchroad.com
djcreview07.com

# Reference: https://twitter.com/hexlax/status/1150113306545467393

regular123.com

# Reference: https://twitter.com/hexlax/status/1150744858132451328

mecharniser.com
shaxob.com
shaxob.com

# Reference: https://twitter.com/James_inthe_box/status/1154398293524271104

24648040.ngrok.io

# Reference: https://twitter.com/dms1899/status/1165009802470277120

241369.com
apachedrone.com
beziehungswerk.net
regular123.com
sadathetoure.com
telnyc.com
the-brand-nursery.com
trendteasindia.com

# Reference: https://twitter.com/dms1899/status/1165762759738437632

aagangirlshostal.com
bbo6331.com
crossfitktresrios.com
darts-bar-nova.com
dclogisticsbrasli.com
fanfantxt.com
haiju365.com
longlifebaba.com
sixfiguresuccessmastery.com
somosvip365.com
starfleetcartography.com
sukfat.com
yj.ink

# Reference: https://twitter.com/dms1899/status/1165742047539662850

americangypsealife.com
andareavela.online
dpthkee.com
espritmoteur.com
fawazalhokairfashions.com
get-housesecurity.sale
jeyucite81.win
kzxuqf8w7.biz
mbk.partners
olivianaphotography.com
woodlandsdogretreat.com

# Reference: https://twitter.com/reecdeep/status/1166255171200004100

alptraumaclinic.com
amobad.com
artilary.com
artistsandcreatives.com
beyhanbilisim.com
hunde-betreuung.com
mecharniser.com
pixelorlando.com
ronicooper.com
scjieniu.com
superbotany.com
khosravanigroup.net
tc521.net
pen6.net

# Reference: https://twitter.com/reecdeep/status/1168937433171484676

eprivacyguards.com
nimble.report
shinrigaku-riron.com
xn--gdka3eubcx5ge.com
sukfat.com

# Reference: https://twitter.com/smica83/status/1169553710999060481

joyhoundinc.com 
margaretminguy.com 
racooncity.net 
seastarways.com 
szahjw.com 
tp-hostel.com
travelersintheworld.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1172122495652155392

selforall.info
haddadunited.com

# Reference: https://twitter.com/coderippers/status/1156857536026484736

burkwp.com

# Reference: https://twitter.com/James_inthe_box/status/1173953038098128896

starttoto.com

# Reference: https://twitter.com/malwaremustd1e/status/1175779000687325186

beautyzonebyheidi.com
ristorantepagus.com
sensingbridge-platform.com

# Reference: https://twitter.com/dvk01uk/status/1178696483522191360
# Reference: https://app.any.run/tasks/3b84770f-b06e-47c8-b193-9be3c4c7a6bf/

dealskabaap.com
drrichardorlandi.com
ferienwohnung-dodel.com
geohoof.com
identityapparelonline.com
kxmphs.com
romanoimoveis.com
superadminapp.com
termesahiltaksi.com
veroxin.com

# Reference: https://twitter.com/luc4m/status/1179413765147807744

7thgenerationrabble.com

# Reference: https://twitter.com/luc4m/status/1181880797399326721

cvasajhsjkls00pro.co.uk

# Reference: https://app.any.run/tasks/d933e54f-4a1b-431d-ac1a-46b1f7dbe792/

alphlinic.com
atlantisads.com
apps-tv.com
cheapmonclerjacketsoutlets.com
edmov.com
eurodisfraz.com
hhtdhg.com
nieuwtij.com
pelvicheartspiritalchemy.com
skylod.com
xiaolinjia.com
xn--dll-8n0e103b.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1186906425836081153

100rupeeeliquid.com
allixanes.com 
cattybcreative.com
fastbatterysystems.com
lokmazel.com 
moonchildenterprises.com 
pi2023.com

# Reference: https://twitter.com/wwp96/status/1187064601327919104

guzelkaybettik.com
podwath.com
dairobby.com
danielemenchetti.com

# Reference: https://twitter.com/wwp96/status/1189234871291564035

cartedevisitegratuite.net
palsgraphor.com
veroxin.com
ferreiralove.com

# Reference: https://pastebin.com/29uSdMAk

cancertreatmenttransport.com
chuangshunchem.com
garthhassel.com
golaminators.com
hairminders.com
kovaxy.com
mizorl.com
moraxy.com
rwinzresearch.com

# Reference: https://twitter.com/wwp96/status/1191014781911736321

camexpertangkor.com

# Reference: https://app.any.run/tasks/c0597f3d-f31a-40f8-85e1-b0a8eb3af899/

926cb.com
molestuk.com
shabbirinstruments.com

# Reference: https://app.any.run/tasks/aa6bc7f8-a986-4a33-9595-fff5ac5a0c62

cmioffices.com

# Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Formbook)

emizard.com
hoscury.com
monkalef.com
oyishu.com
pursemtb.com
scaker.com
shaxob.com

# Reference: https://pastebin.com/xwT2gAgE

3hilltopstudio.com
bgtr.cymru
facetheday.net
gmopets.com
hottennisjp.win
imizin.review
mnuvmg.info
regiusgames.com
tweakboxapp.info
xn--oru96d1wax98e.net

# Reference: https://twitter.com/58_158_177_102/status/1192332316917432321

bagelandcheese.com

# Reference: https://twitter.com/reecdeep/status/1161233442337697793
# Reference: https://app.any.run/tasks/4a4785fe-5b8c-4a36-83ef-ea6500a72df1/

2750tinsleydr.com

# Reference: https://twitter.com/wwp96/status/1193993959074402304
# Reference: https://app.any.run/tasks/35861fd2-8962-404d-a03a-6b90f2a83dad/

chungcuhanoihay.com
cubeandwater.com
deltavisiontv.com
flycoz.com
lateliercreatifdemarie.com

# Reference: https://app.any.run/tasks/954e589c-6906-4e99-9459-65a5770327ab

hitechhomepaintnyc.com
luxogloppeliving.com
balajiphotogallery.com
prlncess-hotels.com

# Reference: https://twitter.com/0xCARNAGE/status/1201194262093807616

beartraditionalkayaks.com
d55consulting.com
my-kit.net
nitsannthit.com
quickful.com
samperd.com
wk616.com
ympublishing.com

# Reference: https://twitter.com/ANeilan/status/1201346143155822592
# Reference: https://www.hybrid-analysis.com/sample/945c63a512d9d62583783329cd83d2872e250fba3c40d5fe0e36483a5a831a9a/5de484aa3f6a1d32720f2eee

norvicshippnig.com

# Reference: https://any.run/malware-trends/formbook (Note: as seen on 2019-12-04)

beauty-fullbox.com
idmicoffee.com
skylod.com
gazoly.com
gridadvisorsllc.com
corvinuscrypto.com
spillthegreens.com
bees11congress.com
atlantisads.com

# Reference: https://twitter.com/ViriBack/status/1202305799445504000

allixanes.com
casineuros.info

# Reference: https://app.any.run/tasks/5ded2851-08b2-4fe1-a34c-45daf448e8e2/

artgrowth.fund
fixref4.com
hotrugged.com
insidereaganmanx.com
institutdebeautechablis.com
jscheide.com
jevmod.com
presence-digitale.net
shopforbabys.com
sluas.com

# Reference: https://pastebin.com/7Ak2nP2T

domferz.com
emmajcoombe.com
ido-expo.com
italianato.com
nwsouthroad.com
thankslotto.com
wasserschaden-hero.com
wellmadecostumes.com
xosuno.com

# Reference: https://www.virustotal.com/gui/file/78377897d8c6ccd0f4e59ddf94db67b2489a4010fe404659f61ebeb91a037a49/detection

fisciapp.com
pinkiavenue.com
061man.com
nongda.group
kuotacell.com
clinica-financiera.com
wellmadecostumes.com

# Reference: https://twitter.com/James_inthe_box/status/1206944999499108353

millerjeanne.com

# Reference: https://twitter.com/wwp96/status/1207739801002291200
# Reference: https://app.any.run/tasks/0e337885-db1f-412b-aa9b-1c6f75eefe17/

meinvcaita.com
mipscenter.com

# Reference: https://twitter.com/wwp96/status/1210228386687279115

find-a-job-online.info
hextor.win
middlemalta.win
otomarco.net
sabyestreetfoods.com

# Reference: https://twitter.com/wwp96/status/1210602703279276032

earlymorningmama.com
hjlh888.com
thexfactorfoundation.com

# Reference: https://app.any.run/tasks/fe87d214-5fab-400a-ae93-7319483ea313/

covzin.com
2220027.com
jxck1688.net
www139706.com

# Reference: https://app.any.run/tasks/5d2b1a42-3931-4381-8f18-17b089100399/

ibelieveinbrazil.com
communityhealthypharmacy.com
raveltalent.com
lapuphealth.com
pornurlz.com
t4z4f7p34y.com
0g6fivegive.men
bemaaultosport.com

# Reference: https://pastebin.com/E6yzi5hz

adventuredogs.tours
brokerofficial-fraud.com
darkwhitechocolate.com
liuhongli.com
yashodankalpataru.com
yummymornings.com

# Reference: https://app.any.run/tasks/15ee6c31-b975-4f9f-ba1d-2f950f82e468/

bazmeadab.com

# Reference: https://twitter.com/James_inthe_box/status/1214176338040410112
# Reference: https://pastebin.com/XMTxaQ02

creativeheadfirst.com
kabsolug.com
stopczynski.com

# Reference: https://app.any.run/tasks/230ffb09-b135-4144-86a7-595110c4786d/

635bifa.com
amoorematrix.com
chemmaths.com
greatsavingsandmore.com
mizorl.com
pinksuper.net

# Reference: https://app.any.run/tasks/de247fe2-7b3a-4c45-b0b1-0be67319bcae/

swfltropicaladventures.com
sindomac.com
jingxiu188.com

# Reference: https://twitter.com/wwp96/status/1214936414749646849

chinabaumatic.com
dealermerchantaccounts.com
mizorl.com
xoso168.com

# Reference: https://twitter.com/wwp96/status/1214935400445358080

chinaplandexpo.com
nuestrojacalito.com
southerntexastitle.com

# Reference: https://pastebin.com/piCYtiS8

beattheburnout.com
harryhdesign.com
integralhome.net
kabsolug.com
mocowhalo.com
stage5klinger.info

# Reference: https://twitter.com/wwp96/status/1216790704007065600

mizorl.com
nymsf.com
promptpayplus.com

# Reference: https://app.any.run/tasks/1f46c9ed-e5d5-421b-8965-39d1536f02bf/

crosswalkclo.com
mydnrip.com

# Reference: https://app.any.run/tasks/4ef08030-7831-4eff-aa3e-7d151ccc231e/

nrojano.com
luckyluxuryhomes.com
quidoz.com
videntesmadrid.com
britelens.com

# Reference: https://pastebin.com/Tz5Kaup2
# Reference: https://twitter.com/FewAtoms/status/1221057533625819136

windowsdefendersecurefilesofficesnetwork.duckdns.org
windowsdefenderserversecuresofficew.duckdns.org
windowsdefenderserversecureserver.duckdns.org
windowsdefenderserversecurity.duckdns.org
windowsdefendersecuirtysystem.duckdns.org
windowsdefendergatewayweb.duckdns.org
windowsdefenderprotection.duckdns.org
bbo7376.com
lounge-fumi.com
luminaryproductions.com
msp29-05.com
ahjqny.net
aslihansaygili.com
highvaluenames.com
iambookworks.com
josephinegreenz.com
oscarwrong.com
47bh.com
51airuyi.com
kapai360.com
chengkeff.com
cjproducts.biz
differently.us
jcbbi.com
3i-j-f6rr.com
s8va.com
couplesense.net
kingdomofspace.com
nnnhg.com
openrprise.net
pojokpas.com
theexchangere.com
werberoboter.com
mccannproduction.com
afjkz.com
baodian.ink
gridhopper.net
howeitservices.com
keralahills.com
peufclothing.com
pursemtb.com

# Reference: https://twitter.com/b4rtik/status/1219924865643438080
# Reference: https://app.any.run/tasks/1b0fdc77-aa65-4b35-8d97-4f85d93d992f/

conorhennessy.com
crowdedfuture.com
ariestikto.com
emergentfamily.com
dhnfv.loan
yourdreamhunter.com
eb1579.com
nercox.com
prepareforyourretirement.com
nextmobility.news
ahcdentaled.com
actigy.com
hirexr.com
chefkennethclay.com

# Reference: https://twitter.com/James_inthe_box/status/1220381091988529153
# Reference: https://app.any.run/tasks/e26f7e65-482e-40fe-8423-38c1ba03b09d/

windowsdefenderserversecuresofficeiq.duckdns.org
joeing.rapiddns.ru
hd5088.com
13622days.com
moz-cafe5thst.com

# Reference: https://www.virustotal.com/gui/file/67bac2e45fce51b88afbf7215a1ea27fbbea871279b29d293e1e7423c297c134/detection

frehan.com
mutlulukicindahacokkadikoy.com

# Reference: https://twitter.com/wwp96/status/1222229357181140992

healthyroot.net
mp3kaka.com
msdcong.com
reloadexplode.com
syslinctalk.com
westsidewifi.com

# Reference: https://twitter.com/James_inthe_box/status/1222544907358720000

windowsfirewallsecurityauthorise.duckdns.org

# Reference: https://twitter.com/wwp96/status/1222625150438453250

mandat.online
saseolocal.com
cryptostrongbox.com
nyoxibwer.com
resistmagazine.com

# Reference: https://twitter.com/wwp96/status/1222642415405871104

civilinspector.com
dremtnw.com

# Reference: https://twitter.com/wwp96/status/1223326386234044416

zdmania.com
realcapemay.com
joxiny.com
qgptgj.com
ridingpassion.com
catbaoceancruises.com
374cb.com

# Reference: https://twitter.com/wwp96/status/1223330896931106822

whatsonprimevideo.com
whwgkj.com
gztla.com
liturgyofthebrokenhearted.com

# Reference: https://twitter.com/wwp96/status/1224412305577869312

fabinx.com
thevendredi.com
americanmotorwerks.com
iraqios.com
verkaufsfunnel.com
thebroadcastblueprint.com

# Reference: https://twitter.com/wwp96/status/1224430085064753158

tcszht.com
nyoxibwer.com
lslhm.com
changelly.store
kang-120.com

# Reference: https://twitter.com/wwp96/status/1224431371751325696

pinoconsulting.net
trn-harbour.com

# Reference: https://app.any.run/tasks/02addc72-ea33-443b-b3ae-f4d72ef11ee6/

skylerfarm.com

# Reference: https://twitter.com/wwp96/status/1224707855116382210

petrankampaamo.com
parknroll.biz
nyoxibwer.com
emtark.com
hemingway.site

# Reference: https://twitter.com/wwp96/status/1224785418991947781

pinoconsulting.net
colonnashipwest.com
trn-harbour.com

# Reference: https://twitter.com/wwp96/status/1224784499294248966

fenglingad.com
lux.institute
tradingforexjourneys.com
outsidegraphics-cs.com
dottortech.com
rfpartnernetwork.com

# Reference: https://twitter.com/wwp96/status/1224781167615975424

ukraivin.net
sachmoi.info
allworxx.com
ownbitcoin.net
dremtnw.com
theclyo.com
cleanyourdesktop.com

# Reference: https://twitter.com/wwp96/status/1225529957935390720

madisonroseholtze.com
softlanders.com
bluecottonhome.com
apachedrone.com
regular123.com
divineandrefined.com

# Reference: https://twitter.com/wwp96/status/1226920846255689730

hypochrome.com
yansixiang.com
skateroads.com
benh-lau.com
mansiobok.com
thebeseenproject.com
nationalcaretrust.com

# Reference: https://app.any.run/tasks/ad0cfeed-aeb4-4757-bd46-db615025bf05/

qingxunmao.com
rzjie.net
softgelatobusiness.com
morita-m.info
lovelyfeed.com
vanistihdam.com
jjuecorp.com
cvvpp.info
befindnewcarhub.live
xn--9d0bt6kvvhi2dq06a.com

# Reference: https://app.any.run/tasks/9fafc927-138c-4dcd-978c-6e0d3cb4937e/

liexiaoyu.com
gazoly.com
ihrpro.info
mycoins.online
keautotech.com
xiaoqiug.com
tialpha.net
ghostwood.coffee
washingtonwarrior.com

# Reference: https://app.any.run/tasks/57365b94-44cd-4994-b49b-95f6d9542ee1/

chnwsdyglobalwealthandreinforcementagenc.duckdns.org
know-how-products.com
smfinanse.com
lost-cats.com
greenpathconstructionllc.info
livreslive.online
seedsofgreen.net
taoyishun.com
tahoe777.com
gzakyy.com

# Reference: https://twitter.com/wwp96/status/1227989980724826114

nfocorpventures.com
zhangshazngmingzhu.com
josieandmichael.com
ionamin-international.com
blackgirlmagicschool.com

# Reference: https://twitter.com/wwp96/status/1228050542238326788

dbprimery.com
mamaheartandhomeblog.com
slacktracks.info
madkrazyworld.com
salienttraining.com

# Reference: https://app.any.run/tasks/18d33a1b-b272-4f3a-b1f8-7743b7282dd9/

0g1ninefall.men
5799j.com
9660123.com
acbce.com
airpopgrip.com
claimookup.com
dinu.ltd
downesbuildco.com
heartpotatoes.com
hpnairportinfo.com
jackedsonadamsarts.info
koozest.com
minjian-edu.com
mz779.com
regular123.info
the-littlemenu.com
tnt-tunnel.com

# Reference: https://twitter.com/Jouliok/status/1228271357995180033
# Reference: https://app.any.run/tasks/69ab10fe-4ddd-420a-8f8b-39b240c313d9/

23oakgrove-malverneast.com
6oclocksupperclub.com
dovfaq.com
dynamicmovementmassage.com
editionlevel.services
fichamed.com
gsjhzs.com
humanityinneedcharity.net
kel1erindia.com
lostrabajosylosdias.com
trybestinteligen.world
valdezoktoberfest.com
wildfolkcreations.com

# Reference: https://otx.alienvault.com/pulse/5e468cf0019b4ecbc557f209

7565657.com
908763.com
barrolahl.com
bhjksc.com
bowriverrustic.com
canhocaocaplavidaplus.net
chenyirail.com
christopher-cloos.com
discerningdomains.com
goodsystem4updating.win
josieandmichael.com
manguifajas.com
mjarvis247.com
msdcong.com
naturegang.com
phoenixtalons.net
tzxymygs.com
unsdgs-ottawauniversity.com
zhangshazngmingzhu.com

# Reference: https://twitter.com/wwp96/status/1228366299048431618

ulxery.com
jackhaworthmortgage.com
stairsstickers.com
flutterbags.com
phaypro.com
thermalguardfoam.com
seniordaters.com

# Reference: https://twitter.com/wwp96/status/1228355644547309573

594cb.com
glamotr.com
khanebazi.com
saudirana.com
siarelco.com

# Reference: https://app.any.run/tasks/78ad3a12-6d82-46a8-9035-cecdf8b23e6f/

ribbonlogistics.com
brighidreppertdesign.com
szbestvision.com
ungtekno.com
produitsbio.net
quidoz.com
asdfcard.com
huanglingmianfen.com
thesalsakitchen.com
marcelorey.com
deadbeatcosmetics.com
lucasws.com
enesodaci.com
haierjiebest.com

# Reference: https://twitter.com/cyber_gato_malo/status/1227997377807691777

simonzjewelry.com
naturegang.com
bjhmsp.com
moralloki.com

# Reference: https://twitter.com/reecdeep/status/1229390645355261953
# Reference: https://app.any.run/tasks/c9bb2639-adbe-40b9-b066-8e39cf1f1522/

yuanzhitang.com
aab1.top
ldot.ltd
lhdhwpc.com
oneillfilms.com
lwqkssdz.com
nigi.ltd
northbridgeweb.com
pressurebattery.technology

# Reference: https://twitter.com/wwp96/status/1229806436403830784

daditbetter.com
glamotr.com
rxqp1.com

# Reference: https://twitter.com/wwp96/status/1229846047066927105

osplans.com
mediconthemove.com
iamkantha.com
gpiventures.com
flutterbags.com
sandcherrystables.com
ulxery.com

# Reference: https://twitter.com/notajungman/status/1230210986554134528
# Reference: https://app.any.run/tasks/8b09a8cf-d3f8-4ffe-9b20-c35ba8622110/

3i-lnfotech.com
bmsay.xyz
cmsay.xyz
erasmus-france.com
etliekmekkonya.net
gnamall.com
itisdue.com
koukoudaikou.com
laffsaturday.info
mcats2379.com
oku.world
patientsportstips.com
pervade.info
rdllb.info
samiceramic.com
us1china.com
xn--3e0bv81a2rhx9e.com
zhejiangft.com

# Reference: https://twitter.com/wwp96/status/1230224137534214144

dronv.com
graememitchley.com
mobileadscontrol.com

# Reference: https://app.any.run/tasks/1909e9e2-6ac6-474a-8589-5a0051e662da/

michaelsdbablog.com

# Reference: https://app.any.run/tasks/b4adadc1-a270-4da7-9882-fb66ce7e03ca/

vertikutierer24.info
caryxo.com
uniquecutters.com
tatatusupports.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1230862696024858625
# Reference: https://app.any.run/tasks/b7bb5802-1357-4ec9-aeff-e023c9c5acb9/

njagongsik.com
lytcjz.com
radark.company
iphonextrade.com
ysitem.com
gyeswu.info
quanziplus.com

# Reference: https://app.any.run/tasks/ed82b375-be11-4ecd-ab76-b86d11c9ed83/

based789.top
ctrip.chat
doingjobs.com

# Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Formbook)

emizard.com
hoscury.com
kabsolug.com
monkalef.com
oyishu.com
pursemtb.com
scaker.com
shaxob.com

# Reference: https://twitter.com/James_inthe_box/status/1231962545222647809

msofficeinternatiinalfilecloudtransfer.duckdns.org

# Reference: https://app.any.run/tasks/098ba1ab-160a-4270-88f2-976134f289e1/

theking.kim
kinakogohan.com
testingtimes.info
ulxery.com
xn--gzra.com
paintmywedding.net
healtphere.net
specialityhomes.com
jacobgb24.info
wqsfc.info
hidrosalud.life
ticketcerto.com

# Reference: https://app.any.run/tasks/aa5e7383-71e7-450f-94e6-8fd7e1350c4b/

riverdalestandard.com
cncsurplusparts.com
estrellahuang.com
023yuechang.com
ricard-sameofficeial.com
ulxery.com
genxewm.com
hqygyg.com
sachthudo.com
kinakogohan.com
zjvod.info
pigeche.com

# Reference: https://app.any.run/tasks/b80a84c7-35a1-4308-b688-2f85cfd29297/

thuyhoangcoto.com
viwdfw.info
anastasiasfantasy.com
bdplaza.com
athinasailing.com
nyoxibwer.com
js-no-tec.com
kanglaotou.com
focus-ecommerce.com
cheap-clothes-for-women.site
markmackoart.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1232295249306845185

allixanes.info
apuestactiva.com
boozebird.com
crosbybowsercoleman.com
cryptozia.com
knowledgedrum.com
mymandan.com
shirtsformanagers.com
silverhill.net
sundogsupply.com
sxmbh.co
upstatecardprocessing.com

# Reference: https://twitter.com/wwp96/status/1232410976147922944

homesecuritysystemsny.com
medd.site
czhyzy.com
ulxery.com
technologyspoon.com
glasgowcourtslawyers.info

# Reference: https://twitter.com/wwp96/status/1232409688110718977

affectcbd.com
hzcmhm.com
mscgrroup.com
thumdyn.com
wlmqmbwx.com

# Reference: https://twitter.com/wwp96/status/1232395733900374017

canada49ac.com
dev-ops.us
onechere.com

# Reference: https://app.any.run/tasks/f27ab2f5-f0d3-47e1-9081-5964e9a05b4e/

477ope.com
150gpa.com
shukastu.com
caryxo.com
37collingwoodst.com
xolcoin.com

# Reference: https://app.any.run/tasks/448d9f9b-af58-4a95-a317-77e4f6d86dd3/

mudanyadaotel.com
conmdemamen.com
sgcpic.com
caryxo.com
150gpa.com
codeedge.net
leletaovip.com
zaco.top
barrio-libro.com

# Reference: https://app.any.run/tasks/cf45229c-410d-499a-8577-927c5c33bfa5/

carrotaller.com
1523sussextpke.info
enpuntoni.com
830manbet.com
alkcz.link
republlcco.com
worstig.com
provinciaricaurte.com
vwabo.info

# Reference: https://twitter.com/1ZRR4H/status/1232441079837777920

snbnamibia.com

# Reference: https://app.any.run/tasks/9b6cfba3-3edf-4044-b6d0-90690afa5cda

fitgime.com
allixanes.info
ugot2b.com

# Reference: https://twitter.com/killamjr/status/1233714210816704512

americancloudfiletransferprogramin.duckdns.org

# Reference: https://twitter.com/wwp96/status/1234505353527689218

modernboot.com/h2o/
decormagz.com/h2o/
elomafus.com/h2o/
amitywomenspt.com/h2o/
agitatorfactory.com/h2o/

# Reference: https://twitter.com/wwp96/status/1234512894588575744

auroraexpres.com/m5g/
sluttychefs.com/m5g/
resplendentsoul.com/m5g/
jxpingji.com/m5g/
angryfatman.com/m5g/
singlechimp.com/m5g/
mainahao.com/m5g/

# Reference: https://twitter.com/wwp96/status/1234523991739596801

worstig.com/kx9/
carrotaller.com/kx9/
worstig.com/kx9/
christinamjkim.com/kx9/
guidaalluso.com/kx9/

# Reference: https://twitter.com/wwp96/status/1234511070146027527

quidoz.com/r30/
9227kkk.com/r30/
sellanews.com/r30/
gominou.com/r30/
woodruna.com/r30/
andlynweb.com/r30/
tributenora.com/r30/
casaboquete.com/r30/

# Reference: https://twitter.com/wwp96/status/1234926865556606978

carrotaller.com/kx9/
showshow.club/kx9/
guidaalluso.com/kx9/
foodindia-bysial.com/kx9/
sebengriffin.com/kx9/
christinamjkim.com/kx9/

# Reference: https://twitter.com/wwp96/status/1234931238076657665

vinoblay.com/tx3/
sexualitymenshop.com/tx3/
healingherds.com/tx3/
ricsawproperties.com/tx3/

# Reference: https://twitter.com/wwp96/status/1235242516825415687
# Reference: https://app.any.run/tasks/081940ee-da4b-4466-bd9b-66a6aeb1268c/

psychesiren.com/j9t/
bigdickfuckgay.com/j9t/
7565657.com/j9t/
zhangshazngmingzhu.com/j9t/
vulcan-mania.com/j9t/
momvibez.info/j9t/
ionamin-international.com/j9t/

# Reference: https://app.any.run/tasks/119740cc-d4b5-46b1-94dd-6090a2d07f6d/

americancloudfiletransferexcelfile.duckdns.org

# Reference: https://app.any.run/tasks/ce4cc99b-3e9f-437d-bdc2-e15229b8ae73/

shgshgsndy6nationalindustrialgoogleklm.duckdns.org

# Reference: https://twitter.com/wwp96/status/1235249891904978946
# Reference: https://app.any.run/tasks/41796c37-40c8-49a5-8581-66a24fdf2f5c/

fulltimepreschool.com/q0s/
trianting.com/q0s/
gpiventures.com/q0s/
shipinluoliao.com/q0s/
flutterbags.com/q0s/
lefongplaza.com/q0s/
ulxery.com/q0s/

# Reference: https://twitter.com/wwp96/status/1235585908637868032

proofresearch-germany.com/e8p/
import945.com/e8p/
4lcoin.com/e8p/
combscollisioninc.com/e8p/
xn--s80b57jcsde6fcyau51f.com/e8p/

# Reference: https://twitter.com/wwp96/status/1235950654524448774

costabravadoctors.com/ot2/
eventierspace.com/ot2/
naturehealingshop.com/ot2/
asyule225.com/ot2/
lazydoona.com/ot2/
vlemi.com/ot2/
norjax.com/ot2/
triom.tech/ot2/

# Reference: https://twitter.com/wwp96/status/1235968366680117249

classiccurtainskent.co.uk/kx9/
enpuntoni.com/kx9/
breakapp-view.com/kx9/
worstig.com/kx9/
thepilltheplay.info/kx9/
myattendance.today/kx9/

# Reference: https://twitter.com/wwp96/status/1236013793290878976

amistadcristianairapuato.net/zy8/
sousvidemasters.com/zy8/
parosbet.com/zy8/
dronv.com/zy8/
dgsellsrealestate.com/zy8/
fjellburet.com/zy8/
prboatrentals.com/zy8/

# Reference: https://twitter.com/w3ndige/status/1237078724786479104
# Reference: https://app.any.run/tasks/9ee06ab6-2741-4547-bd64-3437c241b3cd/

officearchives.duckdns.org
sommernph.com

# Reference: https://twitter.com/wwp96/status/1237107769129553922
# Reference: https://app.any.run/tasks/7ec58842-7c33-4623-8c5a-6058074b45b9/

ssquid.net/mr02/
aoikyoutei.com/mr02/
cqyongs.com/mr02/
samuraisracing.com/mr02/
grievingly.com/mr02/
discountsclicks.info/mr02/
wanyaobxg.com/mr02/
808korean.com/mr02/

# Reference: https://twitter.com/wwp96/status/1237460282647199745
# Reference: https://app.any.run/tasks/6b3c7009-01ec-4739-9d54-9d2d8320d6a1/

junhao12131.com/r30/
milar.farm/r30/
kalpnacaters.com/r30/
quidoz.com/r30/
lumencos.com/r30/
andlynweb.com/r30/
trekofpersia.com/r30/
ilyakids.com/r30/

# Reference: https://twitter.com/wwp96/status/1237458425287712768
# Reference: https://app.any.run/tasks/4b7ada4b-f96d-4516-b9e3-54ef9dc4bf33/

sidinstitute.org/ri01/
whatareyousoafraidof.com/ri01/
trumpcoin.online/ri01/
me-mart.com/ri01/
discountsclicks.info/ri01/
longrunohm.com/ri01/
34lv.com/ri01/

# Reference: https://twitter.com/wwp96/status/1237466791322046464
# Reference: https://app.any.run/tasks/2b83d26c-b74f-4ed2-8929-5d9df254ddd0/

5554975.com/l89/
nercox.com/l89/
unicigar.com/l89/
raztrans.com/l89/
drousehair.com/l89/

# Reference: https://twitter.com/wwp96/status/1237477304009240576
# Reference: https://app.any.run/tasks/bd661e9c-92a8-4508-b3b0-1f8ecd380e55/

808korean.com/mr02/
discountsclicks.info/mr02/
ssquid.net/mr02/
planetmecharnical.com/mr02/
samuraisracing.com/mr02/
bulmmaf.com/mr02/
yibo.ltd/mr02/

# Reference: https://twitter.com/wwp96/status/1237485063366942722
# Reference: https://app.any.run/tasks/b0178458-4783-4cdc-bf95-0683c92e775f/

crokve.com
mix2025.net
midasrxpharmacy.info
kreasidesain.com
livelifeoutonalimb.com
linkseepay.com

# Reference: https://twitter.com/wwp96/status/1237487962566393858
# Reference: https://app.any.run/tasks/50b155ce-7d71-4f09-b3d6-6c6236722c9f/

aprils-website.info/r30/
sipenyuluh.com/r30/
buy-cyprus.com/r30/
appsdidi-secaccount.com/r30/
sellanews.com/r30/
fidem-consecuta.com/r30/
woodruna.com/r30/

# Reference: https://twitter.com/wwp96/status/1237802222991413258
# Reference: https://app.any.run/tasks/f4e1007c-482b-49b7-a972-abeabe34af29/

cutdream.com/kx9/
showshow.club/kx9/
christinamjkim.com/kx9/
myattendance.today/kx9/
guidaalluso.com/kx9/

# Reference: https://twitter.com/wwp96/status/1237794145940525057
# Reference: https://app.any.run/tasks/b3b3beef-bb19-4343-b078-7fb1e923873a/

leaseloveown.com/l0x/
bridalphotographystudio.com/l0x/
doverax.com/l0x/
ecomcollege.com/l0x/
teetailz.co.uk/l0x/

# Reference: https://twitter.com/JAMESWT_MHT/status/1238078045027794944
# Reference: https://app.any.run/tasks/69676e2c-6f89-463a-be79-1c26e03fc734/

ariafm.gr
flammaart.com
isome2018.com
opebet199.com

# Reference: https://twitter.com/malwrhunterteam/status/1239863667409276928

mastervisacloudesystemprtomicrosftwareus.duckdns.org

# Reference: https://www.virustotal.com/gui/file/be3cfbf10a732af9965dab5b769ef622233eeca26dc1a3e541326e7ce6788bab/detection

indexcalbromarisportallservices.duckdns.org

# Reference: https://app.any.run/tasks/83bd9eb8-7e5a-43af-b131-361590b336b5/

freehobbysolutions.com
moswanted.com
votravo.info

# Reference: https://twitter.com/FewAtoms/status/1240322356880576513

msofficewordfiletransfertotheadmintrue.duckdns.org

# Reference: https://twitter.com/Jouliok/status/1242187207588405248

tescohomegroseryandelectronicstday2store.duckdns.org

# Reference: https://github.com/silence-is-best/c2db#formbook

liuhe127.com

# Reference: https://twitter.com/JayTHL/status/1242196123848245248
# Reference: https://pastebin.com/raw/8qSuUVB4

1ameem.com
1billionhappy.com
1billionwell.com
5product.com
60apexchecks.com
60checks.com
6figurepayraise.com
abillionhappy.com
abillionwell.com
acton.in
actonlabs.in
ahcprheumatology.com
apexasset.io
apextech.biz
apextech.info
apexworld.io
apexworldlaunch.com
apexworldlaunch.tv
ashfaque.me
atefehjewellers.in
auracoolum.com.au
awakencharlotte.com
bellkrank.com
beonbeauty.co.uk
bestexoticdogs.com
brandon--sellers.com
bunkworks.co.uk
cakesque.com
caraconsulting.services
careandcompanion.co.uk
caribbeanwebfestival.com
classysun.com
classysun.info
classysun.net
clownpenis.solutions
colwellandcolwell.com
comfortzonemarketing.com
coronadocobshop.com
crystalindiainfra.com
danandrobbie.com
davidhareart.com
dealerships-suck.com
dianetyrrell.com
diyajewel.com
dotadois.com
drkswrks.com
dubaiexoticdogs.com
earn60apexchecks.com
earn60checks.com
earn60techchecks.com
epica.life
epicassets.info
epicassets.io
exoticmicrobullydogs.com
exoticmicrodogs.com
expertsat.io
fidatoo.in
finalclear.com
funerarianevarez.com
get60checks.com
getservices365.com
globonovo.com
gmshorses.com
golitech.com
goodygifter.com
goteamdeveloper.com
grandmascheesecakes.com
griotplus.com
harvestyourownhemp.com
haula.net
helo.life
heloworld.us
henready.co.uk
hilaryreading.com
houseprof.ca
iamallin.com
iamhappyandwell.com
ilearner.com.tw
incrediblykayla.com
iowabaseballranch.com
iqteamfreedom.com
iqzoom.us
isai4me.com
islandspect.com
isthisforme.com
isyys.net
janfitzpatrickhomes.com
jeremyroma.com
jointhecoinclub.com
jonicablog.com
kamanait.com
kimmys.com
kimmysrestaurant.com
kinderism.org
korling.de
labaccidenttheband.com
levatemediamarketing.com
lifetech.io
lilannie.com
livecryptostatus.com
magnabusinessconsulting.com
martinidewinter.com
matchmymatrimony.com
memeingoflife.com
middlewaremaniacs.com
mil-leon-clothing.com
milleonclothing.com
millionairebootcamp.io
mohanlakshmipathy.com
moist-towelettes.com
moneyiq.tech
mortgageclaimscentre.co.uk
mustbenyce.com
mybtcdeposit.com
mymoneyiq.io
nanghtikeaung.com
nashvilleeastrentals.com
natureswebb.ca
newchain.io
neweuphoria.com
newlotions.com
nicegirl.nyc
ninewestfinancial.com
nitramax.in
okayspark.com
ollie-wood.com
pennyfables.com
perilli.com
pharmdcareers.com
pippingstudio.com
primegusclub.shop
psychotherapyandcounsellingmelbourne.com
rashtraudhyog.com
reliefcbg.com
repdestroyer.com
repdestroyers.com
rerecall.com
rhumboogie.ws
richdeboer.com
rollingwithjoe.com
romasboutique.com
rubell.nyc
rubellmanagement.com
ruhiz.fashion
rushcode.in
secautotransport.com
shittlez.com
simonmiminis.com
solosugiero.com
steelecreekpresby.com
sunshinecoastmow.com.au
switchuations.life
taichibham.org
td.world
thaomoctrungdong.com
thebrainworkacademy.com
thebulldogpubgrille.com
thecottagepiecompany.co.uk
thedistractedwriter.com
theellisgroupholdings.us
therealworldchangers.com
theroommom.com
thesuccessalliance.in
tmpist.com
tnmedonline.xyz
topexoticdogs.com
totheranchandback.com
transforselogistics.in
trizle.com
tylascountrygarden.com
uberspace.co.in
umidaroma.com
urbnwarrior.com
vagastophostels.com
waldorfian.com
wisconsinmicrogreens.com

# Reference: https://app.any.run/tasks/847e1945-3b02-422f-8030-5722b20ffc44/

rogerssmarthealth.com
ahzike.com
sonnensteinwasser.com
alxbrtn.com

# Reference: https://www.virustotal.com/gui/file/6fe43863e02d4a6fb20cbb2c2ad39368abef81636f597da94f7234af2dea47e4/detection

0573sghp.com/sm02/
44exex.com/sm02/
discountsclicks.info/sm02/
istikhara786.com/sm02/
labo10.com/sm02/
lifflander.net/sm02/
piczum.com/sm02/
piknus.com/sm02/
selfieblast.com/sm02/
sluas.com/sm02/
ventouse-carrosserie.com/sm02/
wulkan-mania.com/sm02/

# Reference: https://www.virustotal.com/gui/file/ec7d04da5408d773d949a47cdbbe102b5548ca7358b8d6bf677c3033df5bf04f/detection

athlete50.com/cs2/
govaj.com/cs2/
htma.us/cs2/
jinshengintl.com/cs2/
movingtowardsmeaning.com/cs2/
shengdestone.com/cs2/
susapflug.com/cs2/
vaisnavalife.com/cs2/
yb77777.com/cs2/

# Reference: https://twitter.com/FewAtoms/status/1243249736662028288

systemserverrootmapforfiletrn.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bc000ae8600c8e6fadceb92af23b0f929ec90ea9184675428f88c01b61af6c63/detection

2070pe.com/te/
crisngrt.com/te/
jlzbtx.com/te/
kranche.com/te/

# Reference: https://app.any.run/tasks/cc60c746-1cf8-4adf-8055-4964111c1c9f/

catalinacustomcreations.com/y8r/

# Reference: https://twitter.com/58_158_177_102/status/1245619205833031683
# Reference: https://otx.alienvault.com/pulse/5e8618aa07d72250efbcc853

grabascoop.com/e8p/

# Reference: https://www.virustotal.com/gui/file/c07e2d84c2f5cef7c52c89516cddb219451e2ca0a9bc8c2c98a438cd16db351f/detection

alarmaconhumo.com/zu/
episdenergy.com/zu/
kervax.com/zu/
lautrevision360.com/zu/
medialab-infos.com/zu/
nadirezeki.com/zu/
twfutures.com/zu/
viviselfie.com/zu/
xinheguoji.com/zu/
xinyanjiazheng.com/zu/

# Reference: https://www.virustotal.com/gui/file/616662d9be4b626c73d56cdd6ab4992dbe124de7ce8769630da99397087eea3f/detection

kervax.com/nu/
networkmarketinghq.com/nu/
zswei.com/nu/

# Reference: https://www.virustotal.com/gui/file/d31f7974458508d491e0840db4385c5a38731195cae24a891abb24bb4699c9b3/detection

cambridgehomeimprovements.com/nu/

# Reference: https://www.virustotal.com/gui/file/125a3d4bdb49a67bb4a9dfb6a7c3a09f82083392a76ea1b5cec87bb477ca6bda/detection

bowerbirdnest.com/nu/
mauritiusurlaub.com/nu/

# Reference: https://www.virustotal.com/gui/file/24a1fd76b3daece9142d9ec00807f9bf1bb15831bf72646f013464c8dd94acd1/detection

buildthemind.com/ej/
chuanyuemeili.com/ej/
goldmanjewelers.com/ej/
kervax.com/ej/
kevincurley.net/ej/
newconnectbiblestudy.com/ej/

# Reference: https://www.virustotal.com/gui/file/5d7a56e18e95592673a4c922d86375a168e695966502007cb6b67c1bcc0f16b8/detection

kervax.com
kervax.com/dy/
traumainformedlens.com/dy/
varolemlak.net/dy/

# Reference: https://www.virustotal.com/gui/file/7e756510a7ed412001857c371cafb5af3158eb0a73c9b51eb5823d9002c7d3a8/detection

dalu.ltd/gh/
purespeech.net/gh/

# Reference: https://www.virustotal.com/gui/file/1c57ad28bc07997adeb829bda45513521d95fe2c6880736f69fa701828a30255/detection

cricketxtreme.com/sk/
dikaiyun.com/sk/
hypno.solutions/sk/
kervax.com/sk/
playlanddaycare.biz/sk/
tunegeartech.com/sk/
ukholidayhome.com/sk/
ybsankeshu.com/sk/

# Reference: https://www.virustotal.com/gui/file/af14c1c7562021939f0a68e699a3ba28e26cb6d8d12e8df2c8ca4deba6ceacd7/detection

dalu.ltd
dalu.ltd/gh/
fangjiedaikuan.com/gh/
kervax.com/gh/
massimogirardi.com/gh/
shiweitian.net/gh/
vidolin.info/gh/

# Reference: https://www.virustotal.com/gui/file/fc9be600e3961102a93f5096cac156c1be7e875af98e12ab4f85698f8442475b/detection

byhisgraceestate.com/sh/
comet-sunsun.com/sh/
honeyanda.com/sh/
kervax.com/sh/
maltafarmhouse.com/sh/
shciicoe.com/sh/
zpjrt.com/sh/

# Reference: https://www.virustotal.com/gui/file/3e85d65f5ea95309ad331f5c371449ae85bad3efd0e272b3983377f54a5dee32/detection

fensier.com/sh/
kervax.com/sh/
lapanganpoker.com/sh/
lex-investigations.info/sh/
napshoes.com/sh/
sunbul-phone.com/sh/
umrah-visa.com/sh/

# Reference: https://www.virustotal.com/gui/file/47b251c6e857843db7f377471c90ec48d3ea0f0f5ced461aebf607644815f181/detection

byhisgraceestate.com/sh/
cbd-innovation.com/sh/
eba-ecoenergy.com/sh/
sabetta.family/sh/

# Reference: https://www.virustotal.com/gui/file/b066282209652ab35d7f93ce103b33b06a10e9d4b74e1ea3263466e2789b422d/detection

dharmaworksonline.com/gh/
dukabcn.net/gh/
fangjiedaikuan.com/gh/
gppz999.com/gh/
kervax.com/gh/
mirinavsgorgon.com/gh/
niyoufan.com/gh/
yinstkd.com/gh/

# Reference: https://www.virustotal.com/gui/file/bb8d0853cb0dad63c6098031f2166ba7171259efc5ce83968bdf121cfdff8763/detection
# Reference: https://www.virustotal.com/gui/file/21deeba7640f04a0149d5bd890d8a638c1e126e82c49d0d04a5fcf42c3e5af75/detection

5injlq.com/wi/
720wangzhan.com/wi/
adjointlab.com/wi/
adskitchen.com/wi/
ashishtank.com/wi/
backroomcoffee.com/wi/
cbelleza.com/wi/
chocoval.com/wi/
formattressesok.live/wi/
iron-rain.com/wi/
jamaltooley.com/wi/
janeadamwedding.com/wi/
kervax.com/wi/
lec88.com/wi/
lingnuoguanjia.com/wi/
mengxiangfengcai.com/wi/
musicbyrivals.com/wi/
nvwang41.com/wi/
pg5-formations.com/wi/
tinymarvels.com/wi/
understandingbitcoin.info/wi/
web-design.review/wi/
wm-sb.com/wi/
xyfps.com/wi/
zen507.com/wi/

# Reference: https://www.virustotal.com/gui/file/e97f3ad278b659df4d30bf8181f0698562342e7c03a5a1d41bc601856b2b725c/detection

claddingsheets.info/m01/
coinpon.biz/m01/
kervax.com/m01/
listingclose.com/m01/
ructious.com/m01/
rustedcrate.com/m01/
yczpsh.com/m01/
zeroabuseproject.info/m01/

# Reference: https://www.virustotal.com/gui/file/627b93e8da6daaee1b32bc527ca60f79c501ecd0a3a820fc2a7dea588a795f24/detection

2enablehealth.com/jw/
amindfulearth.com/jw/
janainaerobson.com/jw/
kervax.com/jw/
spaceteamentertainment.com/jw/
sweetsenbake.com/jw/
twz1982.com/jw/
xyi876.com/jw/

# Reference: https://twitter.com/James_inthe_box/status/1249767134269304835

masionlex.info

# Reference: https://twitter.com/James_inthe_box/status/1250077975803916288

thamxop.net

# Reference: https://twitter.com/FewAtoms/status/1252947093171441665

systemintergrafileexchangeserverprotocol.duckdns.org

# Reference: https://twitter.com/petrovic082/status/1255122599354552323

thesecuritysoftwarescannerindustrgreat.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9dce0e1dfbf676137ce1e57f626ad4911056a18c8bdc76f8c3d9b6eaff117092/detection

blkdotconnect.com/t8a/
cufusionevents.com/t8a/
guojizk.com/t8a/
jakedfinkel.lawyer/t8a/
pikio24.com/t8a/
radioncr.com/t8a/
spenbulk.com/t8a/

# Reference: https://app.any.run/tasks/8c381564-3161-42e7-8e91-142990fe4717/
# Reference: https://app.any.run/tasks/6a7d9731-d5de-42ed-85d7-84bc2866196d/
# Reference: https://app.any.run/tasks/ee7b9409-b311-4152-bcea-885e2f055215/

1l4m-5qeh0cgx9a.com
amazingthunderworks.com
badnoordzee.com
cosmemia.com
cryptofinance.services
devereaux.us
empety.com
garden-scope.com
godhep.com
hamptonandjones.com
hulebang.com
jiudianhuixun.com
keeperofthebeesnwnj.com
mangaromance.com
myplusha.com
odjmusica.com
portsel.com
quantumreapers.com
schoolofintrovertship.com
sippingnpaintingcolorado.net
storeketo.com
studio815.salon
supremeondemand.com
vannuysland.com
wyalusingbeverage.com

# Reference: https://twitter.com/DynamicAnalysis/status/1260721412773380096

russchine2specia21plumbingsndymaterialjp.duckdns.org

# Reference: https://unit42.paloaltonetworks.com/silverterrier-covid-19-themed-business-email-compromise/

12kungwsdyducationaldeveloperinvestmenty.duckdns.org
6uniteddefenceforstdygorvermentsocialeme.duckdns.org
americanmicrosoftclouddepartment.duckdns.org
antipiracydetectorganisationforwsdy3film.duckdns.org
bbchenkotsdywoolandpappercompanybnhs5.duckdns.org
chinoex2onlineantibullyandgeneralxpstdy5.duckdns.org
chnes9wealthandstdyorganisationsumit.duckdns.org
chneswealstdy8thandorganisationjokbo.duckdns.org
chneswealthandorganisationstdy7joppl.duckdns.org
chneswsdy13wealthandmoduleorganisationrn.duckdns.org
chneswsdy8wealthandorganisationjokbo.duckdns.org
chnfrndsecurityandgorvermentstdy1socialf.duckdns.org
chnfrndsub1inteligentangencysndy4project.duckdns.org
chnfrndtsdysecurityandgorvermentsocialjf.duckdns.org
chnfrndwsdy1securityandgorvermentsocialf.duckdns.org
cloudfilesharingdomainurllinksys.duckdns.org
crimedetectivefor1stdygorvermentndsocial.duckdns.org
empowermentorganisationstday1government.duckdns.org
engin3worldstdydevelopmentandtechnology.duckdns.org
engintsdy3worlddevelopmentandtechnology.duckdns.org
fileexchangeserverprotocolsystemintergra.duckdns.org
filegotosecureothers.duckdns.org
frndgreen1frdycreamcostmeticsladiesshop.duckdns.org
frndgreen3creamwsdycostmeticsbabystored.duckdns.org
globaltransfersecurefilethroughcloud.duckdns.org
green9wsdyelectronicsandkitchenappliance.duckdns.org
investmenteducationkungykmtsdy8agender.duckdns.org
kung11ducationalstdydeveloperinvestmenty.duckdns.org
kung13eduationalstdydeveloperinvestmenty.duckdns.org
kungeducationalinvestment8tusdyagender.duckdns.org
kungfrdyeducationalinvestment8agender.duckdns.org
kungglobalinvestmenteductgpmstdy8addres.duckdns.org
kungglobalinvestmentjpjeductaddres5stdy.duckdns.org
kungglobalinvestmentjpjwsdy6eductaddres.duckdns.org
kungstdy7globalinvestmentjmpeductaddres.duckdns.org
kungwsdy7globalinvestmentjmpeductaddres.duckdns.org
livevideoremoteconference.duckdns.org
mastervisacloudesystemprtomicrosftwareus.duckdns.org
msofficeinternatiinalfilecloudtransfer.duckdns.org
msofficewordfiletransfertotheadmintrue.duckdns.org
office365securefilegatewaytransfer.duckdns.org
omentradinginternationalprivateltd.duckdns.org
prodigtsdy5organizationalcompanygroupin.duckdns.org
russchine2specialstdy1plumbingmaterialsv.duckdns.org
russchine2specialstdy2plumbingmaterialgh.duckdns.org
russchine2wsdy1specialplumbingmaterialsv.duckdns.org
russchine2wsdyspecial6plumbingjkmaterial.duckdns.org
shgshg13nationalwsdyobjindustrialatempt.duckdns.org
shgshg9nationalobjwsdyindustrialgoogler.duckdns.org
shgshgnationalindustrialwsdy8googleklm.duckdns.org
shgshgnationalobjindustrialstdy10atempt.duckdns.org
shgshgnstdy7ationalindustrialgoogleklm.duckdns.org
shgshgstdy9nationalobjindustrialgoogle.duckdns.org
silentexploitfileexchangerzeroday.duckdns.org
tescogroseryand1wsdayelectronicstorehome.duckdns.org
tescohomegroseryandelectronicstday2store.duckdns.org
tescostday1groseryandelectronicstorehome.duckdns.org
webxpostdytechnologyhardsoftware5buyers.duckdns.org
wewewewewesesesesasbacwederffggffddsss.duckdns.org
windowsdefenderwithfiewallprotocolsecure.duckdns.org
windowsfirewallprotcolsecuritysystem.duckdns.org
worldengindevelopnw7stdymenttechnology.duckdns.org

# Reference: https://twitter.com/luc4m/status/1261260538870366210

6wsdychinese2profesionalandhealthanalpn.duckdns.org

# Reference: https://news.sophos.com/en-us/2020/05/14/raticate/

ef-oh.com/c208/
odoyo.net/c208/
hearee.com/c208/
binzom.com/c208/
pizzans.com/c208/
phochain.com/sa/
rdrfi.com/sa/
skylod.com/sa/
hsctsu.com/sa/
cbespania.info/c206/
conrak.net/c206/
coxemen.com/c206/
dachfix.com/c206/
hypnose-beziers.com/c206/
jevmod.com/c206/
lighthouse-campus24.com/c206/
miscov.com/p0x/
oleum.gmbh/c206/
pupilfy.com/c206/
ratokasutka.com/p0x/
tellpizzqhut.com/c206/
terenium.com/c206/
vibe.restaurant/c206/
yamatobb.com/c206/
yncits89.com/p0x/
czxpkj.com/c206/
cbespania.info/c206/
jevmod.com/c206/
slashoff.com/c208/
sofisleep.com/c208/
jinshasoft.com/c208/
binzom.com/c208/
bywebhost.com/c208/
jinshasoft.com/c208/

# Reference: https://app.any.run/tasks/fe1f56d5-b4ac-401f-abcf-2e25957c13da/

methvenonthemove.com
3lmktgsvc.com
hylg6.com
100fwq.com
laperamordidablog.com
gtitdunproductions.com
glamotd.com
www.azasianow.com/gm1/

# Reference: https://app.any.run/tasks/58333b8b-3488-492e-a1e2-f61bec0a1cca/

teampositiongurus.com
zulfahly.net
capterium.com

# Reference: https://twitter.com/DynamicAnalysis/status/1263680114476191744

webxpoadukejumokeadejokeabolanleholagg.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/creatonetwothreefourfivesexsevenmansgg.duckdns.org/relations

creatonetwothreefourfivesexsevenmansgg.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/metadefenderinternationalsolutionfor.duckdns.org/relations

metadefenderinternationalsolutionfor.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1264882811141488641

aviraantivirussecuritysystempro.duckdns.org

# Reference: https://twitter.com/JAMESWT_MHT/status/1265553518049492992

chinese3lowncomeiscausedbythepandemic.duckdns.org
russchine2loganxmenischangedtonewperson.duckdns.org

# Reference: https://twitter.com/JAMESWT_MHT/status/1268827911722799104

22kungcommunicationtariffsuplierlimthdy.duckdns.org

# Reference: https://app.any.run/tasks/947a591b-200c-4409-8a71-7888da9c93fa/

beautyqueenstores.com/k0f/
chataan.com/k0f/
fattireflights.com/k0f/
moviesfan.net/k0f/
printpeacock.biz/k0f/
sptor.net/k0f/
superwebox.com/k0f/

# Reference: https://twitter.com/JAMESWT_MHT/status/1271356489341558785
# Reference: https://app.any.run/tasks/d85e6f91-5369-454c-ae9f-996dea6743c8/

s-immotanger.com/n7ak/
moodandmystery.com/n7ak/
kangen-international.com/n7ak/
joomlas123.info/n7ak/
runzexd.com/n7ak/
belviderewrestling.com/n7ak/

# Reference: https://twitter.com/MaelSecurity/status/1274414782645506049
# Reference: https://app.any.run/tasks/ad5f5540-df5d-4f7d-853d-9ae4a97be620/

officedocumentfilesharingcloudbaseservi.duckdns.org

# Reference: https://app.any.run/tasks/e6dbb7aa-2d2b-4031-be25-0a86c263a6f6/

asmreekasounds.com
arhiereus.com
oxagp.loan
handyngoods.com
simoneisaaclifestyle-1.com
akbank-mobil-giris.com
wrrsh.com

# Reference: https://app.any.run/tasks/ec7fd1c0-e975-44b1-8719-b0d2b7dfa568/

abiligo.net/kkb/
glamotd.com/kkb/
iscompetition.net/kkb/
renkoto.net/kkb/
2nfq.com
adsars.com
aretocloud.com
dentalonline.info
myvelvetcollection.com
theluxuryindustry.com

# Reference: https://twitter.com/FewAtoms/status/1275473977885024261

firewallinternationalgatewayforoffcefile.duckdns.org

# Reference: https://twitter.com/FewAtoms/status/1276181803712167936

americanfirewallsecuritysystemprotocolfi.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/wsdychnesqudusisabadassniggainthe30wmg.duckdns.org/detection

wsdychnesqudusisabadassniggainthe30wmg.duckdns.org

# Reference: https://urlhaus.abuse.ch/downloads/text_recent/

22chnesqudusisabadassniggainthehudolat.duckdns.org
22kungcommunicationtariffsuplierlimthdy.duckdns.org
23chnesqudusisabadassniggainthehudokgd.duckdns.org
2morcmmytalententertamentforwsdyshampn.duckdns.org
4sndychinese2onlyywalkaloneinlifea1ptc.duckdns.org
americanfirewallsecuritysystemprotocolfi.duckdns.org
chinese2stdyonlyywalkaloneinlifeagfd10.duckdns.org
chinese2thdy9onlyywalkaloneinlifeanre.duckdns.org
chinese2wsdyonlyywalkaloneinlifea13klm.duckdns.org
chinese3higncomeiscausedbythepandempv.duckdns.org
chinese4higncomeiscausedbythepandevop.duckdns.org
chinese5higncomeiscausedbythepandekjp.duckdns.org
chinese7higncomeiscausedbystdythepandybv.duckdns.org
chnes29sndyqudusisabadassniggainthebba.duckdns.org
cprvstd4upcomingtalentanimationauditnyc.duckdns.org
cprvtsdy2upcomingtalentanimationauditics.duckdns.org
firewallinternationalgatewayforoffcefile.duckdns.org
green13kegheedahatakankeadeshnaastdyjlp.duckdns.org
green14kegheedahatakankeadeshnaawsdycxz.duckdns.org
greenkegheedahatakankeadeshnaajaotawqsz.duckdns.org
greenkegheedahatakankeadeshnaajaotawsut.duckdns.org
honeysposecurityfileexchangeservice.duckdns.org
internationalantivirussmartscreensecur.duckdns.org
irequestyoutopleaseadviseonthepayment.duckdns.org
kung20communicationtariffsuplierlimited.duckdns.org
kungsndycommunicationtariffsuplier27abj.duckdns.org
livelifewithnocoronafearforcountry.duckdns.org
microsfotinternetsecurefiletransferserve.duckdns.org
microsoftvirutalmachinefilesafetytransf.duckdns.org
mkpksb1behindcloseddoormatchisnotgoods.duckdns.org
morcmmystnewtalententertamentfor1winner.duckdns.org
officedocumentfilesharingcloudbaseservi.duckdns.org
ppkpsureksub2mondaynightgraceofalmighy.duckdns.org
ppkpsuresub1intercontinentalsuitishere.duckdns.org
russchine2mapanxmenischangedonewpethdy9.duckdns.org
russchine2mapanxmenischangedtonewperkkg.duckdns.org
russchine2mapanxmenischangedtonewperpvc.duckdns.org
russchine2mapanxmenischangestdy10donewcx.duckdns.org
russchine2mapanxmenischangestdy12donexaz.duckdns.org
russchine2sndymapanxmenischangedone14ajb.duckdns.org
sharefildecenterforsecurefiletransferwin.duckdns.org
sndychnesprvallanouthegreatsoustraofour.duckdns.org
sndychnesprvlandofglorylandoflifeforle.duckdns.org
sndychnesprvwaybackmaybachholdbageverl.duckdns.org
sndykrlssnp4curruptgovernmentagencytlki.duckdns.org
transferwisefirewallsystemupdatedinfo.duckdns.org
united17sndyfokesokoriorimistreetsjxzw.duckdns.org
united31stdyfrkesokoriorimistreetsjmng.duckdns.org
webxpopunlariscostlyinthemarketsevelmk.duckdns.org
webxstdy18popunlariscostlyinthemarketzq.duckdns.org
workfine12stdyanotherrainbowlomoyentfkw.duckdns.org
workfine15wsdyanotherrainbowlomoyenttdf.duckdns.org
workfine7alogorainbowlomoyentonloyevpn.duckdns.org
wsdy6pksnpcoperategovernmenttgpdagentx.duckdns.org
wsdychnesqudusisabadassniggainthe30wmg.duckdns.org

# Reference: https://twitter.com/Bl4ng3l/status/1276446227928924160
# Reference: https://app.any.run/tasks/d8c16703-53bb-47f3-8ecb-4414bc42451a/

3or8mwa-ynq.com
betokem.com
freamsahub.online
irmcentral.com
porcber.com

# Reference: https://app.any.run/tasks/a998e908-7e78-4c69-aa4a-0fb899669078/

selfdrivingpractice.com
sh-feiye888.com
doneym.com
s-t-a-r-b-u-c-k-s.com
bowrivarenergy.com
akgulsa.com

# Reference: https://twitter.com/Bl4ng3l/status/1277882548098609157

glpfundraising.com
goodfatco.com
aliyahbrack.com
omgpu.com
glamotd.com
mc-davo.com
planningforsurvival.net
aretocloud.com
cheffrais.com
helenhotfm.com
tv17403.info
bushfriends.com
aretocloud.com
renforts7.com
calciobalillaroma.com
hxjmzc.com
dynamicmusiq.com
iscompetition.net
nidaot.link
lechefchile.com
glamotd.com
aliyahbrack.com
halal.exchange
glpfundraising.com
goodfatco.com
envydesignhouse.com
dentalonline.info

# Reference: https://twitter.com/Dr_N0b0dyh/status/1277872993650331650

sndykung29communicationtariffsupliergfd.duckdns.org

# Reference: https://twitter.com/reecdeep/status/1278948869531930624

kungwsdycommunicationtariffsuplier30mgh.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/chnfwsdytwomanglobalbusinessexyandjps.duckdns.org/relations

chnfwsdytwomanglobalbusinessexyandjps.duckdns.org

# Reference: https://app.any.run/tasks/160c15e2-65a2-4a4a-9e4c-c48dda841e90/
# Reference: https://app.any.run/tasks/2cc7e325-5d33-4cbb-bcd6-fc873b336167/

regulars7.info
gographics.promo
lsalik.com
onlinekharisma.com
tt1558.com
stylishbeans.com
wireformationtechnologies.com

# Reference: https://www.virustotal.com/gui/file/2edc612812919760be42de00fde052d6808281cd5009fb6050b21b67cc6db93f/detection

healthclubpdx.com/gw8/
sandrxy.com/gw8/
healthclubpdx.com/gw8/
bennettfoamaustralia.com/gw8/
robertdebartolo.com/gw8/
robertdebartolo.com/gw8/
healthclubpdx.com/gw8/
sandrxy.com/gw8/
bennettfoamaustralia.com/gw8/
sandrxy.com/gw8/
bennettfoamaustralia.com/gw8/
cheekywebhosting.com/gw8/

# Reference: https://www.virustotal.com/gui/file/9dae9325edf14a042013558bf5d564a8c67491813b63fa66a3eb79aec59ed4b5/detection

amaliagris.com/r86/
dna-cancertest.com/r86/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1281592784407990273

19workfineanotherrainbowlomoyentwsdywrk.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ebbbbbd6f76c1d7557568bb7aeac9f66e3bdfdfdd6acc5546fbca31041ff9c05/detection

labresa.com/s4w/
marketingkonzept.com/s4w/
pakietbioasekuracyjny.com/s4w/
qelwah2.com/s4w/
susuzluapp.com/s4w/
yenihayatgreencard.com/s4w/

# Reference: https://www.virustotal.com/gui/file/d120c2d090953fec810563847c2ba5cdcbff3dc4715949e5ef7531e71c5c560e/detection

fromahighschoolgraduate.com/dum/
rochesterlocalseo.com/dum/

# Reference: https://www.virustotal.com/gui/file/aad021f8bd11f8e9195e4954b1269db584dd838026f3d73e751d69b142ced6c4/detection

igametalent.com/3nop/
joomlas123.info/3nop/
potashdragon.com/3nop/
shenglisuoye.com/3nop/
sixpenceworkshop.com/3nop/
sunflowermoonstudio.com/3nop/

# Reference: https://www.virustotal.com/gui/file/ad36c93aff3c5ad262be5608200b1d583624dd29cfb2a78fd4dfab034282bde6/detection

16sf.info/63j/
1h0threeout.loan/63j/
1k3onecould.men/63j/
5526693.com/63j/
abarkforhelp.com/63j/
ago-merch.com/63j/
autistics.info/63j/
empowermyv.com/63j/
escuchamp3gratis.com/63j/
fabriekuniek.com/63j/
govaj.com/63j/
hollydoe.com/63j/
inboundmag.com/63j/
jiejinrihua.com/63j/
mabinhura.com/63j/
mahroofbuilders.com/63j/
meehanmindset.com/63j/
mprigweld.com/63j/
royalgiyim.com/63j/
shopfor.toys/63j/
tacostuzo.com/63j/
thedeadgoddescendants.com/63j/
traumafutbol.com/63j/
unblockrun.com/63j/
wen8.info/63j/
wineanddine.online/63j/
wwwswty7733.com/63j/
xn--ydst0c036adla.com/63j/
zhongzousijichuang.com/63j/

# Reference: https://www.virustotal.com/gui/file/e95f01bbde0fbd70670b820b972768e7fc5f23509495c805ddbc3271030f443c/detection
# Reference: https://www.virustotal.com/gui/file/e1763e78b22d20c2185170aeb03f138accbfce6f6d55cad6fefb9b632ff6e685/detection

accident-law-yer.info/3nop/
ajikrentcarsurabaya.com/3nop/
beepot.tech/3nop/
chinapopfactory.com/3nop/
cloudmorning.com/3nop/
dealsforyou.tech/3nop/
divorcerefinance.guru/3nop/
foresteryt01.com/3nop/
frseyb.info/3nop/
hotsmail.today/3nop/
igametalent.com/3nop/
incrediblefavorcoaching.com/3nop/
jialingjiangpubu.com/3nop/
joomlas123.info/3nop/
koohshoping.com/3nop/
leyu91.com/3nop/
liqourforyou.com/3nop/
maximscrapbooking.com/3nop/
meccafon.com/3nop/
mindfulinthemadness.com/3nop/
naehascloud.com/3nop/
online-marketing-strategie.biz/3nop/
paintpartyblueprint.com/3nop/
potashdragon.com/3nop/
rockerdwe.com/3nop/
shadowlandswitchery.com/3nop/
shoppingdrift.online/3nop/
sixpenceworkshop.com/3nop/
smokvape.faith/3nop/
vandergardetuinmeubelshop.com/3nop/
yellowbrickwedding.com/3nop/
ynlrhd.com/3nop/

# Reference: https://www.virustotal.com/gui/file/a6e77007716111b244339e9cb1a0b0f2f09b7f313f73e03b136e1a228755438d/detection

514ope.com/tgqh/
collectivekc.com/tgqh/
empty-gallery.com/tgqh/
h2poland.com/tgqh/
hair-pharmacy.com/tgqh/
harisnurmansyah.com/tgqh/
hoyosintegrity.com/tgqh/
luxurylifeaccess.com/tgqh/
minnanwulong.com/tgqh/
nova-sb.com/tgqh/
regulars7.info/tgqh/
shouyangshanchem.com/tgqh/
showin-horikawa-oike.com/tgqh/
slingshotcycle.com/tgqh/
sopchain.com/tgqh/
squire-inigma.com/tgqh/
stratusontimemerchtrans.com/tgqh/
suncitybulldogpuppies.com/tgqh/
tablespoon.ltd/tgqh/
tooyet.com/tgqh/
tuoi96.com/tgqh/
zabikmusic.com/tgqh/
zeboxtee.com/tgqh/

# Reference: 

bpassport.com/boa/
camping-equipment.site/boa/
clavepr.com/boa/
david-kley.com/boa/
floridapostpartum.net/boa/
flpnidhi.com/boa/
hudsonhotspots.com/boa/
jiashimt.com/boa/
nhangiaivn79.com/boa/
reachidyllic.com/boa/
rebr.net/boa/
resumebanc.com/boa/
sulicet.com/boa/
v19sv.top/boa/

# Reference: https://twitter.com/_re_fox/status/1283491541236035584

sandiego-garagedoor.com/bll/
tomhufford.com/bll/
doneym.com/bll/
kalbarnews.com/bll/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1283740160476184576

39unitedfrkesokoriorimiwsdystreetsmghg.duckdns.org

# Reference: https://app.any.run/tasks/097bbd0b-74c4-47b4-9f4d-201ee4c38a4a/

dfb.cymru/ei9s/
leaderarena.com/ei9s/
lostdistrict.com/ei9s/
mansiobok3.info/ei9s/
ryytrip.com/ei9s/
student-circuit.info/ei9s/
theshadows.online/ei9s/

# Reference: https://app.any.run/tasks/4fa18ccb-ea1b-44e3-a818-d803155a9e29/

regular8.info/2cur/
tingo66.net/2cur/
towerofcards.com/2cur/

# Reference: https://www.virustotal.com/gui/file/794e7cb14496ddd13a5ce6e540822deb5cec4ca43fd0174d98e4209beda66eaa/detection

catalyseur-de-vivant.com/jjk/
qqwnet.com/jjk/
ksplaza.com/jjk/
porcber.com/jjk/
gadget13.com/jjk/
520tsbaby.com/jjk/
cjplogger.com/jjk/
fotomataio.com/jjk/
joepolifroni.net/jjk/
femalebagvip.online/jjk/
sccinvestmentnet.com/jjk/
waldenfitnesshop.com/jjk/
xn--4oq39cm25azjf.com/jjk/
karmawatersonline.com/jjk/
michiganbusinesshub.com/jjk/
gclsteelsiteservicesltd.com/jjk/

# Reference: https://blog.talosintelligence.com/2020/07/threat-roundup-0717-0724.html (# Win.Dropper.Formbook-8866958-0)

annualtransmission.technology
astonfly.info
azasianow.com
cloudyans.com
fristcreditunion.com
gtitdunproductions.com
intera-canada.com
joshkaeding.com
mannionexpertseniorcare.com
methvenonthemove.com
mysticadventuresails.com
myweddingbeautiful.com
novaeramotoboysportoalegre.com
pepper.guide
q83pfq.biz
startboostcapital.com
stoxcrypto.com
theclippersofficial.com
theedgebizconnect.com
www750456.com
xnyppw.com

# Reference: https://app.any.run/tasks/393ffa82-d780-4bdc-b47f-456c458201da/

bewheybetter.com
qhlkzl.com
cpwy8c.com
finesewingservices.com
5dollaralluringstyles.com
izfyb.win
regular8.info

# Reference: https://www.virustotal.com/gui/domain/bsskillwsdyemmulatorsdevelovercommunity.duckdns.org/relations

bsskillwsdyemmulatorsdevelovercommunity.duckdns.org

# Reference: https://app.any.run/tasks/989b1b9e-b3b5-435a-ba14-a5f5f9fc1b7c/

insidemarinacity.net
jeddahresources.com
mugtravel.com
onstagenewage.com
vitosophy.com
xianzhonghe666.com

# Reference: https://twitter.com/reecdeep/status/1290967132562501639
# Reference: https://pastebin.com/4H24JFGS

accident-law-yer.info
bakecakesandmore.com
duftkerzen.info
janewagtus.com
joomlas123.info
koohshoping.com
maximscrapbooking.com
mindfulinthemadness.com
online-marketing-strategie.biz
pmbnc.info
potashdragon.com
rockerdwe.com
shoppingdrift.online
sixpenceworkshop.com
stepgentertainment.com
tawbj.info
vandergardetuinmeubelshop.com
yoghurtberry.com
yoyodvd.com

# Reference: https://app.any.run/tasks/60d821e5-4221-4f92-9871-2f34d4493704/

cocoding.net
kokoandkiki.com
laurelcanyonmusicroom.com
mansiobbok.info
produkdigitalstore.com
schuster-partner.net

# Reference: https://www.virustotal.com/gui/file/99623ab781dc923aa8fc80c49845845705c5e95ecd15bc3c22dae3dd6979aca8/detection

myblogforyou.is

# Reference: https://www.virustotal.com/gui/file/e229bf532a101dc01cea0f119eddfa6de309a6af68743b7a5d6ca63df110573c/detection

315px.com/kvsz/
fex-tracks.com/kvsz/
jiqing3.com/kvsz/
marijuanadogbone.com/kvsz/
okashyns.com/kvsz/
priestvedic.com/kvsz/
sif.email/kvsz/
taylorsandbek.com/kvsz/

# Reference: https://www.virustotal.com/gui/file/a327d63bea241fd175c5dda029f2cf997e13565393c5d0bf0f7ce4df5c7a7bb1/detection

asktarifleri.site/kdz/
bbetmoose.com/kdz/
blockchaincso.com/kdz/
chacharen.com/kdz/
christmasjumpersireland.com/kdz/
doggygreatpet.com/kdz/
funpexw.com/kdz/
herolander.com/kdz/
keragramam9.com/kdz/
kxqsw.com/kdz/
niulunbi.com/kdz/
punkrockpeppers.com/kdz/
taylortao.com/kdz/
wwwclarion.com/kdz/
xxwzsw.info/kdz/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1297850974833451008

santhoshibitcoinlocalmarketdropdownand.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7167c1835bc0c219b5bd2df7d529bc063482af7362b6d9c0f4eb8de0d90e1587/detection

finalwireboxtransferthesessioncookienorm.duckdns.org

# Reference: https://twitter.com/VirITeXplorer/status/1298549793137086464

savetheverse.com

# Reference: https://www.virustotal.com/gui/file/73f93e83e8452ee5a80a098908e627fd315fc7d7886e42a20952614f01ccf27f/detection
# Reference: https://www.virustotal.com/gui/file/07bca888b32f2b57d4dc7c80504b425b8a764e90c3879e45363aa017e86ba254/detection

00307r.com
51gayporn.com
academiefutsal.com
alejandrajazo.com
ashleetaylor.net
beautifulbridesandbeyond.com
bodypiercingblog.com
brainpowersound.com
ceptenmuzikindirelim.com
corki.site
g3391.com
holdingeggs.com
idefoto.com
jordanthedev.com
kiacraft.com
libertarian.site
lushe12121.com
maiscash.online
mansiobok2.info
mesathean.com
minlisc.com
newuniverse.net
northwestclassicfirearms.com
pnwminiacs.com
postmortemrecycled.com
pranaavgroup.com
prosolutionsgroups.com
shkafko.com
story-learning.info
tastyafrecipes.com
thetangleiota.info
usainshape.com
vaguidelines-updated.com
valueaddedindustries.com
venicecast.com
wellsnextthesealife.com

# Reference: https://www.virustotal.com/gui/file/12bf313b477f06f8732fcb79b706b0bd6534948959f5c6017acaa534e52ec43e/detection

842cedar.info
ausu96.com
capitalrealestateservices.com
ernestospaccesi.com
flekcht.com
hezehzxx0530.com
incubatorplatform.com
kymsusujinsha.com
perocreations.com
pizzazucca.com
reparmaxpro.com
thecyclingvegan.com
uscawm.com
vehiclenotes.com
xn--vs2b19v.com
zds9999.com

# Reference: https://www.virustotal.com/gui/file/1d752833612c96dff4dbd5cad8342b2d82cc62f76be376eabdf4e5a7e6d8001c/detection

763bifa.com
cerecaustin.com
coinpatent.com
discoverfrenchtown.com
ecomobilecarspa.com
howcuty.com
huntsvilleguru.com
idbcc.com
in4rac-acc3es-re7unds1.com
iznjreb.com
mining-journal-30.com
njzscy.com
retireinyourstyle.com
topnotchhardwoodflooring.com
xarkz.info
zepi.ltd

# Reference: https://www.virustotal.com/gui/file/79f09ef70447edc02b3ab24259050de6ea4da4b4c26391798ae238b9c42cb56a/detection

553349.top
balikesirmasajsalonuu.com
ceptenmuzikindirelim.com
chepinclub.com
everfileit.info
holdingeggs.com
jordanthedev.com
kiacraft.com
maiscash.online
manilagogo.com
mansiobok2.info
minlisc.com
northwestclassicfirearms.com
usainshape.com
wellsnextthesealife.com

# Reference: https://www.virustotal.com/gui/file/32cb38541ca29d629b4d411191023bbd67887b099ff5f5b71067998eddb7d678/detection

asif.services
austinjdugger.com
burikinochabudai.com
carlymccrayblog.com
cct-happy.com
happychicks.exposed
joyfinaclinics.com
latrovadorabarbersupply.com
liquidtreecbd-sleepaid.com
reliablemedspharmacy.com
surensoy.com
trancus.com

# Reference: https://www.virustotal.com/gui/file/9d45fa3a16cf0a0f8ff071a745ca85e67fc23a6da3072d77854c0bb56b79ee7e/detection

7122-info.com
aqadelics.com
arescsg.com
baldinimakeup.com
champcarfanatics.com
cifmyanmar.com
decentralizedfinanceguide.com
euroruyane.com
fuyucoffee.com
houstongrowmyairway.net
igiddevelopment.com
jacketgraffiti.com
kobfrin.info
kocerstudio.com
libbythrifts.com
meowusaurus.com
nevertravelled.com
nyfirewatch.com
operadorapacientesmexico.com
projectholos.com
sharkcoastline.com
stashboxcombos.com
tampabaytrash.com
thermalsmartglass.com
transinta.com
wherethebestplay.com
ynkshengfa.com

# Reference: https://www.virustotal.com/gui/file/dca8e5059018aa3f1aeeee14511d9e57cc4268a8aed1584110c0fbb4822839f2/detection
# Reference: https://www.virustotal.com/gui/file/3a1465485ed94bbfde14f2b538153a0a007bb8aa82b75d8cbf84bbcb483c4db9/detection

10valemont.com
24mane.com
7955t.com
a1services.one
adondeva.com
advisorsoncall.pro
casestudyinabox.com
cgkvnt.com
emirativisitalaqsa.com
essentialcarementalhealth.com
foxvegapunk.com
frecoy.com
futurepoweruk.com
hocakoisanvuon.com
joerow.xyz
macrocpas.com
neuroticbuffet.com
pmqvodka.com
presisiontestprep.com
primeautocars.com
rapornzel.com
registergamers.com
sharonschmith.com
shopcamacci.com
steripowerbank.com
thaihicaregloves.com
tradebrochure.com
trelbikes.com
whtybw.com
womenme.com
xiongmao-g.com
xmlmobilepulsa.com
zaibatsucoins.com

# Reference: https://www.virustotal.com/gui/file/17a8084c74f8cc58490b8698860b482de514164362640d00116c61e81a95934b/detection

book-london.com
bzyzk86uzj.men
champcarfanatics.com
coachdrj.com
day1transportation.info
decentralizedfinanceguide.com
kobfrin.info
nevertravelled.com
nevooptimum.info
newtsboneyard.com
orkneyelements.com
qizasoluciones.net
role013.com
skandalist.info
theuniformpages.com
thisdadflips.com

# Reference: https://www.virustotal.com/gui/file/46604ca23348020b3ba4a772be141fb9a1a6d9bf263ab04453e37aa3449307b3/detection

1-edogawa-one.net
angelmedics.net
blackbaycooler.com
cexo.ltd
deepcallsmusic.com
ehoulby.com
f0aw9u.com
fizzwagon.com
frontgames.info
gentlemanism.com
intensivprogramme.com
iskovlay.com
j9d9.com
jnjmqzzl.com
larympei.com
longdu665.com
mlabsassociates.com
multonin.reisen
qww13.com
recetasinstantpot.com
rilke.photography
saludcomplementariaintegral.com
serviceiqinternational.com
silvfly.com
skyhomeshn.com
smokinginc.com
strikermillion.net
thatmountainbiking.com
theflamingorealtygroup.info
unieekly.net
vieclam-jobs.net
wesk.tech
wwwstrikeout.com
yimifanghua.com

# Reference: https://www.virustotal.com/gui/file/36ae1f2db02a8deb4ae22d4d81be0c69ce30f471b0822405b56ffb2faaf304b0/detection

armandonieto.com
banknotesync.com
bet365c.win
dmoneylife.com
drb77.com
edgaralanbro.com
fex-tracks.com
freespin-support.com
funippon.com
getawomantodoit.com
goldencanaries.com
h0jt1y.accountant
hotair.wales
jiqing3.com
lahistoriade.com
landbank.site
levelretail.com
okashyns.com
priestvedic.com
rticlubs.com
savetheverse.com
specificpcshop.online
upbeatnewyork.com
vedattelekom.com
weeip.com
xn--oorv2aj6bj7cds0d6p4b.com
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/ac196db28c1b5e6d0772f61f5ba55824d6e6de820621b9a2485ee78fe7b553e0/detection

1tmm11ou.biz
2lsuxxk7.site
3-333i000000f04-virus.net
atlantisads.com
civx.love
coinpuma.com
dollaryearbook.com
hhtdhg.com
jonstats.com
mpmts.com
origamiformal.win
pczfk.com
rdrfi.com
silverstone-pharmas.com
skylod.com
xn--5nq67dt91acob217ad91b.com

# Reference: https://www.virustotal.com/gui/file/55356d3c2e71b6221d8590c9733cc45d09661f0210ef12aad830afca3653c5fa/detection

315px.com
alexandre-boissard.com
chaiseloungereviews.com
funippon.com
getawomantodoit.com
goldencanaries.com
grouptulip.win
jeaniney.com
jessandjeff.net
ldmeili.com
levelretail.com
loulancaster.com
magic-desktop.com
marijuanadogbone.com
okashyns.com
rticlubs.com

# Reference: https://www.virustotal.com/gui/file/e0db3294cbab3b55595d396941434b9bc7a82ce2f87d6819ff3c17936d559fe7/detection

557023.top
banknotesync.com
bocapvang.net
chaiseloungereviews.com
dmoneylife.com
eugeniobarros.tech
fex-tracks.com
freespin-support.com
jatinangorcity.com
jiqing3.com
lahistoriade.com
landbank.site
ldmeili.com
loulancaster.com
magic-desktop.com
marijuanadogbone.com
okashyns.com
outofthepark.today
polychips.com
savetheverse.com
taylorsandbek.com
valorartetattoo.com
vecteur-u-shop.com
vedattelekom.com
xiaoxiong365.com
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/8005ecbb424af2a2504693bdf4550825855b1036a049e6c81852f5be0f435f02/detection

alfaranakle.com
banknotesync.com
chaiseloungereviews.com
fex-tracks.com
h0jt1y.accountant
hotair.wales
ldmeili.com
motoreselectricoschihuahua.com
okashyns.com
specificpcshop.online
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/f3a30108ab40b7f31ad7ad191bb41bd3ad148d09597705c1ec0bc0352d18c29e/detection

bbetmoose.com
blockchaincso.com
chacharen.com
christmasjumpersireland.com
cryptoassettrust.com
datemere.online
efamu.com
fintopix.com
flexwireless.net
funpexw.com
grinn.company
heritage-japan.com
herolander.com
iskratrip.com
keragramam9.com
latinosinpolitics.info
lauraandjose.com
makrobet909.com
mariannevaatstra.com
niulunbi.com
nsqpg.com
nutri-bulletmania.com
punkrockpeppers.com
queenpiececustoms.com
shanxiu360.com
sharegrills.com
tecnologiaconcalle.com
weltricom.net
xxwzsw.info
zljrlm.com

# Reference: https://app.any.run/tasks/a676d29f-57bd-4aa6-ad6c-99c60fb99d01/

ridi.ltd

# Reference: https://www.virustotal.com/gui/file/1a85e9979700746c2e7cfff81ac8308d723ffbbc94fd62dd5450bfb511b0eb8e/detection
# Reference: https://www.virustotal.com/gui/file/cf87ae81ce49eafc69bed54e2ce2051cb2e56a47d6b9d2d18f1eafdecec5794b/detection

hdfcbankprivateltdinternationalfirewallf.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/timestableforjuniorsecondaryschoolsdone.duckdns.org/relations

timestableforjuniorsecondaryschoolsdone.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org/relations

ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/12chnesstdywealthandmoduleorganisationrn.duckdns.org/relations

12chnesstdywealthandmoduleorganisationrn.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b7c19faebbb9a0539f3ce80d25be908f44a078ccdfac440ad9ed1484b3f546c5/behavior/C2AE
# Reference: https://app.any.run/tasks/3263eddc-12e0-43c4-8916-f7b4ee7c8d07

agraindustry.xyz/xczm/
aupeiedu.com/xczm/
blackhillsgazette.com/xczm/
crowgangrecords.com/xczm/
cyypmy.com/xczm/
digitalmarketingsinc.com/xczm/
gigs-list.com/xczm/
jhpaolilo.com/xczm/
johnjacksonutahhouse44.com/xczm/
karenchartanowicz.com/xczm/
partiesandprettythings.com/xczm/
qrocodile.com/xczm/
restauretsens.com/xczm/
robertwebsiteworkshop.com/xczm/
sebuildingcontractors.info/xczm/
shaymika.com/xczm/
solomoncrane.com/xczm/
supereasythings.com/xczm/
talentos-sa.com/xczm/
thenextbigbang.com/xczm/

# Reference: https://www.virustotal.com/gui/file/4458df211fccf5c1d24b96ebb7b4191cc94edc0b0e13bbb80ae3919f015297d9/detection

3j120.com/uts2/
blissbureau.com/uts2/
dannystar.online/uts2/
farmtractorpartstam.xyz/uts2/
finanzleiter.com/uts2/
iprintdrivers.com/uts2/
jonaskold.com/uts2/
richfun9.com/uts2/
sinseek.com/uts2/
stutinney.com/uts2/
top-dex.com/uts2/
v-imagery.com/uts2/

# Reference: https://www.virustotal.com/gui/file/ab2134e4b74317f5de2f265e46d73c4bb6593cdbfc795d84acc5ac92694fcfd8/detection

cyberrome.com/evcy/
phytphysios.com/evcy/
roofingscontractors.com/evcy/
w662017.com/evcy/

# Reference: https://www.virustotal.com/gui/file/3918933694be0d073cbbf212787b2645ff55f13d0465068c07bfba9429c592c9/detection

766ht.com/wc2/
911respondernews.info/wc2/
arikagroexporter.com/wc2/
balaji-industries.com/wc2/
bishopberrian.net/wc2/
boopdedo.com/wc2/
bsmw.net/wc2/
crsmrtns.com/wc2/
ethihadhub.com/wc2/
huaxing888.com/wc2/
imkollection.com/wc2/
learnitanywhereskills.com/wc2/
lexafit.com/wc2/
lisajohnsva.com/wc2/
ludo999.com/wc2/
majahada.com/wc2/
originaleprezzo.com/wc2/
proglove-news.com/wc2/
range-view.online/wc2/
shotsbyshari.com/wc2/
silver-marketing.com/wc2/
szcstl.com/wc2/
theyolarbi.com/wc2/
thomasallmer.net/wc2/
tyres-n-services.com/wc2/
zxnhyc.com/wc2/

# Reference: https://www.virustotal.com/gui/file/a8dab0706fcde32079548def807a0970b9ea1777e191a4de545b286b21e37d28/detection

americasbestpw.com/r690/
china-harmonica.com/r690/
chiomydiary.com/r690/
cluehut.com/r690/
grabareelfishing.com/r690/
graveltravel.company/r690/
gromomedia.com/r690/
haciendadecuacos.com/r690/
highchikadns.com/r690/
kikinico.com/r690/
livein.space/r690/
qrudghana12.xyz/r690/
sagivfoods.com/r690/
shinelightofgod.com/r690/
thesibrand.com/r690/

# Reference: https://www.virustotal.com/gui/domain/moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org/relations

moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org/relations

dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org

# Reference: https://app.any.run/tasks/a2d97909-68ca-49f3-9c8c-20eba5681fb5/

wsdychinese2onlyywalkaloneinlifev26mba.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8fc21c2279038625176289496bc8f34b0cb2404b064edb3fb2da8d3ca43dc5b1/detection

azwertfgdshbvcgyujmlpokjhgfxzaewqsdrfgh.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a4c9cd227e58728c221e9001d28f166143980f893d45a2b7757b73ce5fd903ce/detection

acessorios-nerd-app.com
eldesvan-sinlimites.com
gokdaginsaat.com
healthcbn.com
hippainyoga.com
inveplor.xyz
investstoneycreek.com
mayasign.com
pitandplate.com
schokogirls.com
sillymillie.today
teamreddragoninternational.info
thelastwordapp.com
theme7.com
trakfin.com
zhonglinsd.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1303601913364180992
# Reference: https://pastebin.com/KzJT43TM

bl2clear.com
boujeegoddezz.com
bringfilmes.com
coffeeandproductivity.com
covidbreathrehab.com
domdlyabolona.art
gameingalaxy.com
ghtrive.info
mammal-immunity.com
molianggong.com
moreupdates.info
roselandcompany.com
selfloveonlineshop.com
vissist.com
wccs.school
zjbeidou.com

# Reference: https://otx.alienvault.com/pulse/5f58c504cc7ae467f9d3355c

bogrollbandit.com
jramfox.info
moskvaoptom.net
naomiatlibrary.com
vegoutlv.com

# Reference: https://www.virustotal.com/gui/file/a715a6693137085afaf486b54cac1653b19685bc5f79ed03afbbe818a4df2dc7/detection

scmtonhumanrightandjusticeorganization.duckdns.org

# Reference: https://twitter.com/jorgemieres/status/1310669976156676099

20greenkegheedahatakankeadeshnaastdyhma.duckdns.org
2morcmmytalententertamentforwsdyshampn.duckdns.org
stdyworkfineanotherrainbowlomoyentwkgls.duckdns.org

# Reference: https://www.virustotal.com/gui/file/aa173d61945504c96ede4e050072747bce9747b05ba64ad7e63c931988fd5afa/detection
# Reference: https://www.virustotal.com/gui/file/2bd70691b602c8a94d298de4a1d629eb4e6eee5640f73ae4f323939334cadef8/detection

affiliatedinsbrokerage.com/lmh/
avantgardeperde.com/lmh/
chidehdesign.com/lmh/
covertextensions.com/lmh/
electronic20200818.com/lmh/
finanzbildunghartmann.com/lmh/
goodmol.com/lmh/
gzjxrg.com/lmh/
kaboom-stores.com/lmh/
onelivenews.com/lmh/
properope.com/lmh/
resfebertrip.com/lmh/
spinthewheelof.com/lmh/
stopthecull.info/lmh/
supng.com/lmh/
testaker.com/lmh/
testcitestdpp03.com/lmh/
thefamilybrew.com/lmh/
thisshowistheworst.com/lmh/
uyenty.xyz/lmh/
zainiicandle.com/lmh/
zaxesoutdoor.com/lmh/

# Reference: https://twitter.com/reecdeep/status/1311677288384262145
# Reference: https://app.any.run/tasks/9ec07b95-db5c-4a6d-9ce8-7b2b4803f9e5/
# Reference: https://pastebin.com/1Uax6brn

adventurewhisky.com
carrollbusinesspath.com
chuansongm.com
dcurvezone.com
ezecustomprints.com
futureheadcoin.com
home-orchestre.com
hotelkewal.com
leggiies-es.com
reallygood.toys
regular-list.info
shopatman.com
thekindnanny.com
vqxxmrxhpsho.mobi
warnddd.com
zhizaotuan.com

# Reference: https://twitter.com/jorgemieres/status/1311775076501651458

newhdconnectionforfiletransfernetworkwit.duckdns.org

# Reference: https://twitter.com/jorgemieres/status/1314554323389550593

kungthdycommunicationtarisupliermgthbzm.duckdns.org
privatethdycloudshareandfileprotecthmbw.duckdns.org
unitedthdyfrkesokoriorimistreetsmthbdx.duckdns.org

# Reference: https://twitter.com/Unit42_Intel/status/1312126230309740544

717cary.com
anunaysrivastava.com
armstrongramps.com
bootlegmask.com
cgv-so.com
claricitywealthplanning.net
csbaoxing.com
dannisconfessions.com
easyloop.email
ehrbar2012.com
elevatedqueensnc.com
entrepreneur-de-demain.com
firestarterelectronics.com
firewoodlogsbristol.com
janet-lorenz.com
kayarihats.com
misspinkk.com
myworldgay.com
piao.mobi
pricemanmmi.com
psm-gen.com
readingbythewindow.com
sporkedmissoula.com
tapchiotoxemay.net
tdhudsonfarms.com
theduneco.net
usarmedforcesforbiden.com
virtualinspectiontraining.com

# Reference: https://twitter.com/luc4m/status/1313805772992765953

purebodyrecovery.com/rhk/

# Reference: https://twitter.com/theDark3d/status/1313834137992794112

hydreol.com/gc9/

# Reference: https://www.virustotal.com/gui/file/2914b28edc11e8032a43789a1fd6a897cad41494ea0657ce15933b5825e922f0/detection

amaee.art/bti/
get-s14.com/bti/
roket.store/bti/
hotelsyd.com/bti/
pressd4you.com/bti/
intimkyliya.club/bti/
theobsidianlounge.com/bti/
bestcostaricacars.com/bti/
orthodonticoffices.com/bti/
genericpharmacyshop.com/bti/
asheville-pestcontrol.com/bti/
pureandtotalrelaxation.com/bti/
brmstatpack.com/bti/
mygametour.com/bti/

# Reference: https://www.virustotal.com/gui/file/55b4c44664dbfe9d51bd386d7b88779555b8c7681147a0dc8b049a252a093b61/detection

beulig.com/mi8/
quorahr.com/mi8/
tensedu.com/mi8/
bolly4me.xyz/mi8/
beaverhat.com/mi8/
dacho-pri.com/mi8/
khanhthieu.com/mi8/
mperrinauthor.com/mi8/
honeyandpapaya.com/mi8/
lonelyleadership.com/mi8/
partialdeveloper.com/mi8/
mariagrossbaumart.com/mi8/
courrierhautrichelieu.com/mi8/

# Reference: https://app.any.run/tasks/f76cb393-c9b7-4965-b69e-19c8b9b85c2e/

chikachinwe.com/fs8/
gabipareras.net/fs8/
hpg.computer/fs8/
kumcal.com/fs8/
mohinisystem.com/fs8/
muellervieh.net/fs8/
setsomegoals.com/fs8/
shestakova.info/fs8/
thelincolntondentist.net/fs8/

# Reference: https://app.any.run/tasks/49d6e478-698c-4afb-8a2d-b217e9e85a70/

chollotiza.com
elevatehour.com
en-bmwbasvuru.com
justiceforproject.com
lojapetsz.com
thenursingstudysystem.com
xn--vf4b17jiew40b.com
zgxjgw.com

# Reference: https://app.any.run/tasks/f171064f-893c-4957-b3ce-8b3fac487eee/

bitechanalytics.com/3iw/
creditoefectivo.info/3iw/
fairpayva.com/3iw/
regulars6.com/3iw/
thelifewaykefir.com/3iw/
valodokan.com/3iw/

# Reference: https://www.virustotal.com/gui/file/980b25031efc6ab322f08a66a098f51a7e55ae8926eeed299b8ae0176a7c71a5/detection

abishadesigners.com/ec14/
acikonline.com/ec14/
akulelaki.com/ec14/
apqtkj.men/ec14/
atecommarkk.com/ec14/
bellaboutiquetime.com/ec14/
boobl.net/ec14/
catalystbizconsulting.com/ec14/
contactista.com/ec14/
dundeeplanninglawyer.com/ec14/
fooorest.com/ec14/
gardhome.com/ec14/
gzfeidengxian.com/ec14/
harbourridge.info/ec14/
ishop121.com/ec14/
ivalens.com/ec14/
jetcat.studio/ec14/
luxdermatology.net/ec14/
mingjianjiankang.com/ec14/
myhjzl.com/ec14/
perrogenial.com/ec14/
qhdrzblg.com/ec14/
radinkauto.com/ec14/
unitetoken.com/ec14/
violence.ltd/ec14/
yeserenkalem.site/ec14/

# Reference: https://www.virustotal.com/gui/file/70ec010c74c2d3f440eee4a882f842f1b04d3c1ac11ae54817e2985497cbf737/detection

bastblossoz.info/uc/
goodpva.com/uc/
hampshiremotorgroup.com/uc/
highlandsdayschool.net/uc/
kmpqeaqap.download/uc/
lillyvalley.info/uc/
mandarin-cazinod2.com/uc/
okxaw.com/uc/
smeemail.com/uc/
yuppieshome.com/uc/

# Reference: https://www.virustotal.com/gui/file/70f0bd1b2a180d7aa965bc907c3367b1a34445bdb1a3882be040e22f04c1e300/detection

governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu

# Reference: https://www.virustotal.com/gui/file/96f40ff0c9306eff1e9321d47fd97a7a62a737815b6964109b335b8e3d48bce2/detection

344bifa.com
lodipytu.com

# Reference: https://www.virustotal.com/gui/file/d45a4b45fce191e47e64aeb48cbba1477b58ad991bb1e4409d97f29de86c69d6/detection

2637426264.duckdns.org
aksesblog.com/sl7/
antskipper.com
sarah-pinhancos.com
theflawlessstore.com
totalitymedicine.net

# Reference: https://www.virustotal.com/gui/file/6950ffcd5d6cf9bd7338614623baf23baa58236e7603e74f2360ea60add802b0/detection

10wsdyanaekppyinitalymedicalconsultafr.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org/detection

368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c76eefb96b1a6360727130cc86aa039d19b1f6eb7ec2e49d40989bcb3a820f5c/detection

31kungcommunicationtaristdysupliermgjky.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org/detection

240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org

# Reference: https://twitter.com/InQuest/status/1321030052709126147

fsdfjkhiuwehxcyvuiyiuwefocshsduihfnabhsghfghewfjpiouyiyuixcvxuv.ydns.eu

# Reference: https://twitter.com/InQuest/status/1321339394335428608

tsdyprivatecloudshareandfileprotectsyta.ydns.eu

# Reference: https://twitter.com/Marco_Ramilli/status/1322075988851859457

greenthdykegheedahatakankeadeshnaathfgh.ydns.eu

# Reference: https://www.virustotal.com/gui/file/e44aed73ae9a363d854c16f430af1e93f58409d2f4bbf3ae90e2164cb60cdb81/detection

30atgkmss2m0fc3rjc926qag09d60tz44zwi0kv6.duckdns.org
deliverynotificationmessagesuccessfullys.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0920951a2739c975661a70c9a7532d65a0abe3d8cee5d476af53b2b60cb63bd3/detection
# Reference: https://www.virustotal.com/gui/file/899f6e35cd5d54ccc7c6dadd6fa35a719a1ec6a1a19a6df0e49b252491d03fd6/detection

abiodunanimashaun.com/gcvp/
angelofcfashion.com/gcvp/
applespanyc.com/gcvp/
digestspot.net/gcvp/
habibistech.com/gcvp/
herbandflorealty.com/gcvp/
missouricitymagazine.com/gcvp/
murder2is.com/gcvp/
osusume-erodouga.com/gcvp/
rayznrosez.com/gcvp/
registrosbonouniversal.xyz
sabaifund.com/gcvp/
solarlightsuk.com/gcvp/
southpacificconglomerate.com/gcvp/
stevebana.xyz
surgecrete.com/gcvp/
syshxg.com/gcvp/
tars.network/gcvp/
tjtftc.com/gcvp/
wlc958.com/gcvp/
worldbeyondfaith.com/gcvp/
youriptv.online/gcvp/
zjxdw.com/gcvp/

# Reference: https://www.virustotal.com/gui/file/15e93e945f92f31af20aa93a04a4b437e2e77799b045c31f36ef24c0d8b962b2/detection

calebdavidsmith.com/sg03/
foodie-jp.com/sg03/
jiralabs.com/sg03/
lynnsbeautylab.com/sg03/
topambebi.com/sg03/
xietuwen.com/sg03/

# Reference: https://gist.github.com/silence-is-best/0aa844b003c62c6ce491e91e168ac662

aarthiramamurthy.com
atmebenessere.com
auctionpros.club/glt/
baddietraphour.com
brighteclass.com/nko/
brologan.com/pna/
comeongetreal.com/nko/
emythaccelerators.com/ga4/
everychildnisanartist.com/glt/
eyepointph.com
foodrenewal.com/ga4/
gfltransports.com/nm8/
locallygrownmedia.com/pna/
merhomeimprovement.com
mingchi168.com/ga4/
qihuo119.com/ga4/
sarahkim.world/cmd/
shisang.xyz/k8b/
st883.com/ga4/
straightaheadflixgroup.com/glt/
terrycareerconsulting.com/pna/
theloveofliving.com/ga4/
tonainy.com/cmd/
traumaremedies.com/cmd/
trendycollectionz.com
vestingfacts.com/ga4/

# Reference: https://twitter.com/Racco42/status/1323404190962618371
# Reference: https://app.any.run/tasks/7d9de5ff-9695-47c2-8108-6b6a3bcdb1c9/

3907allendale.com/nt8e/
brandonprattdrums.com/nt8e/
donotwasteyourvote.com/nt8e/
eneralysis.com/nt8e/
feeneylaminate.com/nt8e/
gomashio-taste.com/nt8e/
highfashionexchange.com/nt8e/
jobheap.com/nt8e/
lostintraveland.com/nt8e/
mohdnaved.com/nt8e/
mostposh.com/nt8e/
radiosteel.com/nt8e/
rescuedpetsarewonderful.com/nt8e/
simplicty-in-life.com/nt8e/
whereistheherb.store/nt8e/

# Reference: https://www.virustotal.com/gui/file/867250c0cf9bf77af6af0886d701bb1ce4045a49a1e8be964b8e5f00de241c20/detection

animalcare.today/unx5/
best-three.com/unx5/
britishchildrenslottery.com/unx5/
horizon-hydraulics.com/unx5/
indumaqservicios.com/unx5/
liquancai.com/unx5/
porncamslivechat.com/unx5/
ronspizzapalace.com/unx5/
site-oficial.tech/unx5/
stevebana.xyz/unx5/
thewriteux.com/unx5/
tkor.city/unx5/
waaaghstore.com/unx5/

# Reference: https://app.any.run/tasks/4fe61081-2e84-4544-a275-0665bea7b2cc/

grg679.xyz
5855a.com/9d1o/
aceditors.com/9d1o/
dekoratuvida.xyz/9d1o/
emergingtrendify.com/9d1o/
entepeedia.com/9d1o/
eventoslafete.com/9d1o/
gmleetkd.com/9d1o/
goldenoilproducts.com/9d1o/
mw88slot.net/9d1o/
smartcontracttraders.com/9d1o/
solucionescbi.com/9d1o/
unusualdag.com/9d1o/
unusualdawg.com/9d1o/

# Reference: https://twitter.com/58_158_177_102/status/1326293293878059009
# Reference: https://tria.ge/201110-az5cp1fxde/behavioral1

ozsmarthomes.com
screaminyourcarday.com
nbhindustriesptyltd.com
ntgmfublb.icu
bombayracks.com
phoenixlights.net
rachelamosphotography.com
leapforwards.net
sendai-salt.com
shabbychicflipsbyangelina.com
core-ol.com
canalysis.net
tybeeprohibitiontour.com
influencedarts.com
italivpn.com
newborn.today
garagedoorroundrocktx.com
participi.com
thegoddessnow.com
invesito.com
surfingnaked.com
sunsetsalesforce.com
revolution4kids.net
kingbookvn.com
realsteelpocatello.com
ubitem.com
forretningsfilm.com
liberationcreation.com
jfaudiovisual.com
fashinnovation.institute
4628ridgemont.info
advocatenunie.com
sheilaalvarado.com
gun-barons.com
muyupin.com
nolanshotsauce.com
chile-commerce.com
alekhyasarees.com
digitalcollectionservices.com
rhwlc.com
dondeestanlospacientes.com
haxb33.xyz
sageolegoats.com
strongpowerlive.com
allianceofamericanlawyers.com
applywithrand.com
wwdyson.com
rivertigerresources.com
njbjjt.com
lemarcel.online
unetgallery.com
zajedyne.com
aodiq3.com
profitcart.xyz
mrnord.com
melisaweb.com
picskicks.com
ubiquiti.lat
long0321.com
mediherz-shop.com
digitizersfriend.com
ford17tv.com
seawalker.art
serum.mobi
weblst.com

# Reference: https://otx.alienvault.com/pulse/5fabd3703c6e86ab3329c124

myrqh.com
superbbeautysecrets.com
techyde.com
knt60345blog.com
cryptocurrency.wiki
kumcal.com

# Reference: https://www.virustotal.com/gui/file/63c7a80a5750e4f804f26a4252aa8a6efb959e1e6f6f763451e18703594fa51a/detection

ghsinternationalconferencewithinternationalfilesecureserviceglo.ydns.eu

# Reference: https://www.virustotal.com/gui/file/e3def2d5d83257eb416a4b3f5a89afd85dbedb1d68d95e871d804c9bfb225ec3/detection

igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu

# Reference: https://www.virustotal.com/gui/file/725f65d305b7295680484b3c813ebcbc8cd2ed273943ce439fa658ac5e265db5/detection

vegaconferencegloballywihtinternatioanlwellwareteamwordglobalin.ydns.eu

# Reference: https://www.virustotal.com/gui/file/918b404d124504e3f5a654b0839f9c002831bba6eff56e870f4f20ab11fd2cca/detection

hoodsboysuccessmanwizzsonbrightdayblesng.ydns.eu

# Reference: https://www.virustotal.com/gui/file/64bf2f00c276d63d79f1fc5a1140ecd77a0bc2e3106d4298bddb6d149fcfef82/detection

wsdyshgshgnationalobjindustrialatwsgqp.ydns.eu

# Reference: https://www.virustotal.com/gui/file/96d593ee0b035af385bf74f834c980c44389f00560b31f8825b8b7b796fe2e45/detection

neverwsdywalkachinese2loneinlifekwsfdw.ydns.eu
8khutpn8g3x9iy.net
depoarkasi.com
rakutenlle.xyz
segredosdocopywriting.com

# Reference: https://www.virustotal.com/gui/file/0e31eca3da35e95b666df1705113d75bc81936a879b55fdf1bc2c6150df296c4/detection

bsskillwsdyemmulatorsdevelovercommwsdpg.ydns.eu

# Reference: https://www.virustotal.com/gui/file/13a9ba492c2a5ee332477af324aee8b2bc7d74847b1330308cf04ad8f9b0a6ec/detection

telecomoperatinggoodnewserverfortransfersecurefileinternatioanl.ydns.eu

# Reference: https://www.virustotal.com/gui/domain/ydns.eu/relations

actionforfiletransferthroughcloudbusinessinternationalglobalsys.ydns.eu
antivirtualmachinecleanserctigifateforthisfilewithgoodsecurityp.ydns.eu
antoinesauvagesqcomcomantoinesauvagesqcomcom.ydns.eu
asdfghjklzxcvbnmmnbvcxzlkjhgfdsapoiuytre.ydns.eu
bhngvfcdswqwertyuiopasdfghjkllkjhgfdsapo.ydns.eu
brinallgoodjobandworkintoseehowblessings.ydns.eu
bsskillstdyemmulatorsdevelovercommsthaw.ydns.eu
domniforworkinsidegoodohmarcywitmeohjah.ydns.eu
easygoldwithgoldenindustryinternationalinternationalfiletransfe.ydns.eu
eewssghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu
endsarsendpolicebrutalityendsarsendpolic.ydns.eu
ertyuioplkjhgfdsazxcvbnmmnbvcxzasdfghjkl.ydns.eu
fghjklmnbvcxzasdewqrtyuioplkjhgfdsazxcvb.ydns.eu
firewallsecurityscandocumenttransferwithonlinesharingtransfergb.ydns.eu
fsfhuiohwenljiofnnfnlasdlkjflkjioxcoivjndfnkljflsdjlfjwjejsdflk.ydns.eu
gbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2y.ydns.eu
ghkiwuydmklopjdbcyuavxbnmsheyrhdgcvbzgyu.ydns.eu
governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu
greenstdykegheedahatakankeadeshnaastxqm.ydns.eu
greentsdykegheedahatakankeadeshnaatshah.ydns.eu
gyeuiojndhbvmaoiwnnchauwo28vnj8mjmvnwhk.ydns.eu
lkjhgfdsaopoiuytrewqmnbvcxzasdfghjklqwer.ydns.eu
microsoftsecurityverificationscannerrunningforsecurefiletransfe.ydns.eu
mknjbhvgcfxdzsallpkojihugyftdrseawqzaxsc.ydns.eu
mndyneverwalkachinese2loneinlifemnkngr.ydns.eu
plugwsdytransportationalexpertsywsfmq.ydns.eu
privatestdycloudshareandfileprotecstlka.ydns.eu
privatetsdycloudshareandfileprotectsgas.ydns.eu
qwertghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu
qwertyuiopmnbvcxzasdghuytrewqasdcvbnmlkj.ydns.eu
shgshgstdynationalobjindustrialatstqmd.ydns.eu
shgshgtsdynationalobjindustrialattsgpx.ydns.eu
softsystemworkforgoodthingstotransferwordfileinternationallywih.ydns.eu
stdybsskillemmulatorsdevelovercommstdlp.ydns.eu
stdygreenkegheedahatakankeadeshnaastfaw.ydns.eu
stdyplugtransportationalexpertsystywq.ydns.eu
systemscantheipwithadvancefirewalltechnologyandinternaitonaldns.ydns.eu
systemsecuritycheckingwithallprotectionofinternetwithfirewallpr.ydns.eu
thdyprivatecloudshareandfileprotecthfqm.ydns.eu
thdyworkfinesanotherrainbowlomoyentthflx.ydns.eu
theverifiedclouddatatransfersystemforsecurefirewallprotocolente.ydns.eu
trijgrscviomnbvdewacvioplmjytrewwqazxcvty.ydns.eu
truesystemadvicetotransferwordfileinternatioanllywithsecurechan.ydns.eu
tsdybsskillemmulatorsdevelovercommtshrc.ydns.eu
twitterlevelsecuritycheckingforwordfiletransferthroughfirewalls.ydns.eu
tyuioplkjhgfdsaqwertyuiopmnbvcxzasdfghjk.ydns.eu
unitedfrstdykesokoriorimistreetsmstjsm.ydns.eu
unitedfrtsdykesokoriorimistreetsmtsfma.ydns.eu
wejsdjfhjwehjhjdbdfghieidsjdfhgjhjfdhgjhjhasjhfjdfjhjhdjshjshdj.ydns.eu
whythereasonbitcointransactionisveryhighwithanothercountryloook.ydns.eu
workfinestdysanotherrainbowlomoyentstlsw.ydns.eu
workfinetsdysanotherrainbowlomoyenttsghq.ydns.eu
wsdyprivatecloudshareandfileprotecwsfkl.ydns.eu
wsdyunitedfrkesokoriorimistreetsmwsgqp.ydns.eu
wsdyworkfinesanotherrainbowlomoyentwsgqm.ydns.eu
yerertpiytrrtrtyiuyuioiiouyuiuiopoipufresaaasdtyyyiiuyrterwrtrt.ydns.eu
yhrbgnderfsacdewpojgtredcvbnmkiolphgfdsq.ydns.eu
zoominfoisagoodmnetworkoftheallinternationalcompaniesforfilesha.ydns.eu

# Reference: https://www.virustotal.com/gui/file/20b0c29fcdbe79a78d0fd5303369b1057653195d537bd2f25bafb79dbffdde88/detection

66pct.xyz
bestdealu.com
frankscustomdraperies.com
iamkerala.com
ihandreg.com
individualanalysis.com
kadoshfinancial.com
kykyryky.art
quoteforthebest.com
richboxer.com
shnyty.com
skinxbaron.club
stainlesshydraulic.com
tadbirsanat.com
xxxindian.info

# Reference: https://www.virustotal.com/gui/file/51deb79da8be65d5b393887e933cfcf693ce38c2b34cba2749d84bed130d3dfd/detection

brushforbetter2020.com
crystuneshop.com
daylow.site
dlacf.com
fenhedaqujiuchang.com
flandersmd.com
floridalicorice.com
freencertsolution.com
lzzrcg.com
marcohoffman.com
ourhavenco.com
outbondgoapindul.com
paypalchanger.com
sunnyhomecleaning.com

# Reference: https://twitter.com/jstrosch/status/1329100921469546497

ghost00710.ddns.net
w91pk.com/ggh/

# Reference: https://twitter.com/Racco42/status/1329525723829309440
# Reference: https://app.any.run/tasks/1817b308-7c96-46a9-89cb-31aba1fde41d/

1020waterviewdrive.com/fs8/
5927399.com/fs8/
70skinstore.com/fs8/
gabipareras.net/fs8/
highlandcelticart.com/fs8/
hobbyhousekennels.com/fs8/
hpg.computer/fs8/
kumcal.com/fs8/
lashvash.com/fs8/
setsomegoals.com/fs8/
skillsme.school/fs8/
thelincolntondentist.net/fs8/

# Reference: https://www.virustotal.com/gui/file/640e2fcfe7efdf8edb2780afb1fdc2954bc3c8fdec183fc768eca0eee14d6f19/detection
# Reference: https://www.virustotal.com/gui/file/ee562a08154b7e12f3133019ad584e533e9162176e03b243854f67cb34c04eb9/detection

brejoin.com/yx/
farmeragro.com/yx/
first-class-travel.com/yx/
foxannewigs.com/yx/
hoterswimming.com/yx/
informatin-frid.com/yx/
ironcloudpublishing.com/yx/
joanne.email/yx/
jperraultpaintings.com/yx/
littlefiggies.com/yx/
musicsp.com/yx/
nurtureground.com/yx/
original-ginjer.com/yx/
ruprogressive.com/yx/
samperd.com/yx/
topdecortips.com/yx/

# Reference: https://www.virustotal.com/gui/file/8328ae28430dbd148eabb432ccc424329da00fead9404102c59559fc02e2ec11/detection

bestmixer.pro/pth/
capture-boutique.com/pth/
higwayharry.com/pth/
jbgsmith5g.com/pth/
lfmh888.com/pth/
nerdtoysuk.info/pth/
newboxmall.com/pth/
pros2311.com/pth/
queguayperu.com/pth/
recoveratsolidrockranch.com/pth/
rosaouroo.com/pth/
sing-easy.com/pth/
suppoortingvictory.net/pth/
teealiens.com/pth/
websitenomor.com/pth/

# Reference: https://twitter.com/wwp96/status/1335674912539897858
# Reference: https://app.any.run/tasks/136812b9-9106-49ca-9c56-9eeb756159e6/

dl-aikenuo.com
festivalbd-ambierle.com

# Reference: https://tria.ge/201207-jsgz9hl5ex

168199151.com/p2he/
7as.money/p2he/
aide-vacances.com/p2he/
alphajagd.com/p2he/
amionyoutube.com/p2he/
asianpathfinders.com/p2he/
betterbeautymemphis.com/p2he/
bgl.ink/p2he/
blackcatsgk.com/p2he/
blogluster.com/p2he/
bohokim.com/p2he/
brookingsjet.com/p2he/
carwrapsorlando.com/p2he/
chaisalsa.com/p2he/
cookies-x.info/p2he/
drkilat.com/p2he/
elevateathleticcenter.com/p2he/
esseninnovation.net/p2he/
event-moscow.com/p2he/
fd4747.com/p2he/
flagpolesforourfallenheroes.net/p2he/
fuckbitchesgetlaid.com/p2he/
getvonline.com/p2he/
goldandbrown-pizza.com/p2he/
heretangier.com/p2he/
hicotxselfstorage.com/p2he/
homebounties.com/p2he/
humbleangel.com/p2he/
internetempresaschile.com/p2he/
interxioneurope.com/p2he/
itvillagetvm.com/p2he/
jytyhlw.com/p2he/
lentiacontattoeshop.com/p2he/
linuxquebec.net/p2he/
lottoplays.com/p2he/
lzjmqx.com/p2he/
mdmbijouterie.com/p2he/
metallobaza-tlt.site/p2he/
miniaturearmsdealers.com/p2he/
modelplanepartseff.xyz/p2he/
motherdaughter.club/p2he/
outdoordiningtents.com/p2he/
outdoors4junkies.com/p2he/
parasailer.com/p2he/
peruvianautoauction.com/p2he/
phaniesart.com/p2he/
phoenixandthetardigrade.com/p2he/
plugandplaylab.com/p2he/
proudseas.com/p2he/
pugbonnets.com/p2he/
randomua.host/p2he/
residencialcasalinda.net/p2he/
roomforabear.com/p2he/
sharmilawifestories.com/p2he/
sirisombut.com/p2he/
solangerichard.com/p2he/
stranger-partner.net/p2he/
thomasreany.com/p2he/
tsm-m.tech/p2he/
turismoelite.com/p2he/
unk-page.com/p2he/
web-panda.com/p2he/
wegwerphandschoenen.online/p2he/
ykteknik.com/p2he/

# Reference: https://tria.ge/201214-kc1ck6vg7x

fundamentaliemef.com
gallerybrows.com
leadeligey.com
octoberx2.online
climaxnovels.com
gdsjgf.com
curateherstories.com
blacksailus.com
yjpps.com
gmobilet.com
fcoins.club
foreverlive2027.com
healthyfifties.com
wmarquezy.com
housebulb.com
thebabyfriendly.com
primajayaintiperkasa.com
learnplaychess.com
chrisbubser.digital
xn--avenr-wsa.com
exlineinsurance.com
thrivezi.com
tuvandadayvitos24h.online
illfingers.com
usmedicarenow.com
pandabutik.com
engageautism.info
magnabeautystyle.com
texasdryroof.com
woodlandpizzahartford.com
dameadamea.com
sedaskincare.com
ruaysatu99.com
mybestaide.com
nikolaichan.com
mrcabinetkitchenandbath.com
ondemandbarbering.com
activagebenefits.net
srcsvcs.com
cbrealvitalize.com
ismaelworks.com
medkomp.online
ninasangtani.com
h2oturkiye.com
kolamart.com
acdfr.com
twistedtailgatesweeps1.com
ramjamdee.com
thedancehalo.com
joeisono.com
glasshouseroadtrip.com
okcpp.com
riggsfarmfenceservices.com
mgg360.com
xn--oi2b190cymc.com
ctfocbdwholesale.com
openspiers.com
rumblingrambles.com
thepoetrictedstudio.com
magiclabs.media
wellnesssensation.com
lakegastonautoparts.com
dealsonwheeeles.com
semenboostplus.com

# Reference: https://www.virustotal.com/gui/file/24721ddd6082f6418d5b22a1b9703bc3e38c8b5725798b62110a170b41eac6ce/detection

1429callealtura.com
bytyt.com
flickfaced.com
forenvid.com
sanangelostory.com
ssgsaia.com
strawberrystreet.net
westpalmbeachvacationhomes.com
wilsonelitecleaning.com
wwwwg2020.net
xyft595.com
yrxcorrecf.xyz

# Reference: https://www.virustotal.com/gui/file/e59d9d9ca9e0c7dddea9a94f0dab0ae137b6a762999bade26db35b1ca35e1f72/detection

alltrendsbrands.com
camsplaces.com
helpmeiminmytwenties.com
icknw.com
kart-im.com
mokrie-pizdi.site
mstaffingagency.com
neothecode.com
nutritionlives.com
point1properties.com
prospervine.net
sexmomsonsister.cloud
thefeelgoodsisters.com
veteranmadecontent.com
wineenthusiasms.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1341997180664557568

deuxus.com/t052/

# Reference: https://www.virustotal.com/gui/file/31777f81a8d806fcb50d954f3ac48c8aca7f340929f8cf784d740a079892a587/detection

ampsports.digital
craftsman.sucks
dabrownzone.com
grromedandgrand.com
harriettubmanu.com
kapatoken.com
mamentos.info
maximizefit.net
nanfangguniang.show
northernfloorco.com
plotrunner.com
radicalisland.com
tarotit.site
theawfulliar.com
xn--mdecinemotionnelle-bwbg.com

# Reference: https://www.virustotal.com/gui/file/f535ff7416a31c3f067b61aea08aab08006eaf2dd790dcfc89c05a1f6343f17b/community

stdychnesqudusisabst.dns.navy

# Reference: https://twitter.com/reecdeep/status/1351444312672923648

chfourmndyanotherwak.dns.navy
learnhour.net

# Reference: https://www.virustotal.com/gui/file/ad03ca16b05c593894d3cf90ea6ebe56f3ce6dc94dc0675234f357893f3aadfa/detection

anillanyaralo.com/e3eb/
bimtracks.com/e3eb/
eastindiaclub.media/e3eb/
exm-droneops.one/e3eb/
keystonemedicalwellness.com/e3eb/
made-in-wonderland.com/e3eb/
manconnectr.services/e3eb/
maquettree.com/e3eb/
medijobsonline.com/e3eb/
milkafrias.com/e3eb/
offencebzo.space/e3eb/
overdoza.com/e3eb/
racevx.xyz/e3eb/
stocktonweeddelivery.com/e3eb/
tmtbikes.com/e3eb/
winnicapolska.com/e3eb/

# Reference: https://twitter.com/VirITeXplorer/status/1353992650148503552
# Reference: https://tria.ge/210126-vgsyrq49hs

11sxsx.com/jqc/
5hnjy.com/jqc/
asacal.com/jqc/
avia-sales.xyz/jqc/
baculatechie.online/jqc/
bebywye.site/jqc/
brotherhoodoffathers.com/jqc/
cositasdepachecos.com/jqc/
definity.finance/jqc/
dgdoughnuts.net/jqc/
dividupe.com/jqc/
dl888.net/jqc/
droriginals.com/jqc/
eaglesnestpropheticministry.com/jqc/
ecandkllc.com/jqc/
fitdramas.com/jqc/
gabriellagullberg.com/jqc/
hareland.info/jqc/
hongreng.xyz/jqc/
hotvidzhub.download/jqc/
incomecontent.com/jqc/
internetmarkaching.com/jqc/
ip-freight.com/jqc/
kathymusic.com/jqc/
kenniscourtureconsignments.com/jqc/
kimberlygoedhart.net/jqc/
kornteengoods.com/jqc/
lhc965.com/jqc/
lokalised.com/jqc/
ludisenofloral.com/jqc/
luxusgrotte.com/jqc/
mad54.art/jqc/
margosbest.com/jqc/
miamiwaterworld.com/jqc/
mybestme.store/jqc/
mywillandmylife.com/jqc/
neosolutionsllc.com/jqc/
novergi.com/jqc/
quintred.com/jqc/
ravenlewis.com/jqc/
screwtaped.com/jqc/
shakahats.com/jqc/
simplification.business/jqc/
singledynamics.com/jqc/
sistertravelalliance.com/jqc/
solidconstruct.site/jqc/
soterppe.com/jqc/
sqatzx.com/jqc/
st-reet.com/jqc/
sterlworldshop.com/jqc/
strahlenschutz.digital/jqc/
systemedalarmebe.com/jqc/
szyulics.com/jqc/
the343radio.com/jqc/
theorangepearl.com/jqc/
tiendazoom.com/jqc/
topheadlinetowitness-today.info/jqc/
toweroflifeinc.com/jqc/
vigilantdis.com/jqc/
vivethk.com/jqc/
weddingmustgoon.com/jqc/
wlw-hnlt.com/jqc/
xaustock.com/jqc/
zoommedicaremeetings.com/jqc/

# Reference: https://www.virustotal.com/gui/file/ec8b3d104a7fc416aab07329a5f0ecab1b7fd181ffbd2d7ac31af51e532add07/detection

88779599.com/09rb/
airfast-express.com/09rb/
aizimov.com/09rb/
alessandrabortolussi.net/09rb/
artois-plomberie-ambar.com/09rb/
edgehairandbeauty.com/09rb/
efoh27.com/09rb/
emuprising.com/09rb/
expandtherapy.com/09rb/
iregentos.info/09rb/
legendtrailcommunity.com/09rb/
myraklereleafcannaclinic.com/09rb/
nesilyilmaz.com/09rb/
prendimiconcept.com/09rb/
unitedbythebucket.com/09rb/
watereminder.com/09rb/

# Reference: https://www.virustotal.com/gui/file/629c7e301816de498d8a784935bd1a4aa21331a1520275c48b30c0ac4aa18285/detection

abstract-elearning.com/gqx2/
bonus189.space/gqx2/
dbsadv.com/gqx2/
enlightenedsoil.com/gqx2/
housvest.com/gqx2/
inreachpt.com/gqx2/
libraspeed.com/gqx2/
microwgreens.net/gqx2/
podborauto.pro/gqx2/
scionoflewisville.com/gqx2/
shaffglowing.com/gqx2/
tu4343.com/gqx2/

# Reference: https://www.virustotal.com/gui/file/841ce55c5a583e5674e1fcde05347c3ad07dec6e0f38298bb4fc2566ca5aa746/detection
# Reference: https://www.virustotal.com/gui/file/d27174550c627e2ae425db9dc83ed7cb1856034184c6ce333efcf383506abd88/detection

acdfr.com/bw82/
activagebenefits.net/bw82/
cbrealvitalize.com/bw82/
ctfocbdwholesale.com/bw82/
dealsonwheeeles.com/bw82/
engageautism.info/bw82/
exlineinsurance.com/bw82/
gallerybrows.com/bw82/
gdsjgf.com/bw82/
glasshouseroadtrip.com/bw82/
h2oturkiye.com/bw82/
housebulb.com/bw82/
illfingers.com/bw82/
ismaelworks.com/bw82/
learnplaychess.com/bw82/
magiclabs.media/bw82/
magnabeautystyle.com/bw82/
mgg360.com/bw82/
mybestaide.com/bw82/
ninasangtani.com/bw82/
okcpp.com/bw82/
pandabutik.com/bw82/
primajayaintiperkasa.com/bw82/
ramjamdee.com/bw82/
rizrvd.com/bw82/
ruaysatu99.com/bw82/
thepoetrictedstudio.com/bw82/
tuvandadayvitos24h.online/bw82/
twistedtailgatesweeps1.com/bw82/
usmedicarenow.com/bw82/
xn--avenr-wsa.com/bw82/

# Reference: https://app.any.run/tasks/07819c4b-dffc-4c56-8f83-eee38a01b188/

littlefreecherokeelibrary.com/xle/
localeastbay.com/xle/
loyaloneconstruction.com/xle/
prestiticadalanu.com/xle/
ricardoinman.com/xle/
theatomicshots.com/xle/
tknbr.com/xle/
www7456.com/xle/

# Reference: https://tria.ge/210203-nhqf45a196

1317efoxchasedrive.info/kio8/
56ohdc2016.com/kio8/
73gardinerdrive.com/kio8/
airpromaskaccessories.com/kio8/
allinoncrypto.site/kio8/
angermgmtathome.com/kio8/
asosbira.com/kio8/
audiencetrust.sucks/kio8/
awesome-veganism.com/kio8/
bingent.info/kio8/
cbluedotlivewdmall.com/kio8/
chinhphucphaidep.online/kio8/
domentemenegi20.com/kio8/
dream-case.com/kio8/
drizzerstr.com/kio8/
dubojx.com/kio8/
envirocare-ss.com/kio8/
erniesimms.com/kio8/
estedindustries.com/kio8/
facestaj.com/kio8/
fantasticsgelato.com/kio8/
ffhcompany.com/kio8/
fireworkstycoons.com/kio8/
fixedpriceelectrician.com/kio8/
ghar.pro/kio8/
ghorowaseba.com/kio8/
globalcrime24.com/kio8/
greeaircondition.com/kio8/
gropedais.club/kio8/
heightsplace.com/kio8/
helmihendrahasilbumi.com/kio8/
hnqym888.com/kio8/
jennaloren.com/kio8/
jtkqmz.com/kio8/
lauratoots.com/kio8/
legamedary.com/kio8/
magmaplant.net/kio8/
masdimensiones.com/kio8/
melolandia.com/kio8/
newyorkcityhemorrhoidclinic.com/kio8/
noimagreece.com/kio8/
nutbullet.com/kio8/
ocleanwholesaler.com/kio8/
opera-historica.com/kio8/
pastormariorondon.com/kio8/
perteprampram01.net/kio8/
pizzaterry.com/kio8/
plantationrevival.com/kio8/
porntvh.com/kio8/
sanrenzong.com/kio8/
stjudetroop623.com/kio8/
systizen.com/kio8/
tf-iot.com/kio8/
thaibizgermany.com/kio8/
the-aviate.com/kio8/
thedesigneryshop.com/kio8/
thespiritualabolitionist.com/kio8/
thewilmingtonguide.com/kio8/
tsunrp.net/kio8/
utopicvibes.net/kio8/
velactun.com/kio8/
wolfetailors.com/kio8/
yogabizhelp.com/kio8/
youremsys.com/kio8/

# Reference: https://tria.ge/210205-vge381amz2

4vrlwi.site/dyt/
admoney.info/dyt/
ajreality.com/dyt/
alejandrobrand.com/dyt/
bakldx.com/dyt/
bkdn.xyz/dyt/
blushinglips.wine/dyt/
bradfordsahm.com/dyt/
caprichodigital20.com/dyt/
casinobigbank.com/dyt/
cezede.com/dyt/
codedlock.com/dyt/
connecting4fun.com/dyt/
contenttoincome.com/dyt/
coolartgallery.com/dyt/
designed4youevents.com/dyt/
dijitak.com/dyt/
dongzhenwl.com/dyt/
dopefuse.com/dyt/
drsineadbeirne.com/dyt/
eacvea.com/dyt/
enecaa.com/dyt/
eseskalierteh.com/dyt/
evokealpha.com/dyt/
fessucesesee.com/dyt/
fhehsjeh.com/dyt/
greyboxautomations.com/dyt/
hoslergroup.com/dyt/
humanitera.international/dyt/
innocentandnaive.com/dyt/
jasminesecretshop.com/dyt/
keller-bec.com/dyt/
lesavonbyannvictoria.com/dyt/
longwoodlife.com/dyt/
luckyvertical.com/dyt/
manifester.guru/dyt/
marvitrans.net/dyt/
mediclyft.com/dyt/
mosella.online/dyt/
naturally-toned.com/dyt/
njcfpnetwork.com/dyt/
nomadroams.com/dyt/
norsk-medisin.com/dyt/
pinkopalboutique.com/dyt/
plus1joinersandbuilders.com/dyt/
quatormi.site/dyt/
reianswers.net/dyt/
royalpetcanvas.com/dyt/
scattershotgames.com/dyt/
sensvia25.com/dyt/
shreeshyamexporters.com/dyt/
so0551.com/dyt/
socksofcolors.com/dyt/
spleafpro.com/dyt/
sportscircleindy.com/dyt/
sptrading.company/dyt/
sulukozukremi.com/dyt/
summerlively.com/dyt/
surkentkuruyemis.com/dyt/
susanenglert.net/dyt/
tg0913.com/dyt/
theholinesshousewife.com/dyt/
thepreventivemedicine.net/dyt/
zhongwu.tech/dyt/

# Reference: https://twitter.com/reecdeep/status/1359854987623464969
# Reference: https://tria.ge/210211-ynsg9khthj
# Reference: https://app.any.run/tasks/0e97831e-b9b3-455b-b688-05a38d4fd8f5/

360afs.com/sfd8/
accountablereagent.com/sfd8/
anaisandmichaelwedding.com/sfd8/
battlecreekenquirer.sucks/sfd8/
behintejaratpourasa.com/sfd8/
blockchaininfo.online/sfd8/
bottom.golf/sfd8/
bringbackbeer.com/sfd8/
brothersarmy.com/sfd8/
cafeconstantino.com/sfd8/
caregiveronestopshop.com/sfd8/
colombeboncenne.net/sfd8/
csc-traffic.city/sfd8/
domentemenegi17.net/sfd8/
duoyiboard.com/sfd8/
ecofarmtr.com/sfd8/
frequence-movies.com/sfd8/
haxb33.xyz/sfd8/
houstoncoupleswhocycle.com/sfd8/
howongbrewing.com/sfd8/
ianac.info/sfd8/
immunologi.world/sfd8/
intuitionkeys.com/sfd8/
joekurtz.com/sfd8/
lingring.party/sfd8/
lon-dox.com/sfd8/
menteinformativo.com/sfd8/
miapetito.com/sfd8/
mompreneurista.com/sfd8/
mrrecordinc.info/sfd8/
myworkingportfolio.network/sfd8/
njprestructures.com/sfd8/
northstarpmg.com/sfd8/
pamelathomas2020.com/sfd8/
paulsplumbingllc.com/sfd8/
pazzionteez.com/sfd8/
pinoyko.com/sfd8/
plantenaturelle.com/sfd8/
plumbfinders.net/sfd8/
pmanigeria.com/sfd8/
purelycoastal.com/sfd8/
roovepages.com/sfd8/
royalcradle.com/sfd8/
sachinlog.com/sfd8/
schmuckhof.com/sfd8/
secondnatur3.com/sfd8/
silmarinternational.com/sfd8/
splashleadsdigital.com/sfd8/
strilok.com/sfd8/
subastaelectronics.com/sfd8/
sunwavescreative.com/sfd8/
superhumanworkout.com/sfd8/
swapbanks.info/sfd8/
thaipasal.com/sfd8/
theambivnce.com/sfd8/
themowerdoc.com/sfd8/
turnerswindowstylings.com/sfd8/
uasaerialsolutions.com/sfd8/
vyloanshop.club/sfd8/
wellnessbamboo.com/sfd8/
xn--hef-1la.com/sfd8/
young-oldtimer.com/sfd8/
yxw897.com/sfd8/
zeravern.com/sfd8/

# Reference: https://www.virustotal.com/gui/file/a9d7dbb160330978fb1b5cbd40a4bf2c0aede509905de5d792e45aa5ca876095/detection

blackownedtea.net/yce/
domvy.xyz/yce/
erchomesellers.com/yce/
extreamx.space/yce/
fiaincomeforlife.com/yce/
fjtweb.com/yce/
myconqering.com/yce/
readydesignz.com/yce/
shaamfilm.com/yce/
sitesuperapido.com/yce/
technnatural.com/yce/
thebuttonfriends.com/yce/
yyewdq.com/yce/

# Reference: https://urlhaus.abuse.ch/url/987827/
# Reference: https://www.virustotal.com/gui/file/2d311b197e07b4149d8eb422ac2b5aa5c24b10cc8131e53df65ca32986b1556a/behavior
# Reference: https://www.virustotal.com/gui/ip-address/103.147.184.10/relations

rmtcntlthdyenverthdb.dns.army
stdyrmtcntlenverstgv.dns.army
stdyrmtcntlenverstoq.dns.army
rmtcntlwsdyenverwsbt.dns.army
mndyrmtcntlenverstpo.dns.army
hangtv3xyz.myddns.me
hangthai3z.myddns.me
hanglady3xyz.myddns.me

# Reference: https://twitter.com/reecdeep/status/1364129913511510018

kungsb2stdygotchtsty.dns.army

# Reference: https://twitter.com/reecdeep/status/1367101184289492999

necght.xyz

# Reference: https://twitter.com/reecdeep/status/1367445802096984064

tws-rr.xyz

# Reference: https://twitter.com/pmmkowalczyk/status/1367503173200543747
# Reference: https://www.virustotal.com/gui/file/92f656d44d38fbc5e7964e36634bf95d18e157228624d1b38ea933633579ddc4/detection

disciplinemonkey.com/njo/
rnlasermedspasolutions.com/njo/

# Reference: https://twitter.com/reecdeep/status/1367089557884272649

merifalls.com

# Reference: https://twitter.com/reecdeep/status/1369191905880379394

joomlas123.info

# Reference: https://twitter.com/sS55752750/status/1369792848816660483

olenfex.com/mdi/

# Reference: https://twitter.com/pmmkowalczyk/status/1369746549593538574

fessuseyyesseee.com/mdi/

# Reference: https://twitter.com/pmmkowalczyk/status/1369748045097820162
# Reference: https://twitter.com/sS55752750/status/1369791347029327882

rizrvd.com
octoberx2.online

# Reference: https://otx.alienvault.com/pulse/604b58f6a54ab9919d92768f

41230793.net
capricorn1967.com
rbfxi.com
ziruixu.com

# Reference: https://www.virustotal.com/gui/file/474cef321f60037058b0180b83d4db805792822762f071d3bdebc3fb8dd66c33/detection

digi-plates.com
oogilab.com
atrocity.xyz
400city.com
yummicrabva.com
vivaceactivewear.com/grv/
supinapp.com
ycmath.com
lindustrieetleca.com
xn--k1abtc6be.xn--p1acf
bessgarments.com
hengetelt.com
vz473.com

# Reference: https://twitter.com/reecdeep/status/1371403258200211458
# Reference: https://app.any.run/tasks/3c55db66-435a-4a40-a2d8-08db5c6aa891/
# Reference: https://www.virustotal.com/gui/file/6da50c6b31b4125631987f40d7bd3dacab22c961ca9ba60dfdfa45120d5ec17a/detection

commagx4.info
stdykungsb2gotmenlop.dns.army
555lucky.net/g832/
rentmy.place/g832/
manorblue.com/g832/
swifter.tech/g832/
layoutsbox.com/g832/
greatstape.com/g832/
rayhanrony.com/g832/
taxicabairports.com/g832/
aispokenhere.com/g832/
roomrain.com/g832/
layoutsbox.com/g832/
mi-tipofthemitt.com/g832/
mima-tech.com/g832/
personaljie.tech/g832/
skxrxxf7j87.com/g832/
manorblue.com/g832/
taxicabairports.com/g832/
hkyda-uk.com/g832/
ghjkl456.com/g832/
mlpsdigital.com/g832/
beiser-sa.com/g832/
layoutsbox.com/g832/

# Reference: https://www.virustotal.com/gui/file/2cb8983bbf7860e8861f601dc1c9fd36a21aecca6a81831e74f9b2c098635f50/detection

americanwoodgrain.com
bigmikecon.com
lidandocomsuaansiedade.com
mysticparka.com
nnllnn.com
odromex.net
optimizedperson.com
originalsportsas.com
poppykuroki.com
skyrocketyoursuccesstoday.com
solarcellefficiency.com
stadtaugsburg.com
vip72.club
vturalcycles.com
yinaosw.com

# Reference: https://app.any.run/tasks/decdf523-61a8-487f-94db-7be2eec7cba4/
# Reference: https://www.virustotal.com/gui/file/f8196e6009ed055bd7e2021a629cb903a530650ed36505b296c177fab320180e/detection

4676sabalkey.com
5bo5j.com
856380692.xyz
babyhopeful.com
bkhlep.xyz
bukaino.net
caresring.com
creationsbyjamie.com
dccheavydutydiv.net
explorerthecity.com
icepolo.com
jyxxfy.com
mauriciozarate.com
maurobenetti.com
myfeezinc.com
oryanomer.com
polling.asia
robertbeauford.net
siyezim.com
thefamilyorchard.net
thevistadrinksco.com
usopencoverage.com
wholesalerbargains.com
worldsourcecloud.com

# Reference: https://twitter.com/MBThreatIntel/status/1372965574666375174

4africa.cloud
alaleste.com
bannerberries.com
beyondtheweeds.net
bilozir.agency
bradfordbarbell.com
ecoconsciousart.com
gabrieleanajulia.com
insightccnw.com
lashnetix.com
leelegantflower.com
littlegreekgrocery.com
manconnectr.services
mintmobikeplus.com
njzycj.com
novergi.com
partyoftres.com
veriezy.com
your-masterclass.online
yxjks.com
zubaobei.net

# Reference: https://www.virustotal.com/gui/file/8fb2a899e6622a2ddc7989121174bea2b7756f3f56f64f42dc6ef875d19ce919/detection

3cheer.com/p2io/
adultpeace.com/p2io/
brunoecatarina.com/p2io/
carmelodesign.com/p2io/
cleanxcare.com/p2io/
hazard-protection.com/p2io/
hiddenwholesale.com/p2io/
liminaltechnology.com/p2io/
magetu.info/p2io/
painhut.com/p2io/
shopihy.com/p2io/
thriveglucose.com/p2io/
trendbold.com/p2io/

# Reference: https://tria.ge/210408-9h7wsybb7e

7985699.com
acernoxsas.com
americanscreentest.com
az-pcp.com
blackmantech.fitness
bongwater.life
buyeverythingforbaby.com
clonegrandma.com
cwcellar.com
domentemenegi47.com
dream-e-mail.com
ekolucky.com
elpis-catering.com
elticrecruit.com
finalexam-thegame.com
fjsibao.com
foodates.com
gatewaygaurdians.com
goldenvalueable.com
gujaratmba.com
gyanankuram.com
hcr.services
ikoyisland.net
israeldigitalblog.net
krphp.com
l2zmamzoin.xyz
lawsoftwareteam.com
likehowto.com
mex33.info
my-weight-loss-blog.net
nevertraveled.com
nevomo.group
papofabri.com
partapprintercare.com
phillydroneservices.com
pjsgsc.com
privateselights.com
quehaydecenarhoy.com
raison-sociale.com
ranguanglian.club
regalparkllc.com
samanthataylordesigns.com
sinisviaggi.com
sorelaxedmassage.com
suns-brothers.com
syduit.com
taniakarina.com
thechilldrengang.com
topmejoresproductos.com
ueoxx.com
ufa2345.com
v6b9.com
valid8.network
vegrebel.com
verochfotografa.com
vinegret.com
vr-club.site
vt999app.net
winnijermaynezigmund.site
xn--80aaxkmix.xn--p1acf
xn--kck4cd0r.net
xn--v1bmo9dufsb.com
xpddwrfj.icu
yetbor.com

# Reference: https://tria.ge/210407-ywnnjr2vve

18082020.com
3559044.com
911salesrescue.com
anadelalastra.art
azure-vs-google.cloud
bardototonho.com
bricksli.com
camperlifeclub.com
carobbella.com
carritogastronomico.com
cenconsulting.com
charmdalat.com
clavunica.com
crosswhiteconsulting.com
dailyhyundaihanoi.net
decoviewer.com
ecomcourse.online
edwardjonescredticard.com
entohops.com
esl-materials.com
familymedicalurgentcare.com
fenuadiscovery.com
flcpyl.com
ggapp.run
godseyepiece.com
greenesgoodies.com
herbalbooze.com
heritagelcc.com
home-sou.com
huongdandidong.com
hvacservicecoldwater.com
inlandempiresublease.com
jimmysga.com
josiahtreatenglishportfolio.com
kaashir.com
karizcustomizeme.com
kellnetworks.com
launchtutor.com
legalhelp.black
lewishackney.com
lumpkinforless.com
luxel01.com
magenx2.info
marfrigs.com
merrypopinnannies.com
metort.com
miss-windy.com
muzhskoy-eskort.site
myboardinghome.com
mysfmp.com
ndrossignol.com
opusleaf.com
orchidandiris.com
runwithbe.com
seymor-law.com
shangbinjieneng.com
shopthen2.site
sniffai.com
socialunified.com
szameitat.net
thedorkweb.com
unityprawn.com
wegawk.com
zx765.com

# Reference: https://tria.ge/210407-wf3kcrqtj2

5667e.com
7030130.com
7667120.com
aelnetwork.pro
appalachianrepublic.com
assessoriaesmero.com
blackdisclaimer.com
calendarioslen2021.com
citestaccnt1598439710.com
com623036210300.com
congbaohiem.net
creditccu.com
curativestemcells.com
curiget.xyz
derasource.online
dexcci.com
drtprd.club
ennewine.com
findinghonor.com
floridasoapworks.com
fourcanal.com
fuhaisky.com
genesisdrumco.com
guideingword.com
gustobolivia.com
heatgemini.com
humanareachrewads.com
icygods.com
johnniemaepantry.com
k2132.com
kardiadance.com
kathyscrabhouse.com
kemermaxx.com
laurindogalante.com
lindaheart.com
loupcreation.net
lubbocksbdc.com
mathilde-et-vincent.com
moonboyspa.com
mototasima.com
mv857c3fqfppyd.xyz
myrightdoctor.info
neuroeka.digital
pupa.one
purecraftoils.com
rightgetup.com
sashahung.com
se009.icu
serv7-wells.com
shopcurbsideanddelivery.com
skorokvartira.online
sleepy-boy.com
sohadmorales.com
speaktoava.com
sundayframing.com
talons-hauts.com
teoslu.com
theinterviewtechnique.site
thoomkuzhy.net
townietreats.com
vandmc.com
webtourlive.com
xinke518.com
zamar.online

# Reference: https://www.virustotal.com/gui/file/0cec69e7857e687c0352812a4206e68f57008ea07d34b51bb9b1fc44ef042ff6/detection

adeleycar.com
bobwhiteknives.com
carbeloy.com
cash4homesutah.com
customkreation.com
fotosdepueblo.com
funbrushstrokes.com
ghoshtechno.com
goldstespresso.com
greenlightsmokables.com
latravesia.net
lukmanmalik.xyz
marymoorridgecondo.com
mymoxypets.com
new123movies.pro
officehoursonly.com
parkviee.com
shipu143.com
shopvibeup.com
sussage.com
talllensphotography.com
thedrata.com
theemperorbrand.com
yaanpay.com

# Reference: https://www.virustotal.com/gui/file/94235ec4fec92239bf53cbe18e6b698f30ca30d07602cc123dcf76d728bff41e/detection

abzarnovin.com
atlantadomain.com
curiget.xyz
currenibtc.com
homartist.net
koedk.com
paraiso.info
retro-e-scooter.com
riseses.com
tenxtimes.net
upliftgrp.com
xuji68.com
xyxrprt.com

# Reference: https://twitter.com/reecdeep/status/1380479709016948740
# Reference: https://app.any.run/tasks/121b953c-a8b9-4f68-98dc-8531a2a77fd7/

cndzysw.com
contactodirectoseguros.com
cotillionclubsmv.com
haarbal.com
hdsmyyz.com
hireblkcreatives.com
innovativeiclass.com
myriamward.com
netacradle.com
specnazshow.com
sumantrabasu.com

# Reference: https://www.virustotal.com/gui/file/190af94fad72bc8e19a07ab5dd60af939e5216565f8efd92aa1aa561a38281be/detection

0075544.info
349vsz.info
anamikapandey.com
dropin-frog.com
elmatech-impianti.com
milliemilliemillie.com
naprawalaptopow.services
smallbizhacklondon.com
sobolev.design
theoknoester.com

# Reference: https://www.virustotal.com/gui/file/43a2069e57baacb53de658addca8950b570ce19334cd6c617c4c1060f9296fb7/detection

abelprocess.com
allincursive.com
daghidelivery.com
doctors4change.net
hxc28.com
ichaugames.com
ienvoices.com
kingdavidtiferetshop.com
kuppers.info
mchglobe.com
puntopymeschile.com
quickshop.xyz
roleta.site
sagemenerji.com
siguelacorriente.com
stevenemily.com
trendyheld.com
verificationpays.com
worldofannabel.com

# Reference: https://tria.ge/210414-318g36c5xn

19come.com/goei/
247carkeyslondon.com
addthat.xyz
akindousa.com
armanrugservice.com
baldosasanjose.com
bet365o2.com
breathharbour.net
caross-china.com
casalomasymphonyorchestra.com
cluskmusk.com
covidtracksb.com
creativem2.com
csgo-roll.net
digitalmarketingmoves.com/goei/
distributorfocuson.com/goei/
epicfriend.club
evecrude.xyz
foodsystemsjusticeproject.com
fwgkdhg.icu
generalflix.com/goei/
gulf-landlord.info
her2mymeme.com
imbravura.com
italianrealestateagents.com
karyapertama.com
kelasipo.com
kevinrsamuels.network
lcjzjt.com
legendsalliance.net
leverhump.store
libreo.club
limonproduce.com
looneytunesrun.com
ltsbinge.com
lxpvccard.com
ly-iot.com
mapadequito.com
maquinaclub.com
mariebiernacki.com
massaponaxhighschool.com
mediaworkhouse.com
mex33.info
mindflexlab.com
niggeruprising.com
nolimitsynthetics.net
office-tourism-tirana.com
onlinecollegetherapy.com
ourmonaca.com
ourmunera.net
pimpmyrecipe.com
randalldavisauthor.com
reutbergcapital.com
ronwongart.com
rsw3313.com
seaworldminecraft.com
shopflyonline.com
sportwillwin.com
theexpatweightcoach.com
ushealthvisa.com
vbkulkarni.com
win-back.online
xn--ga-c9a.com
zanzan8.com

# Reference: https://www.virustotal.com/gui/file/0b2bfb69c51b7adaeedec010a02983eee856559b71ecbc4ecb61c7e929b1f165/detection

33ofbalranaldavenuelargsbay.com
bulbulators.com
cmsphotography.net
freshair--uk.com
hempexchange.biz
kfuos.info
mujereshoyonline.com
newsoc.com
nylonsilk.com
phillimore.mobi
pritap.net
rtve.online
skyroott.info
techforcefoundation.biz
theflightcalculator.com
xadserve.com

# Reference: https://www.virustotal.com/gui/file/5b19c5b2854cf7d4ed344ff7539b38caec397d6a3002a7219b2fbe0b7c73f455/detection

3cheer.com
adultpeace.com
aideliveryrobot.com
biztekno.com
carmelodesign.com
fuhaitongxin.com
hiddenwholesale.com
liminaltechnology.com
lucytime.com
m678.xyz
magetu.info
malcorinmobiliaria.com
mercuryaid.net
micheldrake.com
tricqr.com
untylservice.com

# Reference: https://www.virustotal.com/gui/file/70f35721eb13022a6ae320055bf74d8c3bf688d5cd04c3bea37f6c2e4886d1b3/detection

project99x.com
ruhuxue.com
shupaishuiban.com
top-endstrollers.com
xn--onegcio-o0a.com

# Reference: https://www.virustotal.com/gui/file/6cdd13858c80732f5bcae5a998b2cc4402ee5c549b7042594b0edec313671a6f/detection

allindiatrust.com
biyahetours.com
cinmax.xyz
count230.com
fakingslatino.com
hamrocity.com
landerauto.com
lodosmimarlik.com
marriedtwomusic.com
marshylime.com
mindtattooed.com
nundmshop.com
prosperedfreelancing.com
shopqls.com
thenicolehernandez.com
xn--caasymas-e3a.com

# Reference: https://tria.ge/210420-5hgfnhdfq2

20190606.com
2020uselectionresult.com
afasyah.com
amarak-uniform.com
apgfinancing.com
ballparksportscards.com
britishretailawards.com
centaurme.com
craftbrewllc.com
cruzealmeidaarquitetura.com
crystalwiththecrystalz.com
devarajantraders.com
dijcan.com
dineztheunique.com
esveb.com
fairerfinancehackathon.net
floryi.com
gadgetsdesi.com
ghallagherstudent.com
hidbatteries.com
idtiam.com
instantpeindia.com
interprediction.com
jocelynlopez.com
joyeveryminute.com
launcheffecthouston.com
localiser.site
lookupgeorgina.com
mamapacho.com
marolamusic.com
milehighcitygames.com
myfreezic.com
nmrconsultants.com
opolclothing.com
pawtyparcels.com
photograph-gallery.com
plataforyou.com
print12580.com
programme-zeste.com
raphacall.com
realmartagent.com
rednetmarketing.com
retailhutbd.net
rftjrsrv.net
ronerasanjuan.com
samytango.com
sewingtherose.com
shoprodeovegas.com
shuairui.net
singlelookin.com
siyuanshe.com
slicktechgadgets.com
sophieberiault.com
spyforu.com
styleket.com
syuan.xyz
thegoldenwork.com
thehmnshop.com
thesmartshareholder.com
topgradetutors.net
tpsmg.com
travellpod.com
wangrenkai.com
wellemade.com
wpcfences.com

# Reference: https://www.virustotal.com/gui/file/8ad095b5f3cbe5651719b70347c94f489a4a14d72a4535c68f9829fe8d0ec738/detection

aksessories.com
carolyngowercoaching.com
cavanvanrental.com
china-xinkai.com
greenbarmiami.com
jobs-preparation.com
maniakea.com
minksywinks.com
modernhub.info
nchuangyi.com
sonoraquwat.com
stepsaudio.com
therealnotary.com
trickvv.com
tyrkietspecialisten.com
xcusehrreje.com

# Reference: https://github.com/MBThreatIntel/malspam/blob/master/AgentTesla/AgentTesla_2021-04-27.txt

bornforbetterthings.com
crossfut.net
dajiangzhibo12.com
deltaeleveight.com
draftsofsilence.com
droplites.com
futebolfitness.com.br
highsiddityminks.com
profoundai.net
prulib.com
pwjol.com
saturnkorp.net
thehealthierdonut.com
unmanglement.com
vtz6whu5254xb1.xyz
weatherdekniagara.com

# Reference: https://www.virustotal.com/gui/file/1f108a10b866def65686fcb0e0c10612152288ea1f7a6158e5ada37f26d03265/detection

alignedenergetics.info
craftsman-vail.com
downloadhs.com
fortwayneduiattorney.com
gmworldservice.com
lowcarblovefnp.com
salahdinortho.com
sim201.com
twincitieshousingmarket.com
xiang-life.net

# Reference: https://tria.ge/210429-tmvpzvp3tj

12hourchallenge.com
890281.com
airfieldelectric.com
alleyesonegipt.com
amu2020.com
antalyasml.com
asudprr.com
berlins-cuban.com
burmester.email
businessfundingtodayscam.com
byteidolon.com
chiraaag.tech
coinbutter.com
commercestudy.online
contorig2.com
czech-lang.space
designlyticsuk.com
embarkjourney.party
formulasimracing.com
goldtraderassociates.com
greedysafely.com
gunsareworthmorethanlives.com
hiltonbomontieforeaspa.com
hzlingfa.com
jetsurf-versicherung.com
joshimaria.com
kevinton.com
kreuzbags.com
kungfuglobalfamily.com
loriinibrand.com
mcclearytrucking.com
medicareschoolcommunity.com
metalservicesn.com
ministernarf.com
miusc.com
nailsnhang.com
newhopeadultos.com
patrickleahydescendants.com
pceasyreview.com
pharmacistshoko.com
plumaroja.com
poseidonbeauty.com
poshspotaccessories.com
powersandprospects.net
prevenirelcoronavirus-co.com
rdifatra.com
reasonswhyletter.com
romicore.com
shangmai.plus
stelbertrose.com
swallow-express.com
tankmaniac.net
ticoverde.com
tiga-roda.com
tirmastermind.com
trselfstorage.com
uswanews.com
vbetcostarica.com
venturabankruptcyattorney.com
wdnanshan.com
wordsinprogressthegame.com
ww-homes.com
yanmq.com
yellushnesme.info
yipinsutui.com

# Reference: https://gist.github.com/silence-is-best/852a1c7c7dcf29fdc8d5df73433e7676

2739kingsroad.com
2k20-aide.com
5865145.com
abarroteslacanasta.com
active-label.com
adjustedhuman.com
alexander-hof.xyz
anclaseadfoodmarket.com
aperfectbrow.com
aperocart.com
areyssg.com
bawakamus.online
bono73clothing.com
buildingdigitalmind.com
campoyabolivia.com
clientcentre.net
cnhremandealerservice.com/maw9/
findinghonor.com
fotografialove.com
gofourd.com
ienvoices.com
import-union.com/uv34/
inajmer.com
jieliangcaifu.com
kenkelconsulting.com
kingdavidtiferetshop.com/edbs/
landbirdevehicals.com
lazyfears.com
mobcitylabs.com
newportbeachswim.com
onlytwod.xyz
paobuyingxiong.com
phillhutt.com
q8ah.net
rva80s.com
ssc018.com
symbolofsafety.com/uv34/
thecoolprojector.com
theswatidiaries.com
thetempustrader.com
wokeinteractive.com
wyshio.com
xsites-dev.xyz
yogina.life

# Reference: https://twitter.com/James_inthe_box/status/1389959476376006657

kayandbernard.com/8u3b/

# Reference: https://twitter.com/MBThreatIntel/status/1390022224497700867

wwwnptpool.com

# Reference: https://app.any.run/tasks/01f8e582-fc44-41a0-a6d3-c85ffd3f9311/

stepgentertainment.com

# Reference: https://www.virustotal.com/gui/domain/officewindowssecurityfirewallopen.duckdns.org/relations

officewindowssecurityfirewallopen.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c46f6d72a258354c5267436ea0db9cd3f12cc1595a0d9072d904b0b15731f092/detection

ayaksotocikmayedekparca.com
buypartagascigars.com
dieselfarm.wine
fone.info
gudengdc.com
interviewat.com
kandsaccounting.com
regulars7.info
thearcane.world
valleysprings1.com
withloveboutiques.com
xhtd531.com

# Reference: https://tria.ge/210511-ndh4plydgx

7brochasmagicas.com
albertsonsolutions.com
alphabrainbalancing.com
astrologicsolutions.com
axolc-upoc.xyz
bastiontools.net
beautiful.tours
beautyblvdca.com
bloodtypealpha.com
candidanddevout.com
chefbenhk.com
codeproper.com
constructionjadams.com
contorig2.com
customessayjojo.com
dgyzgs8.com
diurr.com
dogscanstay.com
dotgz.com
eastboundanddowntrucking.com
ebmulla.com
emotist.com
ethyi.com
everythingcornea.com
farrellforcouncil.com
foxparanormal.com
fsmxmc.com
graniterealestategroup.net
haichuanxin.com
healtybenenfitsplus.com
inov8digital.com
investmentfocused.com
jkskylights.com
kladki.com
labkitsforstudents.com
lifehakershagirl.online
magistv.info
medvows.com
melaniesalascosmetics.com
namastecarrier.com
online-securegov.com
onyxcomputing.com
organicwellnessfarm.com
paragoncraftevents.com
pensje.net
plgmap.com
qgi1.com
rafbar.com
reservesunbeds.com
revolutiontourselsalvador.com
sanacolitademarijuana.com
sensationalcleaningservices.net
shotsbynox.com
stacyleets.com
turkeyvisa-government.com
ultimatepoolwater.com
valuedmind.com
vavadadoa3.com
vissito.com
xn--6j1bs50berk.com
xn--demirelik-u3a.com
xn--z4qm188e645c.com
xtrator.com
yourstoryplace.com
zioninfosystems.net

# Reference: https://tria.ge/210511-xpz6qx1ffn

0055game.com
959tremont.com
ansel-homebakery.com
artinmemory.com
asapdecor.com
barkinlot.com
birzulova.com
bnctly.com
bullishsoftware.com
buyruon.com
chaytel.com
cosmicmtn.com
desyrnan.com
drunkpoetsociety.com
enpointe.online
essentiallygaia.com
ferienschweden.com
fps2020dkasphotoop.com
fptplaybox.website
fuerzaagavera.com
hostbison.com
houseofsisson.com
ixiangzu.com
joysupermarket.com
kerneis.net
kissanime.press
kkkc5.com
lacompagniadelfardello.com
lagrangewildliferemoval.com
ljd.xyz
makemyroom.design
mentalfreedom.guru
moderndatingcoach.com
mondaysmatters.com
mujahidservice.online
myaustraliarewards.com
northsytyle.com
nugeneraonline.com
omsamedic.com
onlinehoortoestel.online
outletyana.com
paulpoirier.com
peninsulamatchmakers.net
philreid4cc.com
poweringprogress.today
prestiged.net
privat-livecam.net
radioconexaoubermusic.com
redlightlegal.com
relocatingrealtor.com
rokitreach.com
royalpropertiesgurugram.com
rvvikings.com
sarasvati-yoga.com
sardarfarm.com
sectorulb.com
shitarpa.net
sopplugin.com
soukid.com
spiritsoundart.net
stylezbykay.com
theanimehat.com
umlausa.com
union-green.com

# Reference: https://www.joesandbox.com/analysis/415767/0/html

7brochasmagicas.com
albertsonsolutions.com
alphabrainbalancing.com
astrologicsolutions.com
axolc-upoc.xyz
bastiontools.net
beautiful.tours
beautyblvdca.com
bloodtypealpha.com
candidanddevout.com
chefbenhk.com
codeproper.com
constructionjadams.com
contorig2.com
customessayjojo.com
dgyzgs8.com
diurr.com
dogscanstay.com
dotgz.com
eastboundanddowntrucking.com
ebmulla.com
emotist.com
ethyi.com
everythingcornea.com
farrellforcouncil.com
foxparanormal.com
fsmxmc.com
graniterealestategroup.net
haichuanxin.com
healtybenenfitsplus.com
inov8digital.com
investmentfocused.com
jkskylights.com
kladki.com
labkitsforstudents.com
lifehakershagirl.online
magistv.info
medvows.com
melaniesalascosmetics.com
namastecarrier.com
online-securegov.com
onyxcomputing.com
organicwellnessfarm.com
paragoncraftevents.com
pensje.net
plgmap.com
qgi1.com
rafbar.com
reservesunbeds.com
revolutiontourselsalvador.com
sanacolitademarijuana.com
sensationalcleaningservices.net
shotsbynox.com
stacyleets.com
turkeyvisa-government.com
ultimatepoolwater.com
valuedmind.com
vavadadoa3.com
vissito.com
xn--6j1bs50berk.com
xn--demirelik-u3a.com
xn--z4qm188e645c.com
xtrator.com
yourstoryplace.com
zioninfosystems.net

# Reference: https://tria.ge/210518-mahaj6148j

aadiventura.com
alexrabus.com
alibbv.com
artistssupportpledge.com
barnettmt5.com
businesspartner360.com
campustore.net
cdaboozecruise.com
dubai-tlv.com
education618.com
elisabethchin.com
essentials19.com
ethereumlp.com
fefffisce.info
financesdigital.com
fragrancecollector.com
freightlogins.com
getblackops2hack.com
gosanispire.com
hg62988.com
hymingfeng.com
iyogyl.com
jawwal.xyz
jphomedecor-01.com
kickitfashion.com
konbeca.com
laurartproductions.com
legalmktexas.net
linkitmexico.com
lovenfys.com
mack-soldenfx.com
madcord.net
moveincyprus.com
mytinyhometips.com
nelivo.com
nerdtoysuk.xyz
northernirelandcustoms.academy
oculensweb.com
opinetree.com
pigpigworld.com
prideglobalholdings.com
propointcleaning.com
psychedelicsnail.com
radicallymessy.church
retiredalsolovingit.com
rigwelllifetimeonline.com
rjroof.com
sacpanel.com
shaunmdurrantbooks.com
skip3-akjsdn.com
statiajewels.com
thejadedopal.com
tu-aviso.com
ufdzbhrxk.icu
ultraletefit.com
uncontenido.com
upthehilldogwalking.com
videoadprofits.com
wellness-sense.com
wellsleyarts.com
weretheshepards.com
wester.zone
wirebeevehicles.com
xywedding.com

# Reference: https://twitter.com/whitehoodie4/status/1395266325547819010
# Reference: https://pastebin.com/DBKKAdtE

astrokhushbooshokeen.com
buymobilia.com
gabrielaaa.com
talbotserver.com

# Reference: https://www.virustotal.com/gui/file/a47861eb94370a48bc6b4d99117b88c991fb199e300bd0cc24aa812c0ea2b3cb/detection

edlexacademy.com

# Reference: https://twitter.com/MBThreatIntel/status/1400533314696515586

artinmemory.com
birzulova.com
fptplaybox.website
ixiangzu.com
knighttechinca.com
lacompagniadelfardello.com
mentalfreedom.guru
northsytyle.com
peninsulamatchmakers.net
privat-livecam.net
relocatingrealtor.com
rokitreach.com
royalpropertiesgurugram.com
soukid.com
theanimehat.com

# Reference: https://www.virustotal.com/gui/file/c16b38ae42a9c32ba01ccd93bd90efceb4df05adb997b179758844e2d7d9b8c1/detection

doctor.hopto.org

# Reference: https://www.virustotal.com/gui/file/cf32bf794461f1286ddf604e1aa6022cd4eef1b05020c01efd2c682db865106e/detection

351215.com
finoblog.com
startersattorney.info
e-lohas.info
onixtours.com
alfenafootwear.com
misstenazas.com
lookupnanor.mbplc.xyz
kkkwhitepride.com
restondefencejobs.com
returpen.net
lvn.xyz
thedonationcard.com
neutralogics.com
dnhsxm.com
police-baton.com

# Reference: https://otx.alienvault.com/pulse/60bf5cefa96120d4cf00fa53

fullmoonrestlessco.com
wttfiber.com

# Reference: https://tria.ge/210609-d1n5l5g5kn

0755hk.site
7sportslive.com
856380295.xyz
91jpjob.net
9yyabewxz6ifs.net
abirepeh.com
acheiumabrecha.com
alencamera.store
alicekoller.com
alkawtherabudhabi.com
andresmiralles.com
askmikewatson.com
beyondhill.info
casadobeco.com
cfprcapital.com
clickoakland.com
cloudsecurity.pizza
devcosmetic.com
dmcvc.com
dufortridge.com
egh.xyz
esvastickers.com
gardentips.tips
green-bark.com
grupovalmik.com
hairandhairs.com
halalmessages.com
in-a-best-world.com
itxas.com
julianakarlagalettus.com
kafengunjuq.com
kounier.com
liveincareau.space
mardegrises.net
martobe.com
masterofrisk-rj.com
megadap.com
mightycaller.com
moatme.com
modasserjasim.com
onlinemovies.one
opsixpack.com
otelmesut.net
paydayloanr.com
pogiandi.com
pointbrite.com
prithe.club
racevx.xyz
ravstyle.com
roofers-hartford.com
ruyinoodlehousenv.com
saitamasocieties.net
saneplantlady.com
shanxibank.ltd
shinehindi.com
sistershantex.com
siteshapers.info
sm3ly.com
startersdentalimplants.info
thesoftmarketing.digital
thesophieashton.com
tranceoptic.com
twizitter.com
wisdomleatherworks.com
wwwbarefootrvresort.com

# Reference: https://tria.ge/210603-35ggm2vmxa

568215.com
67657780.com
691jxy.com
alizamcandrew.com
alwaysincerely.com
asahizushi.info
bermudefcrasettlement.com
cdpp.net
chrispricellc.com
copinginfula.trade
corporaterecruitertraining.com
cortopepperfest.com
cunerier.com
desertcamelhq.com
dinemuch.com
doratemizlikurunleri.com
electrumsystem.network
fsjcfrozenfood.com
fundwise.pro
germinatebio.com
gksfhzuhi.icu
gp4458.com
heartoflofall.com
highspnhxm.trade
hzzamy.com
ihsangazisiyez.com
jamaicanrestate.com
kalptarucentrino.com
kaqitoy.com
kieler-hof.com
koladintechnologies.com
laurabarstowart.com
lcpcap.com
leetranscreations.com
lessismorebeautiful.com
ligaeuropea.com
machinerycomfortable.com
macusix.com
merchasylum.net
mescopro.com
mymathstest.com
pbzb94.com
pheki.com
radansaisortagim.com
recreationanddevelopment.com
richelitesingles.com
sagesse-courtage-credit.com
sdyuancang.com
securenetflixapp.com
shipbuildersforgolden.com
stallionsilver.com
tennisopenit.com
texas956.com
themallvideo.com
theopendata.exchange
traditionalmehandi.com
weknownorthgower.com
whirlpool-repair.site
x-izm.net
xn--2z1bq6efxj2gp2o9xd.com
xn--anibalderedao-7eb3d.com
yangpaair.com
ycshop.net
yds-inc.com
zseasyfishin.com

# Reference: https://app.any.run/tasks/f06bb2ed-fede-4404-8291-2b744ebd1bce/

bf-swiss.com
cddcsw.com
cpzgzcw.com
findholmesinlaurelmaryland.com
kleinrugcleaning.com
mcluxuryrentals.com
mss52.com
ontarioboatcharters.com
priyadubai.com
skip1-dndasasd.com
suderstr.com
tfjxw.com
unmeasured-grace.com
updatesz.com
wierzewzwierze.com

# Reference: https://twitter.com/MBThreatIntel/status/1406973188828024837

magnoliamaycandleco.com
zhf2883.com
2811152641.com
jxsaigonanhvu.store
reciperoast.com
sallah-kw.com
tigerk2.com
sahnakz.com
xn--vkc6b6baa6ac1jbwc6l.com

# Reference: https://tria.ge/210624-gp1c67p5ra

592215.com
academicplumbing.com
alnooncars-kw.com
aztecnort.com
babbageacademy.com
bestveganbook.com
brussels-cafe.com
ca3construction.com
cursosaprovados.com
dbrulhart.com
debbiewilsondesigns.com
delta-wing.com
dkku88.com
dottproject.net
drainthe.com
floor-space.investments
forummondialdelamerbizerte.com
garnier.red
genotecinc.com
girlfriendsgarb.com
gon2580.com
homebrim.com
inclusiocg.com
infinitilamp.com
influenzerr.com
informationside.com
ip2c.net
jakesplacebarbers.com
jam-nins.com
keeponsports.com
kensyu-kan.com
leelegantflower.com
luckytwo.agency
mdwovzrrm.icu
ministry-of-barbers.com
msmenders.com
nazarickdeveloper.xyz
packapp.net
panache-rose.com
pjcavaliere.info
pursemore.com
rbcoq.com
scootgotti.com
sezyz11.com
smartswitchhomeloan.net
snakby.com
spacecoasthondaevent.com
stagingsolutionsgroup.com
sumaholesson.com
tempestchs.com
theapiarystudios.com
thebusinessfitclub.com
thehealthyimmunereset.com
theservantleader.com
tikhyper.com
trebdurham.com
trueblue2u.com
vidasustentavel.online
videohm.com
vipandeep.com
whachupichu.com
wholehearteddaughters.com
zhixintonghe.com
zpxinxi.com
zzful.com

# Reference: https://twitter.com/MBThreatIntel/status/1408090816229351426

bebek-store.com
jagrit.codes
platinumforsale.net
pornrog.com
sneakygear.com
thisislandonbraverman.com

# Reference: https://tria.ge/210625-faspqe4qyx

a2calf.com
aimuseums.com
andreatessler.com
angiepologie.com
bestivfcenterpune.com
bloodsweatnskills.com
bsankavl.com
chocolatejerky.com
classifoods.com
creaturescreate.com
currogpheasantshoot.com
cyberzenith.com
dwlrr.com
dynamicfitnesslife.store
edem-agency.com
efrainspura.xyz
emotionsmanifest.com
employeerelationships.com
extaseestreaming.com
festeringuncle.com
flirt-girls.icu
freetimecleaningservices.com
futureadb.com
gadgetwoods.com
icankid.net
innerpeaceactivist.com
izakayajun.com
knektr.online
kuromugi-blog.com
lilaccityacupuncture.com
lodgespringseniorliving.com
lopsenetwork.com
mafalda.cloud
melaninswagger.com
melissadishes.com
mkc.xyz
ohiocommunitynewsnetwork.com
onshore-energy.com
oohdough.com
oxbstwnm.icu
pemeroth.com
pennygailpottery.com
platinumortho.net
pyantx.us
quyetstar.site
resumes2impress.com
rulrr.info
shuji-ogawa.com
smacey.com
smartchoice.education
sofiaalva.com
southerncloseouts.com
stainedglasshockessinde.com
thankyouforthemoments.com
thefuntheboringtheinbetween.com
theindependentwings.com
tusinschoology.com
ulinzigear.com
uxlunexpectedlawyer.com
vinh-heritage.net
wefanthedead.com
womanwithacode.com
xn--tr-trkiye-t9a.com
ycxlst.com
zhaigoo.com

# Reference: https://tria.ge/210624-wprc4elcza

4860p.com
abundando.com
airlinesfm.com
alpha-psych.com
aridham.com
azaza.store
boldae.com
borwoo-packaging.com
bringcovidhome.com
buyersmeetsellers.net
calfwag.com
crewe-tech.com
dmarc.press
dronerealestate.net
eagle-rock-real-estate.com
emmonsfororegon.com
excellencepi.com
farmacykauai.com
fbrblog.com
ffpgv.top
filledbasket.com
findmyiphone.services
glaseye.com
gwokath.com
handbagsbreeze.com
hoodhippy.com
hyperhostns.info
infomediosdigital.com
iopsms.xyz
laive.chat
leorisingcreative.com
leverj.exchange
loty-hd.com
manchesterflowerwalls.com
mayberrycommunities.com
natalieball.com
novitadelgiorno.com
paysamba.com
prophunting.com
purple.gifts
pussyfarts69.com
radiosta.com
registergamers.com
richmondpistolpermit.com
sans35studios.com
sarahhariri.com
scrippshealthprivacynotice.com
seekingyours.com
step1clean.com
teach.wine
templabels.com
testcomp8260.com
top10musicmarketing.com
toughershop.com
townsendcomics.net
utikejt.com
valengz.com
wildeliving.net
wyattwillgetbetter.com
xn--kipinpaja-z2a.com
xn--sllskapsdjur-gcb.com
yange03.com
yenisarkisi.com
yourgafflettings.com
zimmerkauf.com

# Reference: https://tria.ge/210615-5h25azl6tn

aapliweb.com
accordinera.com
alakhi.com
arie09.com
askfine.com
asserghorab.com
associationtechnologyblog.com
aurummobilestore.com
biologicaldeception.com
bonap56.com
bonus328.online
cbgmasters.com
cookingwithyourkid.com
coolsgames.com
copiaequipmentfinance.com
dspinsure.com
easypanservice.com
efiesonestifanos.com
elearchsearch.com
eveaquila.com
fireball15.com
firstlinkk.com
fuelofsmokenvape.com
gangelich.com
grand-dental.com
grassysigns.com
greatdomainsales.com
gslge.com
idealwindowmfg.com
irc-helper.space
jadepalance.com
kcdyhbv.icu
keys2successfulliving.net
kidsclothing.center
liveatrivernorth.com
lucky5tarstudios.com
macarthursflowers.com
motor-lamp.com
mounaquedecampan.com
mumbaibusinesscentre.com
napaluxurypicnic.com
nastybestinteriors.com
nataschabruder.com
nusantarataniagung.com
overthewaterfront.com
paradigmtechnicalsolutions.com
pub-g-free-uc.com
raphaellacroix.com
riseplc.com
sawsome.icu
sedlmeierbestattungen.com
selllasheswithtonya.com
studiopeer.com
taksykw.com
thebutterflylifers.com
thebutterflyme.com
thedigitalmarketerslounge.com
thelewalla.com
transferable-value.com
unbaluns.com
veracars.com
wordhospice.com
wpmaintenanceteam.com
wtxpfoundation.com
yourebridgeplan.com

# Reference: https://twitter.com/reecdeep/status/1409451122511814657

cunix88.com

# Reference: https://tria.ge/210630-qtfmtaaprn

29752ellendale.com
88q858.com
allpurposepaintingservices.com
allterdsmatter.com
angelademarco.com
awkwardpeachfitness.com
balancerestoreomaha.com
bestcoastwellness.com
bidatauction.net
blogafonte.com
cjcgraphics.info
cleaner-solar.com
cloudservices.technology
cnhy0769.com
connecteddots.digital
couia.com
covidcustomdesigns.com
e-srot.com
eaornti.com
eclorui.com
enrgsystems.com
fimco.net
flaxx.life
gezirapharma-sd.com
gmb-marketing.com
hardrock.site
holowide.com
hotelcastellgye.com
irondoorsnearme.net
jeilaslimefactory.com
jimeipifa.com
jukeboxjeffdj.com
kate.chat
kujtimet.com
lolly-bops.com
myzoomroomz.com
navyugitsolutions.com
notimpersonating.com
pantheoncases.com
parossunbed.com
pohanc.net
pontacols.com
putortifashions.com
rapidexpressshipping.com
ravexim3.com
red-studios.com
remoteandnice.com
renetyson.com
rhexlux.com
saltairbeer.com
savignies.com
schnarr-online.com
shlokus.info
simplysummerdawn.com
soulpowerlive.com
specialforcesofindia.com
sutransformacion.com
talsworldwide.com
taspate.com
thecode.community
thepassiveincomecreator.com
uluapokehouse.com
vascularsurgery.club
veristasolutions.com
wwwgraciescottage.com

# Reference: https://tria.ge/210630-yg8jjxplla

568215.com
67657780.com
691jxy.com
alizamcandrew.com
alwaysincerely.com
asahizushi.info
bermudefcrasettlement.com
cdpp.net
chrispricellc.com
copinginfula.trade
corporaterecruitertraining.com
cortopepperfest.com
cunerier.com
desertcamelhq.com
dinemuch.com
doratemizlikurunleri.com
electrumsystem.network
fsjcfrozenfood.com
fundwise.pro
germinatebio.com
gksfhzuhi.icu
gp4458.com
heartoflofall.com
highspnhxm.trade
hzzamy.com
ihsangazisiyez.com
jamaicanrestate.com
kalptarucentrino.com
kaqitoy.com
kieler-hof.com
koladintechnologies.com
laurabarstowart.com
lcpcap.com
leetranscreations.com
lessismorebeautiful.com
ligaeuropea.com
machinerycomfortable.com
macusix.com
merchasylum.net
mescopro.com
mymathstest.com
pbzb94.com
pheki.com
radansaisortagim.com
recreationanddevelopment.com
richelitesingles.com
sagesse-courtage-credit.com
sdyuancang.com
securenetflixapp.com
shipbuildersforgolden.com
stallionsilver.com
tennisopenit.com
texas956.com
themallvideo.com
theopendata.exchange
traditionalmehandi.com
weknownorthgower.com
whirlpool-repair.site
x-izm.net
xn--2z1bq6efxj2gp2o9xd.com
xn--anibalderedao-7eb3d.com
yangpaair.com
ycshop.net
yds-inc.com
zseasyfishin.com

# Reference: https://pastebin.com/njbLBACM
# Reference: https://app.any.run/tasks/94dda737-87d6-498b-bf3f-7f445abeea13

bhartiyabrand.com
dataxamarin.com
futeboplayhd.com
guktree.com
hondausedcarswestpalm.com
htwengenharia.com
mondaymindsets.com
nxwatson.com
politica.group
shoppinkksugar.com
sofiedeneef.com
yadouganggou.com

# Reference: https://otx.alienvault.com/pulse/60db0c73a92b92b79741d921

tvdajiang14.com

# Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0625-0702.html (# Win.Dropper.Formbook-9875089-1)

1e9sevenrainy.loan
actu-occitanie.com
aldareps.com
amigurumibyamanda.com
barkintheparkli.com
bikby.com
ebvdcxw.com
empireremgmt.com
jesusinme.net
juxiangjidian.com
keeenterprise.com
liveonthehill-festival.com
mansiobok2.info
matthewelliotties.com
mlyouxian.com
mmssgg.com
myshoppingchic.com
qualitycarpetcleaningcal.com
selectsb.com
theadventurecurators.com
tiangongqiaoduo.com
tntcityinc.com
vabomerewaste.info
wxfkyyw.com
xuse.info

# Reference: https://twitter.com/ps66uk/status/1412126527593107465

newrichwealth.com

# Reference: https://twitter.com/Racco42/status/1413401048132227072

szglkt.net

# Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0702-0709.html (# Win.Packed.Formbook-9875217-1)

atlutes.com
bjlmzk.com
cybep.com
dawnanddusted.com
fifanie.com
hmlifi.com
itdui.com
jlxkqg.men
learningtolaughintherain.com
lifesciencescareers.com
photos4lyfe.net
spiritualwisdominindia.com
thunderwatches.com
winhealthalert.info
xn--qrq721bqkkzt3b.net

# Reference: https://www.virustotal.com/gui/file/a449b2bf7415c385f7841bdd6f41f8f16dff16e4c77ef6c7865b457071011de3/detection

91ruitue.com
aaronlemmon.net
blestgroup.com
bs-team.cloud
chuchupaimai.com
deltawinery.net
doxagram.date
godoil.net
hust-today.info
ideagazebo.com
mattel.cloud
portugalprivatetour.com
serviciosconfia.com
topratedshowerheads.com
xn--droitdeladonne-nkb.com
ytxfchina.com

# Reference: https://twitter.com/pollo290987/status/1415213931375865858
# Reference: https://www.virustotal.com/gui/file/24c47f2838399f16001e5166458e1875494b118005ce354a4069d8fc82a20265/detection

cyotie.com

# Reference: https://www.virustotal.com/gui/file/63c9562ee89e1308b5be90e55ac0334e5bbdee69142741dd3e057d270f407106/detection

1groupinsurance.site
collegium-lmi.com
concordarabuluculuk.xyz
incontrol-co.com
makzmanagement.com
royalesalon.com
royareign.com
ukcougarforum.com
zozchat.com

# Reference: https://www.virustotal.com/gui/file/9b4bcf870a79699cea2ef0add03b741bf14296f50b089a648f57903519eb8e7e/detection

brackishcompany.com
jpleasure444.com
keilube.com
mycashcat.com
mylearningplaylists.com
newmillenniumgaming.com
pillar-gymnast.com
printedcactus.com
smartquintessential.com

# Reference: https://tria.ge/210720-l5gncsb3fj

012997.com
966938.com
adaptiveclick.com
ampsportshouston.com
angelacontreras.design
ankergreen.com
artisticdancecompanyct.com
auntiebsbread.com
clarkson-craik-wedding.com
clubfit24virtual.com
czflsp.com
damselindior.site
dwkjkvsa.icu
dwysll.com
elestampado.com
erotikazdarma-na-seznamu.online
erxia29.com
fcknloveit.com
gallucciowineries.com
grocerygurunicole.com
hypo-realitni-servis.online
insuranceservicesfl.com
isaandfriendsfoundationcorp.com
itsgrind30.com
jacobmantle.com
katsworlds.com
kristinaandmatt2021.com
lagboni.com
manayi-matnayen.com
monekigames.com
motionmediamail.com
mybirthpillow.com
nicholasvilleguttercleaning.com
ourparentsaspartners.net
paksfjphkqpfgoldenhpaksfpnh.net
papagle.com
portaldoinvocador.com
psm-gen.com
punebites.com
quisiweb.com
qyaswryhk.icu
redeftco.com
risingstrenghtscounseling.com
rogerzhou.com
ruiyiknit.com
scootersfornewbies.com
silversteel-ye.com
stagdotenerife.com
sunlightjoinery.com
teamwork256.com
the694.com
thearticclaw.com
thedemocratads.com
thelogicsticks.com
tomslandscaping.net
torontoescortlist.com
tramomed.com
uni-star-cn.com
venti50.com
veranev.com
weskunmgrf.com
wetechy.com
wonderancientswiftvibrancy.com
zidesign.xyz
zsesfw.com

# Reference: https://tria.ge/210720-s2elczaedn

332xyx.com
5v5r3gf3lhvgvy.xyz
abrosnm3.com
adweb.menu
airluxo.com
arsenalization.com
beiyingcp.com
bgpproxy.com
bows-n-bars.com
bumble.sucks
caracern.com
coachsoley.com
corkstandard.com
created4love.com
crezcayemprenda.com
damoyan-ep.com
drivethrupolitics.com
electric-sauna.com
energiafloral.com
evidyadigital.com
fecunditytechnologies.com
fengyikang.xyz
flyingpig-farms.com
fresnovape.com
glasgowmobilediscos.com
guitaraerobics.com
heatpumpgrant.com
imploidtalentservices.com
insurancewithus.com
kejgan.com
lu14444.com
markdownme.com
marleyssoiree.com
mexx-lighting.com
neptuneservicesltd.com
nitinravi.com
palmgables.com
partyun.com
personalizedyardsigns.com
pghissofastighet.info
pinmaomao.com
propelai.net
registeraccountants.amsterdam
restauranteelrinconderosa.com
ryapelsartwork.com
shnasu.com
sitad.online
sjredlineclothing.com
smarttennessee.com
songnguyenkim.com
survingcorona.com
sxzycxxwlw.com
tavarter.com
textingjournal.com
theoneitemstore.com
three-ukalerts.com
travelseri.com
unstoppabl.com
vinfast-mienbac.com
winharadesigns.com
wordpressaffiliatepro.com
wpdesigntips.com
wxxyh.xyz
yardenfaragian.com
yerlitestkiti.com

# Reference: https://www.virustotal.com/gui/file/50878d11e846ea18fa1a83208091a237a32d941414b917ac2ca738762f7dc4ae/detection

gerisapp.com
jesselynnjewelry.com
qaci.ltd

# Reference: https://tria.ge/210726-cb97ggxx7x

abrosnm3.com
apipacking.com
approvednursingdegreeca.com
arknmhsc.com
augeware.com
bestskiboat.com
bfosterbeauty.com
bhakti.exchange
bhoomifoodsdaily.com
bim3dstudio.com
blackmarkethn.com
cedeaccount.com
christcarriers.com
comingintopower.com
coolsoftware.xyz
cooperseyewear.com
creditfitbootcamp.com
cyberfamilydesignagency.com
dbd-cs.com
digitalaage.com
dinhgianhadatdanang.com
easternshoreautobody.com
eglobaldirect.com
electricvehiclesdetroit.com
expowe.icu
hamrharddrive.com
hawrang.com
healthyvibrantandbeautiful.com
hqs.xyz
in-homeaccountants.com
indiarmc.com
janinefowler.com
kolpath.com
kvperryman.com
lacarerx.com
largshomebuyers.com
larkfam.com
maildeskserv.com
mdroc.com
mrleyos.com
msd.rest
mtdivas.com
ngdnwgtsf.club
oxystudio1.com
peppershare.net
pickenshomesforless.com
rollingrevenueroadmap.com
roshanrajas.com
rostig-brennend.com
shopchampagnetoast.com
stormvalleysoapco.com
supremeleas.com
surfacesupplierscanada.com
targetstudio.net
techbotsoftware.com
testjaycypes015.com
the-level.net
thinbluelion.com
vbetmalaysia.com
watdomenren48.com
woofreelance.online
worldambedkarsociety.com
xn--qbt233i.xn--hxt814e
yourchanceisnow.com
yz-wsly.com

# Reference: https://tria.ge/210726-nar5mm8hee

388384.com
62qtz2.com
aanmelding-desk.info
adoptahamster.com
alternet.today
ardecentro.com
aussieenjoyment.today
brisbanemagicians.com
caddyys.com
cbgmanhattan-hub.com
channelarmor.info
citrixfile.com
coonier.com
creativehuesdesigns.com
democratscancelled.com
drmetalpublishing.com
ecorarte.com
edicionesvita.com
elaraberentcar.com
endonelatrading.com
espace22.com
fabrezeairpurifiers.com
gallopshoes.com
gameshowsatwork.com
ganjegirls.com
givanon.com
go-rillathebrand.com
hiphopeconomicdevelopment.com
innocox.com
jacardcapital.com
jrvinganimalexterminator.com
lindsaynathan2021.com
lowdosemortgage.com
matdcg.com
mencg.com
mitgrim.com
nftsexy.com
nogodbeforeme.net
pastiindonesia.com
piebuilder.com
po1c3.com
political.singles
renewalbyheather.com
ricosdulcesmexicanos.com
riseswift.com
rjkcrafts.com
roiskylands.com
roorisor.com
rugpat.com
smallsyalls.com
tasaciona.com
thecarbonbox.store
thechicthirty.com
themesthatyoulike.com
tioniis11.com
tvglanz.com
variceselite.com
vinhomes-phamhung.info
virtualppo.com
wellness-sense.com
winstonsalemathleticclub.com
yjhlgg.com
ytzhubao.com
zamlgroup.com
ztsj10086.com

# Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0723-0730.html (# Win.Packed.Formbook-9881913-1)

1e9sevenrainy.loan
actu-occitanie.com
aldareps.com
amigurumibyamanda.com
barkintheparkli.com
costes-viager-metz.com
ebvdcxw.com
empireremgmt.com
fixandflipit.com
jesusinme.net
juxiangjidian.com
kiefchronicles.com
liveonthehill-festival.com
mansiobok2.info
matthewelliotties.com
mlyouxian.com
mmssgg.com
myshoppingchic.com
selectsb.com
theadventurecurators.com
tntcityinc.com
vabomerewaste.info
wxfkyyw.com
xuse.info

# Reference: https://www.virustotal.com/gui/file/3fff5f3adf822fb5aa359a0585afaa385ab8671ea4ae37b6f35030542d6bbc03/detection

2manyguru.com
amputaterevival.com
fapndazo.com
goodgospeltz.com
hauntmafia.com
herthamed.net
iahawaii.com
labhoster.com
lki.life
minimalgent.com
myleadscreator.com
profitablebrandfactory.com/heye/
sieauthentica.com
thecreatorsbooks.com
theneekynaykye.com

# Reference: https://twitter.com/MBThreatIntel/status/1423347759797522432
# Reference: https://www.virustotal.com/gui/file/04e127c5bdf94f075639d7f44badd25223f3ebeede44258367413d8463505020/detection

simplebox.world

# Reference: https://twitter.com/unidentified0xc/status/1423696442359787520
# Reference: https://www.virustotal.com/gui/file/72320946e28ee9117b85cb1a83e5e122c3938e4a79c9be1551595103cb2c311a/detection

travelscappadocia.com

# Reference: https://twitter.com/reecdeep/status/1438135771974836235

gentciu.com

# Reference: https://twitter.com/pr0xylife/status/1450413394050363393
# Reference: https://twitter.com/reecdeep/status/1450423446031249408

filecrev.com
lilcrox.xyz
uploadingpanel.xyz

# Reference: https://twitter.com/reecdeep/status/1457992469400915969
# Reference: https://app.any.run/tasks/7beef4c8-16f0-4347-aa39-ed0d9d1c6065/

minismi2.com

# Reference: https://twitter.com/reecdeep/status/1464173848245551130

lopsrental.lease

# Reference: https://twitter.com/MBThreatIntel/status/1464329992486141955

tgfdj.com
colesfax.com
traicayphuongnam.com
bloominunity.net
buycitratesildenafil.com
insularrofioa.xyz

# Reference: https://www.virustotal.com/gui/file/accbe536ead9e57b36410e8769aeb211ec32419a0e92cf6282d74c0ed53175cb/detection

wsdysuresb1interwsmo.dns.army

# Reference: https://twitter.com/reecdeep/status/1465603269905035264
# Reference: https://app.any.run/tasks/6461fe1c-7d2c-4918-8421-fb33cc7c9b59/

saftcos.com

# Reference: https://www.virustotal.com/gui/file/f0f020c489ae8bad33cee5f66c276f1a40dd9aff5eff55648922de36da0e233c/detection

amzgroupsales.com
arffinanacial.com
bansity.com
buyidh.xyz
carpetbaggerehasz.com
deliveryship.site
discountchristmas.com
eaujeunetuesunique.com
effektivpeople.com
elainelancelot.top
elenapapernaya.com
gayko.info
gazalvet.com
glow49.com
gopro30.com
happy99.club
heynowbrowncow.com
insurancewineappraisals.com
ivoireshoping.com
jtdroofing.com
kgresale.com
khnfcl.net
kpfoundationinc.com
lostdevice.xyz
metanewyork.digital
ministrymattersmagazine.com
mooncloud.cloud
myadventures.online
nnw.photography
pnsp3.xyz
powerupnurses.com
raisinglittlejoeys.com
sendpit.com
social-sound.net
staffslearn.com
suddennnnnnnnnnnn44.xyz
weddingsbyiceberg.com
xchair36.com
xrzthd.com
yavstore.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1460569876930703361

didimthebestkuafor.com
kizitox.ga

# Reference: https://www.virustotal.com/gui/file/0123fdb2e8de200e6fa07cd5c254771143b7d9fea4f6895077b4f609fc5ae1cf/detection

427521.com
amaturz.info
approveprvqsx.xyz
clairewashere.site
createacarepack.com
cristinamadara.com
diamond-beauties.com
fronterapost.house
khojcity.com
ponto-bras.space
qiantangguoji.com
rthearts.com
savannah.biz
semapisus.xyz
storyofsol.com
xianshucai.net

# Reference: https://www.virustotal.com/gui/file/4253f88eb5e931720c16e56f49babfbf8db93eaa8b6f85146cc2d690aee2b9d2/detection

affexion-web.xyz
antlersinternational.biz
aspirastic.com
babehairboutique.com
confled.online
digitalpathologytodayuk.com
duoceshi.info
educacaosemdistancia.net
emaratishayclub.com
giridharsweb.com
jamesobrien.school
kj4senate.com
korhuay.info
lineupfacts.com
miramar.press
nihonkoryu.site
riversidebest.com
scnbzx.xyz
shengyuan1.com
shoework.xyz
showin-juku.net
sucurina.com
velostats.com
wokite.net

# Reference: https://www.virustotal.com/gui/file/59ec21c2cbea8337c61be946ea039cce2316085c64f83aff71e2fa2c72517104/detection

binatonezx.tk
lilcrox.xyz

# Reference: https://www.virustotal.com/gui/ip-address/176.99.5.38/relations

binatonezx.cf
binatonezx.tk
kiwar.cf

# Reference: https://www.virustotal.com/gui/ip-address/2.56.59.211/relations

nestlex.tk

# Reference: https://www.virustotal.com/gui/ip-address/37.0.11.232/relations

aqaumad.com

# Reference: https://www.virustotal.com/gui/file/39ad43c4148cafd9463c874b9201bb1b6253d3c6b4984351647c1e7d4d88c2ab/detection

1kingbet.com
666b20.xyz
apseymarine.com
babeshotnud.com
baila.madrid
charsantosart.com
dossierinc.com
futurodr.com
homesofchaparralcountryclub.com
iktbn-c01.com
immerseinagro.com
limiteditionft.com
mingwotech.com
nailsestetic.space
newhollandpurpose.com
nudesalon.digital
overlandshare.com
parsvivid.com
patrickandmaxine.com
pondokbali.store
rap8b55d.com
searchengineeye.com
sehatbersama.store
snackithalal.com
socialenterprisestudio.com
thenewtocsin.com
thevillageplumbers.com
toptaxxi.store
vapkey.net
voiceyupcom.com

# Reference: https://twitter.com/reecdeep/status/1470416422983585797

fastye.link

# Reference: https://twitter.com/reecdeep/status/1470708891004637194

thimelic.online

# Reference: https://twitter.com/MalGamy12/status/1470797891002421251

kizitox.cf

# Reference: https://twitter.com/reecdeep/status/1473657263915216898
# Reference: https://app.any.run/tasks/67888005-1133-40d9-a7ae-190814e6d091/

daxvly.xyz

# Reference: https://twitter.com/JAMESWT_MHT/status/1469240481007771654

tidylazy.com

# Reference: https://www.virustotal.com/gui/domain/hsiens.xyz/relations

hsiens.xyz

# Reference: https://www.virustotal.com/gui/file/307a069ecd59369e9825b9e24d84d5a92f6e4273c7d1d463d03cad06497dbe09/detection

mooorni.xyz

# Reference: https://gist.github.com/silence-is-best/e2af8aa61000e4b740934331291c619b

allnestek.com
asiapubz-hk.com
eyecandy-s.com
filecrev.com
fis.photos
goldenentnefetis.com
kumrualpaydinfikirler.com
love-austria.com
madlyrics.net
nshocam.com
scion-go-getter.com
shzldx.com
tejpalmeet.com
tttk8.site
tutoucheonest9.com
w8sf.com
xn--diegovariados-zeb.online

# Reference: https://blog.talosintelligence.com/2021/11/threat-roundup-1029-1105.html (# Win.Dropper.Formbook-9905387-0)

anjanaonline.com
blakedroberts.com
briankingfineart.com
cabinetra.com
cataractmeds.com
dongtaykethop.cloud
fsoinc.com
glocp9.com
gun-stores.net
healthchu.com
jqxfinance.com
listertarot.com
mbc-lucky.com
mylife25.com
obersrock.com
sexting-sites.com
studiodates.com
ue3uue.com
whereistheherb.store
xn--v4q8fq9ps1clx5d774b.com

# Reference: https://twitter.com/reecdeep/status/1463424870285459456
# Reference: https://tria.ge/211124-j31sdafdd8/static1
# Reference: https://app.any.run/tasks/bf25a335-870d-4159-ae8e-70b85197c7f9/

018seo.com
39mpt.xyz
5gongvo.xyz
8nst.com
946aaw.net
allmanac.info
ambosholmzoril.com
angeleyesevents.com
app-demo.xyz
arabatas.com
astrielle.com
bakosaoje.xyz
canlioyuncuyuz.online
clubfohl.com
completefuid.com
crktinc.com
cspro-lb.com
davidruperezdorao.com
divinebaking.online
eclox-btp.com
ectax.online
eleditorplatense.com
feierabendshop.com
fountainspringscapemay.com
fuckingmom89.xyz
game-band.com
gcioral.xyz
geradsss.com
getjoyce.net
heartfeltgiftery.com
heritzlab.com
icobrothers.media
invertirenstartup.com
karo-tasty.com
latest-football.pro
longshengfz.com
luosenhuagong.com
luxerlegends.com
mayyaramedical.com
medicinaoralbarcelona.com
missjones.info
mushukids.com
ngaviations.com
nigeriasecurityexpo.com
nsureagent.com
oldstjoe.com
pellecorentin.com
productzon.net
rayganesh.com
resortonannamariais.land
resourcesassitance.com
sarasotaexterminator.com
sideroyalpalacehotel.website
spiveyvillage.online
suddennnnnnnnnnnn37.xyz
toituresante.com
tollesonhouses.com
trans-mall.com
trendytechtreats.com
ttportalbham2.com
usedhondacar.com
xiluoxtmcwj.com
zhbhhj.com
zjef.top

# Reference: https://www.virustotal.com/gui/file/3abbf47a610912e6c574899d0ad87529e16f6d3616806dfee02b8a4c2e171541/detection

25081mammoth.com
657haber.com
a687t.xyz
adhek-internacional.com
andrew222651.com
arsels.info
artdirectorfff.com
bglmart.com
claggs.com
clinicadeconsultanta.com
currency01.com
eqsadvisors.com
erkesen.net
espressence.com
giangsontaikhoi.com
hanfines.com
happy-smail.com
katesbotanicals.com
lg-tv.tk
orzcy.top
qingqingtianyuan.com
rogde1998.com
sportspellz.com
suddennnnnnnnnnnn28.xyz
the-social-hub.com
topitreviews.com
whooshfriends.com

# Reference: https://twitter.com/reecdeep/status/1480498723859976193
# Reference: https://tria.ge/220110-m4qkksebf2/static1
# Reference: https://app.any.run/tasks/6b49092a-42ee-4d03-a540-4210922f8d1a/

2thpolis.com
360e.group
4338agnes.com
58lif.com
927291.com
aloebiotics.com
atlasgrpltdgh.com
bookinggroningen.com
branchwallet.com
buysubarus.com
carriewilliamsinc.com
cevichiles.com
cuanquotex.online
damusalama.com
danielleefelipe.net
dreamschools.online
ehaszthecarpetbagger.com
ennitec.com
evodoge.com
farmacymerchants.com
faydergayremezdayener.net
finanes.xyz
freelance-rse.com
frentags.art
gaboshoes.com
gabtomenice.com
ggsega.xyz
gooooooo.xyz
hempgotas.com
hillsncreeks.com
inkland-tattoo.com
inslidr.com
inventors.community
ir-hasnol.com
jiazheng369.com
lexingtonprochoice.com
libes.asia
markham.condos
mediafyagency.com
micorgas.com
mnselfservice.com
mollyagee.com
nbjcgl.com
pastodwes.com
pentest.ink
pinkandgrey.info
postmoon.xyz
quickmovecourierservices.com
rampi6.com
rvmservices.com
seebuehnegoerlitz.com
sjljtzsls.com
standardcrypro.com
streets4suites.com
teentykarm.quest
tipslowclever.rest
trulyrun.com
uvywah.com
viperiastudios.com
wildberryhair.com
wilkinsutotint.com
wohn-union.info
yixuan5.com
youngliving1.com
zoharfine.com

# Reference: https://www.virustotal.com/gui/file/345dc5575dcbd4433aa5bbae510cdc259f898bfc23646c46ced2d154b0a7e3e6/detection

/..W.w.........WWww.---wW--W-Ww--.w---wW...............Wbk-Wbk........wWWw/
/...-W--------wwwWw........Wnk...---WBK.----WwwW...wBkW-----w-w---Ww.wW..wbk

# Reference: https://app.any.run/tasks/8802a5e4-88a7-4aab-8ec8-1d87bd25e4ba/

casino-pharaon-play.xyz
harsors.com
mackworx.net
tedsefa.xyz

# Reference: https://tria.ge/220111-ttnfssgear

archdeylemmergay.com
babypasal.com
balaga-vacances.com
beyerenterprisestreeservice.com
billstrasse24.com
boliden-ab.com
bredaslo.com
bspcanadaconnects.com
buddymerrillmusic.com
buychryslers.com
connect01.com
counterpokemon.com
dartsearchengine.com
dimcreadev.tech
disfagiaresidencias.com
duyol.com
ecobook.club
egregore.club
ethereumpets.com
excellentdefence.com
falcongroupmanagement.com
faxedfumnook.com
feetlover.online
ff4c75x4e.xyz
foundergomwef.xyz
gb2022-club.com
gconsultingfirm.com
grantopwincup.website
hermespros.com
hotgurlmarket.com
islandresiliency.com
jaynelsonphotog.com
jlvip1066.com
lab-design.online
mgav26.xyz
mlikew.com
monascake.xyz
mskindi.com
nekomediphile.com
newelectricways.com
nomarcapital.com
nuhive.net
padelthiene.com
pandawan.club
particulares-es.icu
phillystore.net
phorganicfoods.com
prill.quest
princessbuilt.com
purifybrush.com
ragworkhouse.com
rapibest.com
ritebet388.com
securewalletvalidate.com
security-paiemet.com
slayfearlessly.com
smplkindness.com
soflovrlnd.com
spendbrasiltimebest.com
taquerialoteria.com
theeppunday.com
thoughtultracruel.quest
waysgaming.com
writerpilotpublishing.store
zenholisticstores.com

# Reference: https://www.virustotal.com/gui/file/d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72/detection
# Reference: https://otx.alienvault.com/pulse/61d81f95eecd468222f85464

http://104.244.78.177

# Reference: https://twitter.com/reecdeep/status/1483048507149803521
# Reference: https://tria.ge/220117-m8cvaahfg3/static1

534wcc.com
adverse-afield.com
agbaparapa.digital
artmuseummatch.com
asiavest.partners
atlantapressurewashingco.com
axtaihe.com
bestbabyreviews.com
bolosdavovoeliana.com
borduurstudioijmuiden.com
bupis44.info
cabot.center
castlemainefarmersmarket.online
cimpisa.info
clinique-voyageur.com
complynt.store
creatsafe.com
cruiseportscheduler.com
dailygossiping.com
dotieudung.online
drsfurtimann.com
fatbellytonic.com
geloradomino.win
gladinternational.com
goodcallhvac.com
gortansar.club
gunpowderbrahmans.com
hellodba.net
houstonnaturalrasources.com
hunterfineart.net
idealseg.net
iwholesalestore.com
judwx.com
maripremazzi.com
marykorpi.com
mencuci.online
midwestcentertherapy.net
moms-gone-mental.com
mrcrypto.store
msjj002.com
multiheadac.com
n-sport.xyz
naggerswithaltitude.com
nchh43.xyz
netflix-regularisation.com
neuro-ai-web-ru.club
nodescamp.com
phasernet.net
prioryfinconsulting.com
pulsecdn.com
q1g2.com
rayofdesign.online
reviewkiliszekteam.com
scottybhomeimprovementllc.com
shalesmedia.com
stanislauslabs.com
tametaverse.com
tankheadmuaythai.com
tanya-kevin-coelho.com
terrificlowdowntoskimtoday.info
terrybridie.com
thesoapcottage.com
vue-update.com
windowfilmspecialists.com
zuinigerijder.com

# Reference: https://twitter.com/reecdeep/status/1483348720120967171

tangodo9.info

# Reference: https://tria.ge/220118-rflzpsbfak

14gjm.xyz
365xeber.info
8we46.net
961115694.xyz
adoratv.net
advancedbenifits.net
aprenda-sg-sst.com
avanproekt.com
becu84ts.com
birinciplastik.com
briskism.com
cajunrecovery.com
cameraip.digital
caringhandsofwyoming.com
centogrisolia.com
clagpr.net
codyparkerlpc.com
coremaxcorps.com
dishtagena.com
dominictrott.net
doverace.com
enjoyzh.com
fixedratehub.com
francegravures.com
generationimpactmasterclass.com
greenwoodok.com
hairuno.com
hauheung.xyz
hopeforlifefoundationbd.com
huntingtheeclipse.com
iegco.group
ipservicesaggregator.com
ko4tei.com
masoomalearn.online
michellemall.com
myfantasymodels.com
mystrangedog.com
norosunda.com
northlakepoa.com
originalsalywhale.com
ovsshop.online
paisakamaao.com
permitaser.club
poradniabioetyczna.com
pra-accessibility.com
ptalojamento.website
punksparrow.com
qardho.net
rentunk.com
research-center.xyz
royalproxymarketing.com
santablahblah.com
sdsdvip.com
secretgardensanctuart.com
spatialmapmaker.com
stupidcreature.com
stwconnections.com
subsistqlxxmf.online
sumai.tech
timyaa.com
vitamincfood.com
wiza-investment.com
wzks.xyz
yoloyoho.com
yongincit.com

# Reference: https://tria.ge/220120-kp5pvahbbm/static1

52economics.com
alcmjd.xyz
alraedest.com
anaccommodation.com
annual-journals.com
anthropophony.com
asiafinances.com
bitherders.com
buxledger.com
cryptolux.store
dlapi.xyz
dp-yszxwbhc.com
dragonflyessence.com
dreamsinbloomphotography.com
dualamaquinaria.com
dunespro.com
duocaterers.com
eleynworld.com
firebreathingpenguin.com
foodgw.com
fullharvestfundraising.com
fykori.xyz
globalyuncang.com
gracing-up.com
greenlightiim.com
howtomakearesume.space
ialife.info
immovableproperty.online
jacqueson-autocars.com
jcrealtydesigns.com
kennascookies.com
massagecon.com
mbbfocean.xyz
meetjaykinder.com
meta-medical.info
modernwarfaresecrets.com
momubeauty.com
mydemosite0.com
nautic-experts-hageboelling.com
neurochirurgie-eisner.com
nicoletian.com
nillprive.com
noaoka.com
prizebuddy.club
ramziflowers.com
rapslearning.online
royalfountainlogistics.com
rxd-ereecd.com
sallyandterry.com
sexcommittee.com
slingactivt.com
southaustinmarket.com
strelingcollectibles.com
theamalfiswim.com
thedefinitionteam.store
thrili.com
uncle.finance
undershieldz.com
wicked-smokes.com
wy-bride.com
xbdsm.club
yogamat-turban.com
youcarboneutral.com
yourtechyadda.com

# Reference: https://twitter.com/pmmkowalczyk/status/1485591842494238732
# Reference: https://www.virustotal.com/gui/file/fbfcc39fb2e03d204a83cb9dceaa90e692ddb28367457586fdace8ff27b11d88/detection

belindahulett.com
fikretbayrakdar.com
kamchatka-agency.com
mytrainermatrix.online
personas1web.com

# Reference: https://twitter.com/reecdeep/status/1486634645265567744

2ab0.com
9681627.com
ashleighevan.com
ativaragora.site
bancogmacsa.com
botpg.com
brocoser.com
bs-pipe.com
campusmoneytree.com
chuangshihuoban.com
coastmortgageloans.com
cubana-pablo.com
cxyzjsrc.com
dutrax.online
eshaalgilliamslbui.com
facecapades.com
fistoffraggers.xyz
forthesaltysouls.com
francescabaldi.coach
gophastr.com
greywearimpex.com
halloween-ready.com
haxable.com
idahofloat.com
infoavatarslot88.com
katsuyatoken.com
klmywmux.com
krisandmeigeni.com
localemergencies.com
metainstagram.faith
metanovibrand.design
metawhatsapp.insure
netpug.com
nipahvax.com
ordinaryborrow.xyz
otl-logistik-gmbh.com
ourdogdream.com
paddyscaddy.com
personalbias.com
portalzy.com
quantumcapital.technology
realdolls.website
rejykio.site
revtiredirect.com
sbyidn.net
sejt.xyz
sheinfluenceschange.com
superbstix.com
tarinalintu.net
theahmadis.com
thebestmediaguy.com
thefomorprophecy.com
themarketplace.digital
thepowerofdtk.com
trttanks.com
trustminingfx.trade
umoveebikes.com
unpeg.xyz
weldonswestern.com
writesco.com
xsightvideos.online
xxyipay.com
yoko-by.com
zaphysio.com
zfld1.com

# Reference: https://tria.ge/220127-nzvjeacdb8/static1

599qu.com
77hub.cloud
albanybestbuyers.com
amazingfactsabouteverything.com
antonavt.com
bedplot.xyz
cdamanagementservices.com
chefjeffrecipes.com
cloudymellows.com
colorbells.com
connectedmk.com
cowboychannellpus.com
cryptopal.xyz
dreamyhousewife.com
explainersadvids.team
groovyrelease-toknowtoday.info
hainanmizhi.xyz
hypedrize.com
infostate.store
javacodecafe.com
kezorup.online
liquidministry.store
m7ssucx.xyz
manoncollinet.com
metaheaven.global
miclanka.com
mohaisen.xyz
mwm-security.com
my12127.com
parcel-alert-redelivery.com
phxpowdercoating.com
ponpesihsaniyah.com
propelcolor.com
qterps.com
riskfreeenergy.com
s-h-a-h.com
sdfvlog.xyz
smithstores.net
soakedindelight.online
southernfreelancersph.com
spineklinik.com
supershhhbros.com
synjive.com
szabossteakandseafood.com
tampanazareno.com
tgogziae.com
thefirstgroupscam.biz
thenftlotterys.com
threegalasdesigns.com
tradecardsbtz.com
trinksaifenradiodocumentary.com
uniqueclsssiccars.com
unitedwii.com
ventadesillasymesas.com
vozeestore.com
wakilin.com
walltage.com
willtuckfinancial.com
wofdex.com
woshinidie1990.com
wu8jvohkp12w.xyz
xk8abxci6ogf.xyz
xn--arbetslivsaktren-ywb.com
xu7d7mfh6fht.xyz
yfsallegiance.com

# Reference: https://tria.ge/220124-slq2aafcbm

5gwirelesszone.com
a9d7c19f0282.com
babyvv.com
besrbee.com
bhalawat.com
bodevolidu.quest
boraviajar.website
browsealto.com
cbd-cannabis-store.com
certidaoja.com
chahuima.com
chatteusa.com
cletechsolutions.com
cryptointelcenter.com
cyberitconsultingz.com
dairatwsl.com
drmichaelirvine.com
dtsddcpj.com
fairytalesinc.com
fly-crypto.com
genrage.com
hevenorfeed.com
hf59184.com
hominyprintingmuseum.com
hostedexchangemaintainces.com
jingguanfm.com
jkbswj.com
kadinisigi.com
kovogueshop.com
kymyra.com
laqueenbeautybar.supplies
lendsoar.com
lewismiddleton.com
lovebydarius.store
loversscout.com
m2momshealth.com
mes-dents-blanches.com
minjia56.com
mintnft.tours
nba2klocker.team
nethunsleather.com
nxn-n.com
oded.top
onlinesindh.com
ordermws-brands.com
perfectionbyinjection.com
picturebookoriginals.com
redsigndesign.com
scgxjp.com
semejnyjochag.com
servicesitcy.com
shinepatio.com
shopvintageallure.com
skin4trade.com
smplkindness.com
snowjamproductiosmedia.com
taksimbet13.com
trist-n.tech
uptimisedmc.com
vacoveco.com
virginialandsforsale.com
waltersswholesale.com
wayfinderacu.com
workerscompfl1.com
xrgoods.com

# Reference: https://twitter.com/reecdeep/status/1488086128603406336
# Reference: https://app.any.run/tasks/5e09730c-56c9-46d3-b299-90cabc735603/
# Reference: https://tria.ge/220131-la8zdsghdn/static1

0003271.win
accessiodoc.com
accurbizlist.com
acingthesat.com
amelntl.net
ammarus.com
ankaraninbaglari.xyz
aprilrehrig.com
barkleysbettermints.com
bestinvestments.pro
blissfulcreativework.store
boogey.xyz
bundleandpreloved.com
cedacventures.com
chattelsmore.com
chengxinyuan.online
chuckmitchel.com
crochetbycare.com
cryptoandshirt.com
diesva.online
evesfashion.online
explorelacrescent.com
f2fcomunicacion.com
fedelini.online
focalberth.com
furnitureqchina.com
gloriamcarter.com
griffin-intl-ltd.com
gstfranchisecenter.com
hbsckj.net
hospedajeteques.com
hothess.com
imagepixo.com
jdmnn.com
jimoshopping.com
juliadeantravelworkshops.com
ksssz.com
kusiwara.com
magnificpets.com
manimani1225.com
marinayouth.com
medyasmmpanel.net
mkpackersandmovers.com
modernleadersacademy.com
newbalancebestsale.xyz
nwzjr.com
oceanic-sauna.online
passiverewardssystems.net
popierwszezdrowie.net
pressonnailsie.com
rajuulabels.com
relyoncarlos.com
selberherrlab.com
sycochic.com
szkoleniapolskilad.online
taiwanlongyu.com
techsonworld.com
the-pumps.com
thebestcloudcomputing.info
theebook.cloud
timdixonpreferredadvisors.com
unicornbourbon.com
unitedstatesarmyfieldband.com
webpassion.club
yuanyuzhougame.net

# Reference: https://twitter.com/reecdeep/status/1488821892387647488
# Reference: https://tria.ge/220202-mcjyqaaae6/static1

1w3.space
absolutenuisance.com
airtogether.com
ak8flfqzm8.com
arrow-electronics-corps.net
balanzaseconomicas.com
baysidecanton.com
bdelsaer.com
best-eternal.com
camaras.store
chamaaibrasil.com
cryptoclits.club
cyberews.net
daliborkokic.com
data-schwab.com
datemyso.com
directmail411.com
doctorsby.com
fruittys.com
gamiteisnowjoyned.com
gelsinpremium.com
glistonshop.com
global-forbes.biz
hightings.com
hkkbags.com
honeyroux.com
iot-vn.com
itsajinkyaraj.xyz
maktabarasheedia.online
mburmtdvccti.mobi
mpu-vermittlung.com
mrk-9.com
naclepin2a.xyz
needscooters.com
nicethelab.com
nnhhhhnn5.net
nropes.com
operationservefirst.com
paijuluntan.com
paprikaproduksiyon.com
profitablemechanic.com
pvu1863.com
redenyl.com
regitconference.com
resilientbutterfly.com
retellinn.com
rodrigocoppa.com
roofrepairnow.info
schneex.store
silverhavenfinance.com
tanzibkarate.quest
tdetesla.com
temaksa.com
thebritenseries.com
thesuvidhastore.com
thomas-wildlife-control.com
thruzens.com
timothykmyers.store
tinawcounseling.com
tipshalal.net
townsvillelawnservice.com
urnam.com
whatsappstatus17.com
xn--1lq90isray30ltdc.xn--czru2d
ydbsy.com

# Reference: https://www.virustotal.com/gui/file/daa049b15bb5c1d0aef06276f9940d2fea76242f1a01ebfe299a63b7c74f7ea0/detection

http://185.238.168.187
/d_add

# Reference: https://twitter.com/pmmkowalczyk/status/1493194105257607173
# Reference: https://tria.ge/220214-nr5peaafhj

636851.com
air-watches.com
airlesscondimentdispenser.com
anentbottskeen.com
annahve.xyz
aracsozluk.com
australishomes.com
becu84ts.com
birdy3000.com
bitcointradel.com
boxedwallconsepts.net
bundesfinanzeministerium-de.com
buongpuso.com
campervan.love
carbsupplements.com
cngm7e.com
common-criteria-isac.com
domainsraj.com
elaish.com
epilepsycolorado.online
executive-air.net
eygtogel021.com
fisioletsgo.com
freeadakahamazon.com
goldenconcept.art
gpawidegroup.com
hackensackfitness.com
hanssuter.com
healingandhealthy.com
ilmarijuanadispensary.com
iloveapple62.com
kidskarateonline.com
luckyfandom.com
nightcanteen.com
nutcrackernoww.com
nvgso.com
online-bolgar18.com
petips.xyz
potserve.com
proceam.com
qhwl2017.com
qubtantoys.com
rashil.digital
rushpcbtest.info
sahumeriosartesanales.com
salonautostock.com
savarsell.com
sdunifiednursingcollege.com
sehatherba.online
sharifulmer.online
skillga.com
subritulandoando.com
sumiyoshiku-inoitami.xyz
tackle.tools
thelukeliu.com
tkspoboys.com
tonghetaiye.com
turmoilgomkww.xyz
victoriajayde.com
vyounglighting.com
woodstor.com
xiexingyu.top
zaar.solutions
zdbhl.com
zj7aszamjwe3.biz

# Reference: https://twitter.com/reecdeep/status/1493510598545526784

037yu.xyz
1ees.com
80cq926.top
adelaideofficeinteriors.com
alba-laser.com
albayscofield.club
arbiz.farm
arrowelectronics-corp.net
birchbayapartments.com
brisbanecarcollectors.com
cahc.info
colorfulfluidchaos.com
cwdestore.com
daidalo.com
dcfrc.com
enjoy2m.xyz
enrevologix.com
goldenrhythm.com
hnjst.net
institutozavaleta.com
internaturalestetik.com
intricatepainting.com
iwjvit.com
jack-barbara-memorial.com
kincsemto.net
konjophotos.com
libreriarenemoreno.com
liveincare-online.com
localmarketagents.com
marianiartspace.online
miamitaxes1040.com
mimihin.com
mintbox.pro
mmnbm.com
moonsonkashback.xyz
mothersmilktn.com
nahda92.com
nordic-aesthetics.com
northernlightdebtrelief.com
oki-net.com
omniahgames.com
onboardaltdigitalavg.rest
onlinedelivery.biz
phpmv.com
plickthepick.com
poseidonvips.com
primelinedistanc.ltd
qhyingtu.com
searingrofivt.xyz
sentpostja.com
sfheatpumps.com
shabupaperpot.com
shepinhang.net
sixfigurefundamentals.com
smartsew.online
sogu.one
someglimpses.com
stoneprodirectory.com
sugarkelly.com
testimonial.direct
toptraveltouch.com
vanlifedubai.com
watchonlineplay.xyz
wildeblum.biz
yun183.xyz

# Reference: https://www.virustotal.com/gui/file/1155c0a3ed4fff855d7638989626d70a34a9cd35c943d5899fce5fa8fb2a47e2/detection

pixi-url.herokuapp.com

# Reference: https://twitter.com/James_inthe_box/status/1493995456434630656
# Reference: https://app.any.run/tasks/149afc40-954d-41f5-b32d-751651839d28/

czuj.info

# Reference: https://twitter.com/reecdeep/status/1494613626958880768
# Reference: https://tria.ge/220218-lrwqdscda9/static1
# Reference: https://app.any.run/tasks/b5707b2a-5356-4659-8997-969193a1dbf7/

1stuebc.com
77xy.xyz
academiademujerespro.com
alex-covalcova.space
androidappprogrammierie.com
anwisystems.com
armbandtas.com
autnvg.com
benormxukraine.xyz
buylowatlanta.com
buytacpyshop.xyz
cardinalsplayerstore.com
catrionatowriss.com
clarensis.com
cruzinu.xyz
drnicholasreid.com
gbwpmz.com
gents.style
globalrockstar.xyz
greenelectricmotors.com
have4grand.com
heathlytrim.com
hilldoor.com
hnart-child.com
hongjunwuliu.com
hopejustmade.com
ilovesinglemoms.com
interviewacomicnerd.com
jitsystems.com
jklhs7gl.xyz
junicy.com
kcebtaz.xyz
kenmark-inc.com
ksherill.com
lagosian.store
lesaventuresdecocomango.com
libertymutualgrou.com
lifuyao.com
makciakla.com
matercenter.com
mcattoneys.com
metaaiqr.com
nameniboothac.com
nexuslanka.com
npwpkl.com
oculos-ajustavel-br.xyz
ollorhythm.com
ozkonyalikebap.com
pholoniex-an.xyz
racingsilks-nft.com
raverwren.net
recuerdosoxidados.com
relatingtohumans.com
sidesofthenorth.com
socialfiguild.com
stocktonfingerprinting.com
topbunkconsulting.com
uidrp.com
vegecru.com
veuology.com
wghakt016.xyz
wu8d616yyt6z.xyz
wu8ggqdv077p.xyz
xn--kinsithrapeute-dkbe.xyz

# Reference: https://tria.ge/220218-nlkgaadcfq

024labs.com
69xibao.xyz
979511.com
aaronlala.store
accountingsoftwaresusweb.com
aleksandartaskov.com
arcade24d.biz
autobras.online
balatonartcenter.com
bctransporter.net
bez-part-ufa.xyz
bitsgifts.com
blantontransport.com
braktonem.quest
certipsy.com
chrisdaughtryfans.com
cindercapacitacion.com
cpybc.com
cq396.com
curatedcraze.com
deluxeinterior.design
detentionart.com
drivelingo.com
dsp-energe.com
equito.agency
for2play.com
fourcrestaurant.com
futureoneafrica.tv
garageair.agency
gbnagkvr.xyz
genyuandl.com
hsa-attorneys.com
jantfencingandsheds.com
jasbellyfusion.com
jlhvz.com
jungleking.online
liberatoreshepherds.com
longlastingoil.com
macadamangel.com
metalcorpperu.com
metaverseloot.club
mokkaoffice.com
moniqueroerdink.online
mypartners-april-investors.com
neurosise.com
novregen.com
nowosee.com
oakiedokies.com
organizedkay.com
paghosting.net
pysznepay.com
salamdiab.com
seculardata.com
tecnophone.net
thehelloloveshop.com
tinturas-plantas.com
trinsity-solsar.com
uniquesi.com
wakasenninshikirenaitechnic.com
waltersswholesale.com
weddingtowifepodcast.com
xcybook.com
xfdtiz.xyz
xn--80ajy8a.xn--80asehdb
z5jgazn.xyz

# Reference: https://twitter.com/JAMESWT_MHT/status/1495449578556080136

apollorealtors.com

# Reference: https://tria.ge/220222-rtv5jaback/static1

0396pp.com
allscapeslandscapeinc.net
aviabiletkassa.com
bagour.com
bfreemovement.com
blue1hello.xyz
bolerconcepts.com
bucaescortbayan.xyz
bzore.com
camscouplelive.com
carenowgroup.com
carsvehiclesapps.pro
chrishonbell.com
cyber-attack-simulator.com
detonix.xyz
dikdikpics.com
disbep.com
effizienz.coach
eleanorreardon.com
fijnstraal.online
fixedincomeauctions.com
fourtradeghana.com
fraudulenttransaction.com
gabriellahall.com
goodhandscare.net
groeducation.com
himalayanwanderwoods.com
insu1con.com
iphone13mini.onl
isabellaeveapparel.com
jedanetworks.com
lashedsa.com
lmhaglund.com
lookyanychev.store
luxurypartygirls.com
lz-jaini1615-hw0916-bs.xyz
maxicashprodif.xyz
michael-ludwig.info
mylavabo.com
offer5u.com
openseagames.com
peaks-hub.com
petinggiean.tech
polebear.xyz
professorrolandocaballero.com
reidak.com
remixedteez.com
riologisticsinc.com
rotorotos.com
sddn55.xyz
selezionemiccis.com
signalscrossed.com
sinceretour.com
solutionsemissionsimplifiee.com
stor-morathens.com
tennesseelegendarycleaners.com
thentn.com
theshaheenos.com
ttagoa.com
w5gbaq.xyz
whitedovepottery.com
wychit.com
xn--3h3b77jqteeykb4g.com
yenerbelli.com
zhchgx.com

# Reference: https://twitter.com/James_inthe_box/status/1496566212649570305

nnpcoil.buzz

# Reference: https://twitter.com/c_APT_ure/status/1498967728002060290
# Reference: https://www.virustotal.com/gui/file/587db04b7b6cfd24c9c33bb352bbb8a32f069a15853faffeec0d48baf82cad6a/detection

http://156.96.154.210
amtechprinting.com/Ioqsvp.jpg

# Reference: https://tria.ge/220303-jfcr2abdar/static1

76482.icu
79znw1ajsv.xyz
ailanis.com
allaboutthepatterns.com
atalayagroups.com
bmxpro.online
cabrioletx.com
cannabisseedreviews.com
cheappricecompare.com
chicagohomeremodel.com
christian-lehrmann.com
coppaitalia3d2022.com
coreagency.net
cryptopedagogy.money
curibo.xyz
deteccion.online
dinox.tech
exactgeneralcontractors.com
fishgirlfeats.com
glamourendorsedsquire.life
greenlabdelivery.com
gs385.com
hapocun.link
hashtagorg.com
hc6ady6y837tn.xyz
hc6dlm7febdpv.xyz
hnkhackingdojo.xyz
i-97eevvq.life
installationart.online
kinlin.net
lamornewright.com
lassopicinnovations.com
laurapaganigarrastzu.online
managedsupportia.com
medicinehattowing.com
mission15.com
modernconstruction.company
monimachine.com
moonbeam33has.com
oermap.xyz
passyourlicence.com
petir55.com
promotion-atserviice.store
quantumanite.com
quickbodyslim.com
razavi8.net
renaltrials.com
renmaitong365.com
rumahmakanbutin.com
saleswoodstock.com
scottsdowntime.com
speaktartar.com
spoluprehlohovec.online
testing12345678.com
themodernmandiary.com
tianbaolan.com
tipo-bet365.net
tydonyb.com
tyhup.xyz
unicus.company
update-edv.cloud
upper90sports.com
vised.xyz
yeswesing.com
yucer.xyz

# Reference: https://twitter.com/peterkruse/status/1499320398701342721

fastcredit.club
jbelleandcompany.com
letsfeaturemedia.com
outerverse.estate
panyuhao.online
rasa.services
xn--legande-rza.com

# Reference: https://twitter.com/MBThreatIntel/status/1499435864035934212

czuj.info
habitatsaludable.website
maxxflush.com
modhotels.store
vzddc.com

# Reference: https://tria.ge/220304-p2f98sgcdk/static1

1207rossmoyne.com
20dzwww.com
595531.com
68135.online
77777.store
ahmadfaizlajis.com
alert78.info
alifdanismanlik.com
allmnlenem.quest
anniebapartments.com
awp.email
bendyourtongue.com
berylgrote.top
bestpleasure4u.com
boardsandbeamsdecor.com
bubu3cin.com
byausorsm26-plala.xyz
cielotherepy.com
crux-at.com
customapronsnow.com
dandtglaziers.com
deepootech.com
drimev.com
encludemedia.com
fabio.tools
game2plays.com
gongwenbo.com
gulfund.com
hagenbicycles.com
handejqr.com
herbalist101.com
hugsforbubbs.com
jasabacklinkweb20.com
kreativevisibility.net
kuechenpruefer.com
laidbackfurniture.store
lankasirinspa.com
launchclik.com
leatherman-neal.com
librairie-adrienne.com
mddc.clinic
mehfeels.com
metavillagehub.com
mobilpartes.com
nathanmartinez.digital
oecmgroup.com
oprimanumerodos.com
pkem.top
protection-onepa.com
rematedeldia.com
segurofunerarioar.com
seo-art.agency
shristiprintingplaces.com
silkyflawless.com
southerncorrosion.net
spbutoto.com
t1uba.com
tajniezdrzi.quest
teamidc.com
the-pumps.com
thecuratedpour.com
tracynicolalamond.com
turkcuyuz.com
uschargeport.com
vulacils.com

# Reference: https://tria.ge/220302-m7zyesgdak

567go.club
943991.com
abiding-life.com
abioduncleaningservices.com
artistrytribute.com
arvidaontour.online
ashokeperception.com
atisbeauty.com
basepicks.com
bujok.xyz
chattelsandmore.net
cindyrandband.com
comhotfile.com
deamorwineandoil.com
diagnosiscovid.online
diamond138.biz
djcaponeofficial.com
duikescollection.com
ecoimpactnft.com
elefantenverlag.online
gafiber.com
goldapp.info
heystudiocr.com
highanddrygardenworks.com
i5yx.tech
ibfsinc.com
igorleonardo.com
itdiver.com
jackiesimon.photos
jascroggins.com
kyomaruheyblog.com
lesulemetrin.quest
lipsrv.com
loyanto.com
mazengr.com
mcdonnellanalytics.store
mein-amberg.com
mengesleckst.quest
missmayuri.com
mlxezzvvxtuujipokez.biz
moreosin.com
my688.xyz
myarsemychoice.com
mydkabc.com
native-shirt.com
nernsnook.online
nicolasreboledo.com
papadeuxpointzero.com
pfotenpower.net
physiocare-ye.com
pluggdicono.quest
ppskse.com
sientespa.com
smith-command.com
sponsorclient.com
starzara.com
stronghal.com
tess-factor.net
timberwolves365.com
tolexinesansordonnance.space
topshop4kids.com
ttcolorz.com
vertexwebdesign.us
wtsam.com
zaboctoatoa.quest

# Reference: https://twitter.com/peterkruse/status/1501506590914056192

3cnew.com
4127raymondav.info
68132.online
debriefenmif.club
ecosystem.team
switchyardcharlotte.com
thesmokecircle.com
ycjtwy.net

# Reference: https://tria.ge/220309-lzhhqsgch3

567go.club
943991.com
abiding-life.com
abioduncleaningservices.com
artistrytribute.com
arvidaontour.online
ashokeperception.com
atisbeauty.com
basepicks.com
bujok.xyz
chattelsandmore.net
cindyrandband.com
comhotfile.com
deamorwineandoil.com
diagnosiscovid.online
diamond138.biz
djcaponeofficial.com
duikescollection.com
ecoimpactnft.com
elefantenverlag.online
gafiber.com
goldapp.info
heystudiocr.com
highanddrygardenworks.com
i5yx.tech
ibfsinc.com
igorleonardo.com
itdiver.com
jackiesimon.photos
jascroggins.com
kyomaruheyblog.com
lesulemetrin.quest
lipsrv.com
loyanto.com
mazengr.com
mcdonnellanalytics.store
mein-amberg.com
mengesleckst.quest
missmayuri.com
mlxezzvvxtuujipokez.biz
moreosin.com
my688.xyz
myarsemychoice.com
mydkabc.com
native-shirt.com
nernsnook.online
nicolasreboledo.com
papadeuxpointzero.com
pfotenpower.net
physiocare-ye.com
pluggdicono.quest
ppskse.com
sientespa.com
smith-command.com
sponsorclient.com
starzara.com
stronghal.com
tess-factor.net
timberwolves365.com
tolexinesansordonnance.space
topshop4kids.com
ttcolorz.com
vertexwebdesign.us
wtsam.com
zaboctoatoa.quest

# Reference: https://cert.gov.ua/article/37688 (Ukrainian)

gobits3.com

# Reference: https://www.virustotal.com/gui/file/f09d1a726e7cdc701ce9be7f0988b7751896140fa76d9db2c4b3189d8cf9e0b6/detection

185.244.31.132:1809
stonecold.ddns.net

# Reference: https://twitter.com/reecdeep/status/1504365541502459908

pedorc.com

# Reference: https://twitter.com/reecdeep/status/1504467051267575817

arches2.com

# Reference: https://blog.talosintelligence.com/2022/03/threat-roundup-0311-0318.html (# Win.Dropper.Remcos-9941356-0)
# Reference: https://www.virustotal.com/gui/file/26d19ab100f651d0a6c6b4f9d69a0fb3dc04ff6073bf852497f81be982996c74/detection

41230793.net
besthappybuds.net
hanaleedossmann.com
hotsmail.today
hypersarv.com
igametalent.com
jialingjiangpubu.com
joomlas123.info
liqourforyou.com
midlandshomesolutionsltd.com
moodandmystery.com
rapport-happy-wedding.com
sellingforcreators.com
shadowlandswitchery.com
shoupaizhao.com
twoblazesartworks.com
whatsnexttnd.com
wwwswty6655.com
yoursafetraffictoupdates.review
ziruixu.com
zoneshopemenowz.com

# Reference: https://tria.ge/220321-vp2y3adce2

5okx.com
affinitybuzz.com
andro.finance
budunkafunk.com
canadazk.com
ceonsolutions.info
computevault.com
coriliechty.com
cryptwo.xyz
dailyjointhealth.com
ecolifeco.com
fatflorida.com
flawdogs.com
freeloanseva.com
gangsha2001.com
green-stone.solutions
happyhempbakery.com
hilutv.xyz
hizika.com
idyijr28j.xyz
infinitelifetransformations.com
joansbestshop.xyz
khenonline.com
kingstreetlife.com
kosaz.online
liveexim.com
lqctqtal.xyz
luxefashionaire.com
madamebet.com
menzelengineering.com
mydactil.online
ndcqchc.com
newdealny.com
nfhotel.net
nginspection.com
njpropertyrecors.com
non-transferabletokens.com
noticejcb.xyz
packingfairturkiye.com
paypalverifie.com
positionme.site
rever-age.com
ridgwayracing.com
rommyarf.com
room4rent.net
rsvip13cvx.xyz
ruscc.xyz
securitenovo.com
shalomsingapore.com
shanaesbeauty.com
societalsystemic.com
steady.store
successvideo.today
sveshtivosak.com
thetimewheel.com
tuvanvaytien24h.site
uc-usa.com
unicryptdoge.com
unityassetstock.com
vacumeet.xyz
westfieldswetlands.com
wingonvacations.com
wodev.biz
xfcad20.icu
yaxi868.com

# Reference: https://tria.ge/220327-wct85abae2

3pxm.xyz
59208.xyz
amongusleaks.com
antiwardrobe.com
athlonebiokinesiology.com
avrecommendwiki.com
boatsrentalcda.com
carseg.site
chayaelements.store
clemons.tech
colormusedesignco.com
cricutonlinesales.store
crowd-news.com
dasenlin-jiaju.com
demopanel.xyz
forkidofukraine.com
galabet472.com
giftexpress15.xyz
gtm-kalisumapa.com
haotian9981.com
hqdtgyl.com
huangsanguai.com
indianfood101.com
invtips.com
ipoyce.online
iyraproperties.com
jinwanlicai88.com
jjshomefurniture.com
jogo.tech
kawuldim.com
kelaikemc.com
kompanko.com
lonesomevalley.xyz
lowdowntracks.com
lvsebianzhidai.com
melaniewieseler.com
miaurora.net
newgenelectronics.com
nikahclub.com
nuoim.com
oa1xs.xyz
okparking2013.com
orino.info
outletscheapjordans.com
peaceandlovebhs.com
pyttoin.xyz
qewuy.biz
raidencity.net
reveplac.com
ripper66.com
rooplaza.com
rowanmasonry.com
scrubbinsisters.com
storkbucket.online
templerestleisure.com
thecodealchemist.net
tvpoy.xyz
victoroverseas.com
wecome.club
wiggly.site
xfmm9538.com
xn--h6q362bj4mp5c.com
xpertlockandsafe.com
your-funds-available.com
zhekou8.net

# Reference: https://twitter.com/peterkruse/status/1510927735325175810

germanshepherdpupz.com
jardindaime.com
sextv18.com
ulrichfab.com
ykahap.xyz

# Reference: https://www.virustotal.com/gui/domain/online-be.xyz/relations

online-be.xyz

# Reference: https://www.virustotal.com/gui/file/047ff786f8bdd92bcf070f006d07ee6ca9bf63bd08213ec6b8807486c8b3f016/detection

domaky.com
lauravitale.net
rest-report.com

# Reference: https://www.virustotal.com/gui/file/3c94599cada17b9fae62316e54a1d69db7c475223721a5a57abe8774a2b5da74/detection

09012345678.com
alloneart.com
antoniolopezmurillo.com
beaconhillboston.net
blakfri.com
chicasgunsboutique.com
contorig2.com
digitaldownlinesecrets.com
edenwholistichealth.com
effectivevip.com
homebuyerspa.com
jasminespot.com
joshjohnson.pro
jumbkprivacy.com
khoemanh.club
kyyx666.com
letscompile.com
mythree-informationupdates.com
pusatsopsubarashi.com
storeralumni.com
travelchina.store
underpressurecare.com
wantedtrek.com
willysuefarms.com
xvideoapps.com
yuanyouwang.com

# Reference: https://www.virustotal.com/gui/file/b84fdaf6b81dfa063bf018bb2ed589f5fe71e694ae86f7b2ca7e1554eb11563f/detection

bakegeeks.com
contorig2.com
fontaine-escargots.com
impactxnow.com
khoemanh.club
letscompile.com
level60media.com
lushlobes.net
master.recipes
mst-srv.net
oryzeae.xyz
pinkinomanbeauty.com
stoneautoaces.com
wantedtrek.com
yuanyouwang.com
zxywxmr.com

# Reference: https://www.virustotal.com/gui/file/19f97cbe74d777797e6f6c5e323b8611dbf57811a7d8f58b9ba8ea8171c19188/detection

736141.com
aater.space
adampulpit.com
benenopen.online
bihada-news.space
bit-eth.com
bjyanqiao.com
bssystemonline.com
bybundy.net
dallasdwiguy.com
eduardoorosc.club
erikakorma.com
galabet0350.com
irvid.info
jackmeetjay.com
keepitng.com
kffreshfruit.com
lscarlzk.com
luokeseals.com
mamamachi.com
mivolts.com
nemetgyakorlo.com
nomadisen.com
nutrioclinic.com
orderinformantmailer.tech
osmium-institute-paraguay.com
payments-gate-325r.xyz
rbmo.top
rubberyrofqci.xyz
sishedh.xyz
stripmywalls.com
tangoespasion.com
theorigins.xyz
thepopularboots.com
wucaishisc.com

# Reference: https://yoroi.company/research/office-documents-may-the-xll-technique-change-the-threat-landscape-in-2022/
# Reference: https://otx.alienvault.com/pulse/6193e3f5b119e561c52ed3ba

art-space.xyz

# Reference: https://tria.ge/220418-rbygyadhh9

21sq.xyz
2day-recv.info
adforalums.com
afromoorishfilms.com
aleimanpaper.com
algurg-living.com
allmoves.net
anatox-lab.fr
ankaraogrenciescort.xyz
bethesdaclinicllc.com
chouwakarunewssokuhou.com
coach2college.com
creativeportraitstudios.com
csfromsinai.com
cumbrebomberos.com
d72gmj3bpdhc.biz
directionsettingpoint.xyz
eludice.net
emdestak.com
feinquebrantabledoc.com
fifihill.com
findinvest.xyz
gasandliquidcontrols.com
generatorgmer.xyz
geoplates.com
gmcrjizppcx.mobi
gorastionse.store
greenft.xyz
hobe.agency
impqtantaou.com
inmyhindi.com
j3ebx4thyf5h.biz
joinlegacyforge.com
keepitng.com
lamphuchai.xyz
lianxiwan.xyz
losangelescapainters.com
lovawood.com
medicinalweed.lat
meenubhosale.com
mgav23.xyz
mintnft.fund
nidoumenojinsei.online
njjbds.com
nomorewarnow.com
nuhuo333.xyz
onthemarket-smartboard.com
plotniska.net
powersforsupervillains.com
ptmetaverse.com
qywyfeo8.xyz
r-souls.com
scmce.com
seacoasttractor.com
seattlerealestateauction.com
soulworkerrush.com
sourcemycandles.com
stealthcarrier.com
sxuseon.com
thephilangies.com
upisout.com
valgtrizoma.quest
vendasaprovadaonline.com
webwideoffers.com
xiraji21.com

# Reference: https://tria.ge/220414-j7arraagfq

4caminos.biz
5151vip51.com
701017.com
aauni.academy
aestheticpls.com
allcityinterior.com
apexautomationsales.com
axelaguilar.com
beritabolabo.com
bestmodsforminecraft.com
boostover.net
buzzsaw.club
carfik.com
cattlecallphotography.com
charbousisterofthemoon.com
chaunceybarett.com
cockgirls.com
corporacionddt.com
crypto-geniusworld.biz
darkharborband.com
dgmnsp.com
eddemployments.com
erodingbnustx.xyz
gamblrapps.com
gg168bj.com
helpcloud.xyz
hexedox.com
icyreps.com
jakubkokoszka.net
jarrellmahusay.com
jzwlhg.com
kyukeimap.com
laconsentidaseleccion.com
lshdkj.com
lu-dra.xyz
mavrlabs.com
mixcogroup.com
munixc.info
myesunlife.xyz
onlinedownload.digital
pavlovsbakery.online
peternieboer.com
prona.xyz
recom-altaka.com
researchers.company
rewlec.com
rodblur.com
rtexbot.com
rush-booking.com
sewncurtainsandblinds.com
silentpartner.plus
stateofbiotech.com
supraforward.com
theeastendvoice.com
thefliptruck.com
thelindleyfamily.com
tonysgourmetpizza.com
tudoemvendas.com
universityairexperts.com
upnnett.com
urbannft.xyz
virtualofficesolutionspro.com
warungdgital.com
xn--g2xt1dp5qljo.com
yudaria.com

# Reference: http://blog.talosintelligence.com/2022/04/threat-roundup-0415-0422.html (# Win.Dropper.Formbook-9944286-0)

5151vip25.com
aestheticpls.com
amazonbrickandmortarretail.net
amelntl.net
awp.email
beylikduzuhatunlar.com
bucariito.com
carfik.com
cgbbqllc.com
cherrythechickenandfriends.com
dynwa.com
fabio.tools
fujistrek.quest
hbsckj.net
hdlypx.com
ideastax.com
jakubkokoszka.net
lshdkj.com
nbsze0.com
positiontrader.club
sauqenta.com
stronyinternetower.com
supraforward.com
theeastendvoice.com

# Reference: https://www.virustotal.com/gui/file/506c0eb3e46ed30251d48f7d39d0cfd14f3bf4c6a90a4ce37d7d76c3ab0e8fb5/detection

bonbyk.xyz
comfortshoppingmart.com
divinacafeteria.com
fieijfjie.xyz
shopexstore.club
xn--42cg2czax6ptae6a.com
zhidaojy.com

# Reference: https://www.virustotal.com/gui/file/2436139a182cd467b9669673ef9953bd25337fbb083995a7b69534bcfb75e9d5/detection

bondihome.store
excellglobus.com
grasshopperswickedpickles.net
mindgasma.com
onlinechwilowka.info
silyutin-invest.online
sunnote.net
voilathefamilyrecipeguide.com

# Reference: https://www.virustotal.com/gui/file/02b2f3c02cfa488e665ff9e41233993dcfe8f2f02bf79536b1f9c88723ca7c32/detection

baby-gene.com
buketmert.com
buzzlocate.com
cbinventory.com
clv-poc-dev.net
drilling.world
fmdllfdlfdfdf.com
hottradebuzz.com
houseofluxuryorganics.com
jpystablecoin.com
korupanorama.com
naspartners.com
onlineshopgr.com
primehome-inspections.com
verlan.guru

# Reference: https://twitter.com/MBThreatIntel/status/1519696178543140864
# Reference: https://www.virustotal.com/gui/file/cde7a256a7b8de85acb73ab4697147fbc4c9a8cda56f594b20d278e26c177856/detection

albawardl.com
bizjust.xyz
borntohealpodcast.com
bsfs6.claims
capshopnateasy.rest
ceramicstrainers.com
chrisfortner.com
collie-langhaar.com
countryharvestcrafts.com
cuestiondeminutos.com
focuspbc.com
fountainspringscapemay.com
free-spinner.com
frontrunnr.com
garygrahamnyc.com
generarelead.com
hoatuoithainguyen.net
icotus.com
ivaanvikram.com
jinchanghe.com
librairie-adrienne.com
lightingreference.com
monteiromt.com
munixc.info
omzast.com
printables.digital
smartboostmedia.com
sujonpaul.com
themakershands.com
usbankofamerican.com
whyasen.com

# Reference: https://www.virustotal.com/gui/file/f5db253b6db31aaeab9068feea2d05436629b75e4602a7d2428299b1fa934184/detection
# Reference: https://www.virustotal.com/gui/file/f0acca1bd8656cd5f75130a06f2df7abbd2bb234812234985de025b8af0a8573/detection
# Reference: https://www.virustotal.com/gui/file/ee35a5464cc7b7d4fe9ca9fce5321e1f6e235447792678fb71d768f5d1e2d319/detection

172711.com
3a5hlv.icu
515pleasantvalleyway.com
almanecermezcal.com
alnileen.com
ankaraescortvip.xyz
azalearoseuk.com
bitterbaybay.com
casino-pharaon-play.xyz
cg020.online
cimpactinc.com
cinemaocity.com
civicinfluencers.net
dayannalima.online
douglas-enterprise.com
eaglehospitality.biz
eidmueller.email
fbve.space
goodgood.online
greatnotleyeast.com
groceriesbazaar.com
gta6fuzhu.com
gzhf8888.com
hebergement-solidaire.com
hempgotas.com
holyhirschsprungs.com
hopeitivity.com
ioewur.xyz
italianrofrow.xyz
jaggllc.com
johnfrenchart.com
kastore.website
kitcycle.com
ksodl.com
kuleallstar.com
lovely-tics.com
lovingtruebloodindallas.com
maymakita.com
mcrosfts-updata.digital
mentalesteem.com
mytemple.group
palisadeslodgecondos.com
plick-click.com
punnyaseva.com
quadrantforensics.com
rainbowlampro.com
ralfrassendnk-login.com
richclubsite2001.xyz
roofrepairnow.info
savageequipment.biz
sharaleesvintageflames.com
sho-yururi-blog.com
sincerefilm.com
sirikhalsalaw.com
sittlermd.com
sport-newss.online
stella-scrubs.com
tghi.xyz
theinteriorsfurniture.com
tiny-wagen.com
translate-now.online
ukash-online.com
wwwripostes.net

# Reference: https://www.virustotal.com/gui/file/eafdcbea5a9544d87f8a7c03ee4eb6ab0d9c12bbbbc1d9705dc94d5fd983c5bd/detection

2thpolis.com
360e.group
4338agnes.com
58lif.com
atlasgrpltdgh.com
buysubarus.com
carriewilliamsinc.com
damusalama.com
dreamschools.online
evodoge.com
faydergayremezdayener.net
finanes.xyz
freelance-rse.com
gaboshoes.com
gabtomenice.com
hempgotas.com
ir-hasnol.com
libes.asia
micorgas.com
mollyagee.com
nbjcgl.com
pentest.ink
rampi6.com
rvmservices.com
sjljtzsls.com
standardcrypro.com
teentykarm.quest
tipslowclever.rest
trulyrun.com
uvywah.com
viperiastudios.com
wilkinsutotint.com
wohn-union.info
youngliving1.com
zoharfine.com

# Reference: https://www.virustotal.com/gui/file/00570adfd84d458743a5e951d58043e836043d01b0016e78928d2db9a724e730/detection

albertaeatsfood.com
autocalibre.com
dac71047.com
espiaruncelular.net
fem-iam.com
fusiontech3d.com
gmopst.com
guncelekspres.com
likekopi.com
livehealthychoice.com
morganjohnsondesign.online
phigsa.com
saharsaghi.com
sargeworld.com
talasoglufinans.com

# Reference: https://tria.ge/220504-fw33dadah5/static1

48411.xyz
4sansquatre.holdings
8388cq.com
advanceddataenterprise.net
alsuwayeh.online
amor-vincit.com
arbitrum.party
arresgroup.com
aryocoding.com
bighornholdingllc.com
blockchainsmartsystem.com
bmstore.uz
boredones.com
brasilseafish.com
breweriana.online
carnetdechef.online
chiaraboffi.com
cjlucmpt.com
clonda.com
conditionssuitable.net
contohot.com
ctsygzs.com
cushionsandmorehn.com
diduxi.com
funhouse789.com
gentlemanpig.com
gurbuzsuaritma.com
hakomas.one
heshi54.com
hitmanautomation.com
homeautomationtexas.com
hsgmaster.com
kershoes.com
lamborgrini.net
le-fam.com
leeracingteam.com
lennoxalexandar.com
loaparis.com
lottoss.xyz
memoirofanerd.com
mentication.com
metanum-solutions.com
mgav57.xyz
mrteez.club
nationalmetalbuildings.net
navarracomercial.com
osvfbf.com
phimlon.net
pistachio.land
quickest.website
recalibratementoring.com
romasonra.xyz
santiyq.com
sarojnimarket.online
sbs68.com
seaverde.com
sebastianlouder.com
sharkyslipper.com
soodscan789.com
stiff-pols.digital
szum.company
t2kenya.com
tdmjsc.store
xinnuosn.com
xn--octr39apqo.xn--czru2d

# Reference: https://www.virustotal.com/gui/file/ab609e7ec35be92d719b79706a8b32c8b173b33b2c0d1a2d0c378ae0ab24d503/detection

23icecream.com
acastino.com
catherineseher.com
darkartgames.com
detzag.online
dvxgem.xyz
evlovess.com
gadolant.com
gregorylongoria.com
hemsbya.xyz
kaplanstore.xyz
movil-internet-fibra.site
rathdrumproperty.com
sr-ilustrado.com
supplygrocery.com
titcd.icu
trafficdevils.xyz
virginia592.com

# Reference: https://tria.ge/220506-myw56shgc6/behavioral1

akabouumikaze.com
aloin.net
ambercline.com
atercus.online
atomlook.info
awakeningworldplayers.com
bcdm.xyz
beezr7fizghz3n39.xyz
bestcannabisbutiken.com
camasline.com
chlorinetcca.com
clientfirstrcm.com
coastventure.info
copysouthbound.com
croniesnft.com
customerupdateservice.support
dk3cs8pm8p08tm.xyz
dogoodcamp.com
dongchenyake.com
dtef.xyz
entprnhealth.com
fixyourprocess.com
g50999.com
gavc.club
gazekb.sbs
generationsheating.net
global-ec-group.com
globalshowbiz.com
gotiktokpro.com
homeinprovments.com
hrbggames.com
infotechno.net
jialiba.xyz
kellyblusbook.com
kriptobotu.xyz
ksjiea.com
lovellsautoglass.com
luxnol.com
magaluiza.site
mxavsp577.com
nikkiaugust.info
nishiokayoshi.com
peacedoge.club
queimaagora.site
randcorcoa.site
rediwatt.com
rlc.wtf
sabrinabi.xyz
simbacatering.com
sirotti.xyz
taxempires.com
telstradiscount.net
thenftexplorer.com
tn8itwpe2hjrrfip.xyz
top500dao.com
trii-a.net
trottadevelopmentgroup.com
vacationtennishome.com
viralindo18.com
visionarysolution.info
wedo.direct
yakobylife.com
yjswsd.com
zhanl116.xyz
zts-ic.com

# Reference: https://twitter.com/b3ard3dav3ng3r/status/1522875454537216002

teamazmog.xyz

# Reference: https://tria.ge/220512-knp8rseear

5starrentertainment.com
69988.club
8m1id.online
affordablebathroomsbyfrank.net
angellogordon.com
arkdia.xyz
atomcapital.net
batuhanasut.com
cabanatvs.com
cactus-aio.com
christensonbrothers.com
christinesyquia.com
dance985.com
detectorlifestyle.com
doitlive.online
dskensho343.xyz
dvfdressoutlet.com
eventsp.xyz
eyetechlabs.com
fabianmarin.com
fiercefantasyshop.com
forge21.xyz
freshiestuning.com
fzl-fs.com
genesisrofprc.xyz
globalfrances.com
hawkonline.club
hdwiz.online
hobartiamusic.com
hyiptron.com
iran-style.com
jenaeeaginshair.com
korenshop.com
lens-experts.com
magnetstudios.global
mayclaim.com
mbljbspro.com
milanoineout.com
morningvibecoffee.com
newleafremodel.com
orderjoessteaks.com
ourhighlandacres.net
oviagrooming.com
peopleonhealth.com
perabett463.com
pokerdominogame.com
puzzlelux.com
range4tis.com
residencialseniorspa.com
seelenmedicus144.com
sinergiberkaryabersama.com
sjczyw.com
sjsteinhardt.com
skateboardlovers.com
sosienna.com
stanegroupe.com
takeyourshot3500.pro
tauikrychy.space
tbrme.com
turnerverve.quest
unitedkingdomvoip.site
vertiney.com
ysxol.xyz
zjins.com

# Reference: https://www.virustotal.com/gui/file/fa3d030c48ed99d3eabfcb7ce2a85cfca61dfe1d6185a99ea27f4687fba99601/detection

1420radiolider.com
blinbins.com
bodymoisturizer.online
cambecare.com
csec2011.com
garagekuhn.com
glsbuyer.com
herr-nourimann.com
lcmet.com
loyalcollegeofart.com
myfortniteskins.com
nwaymyatthu-mm.com
smartmirror.one
teens2cash.com
turmericbar.com
warmwallsrecords.com

# Reference: https://tria.ge/220523-lwgf9sgagr/static1

0shixa7u.xyz
10000wallets.xyz
360tekpartners.com
48962.xyz
99yy.info
allrates.info
anthonyveyssiere.com
atillos.com
banjaranews.com
belezz.com
bestahem.com
blackfoodierecipe.com
bronchia98pew.com
bsdprint.com
chateaubaro.com
chpvl.icu
d-paj.com
digitalmarketinginspanish.com
discoverourtours.com
dizaynservis.com
ekj7fn.xyz
eotefashion.com
eudeed.com
fahrzeughero.online
findingfocuspsych.com
freebuy.today
g-glawgroup.com
gotskills.xyz
handanshengtai.com
hawkeseye.com
house-lover.xyz
hye07on11.com
iassets.cloud
imifone.com
invest-quantum-ai.space
itransformtraining.online
jessicaerenato.online
jieshundz.com
lbzbtgg9.xyz
leaguestocks.com
livigno.travel
maesonandcompany.com
mastiba.com
mbbpaymentplan.com
monbjrd.com
njhxkj.com
particular-verificaciones.com
phillyfitformula.com
post4pay.com
scramet.online
seucredhope.xyz
sixcache.com
storegonline.com
sxhengshan.com
thg268.xyz
web3connect.world
web3jake.com
welcia.online
whereisonka.com
winsy1015.xyz
wlidrhino.com
xhygsc.com
ycmu520.com
yurongshipin.com
zhangnala.com

# Reference: https://twitter.com/tosscoinwitcher/status/1529350646847008768
# Reference: https://tria.ge/220525-flexssccdn

012skz.xyz
14offresimportantes.com
ageofcryptos.com
american-atlantic.net
anotherdegen.com
attmleather.com
bimcellerviss.com
buggy4t.com
candybox-eru.com
ccav11.xyz
chambaultfleurs.com
china-eros.com
christineenergy.com
climatecheckin.com
clime.email
dabsavy.com
dbcyebnveoyu.cloud
dearpennyyouradviceblogspot.com
demetbatmaz.com
denalicanninglids.com
dhslcy.com
dialoneconstruction.com
doxofcolor.com
dreamonetnpasumo1.xyz
drsanaclinic.com
edisson-bd.com
embedded-electronic.com
engroconnect.net
exceedrigging.online
fairfieldgroupfw.com
fjqsdz.com
floridacaterpillar.com
garglimited.com
gofilmwizards.com
gororidev.com
hofwimmer.com
huvao.com
insurancewineappraisals.com
kincsemto.net
lotsimprovements.com
mentalnayaarifmetika.online
mftie.com
modelahs.com
muktobangla.xyz
myamazonloan.net
nagpurmandarin.com
qhzhuhang.com
salahov.info
sandstonehosting.com
seekbeforefind.com
shiftmedicalstaffing.agency
skb-cabinet.com
societyalluredmcc.com
souplant.com
tahnforest.com
tellgalpy.com
tentacionescharlie.com
tootko.com
travisjbogard.com
tubesing.com
wallacehills.com
xn--ekrt15fxyb2t2c.xn--czru2d
xn--hj2bz6fwvan2be1g5tb.com
yonatec.com
zyaxious.website

# Reference: https://www.virustotal.com/gui/file/53251bf08457a79fce96a4493d96082dd2ddcce3789d8132b1be249943d3f33e/detection

http://3.124.188.36
blackcreekbarns.com
bluechipblog.com
cartogogh.com
cerradoforte.com
dach-loc.com
echoesdesing.com
elon-drop.net
facts-r-friends.com
luyensex.club
nitsmm.site
permitha.net
sana-poratal.site
sportsgross.com
tiffanyrockdesign.com
whneat.com

# Reference: https://tria.ge/220531-hmrdbsdeap/static1

215totobo.com
316242.com
95623.maison
abdi-kings.com
airflatego.com
amerikanewsu.com
aroma-shop6.com
audubonenv.com
authentisign.xyz
bonshengempire.com
bursalokma.online
cerdasycauchos.com
cliverof.com
commentn.com
comyourlens.com
dadsimprov.com
daka489.com
dl99931.com
eldercarepas.com
eroptik.online
findhypeart.com
georgiaqueenpageant.com
getcampusnations.com
glovesandprayers.com
gma-seen.com
healeyhero.info
healthexpertfund.com
hieghtsdriving.com
hnsjxxzsw.com
hobbling17urd.com
hongsencraft.com
hotelnikhilregency.com
howtosavetheworld101.com
iammohn.com
kykn8sghjadg.com
leesgun.parts
mayrathecoach.com
metformin100years.com
mindhobbybox.com
minhkhoiauto.com
msontag.com
mymelada.com
p2pilive.com
popupplus.store
qings.online
raldistrictgoingalon.cfd
sacramentoproudboys.com
samedayjeweler.com
samscosandmssaad.com
sergiozini.art
spontazz.com
stevewellsforcongress.com
stmfl.com
supportokta.com
themrbeastgames.com
thevirtualeventsheroes.com
toplist.guru
underthesunset.cloud
uniquemarketingtool.com
uniquemindtech.com
weplyshop.com
wrobeson.com
yinchang99.com
yinhuapiao.com
zghy.tours

# Reference: https://twitter.com/reecdeep/status/1531954945494228994
# Reference: https://tria.ge/220601-mtzqhagba7/static1

128dd.xyz
55byvi.com
algofan.lease
alirbad.com
b1khcj.com
beijingbluestar-tech.com
bigtime-redeem.com
bjshxxw.com
bjtvapc.com
bo426.com
careerguru.net
ccaboyyhhj.com
cgem.today
contradasantacaterina.com
cryptobuyer.site
daobox.art
designmehndi.com
energieat.com
farmersdaughterdelivery.com
fujlfilrn.com
gettspot.com
health-cvshealth.com
ismaazamzico.com
kjcftylrsm.com
legalzoomcard.net
lmtoken-pay.club
longboardsguide.com
lovelitee.com
maizhuanji.com
mariemikulsky.com
medicarebooking.com
medimarquelab.com
mesagre.online
milanjoojosang6.xyz
mqsjw.com
mrplugzsneaker.com
mybazer.com
myfloaty.com
myndighed.info
pcr-user.com
poweredbyclem.com
premalex.lundbeck
qichev.com
qzenfood.com
radiosdepanama.net
rebillionares.com
sanbarts.com
seafiw.com
simplyemail.info
solanverse-staking.com
starkindus.com
strymtvapp.net
suabinhnonglanh365.com
szxy188.com
tafkcleaningservices.com
tddbjxutvytm.com
tiffanychilds.com
tradingbot.fund
ttmhkpzmz.com
txualnor.com
volcanoscenic.com
webuybuildingscash.com
xn--9db0anl.com
xn--grupoamoreoxignio-6tb.com
y1xml.com
yolgecenhan.com

# Reference: https://www.virustotal.com/gui/file/030567e6bf7a5ecf93389aa9fe1ecad8c93bbef64864816be50677a8f2c7b12c/detection

ayudaten.online
cashbet.pro
enjoytravel1.com
hugobos.site
jindu56.com
ketolin.store
miningnotifications.com
mpace.store
mwe079.com
paulysatelier.store
sindmart.com
thingsrisenewspapers.biz
xynhealthy.com

# Reference: https://research.checkpoint.com/2022/xloader-botnet-find-me-if-you-can/

abros88.com
alpeshpate.com
amenosu.com
aminsfy.com
ammarus.com
arabatas.com
arches2.com
b8ceex.com
ban-click.com
bantasis.com
becbares.com
becu84ts.com
bendisle.com
beputis4.com
berdisen.com
besasin09.com
binbin-ads.com
blackbait6.com
blendeqes.com
bra866.com
bracunis.com
brasbux.com
brass-tip.info
breskizci.com
bubu3cin.com
budistx.com
buge-link.com
bumabagi.com
bupis44.info
buresdx.com
busipe6.com
busy-clicks.com
butsins.com
butuns.com
cablinqee.com
catdanos.com
ceser33.com
cesiesis.com
ci-ohio.com
cinasing.com
click-tokens.com
coalmanses.com
cobere9.com
cures8t.com
cusio3c.com
cusmose.com
cutos2.com
dain6544.com
dashmints.com
davinci65.info
dempius.com
ducer.info
dugerits.com
earches3.com
erisibu85.com
fellasies.com
fendoremi.com
finsith.com
finsits.com
fraiuhs.com
funtabse.com
gamusemenu.com
gate334.com
gesips.com
gimbases.com
gingure.com
gogoma3.com
gulebic.com
gunnipes.com
heinousas.com
high-clicks.com
high-clicks2.com
highpacts.com
hugefries3.com
hughers3.com
hype-clicks.com
jervinse.com
keepitng.com
kraines3.com
lopsrental.lease
mecitiris.com
mimihin.com
minimi36.com
minismi2.com
moreosin.com
motarasag.com
motarase.com
motometics.com
moukse.com
munixc.info
n4sins.com
nerosbin.info
neurosise.com
nifaji.com
norllix.com
noun-bug.com
nropes.com
nu865ci.com
nutri6si.com
ocvcoins.com
pedorc.com
piecebin.com
plick-click.com
pordges.com
price-hype.com
private-clicks.com
probinns.com
ranbix.com
range4tis.com
rap8b55d.com
rapibest.com
rastipponmkh.com
recbi56ni.com
redandseven.com
sacremots.com
saint444.com
sanfireman.info
sasanos.com
seo-clicks6.com
serenistin.com
side-clicks.com
tangodo9.info
tes5ci.com
travelsagas.com
trc-clicks.com
tumpiums.com
wecuxs.com

# Reference: https://twitter.com/1ZRR4H/status/1532305804266721281
# Reference: https://tria.ge/220602-jt1e9ahhel

03c3twpfee5estjovfu2655.com
104wn.com
123dianyingyuan.com
89qp52.com
advanceresubeopene.biz
aforeignexchangeblog.com
akmeetech.com
atelierelzaaidar.com
autu.cfd
azureconsults.com
bam-bong.com
barmagli.com
bchmtn.net
blackcreekwatershed.com
bm65.xyz
bolacorner.com
boxberry-my.com
clairvoyantbusinesscoach.com
corporacioncymaz.com
danta.ltd
dawonderer.com
defiguaranteebonds.com
dronelink.xyz
e3488.com
erentekbilisim.com
estudioenzetti.com
euroglobalnews.info
finance-employers.com
gangqinqu123.net
iampro-found.com
informacion-numero-24-h.site
jetskirentaldublin.com
kc7.club
krdz28.online
lepakzaparket.com
maisonretraiteprivee.com
marumaru240.com
matsuomatsuo.com
metagwnics.com
minioe.com
mtzmx.icu
mutantapeyachtclubtoken.store
people-centeredhr.com
pepeksquad2.host
pixelkev.xyz
primobellaquartz.com
rodosmail.xyz
sdwmkj.com
server4uuss.net
test-brew-inc.com
theceditpalooza.com
thegioigaubong97.site
thegurlyboutique.com
tj-assets.com
tyma.club
tzjisheng.com
uixray.xyz
usaservicedogregistratuon.com
vaoiwin.info
vcwholeness.com
vote4menk.com
withoutyoutube.com
ycw2009.com
yourpamlano.xyz
yundtremark.com

# Reference: https://www.virustotal.com/gui/file/765cf82aa101df797cecb2d850761713b62450619ec0bcf8e335573b21010104/detection

http://103.153.77.138
blogging-news.com
bojan-milenkovic.com
dispectra.com
dzpmzf.club
engematec.com
fortymall.com
grocits.com
jfcls.xyz
jimsan.com
ketoyjugyshop.xyz
lexbbc.com
milozzo.com
polynerdle.com
weddingsiteshop.com

# Reference: https://tria.ge/220613-lycwvsfdfn

5starrentertainment.com
69988.club
8m1id.online
affordablebathroomsbyfrank.net
angellogordon.com
arkdia.xyz
atomcapital.net
batuhanasut.com
cabanatvs.com
cactus-aio.com
christensonbrothers.com
christinesyquia.com
dance985.com
detectorlifestyle.com
doitlive.online
dskensho343.xyz
dvfdressoutlet.com
eventsp.xyz
eyetechlabs.com
fabianmarin.com
fiercefantasyshop.com
forge21.xyz
freshiestuning.com
fzl-fs.com
genesisrofprc.xyz
globalfrances.com
hawkonline.club
hdwiz.online
hobartiamusic.com
hyiptron.com
iran-style.com
jenaeeaginshair.com
korenshop.com
lens-experts.com
magnetstudios.global
mayclaim.com
mbljbspro.com
milanoineout.com
morningvibecoffee.com
newleafremodel.com
orderjoessteaks.com
ourhighlandacres.net
oviagrooming.com
peopleonhealth.com
perabett463.com
pokerdominogame.com
puzzlelux.com
range4tis.com
residencialseniorspa.com
seelenmedicus144.com
sinergiberkaryabersama.com
sjczyw.com
sjsteinhardt.com
skateboardlovers.com
sosienna.com
stanegroupe.com
takeyourshot3500.pro
tauikrychy.space
tbrme.com
turnerverve.quest
unitedkingdomvoip.site
vertiney.com
ysxol.xyz
zjins.com

# Reference: https://tria.ge/220616-ljvhcschdl

5starrentertainment.com
69988.club
8m1id.online
affordablebathroomsbyfrank.net
angellogordon.com
arkdia.xyz
atomcapital.net
batuhanasut.com
cabanatvs.com
cactus-aio.com
christensonbrothers.com
christinesyquia.com
dance985.com
detectorlifestyle.com
doitlive.online
dskensho343.xyz
dvfdressoutlet.com
eventsp.xyz
eyetechlabs.com
fabianmarin.com
fiercefantasyshop.com
forge21.xyz
freshiestuning.com
fzl-fs.com
genesisrofprc.xyz
globalfrances.com
hawkonline.club
hdwiz.online
hobartiamusic.com
hyiptron.com
iran-style.com
jenaeeaginshair.com
korenshop.com
lens-experts.com
magnetstudios.global
mayclaim.com
mbljbspro.com
milanoineout.com
morningvibecoffee.com
newleafremodel.com
orderjoessteaks.com
ourhighlandacres.net
oviagrooming.com
peopleonhealth.com
perabett463.com
pokerdominogame.com
puzzlelux.com
range4tis.com
residencialseniorspa.com
seelenmedicus144.com
sinergiberkaryabersama.com
sjczyw.com
sjsteinhardt.com
skateboardlovers.com
sosienna.com
stanegroupe.com
takeyourshot3500.pro
tauikrychy.space
tbrme.com
turnerverve.quest
unitedkingdomvoip.site
vertiney.com
ysxol.xyz
zjins.com

# Reference: https://www.virustotal.com/gui/file/01b4a9e7c4479cf0e72a55af192c151b08f96b8244805711dc8980d05f850e56/detection

aydenalice.com
bodog-review.com
chengdubangdao.com
elitetoronto.net
fashionrongo.com
greks33.com
humoradvocate.com
leon-bet-uz.com
marcelhladik.online
mobilenotaryconnection.net
rbtez7.store
rkbet51.xyz
shop4scrubs.com
thedwordbydh.com
worldsriot.com

# Reference: https://app.any.run/tasks/11c557a3-87e5-4f70-9254-656cabc5c6f4/

xiaojiaowanwan.com

# Reference: https://twitter.com/reecdeep/status/1538897538144690176
# Reference: https://app.any.run/tasks/23e9f82c-8ef4-469f-95e3-a2700ece36e7/

aydaajans.online
bigabid.engineering
cocopaintings.com
comment2020.com
ditiya.space
fsids20.com
gastreatmentinfo.site
jzcrjyw.com
oficiosdaterra.com
plantonio.com
propagandefilms.com
rusvogue.com
sb11w.xyz
webdesigntezcan.com
xn--rckenknacker-dlb.com
yatida.com

# Reference: https://tria.ge/220621-y3jlesehb4/behavioral1

2045479233.asia
337742.com
a-prime-dogfood.zone
allaboutwindow.com
alwaysinvestor.com
bar-clicks.com
betmonde201.com
chrisandrewcobo.com
cratitonebank.com
daftarslothoki.net
dhongroom.com
direitodigital.net
elb-hohenau.com
enieria.xyz
enlyfist.site
entrepreneurdeouf.com
eurorecuperisrl.cloud
exgps.net
eyewearwiki.com
financialgurus.net
fitness4world.com
fullbedroomset.com
hausofelviradior.com
implyeventos.com
j3dqt.xyz
julia-wallace.com
landviews.art
ldyss429a.xyz
ledgelougners.com
legoscene.com
lemonsanver.com
lzhaimany.com
m5ocy.xyz
milihz.xyz
mrsxarbitragem.com
myofficesoftware360.com
nailvivify.com
nuianfla.com
onlinelab.site
oovohealthcare.com
picsyaphotography.com
powergrand.site
prettyfuckingprotected.xyz
pth1688.com
qinqinpf.com
queenasharp.online
ralestate.mobi
sacredbond.agency
satthepgiagoc.com
sendi.xyz
slotgembira.info
squimbot.com
stack9.cloud
stone-conta-premium.com
switchvr.xyz
tigerglobal.direct
trigenttechnologies.com
vaapmi.com
vestitiperneonato-online.beauty
vikingworks.site
wgtstyle.com
xuwutv.com
xy-evehicle.com
yourjeepconcierge.com
zychat37.xyz

# Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook%20-%2025062022

176bwcx.com
67f5ead1a275.info
amsordglobal.com
au-techng.com
awndka.xyz
barq-id.com
bhui7.com
biznes-poznan24.xyz
boscue.com
bretholdings.com
businedstrack.com
cankaoao.com
carings.net
carrotshelter.com
dailycuatudong.com
derechoromano.com
doca29.site
emnopgroup.com
energyecuador.net
gcpropolis.com
gektolicompany.xyz
glitzye.com
globalepic10x.com
goodandperfectgift.com
hardwarepicker.tech
how-to-learn-languages.net
jadacomercializadora.com
joselynbaezs.com
keiwaseitai.online
kinsgtonbrass.com
kitabisabelanja.com
landliner.taxi
lermontov.online
liwoo.top
mafleursam.com
magictvshow.com
mayipaimai.com
minex-intl.com
minijob-duesseldorf.net
mybullion.net
nasdaq-ex.store
nonnydesigns.com
perfectingnextstage.com
primarole.com
purchase614210.com
rabeproject.com
readoku.net
releve.space
roshmary.com
ryzcn.com
serengetifadhions.com
shirtgse.online
skyglowtech.com
sticktogracestudio.com
stripe-forecast.com
thenextbigtech.net
thethoughtgenius.com
thevirtualcafe.net
titantechmail.com
wojiayouxuan.com
wordsofweightandlevity.com
yatirimtamam.com
zjzcmy.net
zorbaplus.com
zzbb8899.xyz

# Reference: https://tria.ge/220626-x3rrcseba7/behavioral1

abbigliamentomedici.com
barbararomanow.finance
bemo88.xn--6frz82g
chisalan.com
computercodingclasses.com
csnfrs.com
erosludi.net
fsentimes.com
gigiandnatemovie.com
icqiangdan.com
koincreditunion.com
mysupport.space
nicegames4u.com
promedsecurity.com
respectnelda.com
sega55.net
songlark.xyz
theoctopuspress.com
trybigbangpromos.com
xusenyu.top

# Reference: https://www.virustotal.com/gui/file/303bc30a830329084290c40b42cb9700852fd98712ceba40e99318e926658e03/detection

accountppl.com
adfbingo1971.net
aerty.cloud
becas-maestrias-ec.com
dressusinc.com
eternalflamez.com
facefoot.net
frontpagesweb.net
heavydutydiva.com
hschanglixj.com
ios.run
jayagunaaluminium.com
klumpave.com
lotonmyplate.com
morganhertel.com
njshoreanalytics.com
osmond8421487.xyz
tomrings.com
weissburkelaw.com

# Reference: https://twitter.com/reecdeep/status/1541735626915069954
# Reference: https://app.any.run/tasks/92fd7447-8f6a-41fb-a032-9df926fd49ad/

nxgills.com

# Reference: https://www.virustotal.com/gui/ip-address/188.114.96.2/relations

ccxqw.net
dsjxc.net
dwf77.net
hbzkz.net
hgb2b.net
i19lo.net
rcttc.net
sdbus.net
slzsb.net
sxlxh.net
sz-dz.net

# Reference: https://www.virustotal.com/gui/file/5355e8a90f5f1c0499804a00e727e793c889999f7b70c658fdf8da29940a8a16/detection

42627thb203.com
alligohorizonprivatelimited.com
ankarabahcepeyzaj.com
baincot3.com
bellemooi.com
btc2048.xyz
citestaccnt1598424138.com
coolcitygroup.com
emojiunlocker.com
exhibfilmbuying.com
kaijoecolors.com
kursatyaman.com
mbbkulturyayinlari.com
microqb.com
staywellca.com
thc8hemp.com

# Reference: https://twitter.com/reecdeep/status/1545378651147042818
# Reference: https://app.any.run/tasks/1652e1ba-153f-4c1a-80fc-5928840ee8f3/

ninoxins.com

# Reference: https://blog.talosintelligence.com/2022/07/threat-roundup-0701-0708.html (# Win.Dropper.Remcos-9954770-0)

100shortvideos.com
assasa.net
augustamobilenotary.net
disintar.xyz
duckholland.com
elanagro.online
ezhuilike.com
gasurvivalgear.com
hayatcevredanismanlik.com
hubinvoice.com
icarus-soft.com
iden3s.com
letbeautifyus.com
sinibelanja.website
takeka.com
tematemazo.com
timinis23.com
unitedoceanlogistics.com
vineabank.com
waydiscount3.xyz

# Reference: https://twitter.com/reecdeep/status/1546419589965389827
# Reference: https://app.any.run/tasks/1a135893-9e18-4a4d-9649-419157a88de6/

sunamiros.com

# Reference: https://www.virustotal.com/gui/file/030f42b89811d4a8e5fae006983b4ec62a2f902a05758eec1ed062b1b5347054/detection

destaqueregional.net
fiat126.info
finlandten.xyz
fleaimmunity.com
fuckjoebiden.info
jessicaloewen.com
josiemaran-supernatural.com
latinfoodtunisia.com
office-antenna.com
papamamastoel.store
statenislandferryhawks.com
suddennnnnnnnnnnn11.xyz
supremeantivirus.com
thefoothold.store
think-digital.info
ttyk.net
vollabi.com

# Reference: https://twitter.com/reecdeep/status/1549064064760008704
# Reference: https://app.any.run/tasks/1b40b5cb-f2ca-4171-a749-30be751b317d/

bestselectrics.com

# Reference: https://tria.ge/220723-j55jcaddap

94ei6mgy.com
agentsheila.com
almavivaranch.com
andykaufmanisalive.com
artbynadiaxel.com
ashleyryannestreet.com
aylagrey.com
bangaloretomysoretaxi.com
biaolingroup.com
buymistnow.com
casaspecialtycoffee.com
celebrateocala.com
chunqi888.top
cie-revolver.com
conservativesshop.com
delicioushq.com
dominiclis.com
dongxijiangpin.com
downloadmasters.net
downtownfamilypharmacy.com
dupreportablebuildings.com
educaterealestatepodcast.com
enjoyablestopnshop.com
epiccaremedtraninc.com
finanziariaruscelli.com
foyfoy.ltd
funakelo.com
ghjan.com
grandesfinanzas.com
heygotrip.com
hotelspacasino.com
houtai12123.club
imanicarton.com
jimihoodie.com
jinyida.xyz
kedaimks.com
ketoodavoqslim.xyz
kiniecta.com
koinslot888.tech
langeculotte.com
littycreationz.com
lowesy.club
luminousfadel.com
maison-colette.com
mavenpension.com
mujid24s.com
nhlove.net
noyanlarinternational.com
officialcaliyoga.com
ownempire.net
professionmessaging.com
rockbettergear.com
secretstation.xyz
stairsuppllies.com
stake-login.com
stipclub.com
thtoughthenight.com
tilemarkng.com
universalbumpkeys.com
usreliacares.com
wiworwe.xyz
wwgge.com
www69188q.com
xinlanyuan.net
yourinsuranceconnection.life

# Reference: https://www.virustotal.com/gui/file/ed7cffa33cba2ae44d44f61137d598743a1e9a3c20a66d5a77381e39846ad3be/detection

1264skernave.com
abutest.com
agrisudparrella.store
ayrenhoney.fitness
barbacoalosmartinez.com
bnmsas.xyz
coothohh175-biglobe.xyz
info-upgrade.com
lartigue-demarbre.com
marcaubry-photographe.com
pankajkhairnar.com
physiciansdigitalservices.com
reventeresale.com
sabrinasherman.com
studiodraagvlak.com
swifterrand.com
sydneycream.com
teeveeshop.com
yaseenoliver.com

# Reference: https://www.virustotal.com/gui/file/00851f75f4b3386811e5cc2fcbf67b918bd27ea7d71fd84314c46531635881f5/detection

asdaservices.com
benefitconsultantsny.com
cloud-9.tech
conticorporations.com
cretefam.com
dildilli.com
discgolfgermany.com
earches3.com
ecoalgo.xyz
educationsavingsaccounts.com
freshdesk-japan.com
hatteker-us.com
itexange.com
ktnaward.xyz
liangyonxin.com
livrosfotograficos.com
lovelycontentandmarketing.com
newjerseyglass.com
pasoroblescahandyman.com
picguess.com
pilysc.com
sapphiremanagment.com
servingusveterans.com
sketchnfts.com
smallbusinessbebefits.com
surerxpharmacy.com
tacticalgamers.net
testferresto.com
trendcenter.tech
trotapie.com
vitale.email
xn--zbs99xiw4azst.xn--55qx5d

# Reference: https://twitter.com/reecdeep/status/1551888570016845832

dianna36.com

# Reference: https://www.virustotal.com/gui/file/a2b73eed60ceba21bd55ef009b0677406e3b7af75fca15f83c9a2ce7082ef783/detection

1one2three.com
absasha.com
angeleah.online
cqubit.com
elixefx.com
gratitudeimpactweek.com
integrity-roofers.com
jswzq.com
jzjiayu.com
personalloginuk.com
petalpetal.net
redsea-ksa.com
successfulsoultionworks.com
tcgfairy.com
use-records.com
wizardrozin.com

# Reference: https://twitter.com/reecdeep/status/1554130081500598273
# Reference: https://app.any.run/tasks/5657e71e-32dc-44f1-a8b6-dc747bf4c531/

vinpilates.com

# Reference: https://www.virustotal.com/gui/file/1e7e19ce21214b78b2c90a6d440db777bb3ce42bb68924d592678a6fc0fdd515/detection

sinibelanja.website

# Reference: https://twitter.com/JAMESWT_MHT/status/1555445680797270016
# Reference: https://www.virustotal.com/gui/file/c31b17eb7e69da771f0ee2230922622a94e1d27cfea1ff556615e4f27104340a/detection

buggingin.com
cocoaslimparati.store
dohsrdmoney.com
lendana.net
preppdev.net
stockdalecapital.us
wiltongm.com

# Reference: https://www.virustotal.com/gui/file/009e6b48b7d9b2a802d6e831138b1e55c4390861c123287e134bbc21f8a6e225/detection

3beadsbytj.com
columbiaathleticboosters.com
congtycoessentials.net
dusubiqiqijem.xyz
eroerofuck.com
holoique.com
independienteatleticclub.com
iselotech.com
lixinjishaiwang.com
maisons-france-confort-mp.com
mewydyrqd.xyz
oceanprimesanfrancisco.com
officialjoyslots.com
rincondelvinologo.com
rummypepper.com
sem4seo.com
spencersigmon.xyz

# Reference: https://tria.ge/220809-pq62hsacfq

1to1vision.com
1weekweightloss.com
247homebet.com
883996.xyz
accsforyou.com
ahwconsultinggroup.com
aisopus.com
alakazam.wtf
alberguedawebb.makeup
amqzoqn.com
arenaofdeath.xyz
arinastepanova.site
baicorsprayinsulation.com
betpipo31.com
coldonafridaynight.info
decoratedpumpkins.com
doiqualify.info
donghwacos.com
ducatilastvegas.com
eye-catcher.site
famedhelium.online
gankotin.online
gdgsjl.com
gottagetting.com
holyfamilysports.com
juuwa777.com
lastingketohealthtechdaily.com
marleybrat.website
metaverseworkshop.online
milestoninternet.com
myryanhair.com
nelsonwldwide.com
nftproperties.info
ngshddq.com
nikitasbarandbistro.com
nobelpawtrait.com
nonurseleftbehind.net
novelty.mobi
osakakansaiexpo2025.com
peachbebe.com
potosky.com
pronodes.pro
qhsjcn.com
quadrants.site
ragznmops.com
ready4rishi.club
recambiodeventanas.com
reform-ookura.com
roadday.sa.com
rotate-mech.com
saghiparhamdds.com
saiyczx.com
satserdova.com
sigmaformacao.com
subngon98.online
sucrearret.pro
textformattr.com
thekagaz.com
tipiministries.com
uavhiring.com
vo3t1n1pt.com
weareplanetprotectors.com
whoisjohnmoney.com
wicklesschrista.online
zhuokuosm.com

# Reference: https://twitter.com/1ZRR4H/status/1557893313566588928

158187.com
659368.xyz
7553000.com
amerchem.net
esandcraic.com
greenrosetarot.com
ideardonot.top
lilsdealsforreals.com
loan072.ltd
ninenct.store
trecobat.net

# Reference: https://twitter.com/reecdeep/status/1557380445758701570

gilalspence.com

# Reference: https://twitter.com/reecdeep/status/1559483912249696256
# Reference: https://app.any.run/tasks/3f879881-5093-4f45-b8cd-3e8535782377/

firtoky.online

# Reference: https://www.virustotal.com/gui/file/3500006bb33536ef2379f76afe8d70f57141c92025a0c6c14e80fba4a7a6bd9a/detection

gbd.life
896851.com
artovus.com
bense003.xyz
carpetlandcolortileflint.com
cherie-clinique.com
clinicadentalvelinta.com
eventrewards.site
evershedsutherlands.com
filmproduction.management
gdexc.com
gshund.com
invetnables.com
mqttradar.xyz
rettar.net
solaranlagen-forum.com
sussdmortgages.com
teesta.xyz
teklcin.online
thecovefishcamp.com
trainingmagazineme.com
tvlido.com
underneathstardoll.com
usdcmeta.xyz
zilinsky.taxi

# Reference: https://www.joesandbox.com/analysis/691056?idtype=analysisid#iocs

fabstaging.xyz
jxhckt.com
my1245.com

# Reference: https://tria.ge/220825-d9hmgsgac5/behavioral1

0016.site
aaa4bn.com
aaateamcare.com
akanay.site
alg-maintenance-hub.com
azino777club4.xyz
blogthongthai.com
caregram.biz
circulodeltrastierro.com
cyberstratosllc.com
digitalshui.com
enriquepimentel.site
healthseg.com
hostzones.co.uk
ilkoyhareketi.net
iuxinnian.com
johnnellbragg.com
karmashakti.com
kotan1992.com
mchacks.pro
mensfitnesstalk.com
modalsayabcde.xyz
online-mommyhanamy.com
phawaysafe.com
piobellas.com
reggaetonmusic-au.site
rentalps4.com
royalsprospects.com
sleepcouncil.co.uk
socialpigeon.co.uk
sportask.org
stake-dao.org
stratonstake.com
thecropok.com
translationtools-au.site
uswildfire.info

# Reference: https://www.virustotal.com/gui/file/70c90f2d3d41ea0122bdfb814294e873c963621a093faefeedd2ce5e025b886a/detection

alwrists.com
baremaster.online
cesarjunaro.com
ebtl.wtf
howdyart.com
hunn.pro
jam-nins.com
kijangjantan.tech
kuxita.xyz
leslainesdumouchon.com
mycto.today
neatneighborncclean.com
otnmp.cfd
slot999.site
tizzbizz.com
wanligui.com
xctech.world

# Reference: https://tria.ge/220824-wgaehshacq

591easy.net
809dispatchlogllc.com
aghype.site
andm2022.com
arlocalhost.online
barrystanner.com
bautrocknung.xyz
blog-host.online
bloghealthandbeauty.com
blossomsjb.co.uk
canlisohbetburada.xyz
carpetcleaningmasterclass.co.uk
chandu4u.com
chukwuebukastanley.com
cointwovte.com
colibriads.com
congcunggibng.net
cosmeticsz.com
crawfordcastle.com
cynitic.co.uk
cyuugakukyoushi.com
czsaj.com
dreamsmaking.com
ecologistique.co.uk
electricridesboise.com
everyverse.net
foodmie.com
freshnhellish.com
goodstaygetaway.co.uk
heveany.com
hikz.net
hiro138.xyz
in-vision.systems
jantdeposu.online
jeniusbank.co.uk
kiaradininten.com
kingalfredmotorservices.co.uk
klmleisuretours.com
kryptonapps.com
kswautobot.com
kuboshiori.net
londonphotoworkshops.co.uk
mdcsweb.com
nickatkeson.com
nilas.fr
oilgascity.com
onlineweed.xyz
quique.website
reno-easycash.com
salamanderfire.co.uk
salisburypride.co.uk
savannapropertyservices.co.uk
silverdropsofficial.com
slboxing.co.uk
stickybuttsbbq.com
streetbriefs.com
sussexaestheticdentist.co.uk
sygbitpay.com
teamen.tech
thequeenclean.store
vcel.co.uk
viemon.online
whitehawkproperties.com
xuemanzi.net
zgcjjy.com

# Reference: https://twitter.com/reecdeep/status/1564556804213932035
# Reference: https://app.any.run/tasks/14ee6fed-74a4-4630-8710-75685bdb85b9/

baintsras.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1564500423792271361
# Reference: https://tria.ge/220829-qk3mkshgbp/behavioral1

digitalsaja.com
elev8comms.com
futurelightiq.com
hicvxzaw.online
imikimi.nl
jeannadonavocat.com
nortonfree.net
oceanrealtygroup.com
sagalana.info
santiao123.xyz
secureservice.app

# Reference: https://www.virustotal.com/gui/file/6d0df288f02f7dad22fb9ea7ad1d07deeba5a37c540c552aa399da5eb7fe82e7/detection

272.group
6e1etxpnne5quxlnalk4226.com
7crownsco.com
adetg.xyz
anderson-spanien.com
bedsruz.com
chinabest-hp.com
claria.ca
frankasah-holdings.com
jklaesch.com
littlelantern.life
myvfxpr.com
redsuri.com
therequisites.com
transit1stbd.com
warecomb.com
worldking.xyz
yiye10.xyz

# Reference: https://twitter.com/ni_fi_70/status/1572534721091080192

cmnops.com

# Reference: https://tria.ge/220907-hvyglsbcb9

0755aite.net
24casinoelit.com
4tlracing.com
552northvictoria.com
77herbs.com
909injured.com
9486.site
99vin.global
abizar.xyz
abtbank.online
acmumzo.info
adagihlina.xyz
agendogliodoric.com
aliceseagerfitness.com
autoaccessoriesa-z.com
aynmjy.com
b7dd192.com
baggreet.com
bctugala.com
blanket.sbs
brazilianwives.com
bybala.com
cadismimil.xyz
camperbuysell.com
chicken-shack.com
clanfuller.com
danny-mickey.space
echafa.com
eevakoskela.info
emprendeahora.pro
enethome.info
futureclosers.com
giannamichaelsxxx.com
hampyko.online
hlcp5533.com
ingspira.com
itriyatci.com
jacksoncafepaola.com
jacobdrop.xyz
johncaruso.online
jollegratta.xyz
kaamla.com
lovecollective.church
lsqcys.com
manalapanhome.com
marvpn.tech
mtechvn.site
ntscleaning.com
okchurch.info
orket.store
pc-x.net
pemdescijengkol.com
pnc05secure.com
radiovivaitalia.com
sandboxwp.site
sanoba.site
se4.top
teluguclips.com
thedatingfunda.com
tilastudios.biz
toplinkstorage.app
tradecontractortraining.com
voicetall.com
webteori.com

# Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook-%2013072022

1ggn.com
778189.com
abeylele.com
abna.international
acoinmintexpert.com
americangaslighter.com
app-youhodler.site
appackle.com
atom-ontherox.com
baikhati777.xyz
blountfirm.online
boardinghouses.net
boostmedia.agency
brainwellnesssolutions.com
canineconquest.com
check-info-asked.com
classicscase.com
creatioconsultants.com
cutiemind.com
d1g1tal-loops.com
dharvest24.biz
dozivljajskigozdpohorje.com
dx-ss.com
edtechcreativity.com
eleganse-home.online
englishzones.com
evergreeneq.com
fbcpear.land
fromvalleytosummit.com
hayebenefits.com
hollandmulchus.com
jju21.com
johndivine.com
jouw-server.online
kasirselasarbrbd.com
kingoflogisticsgh.info
libretypumps.com
lovemya.xyz
mhcbrokers.com
moldshirt.net
nailonika.online
nationallrentacar.com
nbaonlineus.com
ofertascapital.com
pacificoakllc.com
parkwhiteplainss.com
prerising.com
printthisstudios.com
roadsideassistanceillinois.info
securitycamera-at-2022.life
shiyoushuzhi.com
szovegmuhely.com
terrariaserverhosting.com
theknightstemplar.global
titansfitnessapparel.net
tixdyweb.com
tongkhodentrangtri.com
trading-cracks.com
troyleedesign.store
turkiyedenalmanyayanakliyat.com
worldwidedatazehn.net
xn--9l4b93h4ub.com
yeslom.xyz
ywwpjqd.com

# Reference: https://twitter.com/tosscoinwitcher/status/1546717291726794752
# Reference: https://tria.ge/220712-e41rjsdfb4/behavioral1

2620farragutave.com
304windmillcanyon.com
acinstallationamc.services
arielchristmann.com
audiodobyps5.com
baguasan.com
bertusmabukyuks.xyz
bijiuche.com
businessdirectoryshopify.com
cabolinansthingsandmore.com
campkingind.com
captainmun.com
christinasharpe.com
claraeygor.com
clarencegresham.site
cownedes.com
craigbjones.com
creencia.xyz
dxcrmbase.com
emeryhistory.com
essay-forsale.com
fantasydrift.net
flashtte.com
foodresorts.com
fotografia360.agency
freewinupdate.com
geeminee.com
glootlea.com
godriver360.com
governmentsscheme.com
gsy56.com
isaiahfunnelcakes.com
justmakemoney.xyz
jxdqyx.com
krav61.xyz
laononggushi.com
le0hp8.xyz
ligeria-production.net
lovetreecafe.com
lowcfs.online
lowsugar.online
luxxagency.com
maitresalanomobikisi.com
mcleansit.com
morevisibilityagency.net
nyhhz.com
odulinsaat.com
okhuk.com
pherop.com
piauipet.store
platinumflooringaustralia.com
poker-star-top-casino.net
qrongsaid.com
rabbids-party-of-legends.com
rapiturs.com
read4achange.com
salinasresorts.com
seattlebusinessconsultants.com
studiohartdesign.com
szqnbmrd.com
thebestlifeapp.com
wbs-ekkyo-ec.com
web3sex.site
weboughtavideostore.com
yayasansetara.com

# Reference: https://www.virustotal.com/gui/file/9599673090c496dffd6feb789338325421921d43579ace8a07acb3ea3ce6eb7a/detection

advancedeventsystemsd.com
anthonyeditedthis.com
farcrysis.net
imikimi.nl
js088850.com
lloyd.technology
manruiwangd.com
moralincense.directory
nawyh.space
nortonfree.net
prunkvoll.com
puredelataiga.xyz
splnilud.xyz
superiorsprayfoam.net
tanaadd.info

# Reference: https://tria.ge/220928-nq5m1sghaj

anquyebt.com

# Reference: https://tria.ge/220916-sgqjysbgdr

fcektsy.top
iyiqian.com
uefhkice.xyz
xxhufdc.top

# Reference: https://twitter.com/pollo290987/status/1576940825585414144

mmakwakingjajasalmghandnaiojamixicolqadaraz.s3.sa-east-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/d19b7eea7766c49218f7335e263b5c8f7cbba26ac69118ff5f57de531238ce9f/detection

124767.com
3d085.com
5huae.com
6528876.com
68ceyoc0.com
79179.org
amphionoy.com
apkmodtex.com
arcadecase.com
arquitectosenzapopan.com
aypakagit.com
bestwomenclothing.xyz
bibercik.xyz
bridgerakefet.com
bruceforceconsulting.com
chaumontel.info
cynaxa.xyz
dgfunnyapparel.com
diamondconsultingsxm.com
francisartclub.com
fuzzyvoting.online
hellenwallpaper.site
hogsmeade.online
karismaoptikal.com
katsuyadaisuko.com
kgjft.com
kuschelwinter.org
lestoreadores.online
marianaediogo2022.com
martin-goebel.com
mccartinconstruction.com
naaririelnews.site
oboybeygomlek.online
payment5991350.xyz
prayonfire.com
salutevolutiva.com
savinginflorida.com
spreparadas.com
supportpet.xyz
thehotelnomads.com
ufa1.info
unitedlinguas.com
village700.com
yeymp.com
ytaohao.com
zen-shin.org
zeron1autosoft.info
zstwai.com

# Reference: https://www.virustotal.com/gui/file/07febd49f76153c48a0a4f9803e4e62fa589413c99280f0838b73f3e0260e713/detection

2ndoss.info
ace1inc.com
babehou.com
camwoobats.com
coviders19.com
ebay1111.com
elclubswinger.com
evargasdev.com
qatib.com
shareourjesus.com
stanleywatches.com
ttxxremote.icu
wearetwo-a.com

# Reference: https://twitter.com/reecdeep/status/1578299118761697280

negerbajs.info

# Reference: https://www.virustotal.com/gui/file/00f848b905c8530564a150e1b824db06990f4dccd5cb65284967632e6f2b0660/detection

3sixtypano.com
915783.com
alergiapediatrica.net
bahrain-lottery.com
blinkcommerce.tech
bmstech.us
desentupidorasuperhidro.com
hipillrvacem.xyz
isaidyes.online
luontoretket.net
mayorgabutler.com
oort.tech
orientdeliveryservices.com
pirkanlattia.info
slimscoop.com
studiomia.store
tesla-bags.com
thenorthside.online
tjwya.com
ukuchic.com
whatsonpaxos.com

# Reference: https://app.any.run/tasks/c2a28d3b-0618-4d02-b82f-790b6518d656/

bbm55.com
boatpile.com
chemistryramasastry.com
clevermarket.pro
dubaidesertsafarihub.com
e8a36zg.xyz
fleetcsr.co.uk
freerubuxnoscamlol.com
grouppoprius.info
jobsfv.com
lips-one.top
radioequipment-au.site
relmusik.com
testbank-textbook.com
toialsat.online
traccioncyl.com
turkuazmaden.com

# Reference: https://tria.ge/220926-nmebnabgfl/behavioral1

carflippingschool.com
futurelightiq.com
helpsquads.info
kanallipim.com
linknhacai11bet.xyz
muellerit.net
pimentdoc.com
promociones-ec.com
prunkvoll.com
sagalana.info
scienceonline-ca.site
sindtserj.org
stellarcivitasschool.com
stocktecnovisioncr.com
supportnummerbelgie.com

# Reference: https://www.virustotal.com/gui/file/2e6b14e41b3f871355635c7427cb1531a9b61a37e137f90a590d21eab7648f2f/detection

amssupermercados.com
anastasiavekselis.com
asda6.com
centralpats.co.uk
digitalsaja.com
fridcentral.com
halfpriceornothing.com
imikimi.nl
joynd.xyz
kriptosit.com
qrupeocajarual.com
robotdienmayvt.com
runthusiast.com
sapancabungalovafra.xyz
spekinkantaa.xyz
traumaburn.com

# Reference: https://twitter.com/pmmkowalczyk/status/1572532158543306758
# Reference: https://www.virustotal.com/gui/file/09e5f2f0a838ed840a20d428dd17517b8f9747a09774ecc0f2e3b6d0d9e5f7ac/detection

adorantha.com
banhmitayho.com
errorsitsen.com
fedefarmatour.online
fofinhaslacos.com
fromtheearth.net
garzaroofing.com
gogojackmin.com
googleus.xyz
hassankalip.com
hghaofang.com
htckasauli.com
ideonaut.org
liveasaveyshopper.com
nft-mktg.com
njclosingdocs.com
palacewazyc.xyz
partnermdg.com
polevoyton.store
rabokala.com
sadaffstone.com
tinybabyhooves.com
tudodeliciareceitas.com
vpnyjscloud.site
vymenanemovitosti.store

# Reference: https://app.any.run/tasks/77d590ec-4474-4962-915f-1a387d00b5da/

37300.uk
8ug4as.icu
941zhe.com
airbnbtransfers.com
allprocleanouts.com
bendcollegeadvisor.com
bluebirdbuyers.com
bookkeepingdeerfield.com
casinorates.online
classicmenstore.com
diacute.com
erenortopedi.com
feelfeminineagain.com
iaqieqq.com
lunarportal.space
meclishaber.xyz
naruot.xyz
nrnursery.com
nurse-jobs-in-us-35896.com
padelfaculty.com
seedstockersthailand.com
sipsterbyananeke.com
skymagickey.com
thaigeneratortg.com
vixensgolfcarts.com
xn--osmaniyeiek-t9ab.online

# Reference: https://www.virustotal.com/gui/file/069b2c8f0b66e3e32f76b719ee0fbdef37a602ebbfcb0d36c9b51cc5e0516779/detection

abakwsm.org
capta-selecta.com
cccoaa.com
d5innovote.com
enterprisetownship.org
followyourbliss.xyz
hunpinji.com
illumihotti.com
jillio.rest
location-site.com
monamjewelry.com
nhacaiwanboviet.xyz
reddassair.xyz
sbarenecessities.info
soill.jp
splendidrelax.com
tedxutsc.com
tslender.com

# Reference: https://tria.ge/220907-jgdqqabcg2/behavioral2

6vrueh.xyz
atama.engineering
centralpats.co.uk
christalindberg.com
minneapolisuniversity.com
oplandtravels.com
paym40.online
unitedhollywoodtv.com

# Reference: https://twitter.com/reecdeep/status/1582700811163160577
# Reference: https://app.any.run/tasks/fcb30d67-81de-47db-a70c-119ea74f8813/

artglass.shop
carymel.xyz
f1-ticket.com
familykitchen.ch
justremortgage.com
kuvips77.click
livinghopedoula.com
mad-cyborgs.com
patricklanding.com
paulmontecalvo.com
phootka.ru
ranchomeg.com
seatandfeel.com
theron-resource-group.com
westinotion.tech
xn--brger-geld-9db.online

# Reference: https://www.virustotal.com/gui/file/0ce34548a6c082e497ae568cec71b6425526e626c7211ba3d82e5c0c3c4def17/detection

almihdar.com
arzeshjoo.online
bet365star.online
c-ver-huawei.net
cartieronline.club
charlyanalytics.com
chelanweddingvideographer.com
circularsmart.city
correoversoi.quest
diet-delivered.com
eastportapts.com
fernandocarretero.com
fourjmedia.com
gabrieliglesiasorlando.com
globalparavarfoundation.com
hbwstg.com
healthylifefit.com
hkljq.com
hoodratsforum.com
intocaveis.bet
khpet.xyz
lvhomeinspectors.com
lvlhomesolutions.com
margondo.com
namesaketransport.com
networkporkwd.xyz
onlinedelivery.biz
persiantrips.travel
rabenteec.com
rebles45.com
santiago-services.com
scientistinbusiness.com
sebasfernandezart.com
sha1401100.com
shojicorpadvisory.com
takipdiyari.com
tonaprawdeniesamowite.xyz
tylesri.xyz
unisifik.com
web-devph.net
wellspringwriter.com
xn--kws549fp3p.com
yakinototamir.com
yanposta.com
zooplus.info

# Reference: https://www.virustotal.com/gui/file/3b5f6e720bd764199412694821748c78cc1197f33470921f173b745478e07523/detection

sorbo-balance.xyz
voques-tfr.xyz

# Reference: https://www.virustotal.com/gui/file/cbf93093cf6fb13bbf0f47f896f5527e0de585923dfbc86f9a4a15e961183b6d/detection

alvis.one
carmana.store
floridaindianrivergeoves.com
growupmarketingservices.com
gwnv.link
infoepic.info
jurgenremmerie.com
lesyeuxdanslespoches.com
magnoliabymr.com
norbercik.online
nuvidamedspa.com
ogurecsbatvoi-7.online
optitude.finance
pingacx757.com
suratdimond.com
taiguszab.online

# Reference: https://twitter.com/reecdeep/status/1584499004951302144
# Reference: https://app.any.run/tasks/da3eded9-e734-4d0a-ab91-9cf504e38f54/

46iot.com
ceraqr.com
g5i9a0.cyou
greekite.online
kaibi20.work
supremereiki.com

# Reference: https://app.any.run/tasks/58b9cfe7-5322-4795-877c-04ba8dbb7435/

16ardagh.com
3444zz.com
coffeepayment.com
innovativedbs.online
masset.paris
minkun.online
nutrizionista.app
qdmzx.com
odr3wo.com
picklewall.net
scrumcopilot.com
sequiratione.click
shopswayze.com
simplnergy.com
soldadelivery.com

# Reference: https://blog.talosintelligence.com/threat-roundup-for-september-9-to-september-16/ (# Win.Dropper.LokiBot-9969312-0)

6298vip15.com
825766.com
998899.lc
aceyourexams.org
agenlexispkr.xyz
awesomegih.net
ct666666.com
eminefendipsikoloji.xyz
european-resilience.org
famallcameroon.com
goinuffies.com
grupoprius.com
gurilab.com
jeuxjetx.fr
kevinandboots.com
mjmedia.online
nineodesign.com
randrconstruction.site
solutionsdr.website
strcktunkea.xyz
tbwtaobao.org
wettenunseam.xyz

# Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.NetWire-9970213-0)

alpenfieber-events.com
banchers.com
beachloungespa.com
bobijnvidit.xyz
cacconsults.com
drivemytrains.xyz
fdupcoffee.com
fitnesshubus.com
homecrowds.net
imbtucan.site
intelsearchtech.com
kettlekingz.co.uk
kigif-indonesia.com
leeanacosta.com
meditgaming.store
momotou.xyz
northpierangling.info
olympushotel.xyz
searchnewsmax.com
supera-digital.com
thespecialtstore.com
tricon.info
wearestallions.com
xn--agroisleos-09a.com

# Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.Formbook-9970817-0)

fftblogs.com
icishopping.com
junaidsubhani.tech
lanyuelou.com
locallywhitstable.co.uk
mail.boyyem.com.tr
mooreandsonsak.net

# Reference: https://blog.talosintelligence.com/threat-roundup-1021-1028-2/ (# Win.Dropper.Nanocore-9975783-0)

halloweenoncentral2.com
klodifiks.space
msk-kadril.store
thicmewtwopics.com
threadandcotton.com
xinhucj.com

# Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.Nanocore-9976516-0)

3egcfl.cyou
8065yp.com
azalpay.site
bbobbo.one
blast4me.com
cacconsults.com
co-gpco.com
confurn.net
duenorthrm.com
duetpbr.com
fabricsandfashion.com
fbo.app
fistfulofeuros.org
ndppoc.info
nyhedsbrev671.shop
onlyonesolutions.com
stjohnzone6.com
thespecialtstore.com
tigermedlagroup.com
www1111cpw.com
xn--agroisleos-09a.com

# Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.NetWire-9976531-0)

agencybuilderforum.com
alfrednelson.com
blkdenim.com
blossomenterpriseuganda.com
communityinsuranceut.com
dotalogy.com
elegancescent.com
movementspecialistslv.com
onurtel.com
paintedinafrica.com
qqbokep.com
rainbowbanks.com
rubenvdsande.com
socia1security.net
thegolfclubatcirclec.com
tqiawy.xyz

# Reference: https://www.virustotal.com/gui/file/673883ceb7adf30ad980e5e51b7515414becba3b5f6b96068dc4d35b092799fe/detection

demixafrica.com
fiscalfido.online
hnsmhbkj.com
ivcckx.hair
lenderark.com
m3in76.cyou
sathunter.site
snzbx.com

# Reference: https://www.virustotal.com/gui/file/081bf8a1ffc276c44fdd2ee9ea841848324df601dfb8ea53ca7f614f5e39bb21/detection

209648.com
2594.faith
446owkhvtuad.xyz
8410506.com
asatimes.com
backiptv.com
brewsolutions.net
cowsupportcover.xyz
desertcleanpro.com
hived.xyz
hopeisarainbow.xyz
intellectuel-balance.xyz
jackiekate.xyz
jernieswritingcorner.com
kingdomwarrior.xyz
neorevolution.ltd
onlyhamster.com
proofmoonbird.xyz
savage-street-shirts-843.com
scoutsilverlake.com
seekerblogs.com
shlycl.com
tiltedseven.com
usnorthsideparts.com

# Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection

cafes-lyovel.com
com-421.info
cwtproject.com
defireti.com
delcostudiola.com
dentalimplantspracticesbcan.com
dometodd.com
dothis.website
genesisgomkch.xyz
hantieluliao.com
hokashoesingapore.com
hotmanplayid.net
iphone13.space
ironweedaudio.com
knapsack.graphics
marina4bunbury.com
maryhillsubdivision.com
mashaalfashion.com
metagforce.club
nropes.com
onestory-book.com
rarityswap.com
remembergary.com
shoeloans.com
sydneycarsales.net
szqhkl.com
thecalminglounge.com
unionplusgiveaway.com
vdcrnw.com
viaggidafare.com
vintagekatherine.biz

# Reference: https://www.virustotal.com/gui/file/7e4c62f05f269c89ddba4bfbde605803406b779429bf9a1cd08ae57967edd2fa/detection

000006138.com
5092377.com
a-snag-tokei-kaitori.com
agcompanion.com
aifconference.com
ardtalscase.com
bigrockhuntingpreserve.com
campgreencove.com
constructiongst.com
designerinfotech.com
efeturozemniyet.com
electricsemiloans.com
foremostbookkeeping.com
ganitvigyan.com
happinesssangha.com
hcr.store
hongyanwulei.com
ihrorg.com
kosodate-tiger.com
l8e9gr.xyz
loudbodies.info
mariafonsecafreitas.com
mayascleanservices.com
micahlinacero.com
microw0rker.com
murata.life
mysitetutorial.com
norsgaard.net
nusires.com
penelope.team
pertlines.com
prmainey.com
qxu0l1pgl9jm1.xyz
renovacg.com
skinbid.pro
sodapins.com
sofanemphuyen.com
solfuls.com
sophrologuemontevrain77.com
syzbf32.xyz
the-roel.com
tur-advocates.com
tuvistaing.com
verdure720.com
vistadocs.com
vvv223.com
wwwfreemovies2021.com
yanpoake.com
zamanscorner.com
zaqv40.xyz

# Reference: https://www.virustotal.com/gui/file/c17e80bdd62f9993e1894ffb7d0a47bacf1d720667935ed8468dcb87addaa76f/detection

845562.space
882668.xyz
airshiftvr.com
bzness.store
clubfreak.net
dmsbrand.com
estherakademie.com
excelbar.com
fmnr.xyz
gohamaru.com
havexub.online
houseofgibraltar.com
likesalere.site
little-verons.com
livecams.quest
majahfit.com
marcanesas.com
masterpieceofgongyi.top
metavrse.events
millennialpayments.com
mint-saintxdmon.com
my-loyola.com
nnnn.company
sharedknowledgehub.com
shells-logistics.com
shop-clock.online
takebackourstreets.info
thefoxsmith.com
thekable.store
unitedgroundworks.com
ymgmt.xyz

# Reference: https://twitter.com/reecdeep/status/1592113890241937408
# Reference: https://app.any.run/tasks/3ffb4e53-6523-4123-a968-cbded3882bc7/

10555ff.com
52012f.com
882201.com
9j4.net
aliatransandlogistics.com
bidolupartner.xyz
creatednow.com
cremas.store
dealsgolf.com
drenkol.xyz
esmemariang.com
evanwoosley-reed.com
ghv0656.com
hrbyky.com
kghbjx.xyz
londonpapershop.com
medbump.online
omegabotics.com
pho-enix.online
scbjams.com
shxmnykj.com
valuemetamorphosis.com
wlchsl.com

# Reference: https://www.virustotal.com/gui/file/2ad6796c2512bf0ae919a777b01a7f160013b9f70023cdc02b362aed25b904ab/detection

1an2kdo.com
agropecuaria-hsr.com
besukhateens.com
burpbrothers.com
cocoone.club
crossexpresslogistics.com
davidmcquinn.net
disctheart.com
elkelaadessraghnainvest.com
fibverse.com
houm.design
iskconmahipalpur.com
jakubholesinsky.com
joia-data.com
kelxim.xyz
mentorsforladies.com
moonsandviewsbyemd.com
nobletheories.com
olga-link.com
ourdailystories.com
thesis-boosters.com
wskshopping.site

# Reference: https://www.virustotal.com/gui/file/009a9784dc899205aa987fdefee13129d223879d65903d82c2f3a6a4f144e0a8/detection

3533callegavanzo.com
3d-mod.com
ahmedo.ch
americahaseverything.com
braintrainingcoaching.com
cagadmin.com
ccgszj.com
houmenmarket.com
iamme-label.com
multimediapages.com
primeworkspace.net
puncvite.live
saintmarychurchec.org
senhongtea.online
slebuild.com
verywellcasino10.com

# Reference: https://www.virustotal.com/gui/file/02099eff8c8367527b831448f397741f49f34ee22d581b7a7776755fe3479e94/detection

2326285.com
aireandco.com
betaber.store
bronhr.com
casinox-ki.xyz
essentiaschool.com
getceylon.com
goldenagemininggroup.com
gsolartech.com
lawsonvineyards.com
lzty188.com
maccaverns.com
mrbinbags.com
newstz.online
primacosta.com
scienf.com
simaanchalkhabar.press
stampedzhane.com
thepediatricianskitchen.com
thundervetclinic.com
tistinstitute.com
vizeciyim.com
www2823s.net

# Reference: https://www.virustotal.com/gui/file/1ae4b15d714b9a62bb44d45e610cadacb50115b686c993ed650ff703452e8519/detection

7ccoffee.com
8499162.xyz
bdcdamper.com
cams.games
cicelyvanstraten.com
cosmoinfinity.com
dakaliuxue.com
gardenofeden.vip
gustaupdd.com
habusty.site
interfacearea.com
interschoolcarnival.com
jellofnation.net
meta-urbanvr.com
nortonlily.com
pariomemlak.com
peastar.net
stable-algorithm.com
tomatolemonapple.fun
unselfconsciousnes45s.sbs
wzkazzis.site
wzmylabel.com
zippycoupon.com

# Reference: https://www.virustotal.com/gui/file/002c72c9f9823d128c815a8f752a8fbcbd7f52bc94440988e8b70ca0491e171c/detection

6py.xyz
barigoodlivingvsa.com
bluedotair.com
bxtrace.online
cvelocity.com
entourageaid.com
forkmylifellc.com
goldenknights.systems
groundbreakcoalition.net
guttercatmint.xyz
iidoag.xyz
ionclicks.com
lemonshopee.com
mariolagardner.com
mbossefootballclubacademy.net
mesinjilid-lempanas.com
metavsarena.com
rentsalot.com
sungardcapital.com

# Reference: https://twitter.com/reecdeep/status/1601194626089906177
# Reference: https://app.any.run/tasks/1aab9aa2-e07c-40a4-b7a6-46212efec881/

700544.com
amspustaka.com
bookmygennie.com
cscvlehelp.com
dailyheraldresearch.com
davidemarone.com
frwqc.com
gmrsnodes.com
lee-perez.com
new-thinking.digital
newpublictransit.com
oonrreward.xyz
porggiret.site
publickit.website
spirituallyzen.com
tobewell.store
tommy57.shop
ybkos.link

# Reference: https://www.virustotal.com/gui/file/7857362e481c6630f18d052274a1ddd18ea1ed0d910f220ed50dca32f5960964/detection

41829.site
abbyfaith.com
belleriacortland.com
blocksholding.net
casa-gomez.com
dorismart.online
equus-creative.com
farawayflessner.com
faylike.com
fisharinvastmnts.com
kaity.site
karengillen.com
kungquer.com
meda-services.com
midtowndistrictsantafe.info
nakamu.online
nathansproperty.com
nft-quantum.online
niveaguide.com
nstsuccess.com
nthanisolutions.com
oddsonor.com
poweranalytics.site
powerhandsbypowerfit.com
riccardoolivier.com
rmchomeloan.center
sahityanepal.com
scentsibleliving.com
sensing.rest
shotblastwearingparts.com
streettreatsicecreamtruck.com
suthworld.com
the-bitindexprime.info
tyfinck.com
virginiavoyager.com
xeome.co
xn--72c9at8ec1l.com
xn--v9s.club

# Reference: https://www.virustotal.com/gui/ip-address/67.223.117.3/relations

achivego.site
ariseplay.store
domight.live
dorismart.online
martfind.online
netinseg.website
notbokin.online
paymallmart.info
ringdrive.website
wordybag.online

# Reference: https://www.virustotal.com/gui/file/0da037449078eb28dffcd95733769019ee21831ac82b12d845fb051be22b33ec/detection

123387lx.com
1960lawn.com
8181yd.com
aflambooks.com
alexito.space
allinfobd24.com
aquaflor.online
augustacrim.com
bancopec.com
batrainingstudio.com
bestplant.xyz
comptechs2000.com
conationcrossing.com
douvip303.com
expressingunderst.store
greatbayhme.com
gskpop.com
gunwicam.com
hirevirtualexperts.com
kilthiredirect.com
kokofleks.store
lesbianparadise.com
livingessencewater.com
longlakehomesales.com
margaritavillemelbourne.com
masterstouchautomotive.com
mengabarkan.online
mhw44.xyz
mickeysmotors.com
minifootball-promogive.com
mischianti.com
newtech25.com
oandazx86.xyz
originophthalmics.com
podiatrybroker.com
prolificgraph.com
putnamob.com
qiyepin.com
referto-online.com
rfzjsb.com
tabvern.com
undangannikahku.xyz
unlimitedlyfestylez.com
woningkeuren.com
xn--arbetslivsaktren-ywb.com
xn--unww24c.xn--czru2d
xolegal.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1603068902367719424
# Reference: https://www.virustotal.com/gui/file/f263a1f2233076c952f5dd01e57b8b3942f24697745b1c19f52e2c97837f9f10/detection

columbuscasino1.com
fencemac.com
loudesios.com
microwebtfm.online
nsowarning.site
takedetails.com

# Reference: https://www.virustotal.com/gui/file/18f31ac2d71ac144e713f11c2fdd14391962af4b0e77192d3e790a36aeae125d/detection

1404-123eglinton.com
aimir66.com
akashicrypto.com
artisticintercessor.com
bestnetworkcabling.com
bow-navi.com
coalmanses.com
elections-development.net
hollistergoodvibras.com
libertadmadrid.com
mmamixedmindsart.com
olgalirabusiness.com
radhakrishnavrindavan.com
sososo168.com
unfinibeats.com
ushopnd.com
watchonlineplay.xyz
/xx_cloudprotect/winlogon.exe
/xx_cloudprotect/

# Reference: https://www.virustotal.com/gui/file/02bdbd4777fc54081f239ce8936bb56d899ec58fe61437875f09227a55a74920/detection

apartamentoslaencantada.com
bingser.space
blast4me.com
co-gpco.com
ddstennessee.com
digigold.info
dronebazar.com
helfeb.online
homedecorsuppliers.com
magicgrowthproducts.com
miamibeachwateradventures.com
minimaddie.com
qifengsuo.com
rafiqsiregar.com
ragnallhess.com
restorecodes.website
sunnyislesgardens.com
tigermedlagroup.com
tunneldutransit.com
veirdmusic.com
xixi-s-inc.club

# Reference: https://www.virustotal.com/gui/file/e66a017fdb8d050f8497d367ce1c3cb02a5d6c6bcbf7f35ce11daf8969b8495d/detection

afiliadosilva.com
alrayangroups.com
bigbet2298.com
brkhot.top
bsnguyenhuunam.com
createdbybonk.com
edison-press.com
fiitnutr.com
georgemanuel.com
greendiamond.pw
hoshikoblog1.com
jtbfunnels.xyz
killeendirectconnection.com
kitsusimplex.com
liaquatsibtian.com
metalzj.quest
millionaireproducers.academy
paehdfdtrujdfhs.xyz
pieko.net
qatarstyleart.com
ryanmurazik.icu
straforkutu.online
sz-videocom.com
thankful.love
vanillanoir.com
xoarin.online
yukselfirca.com

# Misc.

111116138.com
222226138.com
444446138.com
555556138.com
613800000.com
613833333.com
613855555.com
613866666.com
613877777.com
6298vip17.com
6298vip18.com
666666138.com
777776138.com
8060yp.com
8062yp.com
bincryr.space
eeeee6138.com
efeturonline.com
efeturonline.net
efeturozemniyet.net
electricsemiloan.com
fffff6138.com
healthcarereport24.com
hhhhh6138.com
jetxslot.fr
jokins-gos.space
lislemusique.com
lllll6138.com
primarycontract.com
rfdnewsnet.com
wshvgazette.com
wzfmnewsnet.com
xn--efeturzemniyet-0pb.net
xn--zemniyet-m4a.com
yyyyy6138.com
zoey.team

# Reference: https://twitter.com/MalwarePotato/status/1612764382429351939
# Reference: https://www.virustotal.com/gui/file/065bfe7258ac4eb13d48c8db0da681c32448bbcb96a0e8a80a692a61ba25c18c/detection

19t221013d.tokyo
85188jx.com
afterdarksocial.club
ap2tsdaily.com
automotiveparts-store.com
brennancorps.info
chicashentai.com
courdak.info
eufidelizo.com
foxwhistle.com
lojacoliseu.com
lopezmodeling.com
lyonfinancialusa.com
ourstayaway.com
patrickguarte.com
seufi.com
trueseller.one
youandmegb136.shop

# Reference: https://twitter.com/reecdeep/status/1613871217831809024
# Reference: https://app.any.run/tasks/8cbc1237-c999-4061-9a4c-f1768e7b3173/

13615.vip
667fm.com
adenium1000rose.store
apisat2023.com
bdtongbangkj.com
biogenaacademy.com
couteauxcreation.com
cryptoinvestltd.online
deaholid.online
floss.software
glb-mobility.com
hediye-paketi.online
homeresearch.ch
k2aav.info
loaddown.vip
minilife.shop
mynichemarket.co.uk
naturalsalttheropy.co.uk
newhard.ru
uevj.win

# Reference: https://www.virustotal.com/gui/file/00823e9ec8d00674fdd3d60d55a953536574435d1e0bb4a0333aff86dd6559ec/detection

3laaaldin.com
500-fortune.com
arabiansanglers.com
baileysepictravel.com
buldrinox.com
bureaubois.com
carcanva.com
congtyvyyen.com
cuttacktop10.com
dudetechy.website
epowersportstechexpo.com
equipoiseenergy.com
etheriar.biz
evc24.com
felisblack.com
goodmorningpaname.com
hsshengri.com
jieruicloud.com
kedairatu.com
kidsdrawingstolife.com
marekpauli.com
margie-s-sensational-scents.com
matryoshkatechspec.online
nulumelighting.com
oasispaint-uae.net
paypal-caseid194.com
pepeglass.com
slobird.com
srmxcm.com
truebelievers.info
urbandbracelets.store
ville-fogalmam.com
vinhomeshungyentheempire.com
voltchain.net
web-solutiontnpasumo5.xyz
wrestlingfancam.com

# Reference: https://twitter.com/reecdeep/status/1615293924020461574
# Reference: https://app.any.run/tasks/128b9516-2c70-4a99-bf1f-6881103593fd/

1688eet.com
barrdsecurity.com
brandsmania.net
breaksetle.online
canadapostd.net
clickrapidoonline.com
cwhalesart.com
exeterseoexpert.co.uk
foody-people.uk
freydachsolution.com
generaldatapolicy.online
growbigg.online
gvdxop.xyz
lendike.ru
nigex.uk
oregonfirearmstraining.net
rrshoumi.net
saltirefireworks.co.uk
scapegoatbooks.com

# Reference: https://www.virustotal.com/gui/file/476d035ee5f31bea9c4c7560ff1625691d15ab8ca4b164de9ef8365ea09a5859/detection

15726.tel
appcast-63.com
atlantispharmagroup.com
bayfuid.com
carpetcleaner.guide
celikturklojistik.com
chosen-threads.com
coadept.club
danielfehrle.com
drgrafic.com
drunkenmumbler.net
electra.clinic
flexyfun.com
fraughtpklodt.xyz
frontiervalley8.com
gigaspro.com
grocebag.com
guchi-log.com
heiwork.xyz
hokislot99login.com
jxfae.com
kzexclusive.com
leftup.xyz
legendssim.com
madebygenz.com
modernmpm.com
moleculairscent.com
nm-beauty.xyz
northcoastcedrick.com
oldwestproperty.com
omnes-reunion-annuelle2021.com
prestigeinventory.com
radissontickets.com
rs23.club
ruiheaid.com
santogin.com
smiling-leaf.com
spidrmusic.com
thedanielrichard.com
thermalsystems.net
theuranus.net
tnfcoupon.online
toglobe.net
truckdrivingjobsbr.icu
uliicosmeticos.com
vendingandco.services
vitalreliefstore.com

# Reference: https://app.any.run/tasks/ede574c5-d88a-4a3e-afe8-3db6c48353c4/

23info.site
79355.vip
alcomarxism.ru
captoriot.com
change-flow.com
detail.tips
dev2up.tech
eco-rasy.com
existo.site
gospachile.com
hhkk569.cfd
laranium.net
puiry.online
techsupportfb.co.uk
ufalive.ru
vistavineyard.co.uk

# Reference: https://www.virustotal.com/gui/file/e22dde0bf08c6cddafbc0f6630c2ca0185fdf929ca9239783bb7c17686c23122/detection

celikvet.com
chengyumeta.com
clinicafresa20.com
everstorelithium.com
hapticvibe.com
imqualife.com
insulicstore.com
new-unhide.com
nftqueen.store
proveedorampsxxi.com
ropponme.com
wahl.technology
wingsandcurries.com
youduoji.com
zymiterial.com

# Reference: https://www.virustotal.com/gui/file/03735650255866b1c2592bcb4567cbcb2b9d23eea5430d2e7d7c6315abadb5ad/detection

racevx.xyz
ubique.works

# Reference: https://www.virustotal.com/gui/file/6f73d6879f3f916f05780e0d90b538cf6d01b976f21620a716e268c672906827/detection

http://104.168.46.125

# Reference: https://www.virustotal.com/gui/file/6b37e659593f1240578829cdbb6f5b7ce92de4ec407a0819570725514af57ff2/detection

cmaii.com
visawe.online

# Reference: https://twitter.com/TrackerC2Bot/status/1611984695683604481

efxety.top
hbgents.top
rsnzhy.com

# Reference: https://www.virustotal.com/gui/file/001997f3e75c1e0e3857f79186bfc2af22a043a2e3bd9b640a22b9f59dbc9149/detection

dietnow1.info
digisoul.tech
elite-cuts.com
etchapad.com
experienceanewtradition.com
integrityinlending.com
interaktifkitap.com
itstimesd.com
jays1fan.com
jpegpartners.com
listincode.com
longforge.com
missedyou.club
noemiklein.com
picmyrun.com
resell-success.com
thamost.store
toysandguys.com
unknown-consulting.com
xbdckk.com
zhuoqilong1688.com

# Reference: https://www.virustotal.com/gui/file/04c559bb0be01415e957d3dafa1ed6730505e35736eaea8cb03b8b7d101998bb/detection

147731.com
6976pk.com
adventuresegypttours.com
alina-jewels.com
arhehgap.com
baiersy.com
beachpawsmobilegrooming.com
bergenyouthorchestra.com
childrenseducationonline.com
cloudy-fi.com
coinchecke.com
cryptodouble2x3x.online
cyrptomag.com
daringtolivebook.club
darkwadlights.com
dazzleflat.com
dom-directory.xyz
duiqz.icu
erahuge.com
gordonzak.com
haulseattle.com
itsallcharlie.com
jordysangels.com
lightcorporateb.com
moonlit-raptor.com
natural-vanilla.online
newnasri.com
nightpartner96.xyz
pzz123.top
rozhunt.com
rticproduct.online
sharebay.store
shirleywong123.com
supremepeak.net
sva-pro.com
t-shirt-cat.com
thewealthwisdom.com
tikibeachgraphics.com
tokenomist.online
topotostar.com
tuoitrevietnam.club
urgcity.com

# Reference: https://www.virustotal.com/gui/file/02214be7a1ec20e21ab4209575618bb2a5090f15b53c4aaaac9490634d6aa48b/detection

znsjis.top

# Reference: https://app.any.run/tasks/0b6ee845-1b5a-4d0a-af37-c3a9d9045a19/

4tx.ru
667fm.com
apsocreto.online
bookinbournemouth.co.uk
byfuture.biz
expertponto.com
flippingfrenzy.com
ituyiut.wang
jourmoe.com
loaddown.vip
poweroffer.net
seeword.site
solutionsquik.net
vowlashes.co.uk

# Reference: https://twitter.com/wwp96/status/1627685160937463808
# Reference: https://app.any.run/tasks/a974d025-28f5-441c-bf04-d05a3317c051/

cardano-dogs.com

# Reference: https://app.any.run/tasks/f18444ea-5f7c-4e1b-b27c-adba0ef1f09d/

campisi.website
cmproutdoors.com
dcorearts.com
de-nagel.com
fluxgreenn.space
kenymart.online
kokororo.tech
proveedoresbeauty.com
tonica.life

# Reference: https://www.virustotal.com/gui/file/aefe5754459fbae160dc381c09ec8d3ad5484f527a1ea9accdb01b2d8f4c45e7/detection

classified.network
fiifuififnjfs.xyz
grocerylord.com
kostta.com
yibobet3546.com

# Reference: https://twitter.com/reecdeep/status/1625074510037762049

00360vip.com
24worldmarket.com
49138.net
alende.cloud
algient.com
beegain.live
beijingwudao.sbs
bluesky67.com
capersungai.shop
cobolmaui.com
cordesa.art
dekogenc.xyz
ellie-mae.click

# Reference: https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/
# Reference: https://otx.alienvault.com/pulse/63dbf90f5bcd0f8d91bec067

365heji.com
allspaceinfo.com
baldur-power.com
carlosaranguiz.dev
cistonewhobeliev.xyz
femfirst.co.uk
graciesvoice.info
h3lpr3.store
headzees.com
heji88.hj-88.com
huifeng-tech.com
iidethakur.xyz
in-snoqualmievalley.com
kajainterior.com
ohotechnologies.com
popimart.xyz
togsfortoads.com

# Reference: https://www.virustotal.com/gui/file/8fb593875f0bf9a1ecf72114935267caa80e7f2b2a268c3570927e4138070dd0/detection

3658622bet.com
allspaceinfo.com
themssterofssuepnse.rest

# Reference: https://www.virustotal.com/gui/file/04db053ddaf38c4d040e12c2ffdd19a98dbeb9cafb43e4ef397e95da97ba3036/detection

achyutlifesciences.com
amigasconesencia.com
armmapp.com
cantomarbait.com
craftstockco.com
edfnu.com
elkerfly.com
facetofacewith.com
finlayo.com
fundafes.com
ganleychevybuyscars.com
globalmarineserv.com
goodoffice.online
haerotechs.com
hautlescoeurscollection.com
high-clicks3.com
hjku.xyz
integritynotarial.com
janesgalant.quest
jcswkj.net
medicaltrust-sd.com
meggisiegert.com
midatlanticbath.com
minutemannetwork.net
murrayforcongress.com
novatel-network.com
passivemen.com
publicyazilim.com
rukygua.xyz
surfsolutions.info
thevishantiverse.art
tigerstarmatka.com
unlimitedrehab.com
worldwidecorumuk.com
xc6811.com
xn--schwche-8wa.com

# Reference: https://tria.ge/230324-vy135aga88/behavioral2
# Reference: https://www.virustotal.com/gui/file/d2fec4950c622ad3d82ebca0d30e9c1ed8db03769aea9fe764d8efb16e335bd5/detection

beavent.com
heroclassicrally.co.uk
redystedy.com
seolutions.xyz
wb293.com

# Reference: https://www.zscaler.com/blogs/security-research/technical-analysis-xloaders-code-obfuscation-version-43
# Reference: https://otx.alienvault.com/pulse/642d3ab1a3264fd75e77f2d7

060jinbo.com
10086253.vip
117ygh9x.com
365-8119.com
991-touring.info
abttt.win
adacaranya.com
allforfun.online
allison2patrick.online
applicationsdown.store
avdeeva.info
betfury-platform.net
bilpoinsaat.net
bocc.live
botanica-online.ru
canlicerrahi.xyz
ceu84g.com
chiyiqian.net
christmatoy.com
cinemamaxz.com
coffeelectro.online
dedmorozvidos.store
difozaa.life
dugebitv4.xyz
eatgre.wiki
farmanow.xyz
g2fm.co.uk
ginaandhipa.com
guzmanmodels.com
habka.online
hal-skincare.com
hiufouwnwk.shop
hjiqa.com
identowel.com
inigrey.com
jimtrosper.com
mgconsultantlogistics.com
myif471ok9ipidk2kkl.xyz
najdlegend1.com
nnhuigou.com
realtxt.co.uk
themas5erofssuepnse.cyou
wanknumbers.co.uk
wsavxrg.shop
zzaen.com

# Reference: https://www.virustotal.com/gui/file/f71defb8a1a7d2b0a39c1f0be1066c817190950d43120c0377fa13a2b0c126c0/detection
# Reference: https://www.virustotal.com/gui/file/c98602331ae9aeafc78d2d0c4209632aad294c8cb214073c9fb016ac6bf8806d/detection

4c2r7z.cyou
8ai.ooo
95z.top
alamsolutions.com
aodagency.com
bazaznanii.online
blobsms.com
com-walletconnect.com
courtindones.com
crystalclosetco.com
datasciencewiki.net
digitaltrophycases.com
dollyrosedelice.com
donatirmobilya.com
entityget.com
expressfreight.online
gamma-sa.net
gastronomi-salatiga.com
goehgy.store
gulluri.online
hardlock.click
hermeticat.com
iberianspecials.com
kbtcoin.store
kitchen-in-london.xyz
kkqqzb.xyz
lolisex77.top
manessi.xyz
moneyflowplant.com
nekosapiens.com
nrmaridodealuguel.link
philanthropydmv.com
primemart.life
ptv825.com
registemob.live
royalcrestresidents.coop
secure2connect.com
seriums.com
themasterfixer.com
tqrt.com
txtentertainmenack.org.uk
unidosservicos.com
wlkwinn.net
xn--mobilyahavzas-gbc.com
zedalphaquantex.com

# Reference: https://www.virustotal.com/gui/file/11f78a6f1d2cc4587778143bdc8b011ca509978c26ba60bd41fe74bd6773444d/detection

http://192.3.215.60
011965.com
1wwuwa.top
2348x.com
alphametatek.online
b708.com
betterbeeclean.com
braeunungsoel.ch
coo1star.com
cupandsaucybooks.com
deathbeforedeceit.com
delightkgrillw.top
echadholisticbar.com
freezeclosettoilet.com
gemgamut.com
goglucofort.com
gt.sale
hkshshoptw.shop
jacksontcpassettlement.com
kellnovaglobalfood.info
kui693.com
lightandstory.info
mtevz.online
sweetcariadgifts.co.uk

# Reference: https://tria.ge/230429-a474eaha87

1wwoio.top
4152.uk
5777757777.com
622058.com
90adbazi.xyz
acasascbcenter.com
activ8brace.com
aimappq.info
aliciartiz.click
alineacustomhomes.com
amarresamorososperupactado.com
ana-verie.com
anpaijia.website
anzpapimi.com
appskul.com
armormediia.com
asos-boost.com
asp150.com
aus-anzhelp.com
awoflo.club
bacteriophage.asia
bankoftama.com
barbershoploft.ru
brequx.online
bwoywonderkids.com
car-leasing-54007.com
carspace.club
ccpandashare.com
celeratuslegal.com
choac-2023.info
chrisandfrances.com
clintprow.com
dart-z.com
dististicks.com
diy-alice.co.uk
downhomecoastal.com
elboshari-tradeinvestment.info
fatimiyyaalawuyyatv.africa
gewirgq1uw.xyz
ghrevenues.com
giuseppedematolasax.com
goldenfestivals.com
grainespotager.com
grandcoeur2007.com
grunge.mom
guvenceoyunevi.com
healthyliiving.com
hewittstoneoutsourcing.com
ipsmagen.com
jessicamorimando.com
jgaytfiz3.xyz
jualan.email
kfoto.online
kings-health.com
kjds11171.top
lazersec.com
leahdig.com
liuyao168.com
livingsouthshore.com
modburyremembers.org.uk
mookaitejasper.co.uk
norske-jenta.ru
themetropolispta.africa
tylersphotovideo.com
uniteddividinghands.net

# Reference: https://gist.github.com/silence-is-best/d168f4c94f59e444a1081751e9dc79ca

8rr.xyz
bebas88official.click
bocahkota.xyz
bookcom34567875373733744444.top
chrestheryulelog.com
gestionamostualquiler.org
jamesdevereux.com
rmaex.xyz
toulouse.gold

# Reference: https://twitter.com/tosscoinwitcher/status/1653477554249166848
# Reference: https://tria.ge/230503-ayr51adb44/behavioral1

161453.com
420ewaterside1201.info
7292dd.top
82651nud.skin
accounting.capetown
allloycorepro.com
bidnpost.com
bokymii5.site
cashcraze.site
conradi.fun
extremepareidolia.com
farklisanatkoyu.com
grey-matter.life
kj7004.com
lgys174.top
localvoicesproject.com
nejdoulmail.xyz
opioidrehabhighland.com
proplo-ls.com
pzlktwqqn.top
ridilisusera.xyz
saidamatrix.com
shopluckyluxury.com
sk676.com
sociitopin.xyz
su74.vip
tenutaquarrata.com
tqxpongee.xyz
tungaformst.xyz
vgr511.icu
vinoforo.com
vntropicalfruits.com
vouchshow.xyz
wagar.work
wigletsmich.xyz
wplescbocsai.xyz
xpox.xyz
y1119.vip
yenisigortaaammm.net
zaketn.online

# Reference: https://twitter.com/reecdeep/status/1658408922410110977

globalaspect.life

# Reference: https://www.virustotal.com/gui/file/c149b95c4ff79668ca124cb218bf2f2b5fc8bf90372848370450ca94644d876d/detection

baotrang-jewelry.com
date-store.info
dinohoki85.online

# Reference: https://www.virustotal.com/gui/file/2750db58bd94b97aa33fb563461c528c54eb3f08f3315b0648291842576e6857/detection

fokusdongs89.click
innerpeasnutrition.com
ioddinemax.info
jsmaiyou.com
minsk-adstr.pro
pzr9.com
ready-sim.com
subicpearlresorthotel.com
touslesjeudis-test2.ovh
unrushlagos.life
wtwbenefitsapp.com

# Reference: https://www.virustotal.com/gui/file/077c6e0a6a5df926dd7673d81f466faf5a11b8e04d3a5ecddf9d7951107e0026/detection

altered-view.com
arolo.site
atstaxpro.com
barefootrestaurantil.com
calvingross.com
cartvey.com
clotheslist.com
creatifroom.com
daniil39.ru
grandmakadescustomquilts.com
hncovnyyra.best
ilovethecraze.com
ingeborgbleonard.icu
m3mparagongurgaon.site
mszsora.com
nerdppc.com
omdestinationweddings.com
regularizeimoveispr.com
resurrectedroastingco.com
robertduffywoodturnings.com
sepuluhgesit.shop
silvermacpro.com
somwear.xyz
truevoicetea.com
weareroamingexpert.com
worsall.com
zweei.com

# Reference: https://www.virustotal.com/gui/file/8c305a8516089a9e811fbc9cf560b0e36a2494debe59c5677376638c7155a452/detection

http://172.93.161.118

# Reference: https://twitter.com/Kostastsale/status/1688806753520308229

02omn1.cfd
595qdd.top
alannamershon.lol
amazing-s.com
artkit.top
czjhsklu.click
dconnekt.com
elodie-mace.com
gt6yzx.cfd
handdrawnpepe.com
help-hair.info
l0rh0q.cfd
lei-apels.com
lifeiextension.com
mydesigneredge.com
myvicesweats.com
nomadcreative.biz
nsu7aik18.xyz
refreshbee.com
ryjnfd.sbs
superxwin.app
triplemshipssupplies.com
ui-un.com
vevo-verify.com
vusujhyf.click
weinbrenner-stiftung.org

# Reference: https://twitter.com/reecdeep/status/1689271098926325765
# Reference: https://app.any.run/tasks/0519a6a8-66f3-4a6f-b80f-659468d04566/

1ijym8.cfd
alansoly.com
badbiche.shop
donnavariedades.com
dorama-feelings.com
empowermedeco.com
gampro.xyz
headingforchange.net
kepaoqin.top
lloydsgroupco.com
pianosugar.com
supernaturalsuperstar.com
therealmastercoach.com
top-xixi444.top
twinlogo.xyz
zuanlansi.top

# Reference: https://asec.ahnlab.com/ko/40556/ (Korean)

aseopli.online
asyimpo.xyz
dwpato.xyz
flayos.xyz
gastries.info
lastsummercog.com
myvea.online
shutro.online
ziewip.xyz

# Reference: https://app.any.run/tasks/296e8414-8ac2-4120-a9b4-546157ea14d7/

12allchat.xyz
1ygds.com
8956kjw1.com
bagisigorta.com
buxmam.vip
dhmkmam88.shop
ginbaochip.com
hiphabits.life
iweb-sa.com
lancele.com
lazarus.team
lifeworkfunnel.com
pacomarquez.space
rcarca.com
recrutoalliance.com
sanequeja.xyz
shrinedao.org
thewildmates.com
trustv-team.com
xn--939ay02cwla267bba.com

# Reference: https://www.virustotal.com/gui/file/020a524c60cee4ed6ca0aa54a118a3b8db045ea43049f9851c3d809e07437bc0/detection

914762.com
aurestia.com
beatavergine.com
blackhawkstickets.com
e-fite.com
eunicebarber.com
fumart.info
jshjyz.com
mission2run.com
moqainc.com
pitmansupply.com
texanbrisket.click
u1uc86.shop

# Reference: https://www.virustotal.com/gui/file/4246ac35e29b03cf4057457231abf222b88bf64cd65b59d7dc79d35b1953372b/detection

alemania-paredes.com
aryor.info
danielcavalari.com
denzaimivsem.buzz
eewapay.com
elperegrinocabo.com
formulavsupplements.com
gaoxiba150.com
gkoders.com
gstringtheory.com
gsvaedpzugtdn.com
hftroi.xyz
holdmytracker.com
iwantbundles.com
kalendeargpt44.com
kawitrack.com
khoyr.com
lodjireal.online
lojinhaevelyn.com
mic-reform.info
naiol.com
nlast.cyou
nodesofty.com
orlynyml.click
proloop.work
rainydayroofs.com
realmpabq.com
rfc234.top
salesfactory.pro
ssssne.com
supportive-solutions.com
thechaay.com
thundershorts.com
ultraflooringmore.com

# Reference: https://www.virustotal.com/gui/file/0e32221577915aa8a0871d2e2f01cc558450d69a93b8276b46cd70a8fcf4d84a/detection

big7041.com
daagureport.com
deseriohen.com
dharanatural.com
hfdkgm.com
kozmikkix.com
lepacificateur.com
portonomics.com
realmofencounters.com
rigel-connect.com
rksyss.com
sandyssugarshack.com
sfsadff203.com
sgnanda.com
tattooremovalwinnipeg.com
ton1peru.com
uvetcfm.com
walk-over.com
wisergiz.com
wortalnet.com
wyyxeeat0012.com
yousbusports.com

# Reference: https://isc.sans.edu/diary/rss/29958
# Reference: https://otx.alienvault.com/pulse/64907a0fed2b36310998d7ca

4thmainland.com
abhisheksharma.life
astudyinstories.com
babyshoespromo.com
bjhxtp.com
chaintrt.com
cleanskinshop.com
cloudzon.world
ctrivertravel.net
dl-jmjg.com
driversofficial.com
eliteenduranceuk.com
eperq.buzz
firstonsiterestoration.com
gameozo.com
ganosignsandprinting.com
hew9.xyz
langlaufdavos.com
livetcvety.ru
martynasobczak.com
nolinkoti.biz
openseamonkeys.com
porgy.online
rtlsdepmpyv7.com
sagewoodworkinginc.com
simplepay.kitchen
strattmanwedding.com
thecharmingchimp.com
theclockpeddler.com
thewoodeniphonecase.com
unbecomingsail.xyz
valleyofbreath.com
website-dolap.com
yolcu360online.autos
youhousedesign.com
ytdxjt.com

# Reference: https://www.virustotal.com/gui/file/042a79fca496efba98589c7115c620c116af2ef1e1308a9ab91f21026a5ccd43/detection

77121144.email
aboutwean.site
bawdydesignz.com
dbszdjh.fun
drops-of-awesome.com
financialfashionista.com
futuretechpros.space
futuretechsolutions.site
garderlafoi.com
grav2.com
illuminatonightlyrental.com
mgn4.com
moobileproctor.com
mycravingscafe.com
myhc360.com
nuaar.com
pinax.info
recursiveinscription.com
safeborderpetition.com
sarjanateknik.com
speakerbluetooth.com
squallo.group
stockprob.com
tanglewoodbybci.com
terapiavisualaeronautica.com
u2sr03.shop
weighing.xyz
xvngitnsfbtjregw.xyz

# Reference: https://www.virustotal.com/gui/file/553d2a3bc08b3ead2c4f13d0e9af86365ac4596697a60963685367d153ba0efd/detection

85343.top
boatparty.online
cardiopathy.online
cz-handbags.life
easylearn.click
epistratagem.com
hglx.bar
inailshickorycreek.com
jtfaqyxo.work
ksecurityblog.online
ky7437.com
mejor-proteccion-es.click
paintingsantaclarita.com
pralniacms.online
revyoume.com
staemcommmunlty.online
tcykv.site
tintash-sg.net
tophatlimitless.buzz
trinidadrealestate.net
zonazerogamescomar.link

# Reference: https://isc.sans.edu/diary/rss/29978
# Reference: https://otx.alienvault.com/pulse/64a2e1b31615d5a3975beaf5

7523615.com
atlas-management.tech
espiaocelular.foundation
harrisonfanilyvets.co.uk
realt39.ru

# Reference: https://www.virustotal.com/gui/file/4317a2e7e3a7570581a38000cc4f37c8cb9a53e522bfbd4bde00ea9d198db6b0/detection

alcmcyu.com
claudiaduverglas.com
displayfridges.fun
flowersinspace.tech
fuhouse.link
funwarsztat.com
johnnystintshop.com
kwamitikki.com
oliwas.xyz
omclaval.com
ourrajasthan.com
sarthaksrishticreation.com
sofbks.top
summitstracecolumbus.com
sx15k.com
uadmxqby.click
zhperviepixie.com

# Reference: https://www.virustotal.com/gui/file/0ece8fcce07dcda17dbb5cbf23b09f6bee6edc228a83f8721242eeceb3ec4550/detection

azgu8c6s9.xyz

# Reference: https://www.sentinelone.com/blog/xloaders-latest-trick-new-macos-variant-disguised-as-signed-officenote-app/

activ-ketodietakjsy620.cloud
akrsnamchi.com
brioche-amsterdam.com
corkagenexus.com
growind.info
hatch.computer
kiavisa.com
lushespets.com
mommachic.com
nationalrecoveryllc.com
pinksugarpopmontana.com
qhsbobfv.top
qq9122.com
raveready.shop
spv88.online
switchmerge.com

# Reference: https://isc.sans.edu/diary/rss/30020
# Reference: https://otx.alienvault.com/pulse/64aec959f8017dda53219cd6

6882b.com
730fk.xyz
aamset-paris.com
alanyatourism.xyz
ambadisuites.com
atlasmarketing.life
bluhenhalfte.xyz
collingswoodfd.com
df8588.top
fn29in.xyz
hhfootball.com
kalndarapp14.com
kdu21.com
latabledelepicier.com
london168wallet.monster
personifycoach.com
printmyride.store
r1381.xyz
smartinnoventions.com
tarolstroy.store
terrenoscampestres.com
test-kobewaterworks.com
theartboxslidell.com
uximini.com
vidintros.shop
windmarkdijital.xyz
woman-86.com
wyyxscc5856.com
yahialocation.com
zsys.tech

# Reference: https://twitter.com/reecdeep/status/1694704918584848831

sonokmall.info

# Reference: https://www.virustotal.com/gui/file/ec8c114e9c0bd6154bd58396c72fabe79e2ffe70dea761cabc98b35186723360/detection

8ppdy.xyz
91gag.com
brightodhove.uk
firstaidbank.com
fortifiedfinancialsolutions.com
gatorfunding.services
ic0.computer
inovakoni.com
leatherpocketbooks.com
libaslim.com
medichiccenter.com
rggamer.com
stratst0ne.com
tdpsampark.com
www-66552.com

# Reference: https://www.virustotal.com/gui/file/7af9cc5b2aade862d245026c370d0d4fd4d375426cd26357abba3ddb4c8a9824/detection

24eu-ru-startup.xyz
359brigham.com
4tvaccounting.com
678ap.com
6o20r.beauty
adept-expert-comptable.net
arsajib.com
avaturre.biz
b-store.shop
bavrnimn.site
bioprost.club
botfolk.com
canadiantrafficmanagement.net
connectioncompass.store
cpohlelaw.com
cyberlegion.group
cyg8wm3zfb.xyz
dcmdot.com
desire-dating.com
dp77.shop
dtslogs.com
eletrobrasilvendas.com
emsculptcenterofne.com
epeople.store
ezezn.com
giuila.online
guninfo.guru
hfaer4.xyz
hg08139.com
jaehub.com
kickassholdings.online
lb92.tech
lucasbrownviolinstudio.com
mamaeconomics.net
mathews.buzz
matrix-promotions.com
meet-friends.online
mimi2023.monster
misstamar.mobi
mybet668.com
myjbtest.net
narcisme.coach
oktravelhi.com
out-boundlabs.net
pagosmultired.online
paintellensburg.com
pf326.com
pittalam.com
qfs-capital.com
redtopassociates.com
ruixiangg.com
saledotfate.live
smokintires.net
taylorranchtrail.com
tempahwebsites.com
theaustralianbrisketboard.com
theoregondog.com
totneshotdesk.com
trongiv.xyz
wealthjigsaw.xyz
xn--groupe-gorg-lbb.com
yuwangjing.com
zamupoi.fun
zekicharge.com

# Reference: https://www.virustotal.com/gui/file/ed970f5692d7a2e1fcf63f57635b45304d047c2d0f3b854dae2a39bff7e9707a/detection

983xpj.com
aboutmart.info
bathandkitchendesigns.com
benefit-america.com
bet366b.com
broadfield-party.com
caballoyjinete.com
cufit.net
cyclevalue.net
fannydarat67.shop
ioioidev.com
leadsbot.online
mayday.media
medicalodgesgardner.com
mt031.top
muffliquorcompany.com
munzarabogados.com
noumit.info
pratticofscience.online
rightbell.org
sbads7.click
stpro888.com
switchjobz.com
testuojamvazonai2.com
thewandedtrader.com
tonysthreads.com
wakeup.services
welder-prices.xyz

# Reference: https://twitter.com/reecdeep/status/1699386670301294792
# Reference: https://www.virustotal.com/gui/ip-address/66.29.142.244/relations

evernature.top
framedart.top
greenbolt.top
mentuz.top
onemall.life
playboss.info
renderity.xyz
shutlleross.life
tarcontrol.info
tartar.life
vinoz.xyz
zeeluck.xyz

# Reference: https://twitter.com/reecdeep/status/1699386670301294792
# Reference: https://www.virustotal.com/gui/ip-address/69.57.161.67/relations

boscon.xyz
cerajove.xyz
cerave.top
clovein.top
foxixy.xyz
gasseit.life
payflows.xyz
showpay.life
starfox.life
treadom.info

# Reference: https://www.virustotal.com/gui/file/b2085baf71cd3b01505f42752e2024d360a6684b0eb0feaf11ccbfdf47c3f96a/detection
# Reference: https://www.virustotal.com/gui/file/08db0d0c9d1d2ce767a17c4461b25fccdf2f9075be2a8fe45d4461d23e936f35/detection

311849tz3.xyz
3sqjrh.cfd
692122.com
93v0.com
ashiuvn9562as.vip
autoant.net
bayhouse1701.com
book2110.com
devo-parts.online
efscollectionswexinc.com
f3dfym.cfd
futuregainers.net
grecanici.com
hvzpw.com
iran-uk.net
mega-clay.com
navigate-power.boats
pagerwojogaes.com
passportrenew.xyz
revitive.org
rigintech.info
sugargz.com
whiskeydecanterset.com
zippochinhhang88.online

# Reference: https://securityintelligence.com/posts/email-campaigns-leverage-updated-dbatloader-deliver-rats-stealers
# Reference: https://otx.alienvault.com/pulse/6503fb29e81f4b7d817bfed2

660danm.top
aconaus.org
altralogos.com
azurefd-paitohk.xyz
bvgroupcos.com
dunia138.info
janus.news
mattewigs.com
mytraderstore.com
oldironmetalworksllc.com
playdoapp.online
purelyunorthodox.com
rva.info
sinpercar.com
totomata.com
transportlogistcs.com
undoables.com

# Reference: https://research.checkpoint.com/2023/unveiling-the-shadows-the-dark-alliance-between-guloader-and-remcos/

vrezvrez.com

# Reference: https://www.virustotal.com/gui/file/254420572478301187f36171b5b34d183c1ce78427041a205790e0dddb214133/detection

69573.xyz
81mof.top
ainji3.space
alessandrafausto.com
alloneplace.top
cjoks.top
consumasa.net
domainyabaik.click
fabioostermann.org
fb99vn.com
gd001122.com
give-b4.buzz
guyix.com
harikanarayan.com
jasminewebco.com
kilat.cloud
messaggerienazionali.com
p3pp.top
pdfamazon.com
poker495.com
remoteyear.asia
rewardtool.xyz
shopshenn.com
sixthsensehk.com
smkmodelkhaschalok.com
sorteosconttravel.com
theclosets.world
wecouriergoods.com

# Reference: https://twitter.com/tosscoinwitcher/status/1706743409179082818
# Reference: https://tria.ge/230926-wks12adg53/behavioral2

1hxyut001.cfd
1weasw.top
2017m.com
62gru.com
920222d.com
adrentek.com
alphadiscount.buzz
asrworldbridge.com
bachblueten-center.com
barbendersapparel.com
biyou-club.com
bizcapitalmanaged.net
brainmedicine.net
civinqagency.com
cli-test.com
ctygd.cfd
ffnd-it.pro
gogoeconomy.com
grovehillgardens.com
hm4kem.top
holisticpetpals.com
huayi17885.vip
investorslabs.site
irlandhouse.net
jgkstore.com
maingeem36.click
mjn977.top
msoftco.net
ncc833.xyz
povfilmfest.com
rabota-promlit.store
shahabatlas.com
socialvideostream.com
sportsstump.com
staging121.online
thewaterfallhouse.org
titklive.top
ushaibusmani.com
zaimdream.online
zaimonet.online

# Reference: https://gist.github.com/silence-is-best/23738d87475d67d843bd79231b008e5a

bbq011.top
browser-privacy.xyz
nasyoeastasia.org
resenha10.bet
thesoul.agency
universaldoner.org

# Reference: https://www.virustotal.com/gui/file/559efeb0d4c9e06127bcf12bc69d19c901fc7f723e076073506fdedb7c1a2117/detection

admiralx-ksaa.buzz
avanty-renovation.net
bia.beauty
gardag.com
gxdclass.com
heritage-pnc.com
kalndrgpt01.com
kotovape.com
liith.org
marcustheares.com
montanasapphires.online
rosefinch.xyz
sti719.cfd
tuckerfertilitylaw.com

# Reference: https://www.virustotal.com/gui/file/4e52766fa90e1ffd16cba2eb039e5bdb2916f2c6d61d3f53461f44b4e9796907/detection

http://5.181.80.156
capitalm3m113.com
compoundforce.club
cookchefs.top
corteiz.org
dazzlebeautybox.com
fstrainingllc.com
ilsge.club
iviaggi.blog
kai6.name
kotovape.com
leshka-toshka.online
liith.org
lojadivamais.store
luxeconcept.net
lyesmith.net
muraveynik.online
r-grenader-jackpot.lol
rosifariasestetica.online
softpro-qa.com
tamique.com
thebestforyoucom.life
tisdale.bio
ucrypt.pro
winchespullers.store

# Reference: https://twitter.com/reecdeep/status/1714268250048229495

nagtco.xyz

# Reference: https://www.virustotal.com/gui/file/c502569c4e1000de90545d80b4f714c0549e64d78d4a9468f11dbdba2231e3c6/detection

http://172.245.208.6
bradslinkard.com
dulcestipicos.madrid
hotelunivers84.com
lesresort.shop
mantap89.online
viteview.com

# Reference: https://tria.ge/231026-ezsv5sdc6z
# Reference: https://www.virustotal.com/gui/file/1f30b513d1315b7a9432f9cf2937d5c4728455fbd7c681a552b94f57a849757c/detection

http://141.98.10.13
03ss.vip
278809.com
91967.net
alcmcyu.com
apneabirmingham.info
asgnelwin.com
b2b-scaling.com
cjk66.online
claudiaduverglas.com
completetip.com
displayfridges.fun
docomo-mobileconsulting.com
drpenawaraircondhargarahmah.com
dryadai.com
emeeycarwash.com
flowersinspace.tech
fourseasonslb.com
fuhouse.link
funwarsztat.com
fzturf.com
giallozafferrano.com
gk84.com
gracefullytouchedartistry.com
greatbaitusa.com
gypseascuba.com
hbiwhwr.shop
hrmbrillianz.com
jizihao1.com
johnnystintshop.com
kebobcapital.com
kimgj.com
kjnala.shop
kwamitikki.com
leontellez.com
mercardosupltda.shop
mfmz.net
mosiacwall.com
motorcycleglassesshop.com
mysonisgaythemovie.com
mysticheightstrail.com
oliwas.xyz
omclaval.com
ourrajasthan.com
podplugca.com
polewithcandy.com
qixservice.online
rollesgraciejiujitsu.com
sarthaksrishticreation.com
sofbks.top
summitstracecolumbus.com
sunriseautostorellc.com
sunspotplumbing.com
sx15k.com
thwmlohr.click
travisline.pro
trishpintar.com
uadmxqby.click
vandistreet.com
vaskaworldairways.com
vinteligencia.com
vistcreative.com
wb7mnp.com
weoliveorder.com
wilhouettteamerica.com
zhperviepixie.com

# Reference: https://www.virustotal.com/gui/file/6b90f7fe7abcb028f3f1ad8173f22d11b950714483ab6cdcb2f0a37961a30a51/detection

abcya50.xyz
addtr.online
botani-don1.xyz
carbonbeeagtech.com
carmenceja.com
cloudavde.net
golgotaromanianchurch.com
gonks.shop
hollydays.online
hopeaugust.com
hstonme.xyz
identcase.com
jewlselegance.com
jupefeeds.online
klinkspremiumwildlife.com
lah280.com
lojasdna.com
lyzhang.site
mroadholdings.com
myyacht.rentals
planetmercury.info
retaron.online
secured-jobs.com
slhstrategicsolutions.com
smqzgy.com
teto-store.com
thecreativesoulart.com
topskillsnow.com
truthnotpolitics.net
uinnou.com
ymvip296.com
zuqiu11.top

# Reference: https://www.virustotal.com/gui/file/17d4054d9cb3dc8df10d4ca4bd4f201b087cb58716dab9c93390d3f35010c8e4/detection

9310harmony.com
algogames.xyz
annturner.space
bumisriwijayalestari.com
chemitronic-thai.com
clauderuelle.com
drone-majic.com
easonshen.com
flawlesspheno.com
godoctordrywall.com
gray.management
headlineoutline.net
highcaliberperformance.com
hijabzone.online
homedecor12.com
hostedexchangeanalysis.com
ihouse.love
lovabledoodleshome.com
lpsfhls.com
maestrodelamarreefectivo.com
myyntisofta.com
nexria.com
nowcleanran.top
onespeeddriven.com
photoimaging.center
preorderpizzas.com
rocketnow.club
roofrevivenc.com
senatortomcullerton.com
slingerlanddrumcompany.com
squawpalisades.com
tcchiropractic.net
thenorwegianbutler.com
thethomasgrouphomes.com
uh.immo
vat-jp.com
xgspw.com
yn-wx.com

# Reference: https://www.virustotal.com/gui/file/865c3d5398639b15b66ded5441836610bc82d3c996e707ff8741c8b7fce482d5/detection

91qds81ik.biz
allixanes.info
perfect10beautybar.com
schwander-weine.com
spaghettislice.com
stl-rsvp.com
xn--c1akodirg.com
ylmby.com

# Reference: https://www.virustotal.com/gui/file/97acc5c52513ead4ba018af7dd726edd3179f993099640681cd706db4d263f38/detection

http://141.98.10.123

# Reference: https://threatfox.abuse.ch/browse/malware/win.formbook/ (# 2023-11-08)

http://103.138.108.96
http://103.151.123.228
http://103.156.91.153
http://104.168.33.25
http://107.175.212.60
http://107.175.218.12
http://107.175.218.31
http://185.29.9.30
http://192.3.152.135
http://198.46.199.168
http://45.85.219.226
http://5.181.80.36
http://64.44.101.233
alienzouks.com
bojz168.com
keprom.works
offtec.cf
ryandeby.com
wellcalls.com

# Reference: https://www.virustotal.com/gui/file/00eefbbfef027c2641476d176e81f017cc9f27d91798c30cb47c2a5cb46b126a/detection

633922.com
belaflorloja.online
blessingstation.org
cjjmobbbshhhu.shop
fortunetravelsltd.com
fwl0q2w.shop
godhuman.org
greenharbor.info
hcfa-cis.com
hillcresthealth.online
hmoatl.com
lets-room.online
medical-loan24.live
ozzventures.shop
porousworld.com
sorenad.com
speedbikesglobal.com
zbbqis.store

# Reference: https://www.virustotal.com/gui/file/ea5a8efb33e85213a96baada2f0f330d2b065d8efac0dbabdacef44eed8ee34c/detection

3gresources.com
aelgjf.cfd
belasaudecom.com
betongpumpningen.com
digiscout24.com
fam-scharf.net
foodcos.xyz
prostoptowing.com
shenzhoucui.com

# Reference: https://gist.github.com/silence-is-best/67adb7549211b3046f554044bcc5c151

australiavisaprocess.com
coolermaster.xyz
e-saleshub.quest
echolinkevolve.xyz
ikun720.xyz
latechdz.com
maxvoss.com
mr-u-taste.com
sell-home-fast-for-cash.xyz
t5-1682468.xyz
talknconvert.com
vaultedjewelry.com
vfhnyjgr.cyou
viptop77.biz
waterdropdilter.com

# Reference: https://app.any.run/tasks/e448b261-f10f-4937-a999-cb7dd91d37d2/

333vvs.com
antsnav.com
cmmug.asia
finebb.net
gdyanjiu.icu
hreeremaeps.com
ljwixsb.top
mobdigim.com
pdian.link
shopbons-mall.com
shortfall.net
tecverse.xyz
yf168vip.com

# Reference: https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2023-11-29-IOCs-for-JinxLoader-to-Formbook-XLoader.txt

1214888.com
219855.xn--80aswg
austintrafficlawyer.com
autrevalevale.click
e3iaibr.icu
infinite-7.com
julieannmirabel.online
ldhqi4.fun
ncdanmark.org
ofupakoshi.com
overthemoonphoto.com
taxhwangeub.com
terranovaservices.top
worldlife.casino
zkrbma.store

# Reference: https://app.any.run/tasks/49f42b26-c220-4fe8-8181-cf9c1215ffb7/

collline.com
functional-yarns.com
jokergiftcard.bu

# Reference: https://twitter.com/K_N1kolenko/status/1732660807316455743

giftjubilee.com
ladyboyfaceswap.com
wildenmann.shop

# Reference: https://twitter.com/reecdeep/status/1737429448754954552

apexpion.club

# Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection

efasthosting.com
emergencyprep4cast.com
mu.network
pancytopenias.com

# Reference: https://www.virustotal.com/gui/file/19dc94108fa40fab39e63da6436a1925dc3bb5491c4b0d7fef94fd4f26e42a62/detection

297191.com
2minus2.com
530westley.info
affordablyrefined.com
amerika-grande.com
artificial-pigment.wiki
becomemoreamerican.com
bella-pi.com
bets-bc-aingz.xyz
bettermtl.xyz
by8115.com
cannabis-entreprise.com
certezza.academy
christinevandenhove.com
comicbookkitchenparty.com
designssavelives.com
digitalassetagency.xyz
drredu.com
egfintl.net
emperorsoasis.com
expartcomputer.com
footpeel-tr.com
grabsure.com
hokkistar.com
ideaevcharging.com
idwalalodge.com
imzztoken.xyz
klvfklfdklciovfkldklvcdf.store
litho.ltd
mapogosmello.com
mendazilima.quest
moodylight.store
ortakoyfirini.xyz
palisadestahoe.net
pjduffy.xyz
quantatix.com
quotexqatar.com
qyornaturescare.com
restorativeeducationllc.com
scarpatostudiolegale.com
stabisville.quest
techtv.pro
theendofmonth.com
valentina-gil.com
vtuos.com
wenxuer.com
zeuss.info

# Reference: https://twitter.com/V3n0mStrike/status/1751246926824026314
# Reference: https://app.any.run/tasks/45c442c5-015f-44e1-a6b5-8998e5c6ad2f/

104kwt.com
collegeshirt-shop.com
israelijewishwisdom.com
kevinstephensdesign.com
kklvyy.com
nextlevelindependence.com
octet.asia
perfumariacheirobom.site
produceoficeland.com
projectsupdate.com
pslsjy.cfd
va8qsy9rwa.info

# Reference: https://twitter.com/K_N1kolenko/status/1757639707922407857

infiniteiris.xyz
servicemailteam.com
thesleeperandco.com
veikkausbonukset.guru
yvz74e01q.sbs

# Reference: https://www.virustotal.com/gui/file/3970ae4e6f0de1fcf790d6d65f4ab7cd348d5256a1293bc196a5906b38acf6a5/detection

admiralx-um.top
doctorscrummaster.com
yjeqj3.cyou

# Reference: https://www.virustotal.com/gui/file/832b6bc13d01a6a29ed594caf07462dbacc619b9be8b52a6ccd53efc2b19eb12/detection

97238.vip
bwchosting.com
bydglobal.online
charee.shop
goremtnbuilders.com
hkkwmhwv.site
klix.icu
klsxofficial.com
moony00tsnft.xyz
nasigoreng.online
nmckyiqsi.top
pinupmeals.click
qfaw.mom
sec-28082672co.info
tinchap-nganhang.biz
tprgamesslot.com
viberteacher.net
xraytoys.online
zabloudil.website

# Reference: https://twitter.com/James_inthe_box/status/1785306584081744095

dianomefs.cfd

# Reference: https://x.com/pancak3lullz/status/1791899616234832272

tycent520test.com

# Reference: https://x.com/James_inthe_box/status/1792642601440403887
# Reference: https://app.any.run/tasks/b8fe6ed2-d843-4340-b03d-4f8be11006e4/

trabnyvideosx.com

# Reference: https://x.com/ShanHolo/status/1791374709658927222
# Reference: https://www.virustotal.com/gui/file/da739ef3c898ffb05d524c4697e6bee1b3a37a71a0e6e25c3d3d2b549a36decc/detection

crimsoncascade.xyz
gcashservice247.com
gregoriusalvin.com
infomail.website
italiangreyhounds.online
tintasmaiscor.com

# Reference: https://www.virustotal.com/gui/file/00d3d0c49343dba533737e4a17cf453697aa569b00d07deb2cd7688c66d88ada/detection

222ambking.org
avisrezervee.com
bitservicesltd.com
cherimoyacafe.com
ecomofietsen.com
employerseervices.com
energyservicestation.com
fclaimrewardccpointq.shop
germanreps.com
gritslab.com
mygloballojistik.online
shapshit.xyz
thedivinerudraksha.com
thewildphotographer.co.uk
un-object.com
white-hat.uk
younrock.com

# Reference: https://x.com/ShanHolo/status/1802999589701616106

http://192.210.150.58

# Reference: https://www.virustotal.com/gui/file/2407da1627f35dafc162c06c93c95d612ac0349488241d297152e41d0f8af7a0/detection

econoautomate.com
skinnovations.xyz
sonhouseton.com

# Reference: https://www.virustotal.com/gui/file/02af626e64ba37d93733dfbaa5ac38601c59521656cc0751b961800e22f36958/detection

http://172.245.26.136
alarmself.com
bialbo.com
centrelseal.com
cryptobaka.com
draincleaningservice.club
feononepage.com
freewildhearts.com
galvess.one
gp522.com
hmpmovie.com
hungryrooms.com
jarryfoundation.org
johnnytimothy.store
madhar.net
magichniy-svit.com
maximizeyourcampaign.com
mightyminerals.com
myrvpartsplace.com
nolanvogel.com
norwatt-es.com
one01click.com
pandorabrasil.life
prima-xchange.com
pwev.xyz
rts-restore.com
sabahbogor.com
solid.events
swiftlinkshipping.com
waitakigeopark.com
wieartoll.xyz
xjjbd.com
y8fdunconvinced.rest
yarimadadekor.com
yoursoloempires.com

# Reference: https://x.com/malwrhunterteam/status/1814009754123190687
# Reference: https://www.virustotal.com/gui/file/a7113afc816d7271162798bbc5ef67b744336160c016ffe5fddf1107e6417478/detection

http://103.161.133.121
http://198.46.176.133
00050280.xyz
00050680.xyz
123sz8.buzz
439570.photos
5425357.vip
88809.club
aircraft6loan.xyz
aituranft.app
amimaneramontclair.com
audmet.xyz
bagibokep.one
bt365961.com
bugrasirinn.design
clickrush777.xyz
detodogourmet.com
dinoweb.site
fe25.top
flickbetegypt.com
globalbuildingbrands.com
golden-retriever-miniature.com
gwfilmphoto.com
haulsreward.com
hecxion.xyz
hxpuog827m.top
itjobsatlanta.com
jaipreeth.com
jdios.icu
jf5i2of7h8kdl63.skin
kindkill.com
lambertroom.site
layninder.com
meninlovehk.com
michaelsec.com
mines254.com
mintglowco.com
mo60.top
mtplus.online
mytistabenifits.com
n3tro.com
nmqhu.sbs
passiveincomeyourway.com
pastecode.dev
portalpuff.shop
powerfulpositive.com
praiseword.com
quickcash.agency
rmnqevea.xyz
rohmglobal.com
selfdiscoverywellness.com
silstarascenter.com
snapvideodl.com
sodec-home.com
somoka.com
sp20242.click
srnindustrialco.com
sy-lg.com
talentscalinggroup.com
threadsbackups.com
trevelloescapes.com
triplekpets.com
utepibu.com
willsbountifulcatering.com
wwacp.com
yt163.top
zvbbb.com

# Reference: https://www.virustotal.com/gui/file/ecfc4d909793ddf4ac25da8cd24a138ad96cefd6284a1b7fe6cf7ccc0a297f46/detection

17tk555j.com
1win-yyy-official7.xyz
247866.top
24angel.com
96503862.com
bt365231.com
celestialcharts.network
dungcamvu.com
floraperfumaria.com
jbovietnam.vin
msmotorsjp.com
sansiddhiedu.com
slotcuan88login.com
wukunstudio.com
ygsj009.xyz

# Reference: https://www.virustotal.com/gui/file/e878bc9103eb16c9edec5cb0efbc8ae207b0a22eb8dcd022e22863eeb644b484/detection

http://38.240.40.42
fnx-group.net

# Reference: https://x.com/doc_guard/status/1815733443419910487
# Reference: https://www.virustotal.com/gui/file/f17bd7fd6d8a9e5fcbda5a90f2e7b6cd0835e52eda90c374290e896cd460745f/detection

http://54.38.139.98

# Reference: https://x.com/ShanHolo/status/1818541500348707022
# Reference: https://tria.ge/240715-kmwn6axfpr

2ecxab.vip
331022.xyz
522334.com
7140k.vip
abramovatata.online
aklnk.xyz
appmonster.live
axoloterosa.com
bahismax.com
barillonfo.net
bb4uoficial.com
beqprod.tech
berry-hut.com
budakbetingbet43.click
casvivip.com
clareleeuwinclark.com
clarimix.com
cualuoinuhoang.com
depotpulsa.com
detoxifysupplements.info
drmediapulsehub.com
easy100ksidegig.com
errormitigationzoo.com
f661dsa-dsf564a.biz
flipbuilding.com
h-m-32.com
holisticfox.com
instzn.site
jezzatravel.com
jwsalestx.com
k2bilbao.online
keendeed.com
kursy-parikmaher.store
lottery99nft.xyz
malianbeini.net
nn477.xyz
outdoorshopping.net
pcetyy.icu
plaay.live
polariscicuit.com
pptv05.xyz
project.fail
qhr86.com
qudouyin6.com
quinnsteele.com
reignscents.com
rvrentalsusane.com
rwc666.club
sagehrsuiteindercloud.solutions
sahibindencomparamguvend.link
sfumaturedamore.net
shapoorji-kingstown.com
ssongg11913.cfd
taobaoo03.com
ternkm.com
thelbacollection.com
tricegottreats.com
us-pservice.cyou
used-cars-99583.bond
wot4x4.com
yunosave.online
zj5u603.xyz
zmdniavysyi.shop
zsystems.pro

# Reference: https://www.virustotal.com/gui/file/001092f8991390fa91aaefcb2f9a2b82c3a545557f0cacf7653531cf4e105a12/detection

aalesundapartment.online
alphaconqa.com
cosmeticalowcost.com
costofzero.xyz
duoduo215.top
fricknfrak.com
golajme.com
hausjazzle.com
hooppthames.com
investwiseehub.online
isst.info
jnty4506.vip
kentoncoatty.org
koiliaucepai119.shop
malonrabat.site
martinezolivares.com
namenestegg.com
payattelakebooks.com
poker982.com
pokerobat.com
spanishnoir.com
uchbfm.cfd
waterandsoda.com
wazicare.com
zr4nlt.online

# Reference: https://www.virustotal.com/gui/file/acdb9200f4df953d6baa67057e7064d01571bd0fa03fd4decce365c171527937/detection

00050427.xyz
art4zenbyscribtine.com
casinoramada47.com
comediantes.shop
dlimspunjabgovpk.com
dtmt.online
farmoviva.com
ifcexpo.com
ikonkablo.online
lctglobal.com
qmljg.xyz
saktibalak.com
shop-wcyw.com
skilledrvrepairs.com
thuthurahat.store
vx67.top
yerfmvav.xyz
yyzb.tech

# Reference: https://www.malware-traffic-analysis.net/2024/08/12/index.html

354388.pet
618110.com
agiantsbar.com
agrigatefarm.online
airbnbneuchatel.com
alohaconnect.org
askvanta.com
barbie69.xyz
by2526.com
coffeemakers.online
connectionbyebd.com
cradunk.com
daisseur.online
denflos.top
doonsideproperty.com
dressroza.com
dulichngaaz.info
forexpp.store
globalexecutive.agency
hachettegroup.media
huanle.store
ontoweightloss.health
physicallyfit.org
pmcq1.xyz
ppsonco.store
qkotc.xyz
screw.lol
sisouehnmnxxd.top
steelplaque.info
ueimg.xyz
wowsomefan.store
yu86h.top

# Reference: https://www.virustotal.com/gui/file/0c7b2c7700ae8b1a73a2526154631fbf6f6019e8538d4d522f0a6f03e0537335/detection

americanrelocationpros.com
beachbumtrader.com
bethelmargate.com
crisdrout.com
dlphntrack.xyz
drkamaleshkidneystoneclinic.com
freedy.xyz
grcblog.com
limonise.com
signalbooks.xyz
stanscleanacan.com
webhearmedia.com
xianggenshangmao.top
/sa47/?S2J=

# Reference: https://www.virustotal.com/gui/file/00353067ce93a59ca01cefd04bb95e6b5831f51d9e151539e44a5e114ae46114/detection

138566.org
activere.org
aiseying12.com
boxishopp.com
cryptobjective.com
dzgbtctb.com
eugeniyaandevan.com
hejlillenumsegmial.com
icascards.nl
infiniti-software.cat
lendicdevler.xyz
mickingsolutions.com
panelset.com
purebeautysolutions.org
qichebar.top
standahomintric.com
vitaminb12power.com
winwin289.net
xixi667.com
yugnuk.com
zacmanmusic.com
zivoks.com
/ibu9/?WL3lvHf0=

# Reference: https://www.virustotal.com/gui/file/736575d7277732b652edade1e21e8614755935b24ba6b032c2a831748a006ac4/detection

universalmovies.top

# Reference: https://x.com/kddx0178318/status/1829493107123187788
# Reference: https://www.virustotal.com/gui/file/6eccb4a585edfb2d4589851a1994d2cfff4f6f7c05041a0fa4b1498992df6790/detection

14oz957dd.autos
870077.vip
alrv9s8.christmas
atrixdon.online
azavivianonline.tech
bropub3.online
ealthcare-software-96535.bond
erminia.net
est-mortgage-loan-2507.today
ickbrady.dev
j10j.xyz
j11j.xyz
kfirsatimla.online
nline-advertising-91281.bond
ockyjapan.net
onnaberich.online
ormswarm.xyz
otaislifexd.xyz
rohns-disease-early-signs.today
xrmxfh150.xyz
yexoiup.xyz
ysticastrospain.online
zesuteta.shop
/m49z/?cz

# Reference: https://x.com/ShanHolo/status/1831712927893578149
# Reference: https://www.virustotal.com/gui/file/c8fd300e87a7bf78dacadc8c3e826ac7135efc804966c0b2fe098250eb443738/detection

http://52.195.219.214
2886080.xyz
foundation-repair.biz
sgcwin77rtplive.fun

# Reference: https://www.malware-traffic-analysis.net/2024/09/11/index.html

allthingsjasmin.com
chalet-tofane.net
d27dm.top
everycreation.shop
federall.store
inf30027group23.xyz
kabaribukota.press
lojashelp.video
mechecker.life
platinumkitchens.info
rockbull.pro
rtpgaruda888resmi.xyz
sansensors.info
trisixnine.net
useanecdotenow.tech
weatherbook.live

# Reference: https://www.virustotal.com/gui/file/1e0a87b108efea24b2bc3d44a7d62008763498e1b1bec26818724edd74fbc84b/detection

albertabeerlawyer.com
allegrafindlay.com
bettaroom.ru
cawthonisland.com
cortonomous.uk
drjoserizal.com
fraseszz.com
g1we2a12f1fqw.top
ojyphyi.website
qpdkg.lat
thegoldengirlsshop.com
vivelenoire.co.uk

# Reference: https://x.com/banthisguy9349/status/1836081813409632439
# Reference: https://www.virustotal.com/gui/file/fe255f931fc3c8920862d4acf6c8e797bc20951ac25b7b7e27f0fa2921abe453/detection

2024tengxun361.buzz
amitayush.digital
arnstadt.vip
crochetpets.online
fitfan.life
insicilia.today
sapatarias.online
zz82x.top

# Reference: https://www.virustotal.com/gui/file/2a567983b658efa18cca57328fea4fc0ebae27e9a0b13fa24dd91d4bcc1e8dd9/detection

nlslzm6maz.com

# Reference: https://x.com/D3LabIT/status/1839280512000577555
# Reference: https://www.virustotal.com/gui/file/e4d1f88b5db146a70bce062886dd60b15d13bda9b325535ef4d3ffcb484981ec/detection

19bet.xyz
368i8rnoy.xyz
61ep864tr.autos
7556r.club
8015.xyz
8080734.xyz
anfocusedviews.shop
ar-deals-15908.bond
arpediemwireless.net
athroom-remodeling-59089.bond
avada-ga-3.press
avandakitchen.online
b-999.top
believehim.net
c-marketing.net
crubber-brush-64789.bond
eeplab.xyz
elationship-coach-72450.bond
elix-saaac.buzz
emosjumpers.net
etausaha.online
eth-paaad.buzz
filmyhit.vip
hwqcoiu.xyz
iangshen56.cloud
igitalonlineseva.online
inoliga.app
iversitiendaplus.shop
leeconcerned.info
liveiraeletro.online
lxspinsenin.lol
mvqimnpwkxcixccaeafmibpiq.top
oland-flight-deal.today
opinformation.net
ounjaronaturaloferta.online
ower-bank-za-4886348.world
pboardresult.net
reakinggroundtherapy.pro
renvillemarianne.net
sed-cars-35796.bond
sqqpkv.pro
sychology-degree-69585.bond
toptalkingaboutit.net
tudioalberto.online
uwueriudsjkdjnfjkdjnkxzk.vip
wgxb.top
wpgs2448.vip
zkirv.top

# Reference: https://www.virustotal.com/gui/file/006be2382a7564f63d2e3a095db87949a9dc6691f69fd22d7fbb31f0f8c9c3c5/detection

amkmos.online
blockscraper.com
cscf1000y.com
detallespeciales.com
jryhzzs.lol
little-character.com
mahtayurvedapvtltd.com
megaqq77.com
moonbam.network
qriem.com
skpjqav.lol
skyinftech.com
stellardaysigning.com
therealmforge.com
wiltonz.top
zx766.com

# Reference: https://x.com/ShanHolo/status/1850138336393863678
# Reference: https://www.virustotal.com/gui/ip-address/65.21.196.90/relations
# Reference: https://www.virustotal.com/gui/file/7c574bdd2bab3a3aeac6e023238fb3c1b20748048207b45cd7a483502b6c0a3e/detection

030003378.xyz
forklift-jobs883.click

# Reference: https://cert-agid.gov.it/wp-content/uploads/2024/11/formbook-12-11-2024.json

kevin-torkelson.info
myjiorooms.services
vasehub.xyz

# Reference: https://www.virustotal.com/gui/file/047cf01946d338dbb132a5564269002b6aba1b0b2bf26b3199503b7d293712f6/detection

becker-bauelemente.com
creative-outs.com
cygoodshopgogo.top
djtescao.store
drrnagrl.cfd
ecpgbtrj.cfd
ex-sideproject.com
gotothe.bar
incontragay.com
j51xit.cfd
jc1134.com
jerxier.online
ktkequipment.com
lhivpgi.xyz
lindenhursthfc.com
mmbythmv.buzz
muaslbaf.cfd
onlinemarket.cloud
pioneerelectrical.net
promoaverage.site
qcekilps.cfd
samtroart.com
spatialdatacapture.com
thutceem.cfd
tonder.info
unificcoops.com

# Reference: https://x.com/James_inthe_box/status/1866530426216648845
# Reference: https://app.any.run/tasks/43f807db-2361-4807-8e05-19831c56b5e4

sunnyz.store

# Reference: https://gist.github.com/silence-is-best/80e7b20f37e8ba6212144d4a37fb714d

amyard.shop
bienmaigrir.info
bser101pp.buzz
d48dk.top
masterqq.pro
prestigerugz.info
snyp.shop
soainsaat.xyz
thaor56.online
xcvbj.asia

# Reference: https://x.com/salmanvsf/status/1877257317424439351
# Reference: https://asec.ahnlab.com/en/84574/
# Reference: https://www.virustotal.com/gui/file/c2dc3417156e0194d217765e77feba875380a4095be0d5dfb627d859c6685fd9/detection
# Reference: https://www.virustotal.com/gui/file/6276f6fac834e355ef86d304598a128d7155cbad4d1e70b1bf3db088dee0d744/detection

datarush.life
site-techonlogy.com

# Reference: https://www.zscaler.com/blogs/security-research/technical-analysis-xloader-versions-6-and-7-part-2

030002304.xyz
44ddw.top
aaavvejibej.bond
aarunifoodcrafters.com
airbatchnow.online
alace5.com
allsolar.xyz
am8pw.us
arasymimbi.com
aromavida.net
aspasskeoffice.homes
avolci.com
bayarcepat19.click
bismarckrecovery.com
bkexclusivecars.net
bluegirls.blog
brighterhomesdecor.com
carpmaxxbait.online
cgm-logistics.org
childlesscatlady.today
cuffbow.com
devocionmusic.com
dhkatp.vip
dsisarl.com
dto20.shop
dumpstedoctorca.com
dutch-wildlife.shop
earn50k.com
easestore.shop
eeja.uk
efidence.com
electra-airways.info
electronicraw.com
energeticfranchise.top
eslameldaramlly.site
fastr.live
flusznwrldwide.com
fraternize.org
gattosat.icu
getmylinks.cc
goog1evip15.com
greekhause.org
haftplicht.com
happiluv.com
haycoches.com
hentaistgma.net
hk9.xyz
huemanstudio.today
iwin.exposed
jamesgadzikmd.com
jarvisandbrown.com
kavanzi.com
kx507981.shop
lenaguillemette.com
lifedrawingbristol.co.uk
limitlesssky.org
livemarkat.live
lollybowly.com
lriz.site
luismoreno.monster
mag-flex.com
markthing.site
mc9uh8d70.site
meg21c.top
moncoop.coop
mscfoundation.info
myhosting.co.in
ngmr.xyz
nojamaica.net
ntn.solar
ohio-adr.net
ok2yu.us
pachuco.supply
pethut.shop
pinnaclebyte.info
polarmuseum.info
portfutures.asia
projectimprov.com
promasterev.shop
queima.shop
resumeyourway.info
revelationfithub.com
roundhaygardenscene.com
royalkredit.online
rtpngk.xyz
sathyfe.com
sazekents.cfd
scwspark.com
serverplay.live
softillery.info
solar-windturbine.life
tehranrizcomputer.com
theproselytizer.net
tk254kr6rwr7mjtru.com
torex33.online
tracy.club
trapkitten.website
tupinkeept.cfd
uxzl.site
vegastinyhomes.net
wdcb30.top
wdeb18.top
weberze.com
womenscalshion.com
xediedie.icu
xfgqbh.site
yourhomecopilot.online
yu35n.top
zwetststuren.cfd

# Reference: https://app.validin.com/detail?find=Habitat%20-%20A%20Professional%20Bootstrap%20Template&type=raw&ref_id=f06f0ebe695#tab=host_pairs (# 2025-04-19)

actionulse.live
axiomaticlab.live
boldedge.website
bouncedash.live
cloudwave.top
cozycomet.life
crumbrocket.xyz
glitchnest.live
hyperdyno.info
kightpath.website
lavafox.website
limiles.xyz
mellowzap.site
neurotap.xyz
noodlejet.website
novoint.xyz
orbitflick.site
peakrank.top
pluribiz.life
primelow.live
quicktraze.website
snapbit.site
thrivell.life
vaportwig.xyz
velocraze.xyz
visipool.site
wafflepeak.top
zenacode.live
zenithphere.site

# Reference: https://x.com/K_N1kolenko/status/1899386519963500841

dualbitcoin.xyz
espuna.xyz
kantad.xyz
purepot.tech
skyew.site
valorpackaging.shop

# Reference: https://x.com/skocherhan/status/1902201610006396972
# Reference: https://www.virustotal.com/gui/file/45c14e9996d48547335f3622fbc733ca0c7008ac28f78782d2fd1d00daa08f38/detection

2ndwifemoneyfor.com
31corteplacida.com
409manbetx.com
52099.ink
637800.net
666668t.com
80abgtcaqw1f.com
activestrong.com
alliancehorneloans.com
apstoreforpetlovers.com
aryaasia.com
avuk8e.info
axs.science
bestadvicever.com
brusewei.com
cadsapien.com
cniito.com
com-shp.com
dragonheroes.online
edison-kurgan.com
findmybbw.com
freetrafficforupdateall.review
fresist.com
henanzhengshi.com
hokkyfood.com
ieabiotest.com
ika.ltd
imagarium.com
intocoupons.download
jeebontori.com
krazymomma.com
lifeinoffice.com
littleapple-vo.com
livecalendar.online
lnues.loan
makrobet336.com
malacaraserver.com
manchwellness.com
manginternetvnpt.info
marroncreatives.com
medmjcapital.net
mens-erotic-wear.com
merapitheme.com
mgsyp.com
mobenstudios.com
newsevents.online
paidingzhi.com
photofacial.expert
photographlisbon.com
proseccomontecastello.com
qnu8dd.info
qslsspjx.com
rfxuat.com
rollstaff78.com
sanjati-cosmetic.com
sebastianwinterwriter.com
smarthards.com
suncity2019.com
synapseafrique.net
szccf360.com
tctrib.com
tempssedetendre.com
themakingstatementsboutique.com
xpansiveshop.com
yourspecialmessage.net
/ob/?ML0tLF=

# Reference: https://x.com/JAMESWT_MHT/status/1902283433902035188
# Reference: https://www.virustotal.com/gui/file/bd2301d09553a1e89f2b9a54eaf5a1f64038029a4cc4318d4337f34e8e5021ac/detection

osmica.live
/bk6y/?ct=

# Reference: https://x.com/K_N1kolenko/status/1902698534291333438

anyang-590303492.click
blackhat.chat
erovoice.pics
garan.shop
gellyhall.shop
jxcnj.org
k2gold.group
leosnybagel.xyz
mailersquares.online
nashishop.online
sc200boss.sbs
soportemx-findmy.click
tgwfj.xyz
vibeam.live

# Reference: https://x.com/skocherhan/status/1903700121189318749
# Reference: https://app.validin.com/detail?find=e4e087a6bc00deace6b5&type=hash&ref_id=d8fea112143#tab=host_pairs (# 2025-04-25)
# Reference: https://www.virustotal.com/gui/file/9b7f5fe8a427008edb8c5a059ee7151f6b50e66e17fd2272369e9c7398d05d42/detection
# Reference: https://www.virustotal.com/gui/file/ecefb803180041d0c6ba85a10cfa411d287f4ecf3a5ad70de80e47a11e1d7b32/detection
# Reference: https://www.virustotal.com/gui/file/b4938bda6c1e18e3173f977c519924835c5223362b6f52b2bcb7ef8be071277e/detection

031234912.xyz
21098photoit.pics
51-clubb.net
788477com-bbs3.top
980598.shop
adsmstech.shop
ampmplay5000.vip
asnanii.shop
astrologerritesh.click
blackshoe.shop
caseyscomsurvey.shop
chene.shop
climatepro.shop
codestorage.tech
cperflsn.shop
cvbzntlez.shop
digitaloutdoordogsupply.shop
dltmcw.shop
dmart-offer.shop
dthotelsdf.shop
dubaicarpark.xyz
duhbu.shop
eioo.org
ezleaf.shop
fhm500166i.vip
finsholdings.online
fomilto.shop
geopet.store
giggiolone.shop
gonzalezstore.shop
goprost-men.shop
gpvxjayx.shop
hdghub31.xyz
hidwzowij.shop
hxkaaphdv.shop
ihwx90w1m.shop
indiapharmacy.shop
irhamoakemlimb.shop
jimireb.shop
kalikasan.xyz
lamorenadiving.net
lgikijde.shop
liangfeng.cloud
lockedoffroadprm.shop
malayexpess.online
manzuan.shop
miracoins.org
mm018.xyz
networkcomputing.tech
nextgengadgetz.biz
nianghip.shop
nihu.shop
nodefolio.xyz
odevona.shop
onebodyonequran.online
ontidfe.shop
opreinde.shop
owewbsann.shop
pcguardsvault.live
pembawa.xyz
pembiayaan.xyz
pklodew.shop
play-venom-rush.xyz
plinkobinko.shop
ppostealeone.shop
primuslabs.cloud
qmldow.shop
qxwdcmg.shop
reiki.voyage
replode.shop
rstyle.pics
s7uw8jjxf.shop
shibsocial.xyz
shuangunder.shop
siik18.boats
skinbeauty.shop
sneakercross.shop
specialgpt.xyz
super-mist.store
techcakes.xyz
thykingdomwear.store
tku9aoxdmn.shop
twoskirtsco.shop
tyuw19.shop
tzurik.click
uvly4e01mb.shop
vaishnavi.xyz
vsilmhxj.tokyo
wiggle.info
woodenbook.store
xjhobbies.shop
xocoug.shop
zhenghard.shop
zzavcw.shop

# Reference: https://x.com/skocherhan/status/1903695571593945130
# Reference: https://www.virustotal.com/gui/file/432c0a8707fb053a2fb053de43525e6a892a1d72e92d0226fb11ef4c2dbf8479/detection
# Reference: https://www.virustotal.com/gui/file/e9c775996d508887553a42f6d22b0b327e1b3a474d0dae1bcfd009b42d88c20b/detection

jialei.xyz
optimuminvestment.net
uniservepro.xyz

# Reference: https://x.com/skocherhan/status/1903992436373750251
# Reference: https://www.virustotal.com/gui/file/dd0a805eb7aabc613481611d6ab5288b7b9d916ecc61d567a11659c300e84933/detection

1gv52.top
4109a37a693.xyz
51je936qi.sbs
6m86.xyz
abysitter-service-32322.bond
ags-under-999516409.click
anglore-flats-gov01.today
archattinfobreach2024.net
aycrk.net
b777.top
ddanything.win
dtech.team
ecurity-jobs-61871.bond
ell-property-32572.bond
emglobal.net
enesiscorporation.tech
estdrivencompliance.net
etoxsecrets.today
exbjfpbxhjcgzsdgumh.shop
g-poc.net
hestarterkit.xyz
ihdwt.info
itchens-31.bond
ixel49.shop
kin-rejuvenation-60489.bond
kin-rejuvenation-67012.bond
log987resultbest.shop
nolises.shop
ntesa.group
obahrainiioyiq.shop
oho.uno
olawanliao33.click
ollipop.group
oloactive.college
ome-loans-72725.bond
ontacttracingwristband.net
oorso.live
orussiansthub987q.shop
oyalthaiherb.net
parkautotransport.website
pdld.net
phconline.info
ressconversation.run
rview.net
sgazaproject.net
tgr.pro
tudy-in-spain-58534.bond
umpsiconi.shop
urseryinfo.net
vwhay.info
wmzotvekqsnbaxvf.shop
yperpigmentation-45231.bond
zhexifniu.top

# Reference: https://x.com/K_N1kolenko/status/1904766577980961103

axpnqq.business
confyxerengine.info
dsigngroup.net
ecksbadgirls.net
ggbj.top
headvancestore.shop
ilmeonlibe.online
ioace-it.net
oelsharon.online
omfycoffeecorner.site
riceradargeniusnow.xyz
uanyang.store
usthavelist.app
ythought.online

# Reference: https://x.com/skocherhan/status/1911781634191294787
# Reference: https://www.virustotal.com/gui/file/1288749acbec0442294a4de48b128c1b4a2434ecb18d48ad5567bf0a2542a837/detection

agistaking.xyz
anartisthuman.info
temecula.deals
zeniow.xyz
/c8u0/?gpYH4XwH=
/c8u0/?WXchszo=
/xwqx/?jHo8K=
/xwqx/?_Lx=

# Reference: https://x.com/skocherhan/status/1912242726285746365

031233051.xyz
031233529.xyz
031233882.xyz
448828.party
7gcapital.club
amtdevelopment.pro
arrchii.xyz
blogkart4u.xyz
braposaldesk.cyou
crosspatches.info
dappbtc.xyz
dd87558.vip
deepwork.cafe
dgpno.info
du6m8zk1.vip
eatdaba.shop
enpgcb.info
fkrvhaupjtc.info
friendraiser.net
fstudy.xyz
hastanhizmetleri.xyz
isoemarket.shop
jewellake.xyz
kizlo.tech
lenzor.xyz
lounge60.shop
malekenterprise.xyz
musicail.xyz
nan21.net
openseafoundation.shop
otonix.xyz
paoginbcn.net
primepath.net
quwzcz.info
rbopisalive.cyou
rumgdz.info
scottish.cafe
smartrbaskets.net
sonygraf.info
splogi.xyz
teschi.xyz
tether1.xyz
thefounder.ceo
urbagan.net
visualizerlt.store
westende.live
xchnge.xyz
xmq-servicecenter.xyz
yakabetguncel.xyz
zeniore.xyz

# Reference: https://www.virustotal.com/gui/file/17ebff01add23c39eb97265c5d825f490326a19073f6f9091e2bc19136772b40/detection

http://174.138.179.43
quo1ybjmkhdqljoz.top

# Reference: https://www.virustotal.com/gui/file/19a610efdf9693350e5b9eea2959b328c74dda894c87ee55955a3a1a4967c0fb/detection

lingkungan.xyz
mobi-phone.net
nexusstakes.xyz
warc.tech

# Reference: https://x.com/K_N1kolenko/status/1917088917011955968

031234440.xyz
ambitiouswomen.net
aqbtkj.top
auradesigns.xyz
coininsight.tech
efcoin.live
eternalethereum.xyz
guiasservicos.shop
holorush.live
kissjav.pics
newshunt.biz
nicheremedies.xyz
rciede.info
royalbond.xyz
rtvs-sk.sbs

# Reference: https://x.com/K_N1kolenko/status/1919697053652816165

ap1w9f.top
apesquery.xyz
batchcopilot.xyz
caribsljm.net
ceacg.xyz
countryclub.info
cyprusestate.net
dappassets.xyz
decoding-us.media
logicalcomputer.xyz
lymo.live
onsome.info
privacydapps.xyz
textureassets.xyz
winmy.news

# Reference: https://x.com/skocherhan/status/1919828243466617116
# Reference: https://www.virustotal.com/gui/file/1868be5b142d2e686c6994bbde095753080bb5c346d474e0f4214773c0a1150c/detection

http://192.3.243.172
layer224.xyz
mebuceiop.xyz
thought-hop.app
triv.website
/xampp/fbo/bestoffertogetmebackwithnicepeoples.txt
/xampp/fbo/bestoffertogetmebackwithnicepeoples.vbs
/bestoffertogetmebackwithnicepeoples.txt
/bestoffertogetmebackwithnicepeoples.vbs

# Reference: https://x.com/skocherhan/status/1919698622649622570
# Reference: https://www.virustotal.com/gui/file/9262bb8d45b86ce3583351d99db66eeb3481102a260477360d93185677da2863/detection

91dun.vip
ap1w9f.top
beverlyhillsdonut.info
cb0001.scdn.91dun.vip
cbpamke.org
klb1999.fit
rightloom.xyz
scdn.91dun.vip
yourmutualcredit.xyz

# Reference: https://x.com/skocherhan/status/1920353804182028437

menguasai.xyz
pixelplace.shop
xdoge.live
zenithint.xyz

# Reference: https://www.virustotal.com/gui/file/078cd1b6995a95e2057591899a7050da5799ad226afefd75fd442060efd1b027/detection

130t.xyz
3a4p8gq8bojwn.xyz
5zbm0.cfd
aser-skin-treatment-95250.bond
aysec.net
ellbar.shop
elvetvoiceskiresorts.website
erspacehealthandwellness.info
g1wszulqv7lc.xyz
gsp657.top
hagrinleemotooltechus.shop
hbnzk.cfd
igitalmilanolegacy.shop
inktrim.xyz
kfast.store
kpqh.town
lx2cbhe5vee0e1.xyz
netuzio.xyz
njjwh.info
ompanion.bio
rog.top
teelpath.shop
tp-batik77-1.vip
x92q.top

# Reference: https://x.com/skocherhan/status/1923748837266501816

bloodycovina.site
carriageletter.icu
eggnogunit.xyz
flavortop.info
frogtruck.xyz
getglobaldata.com
ministerkiss.xyz
picklebat.xyz
quincestreet.icu
ricebreath.icu
seeddevelopment.icu
sodabedroom.xyz
teethelbow.icu
threadbranch.xyz
topmounting.com
troublesisters.xyz
venaetdqfn.run

# Reference: https://x.com/skocherhan/status/1923854308316987452
# Reference: https://www.virustotal.com/gui/file/d17fb30415089f60d847648d73f98438977a7dbcdcacbdcfc9054fb39557f1d0/detection

http://208.89.61.141
powerplants.info

# Reference: https://x.com/skocherhan/status/1928938796898492748

aksow.xyz
audiobooks.ltd
autorolluphub.xyz
buildertools.xyz
cardo.work
clevelse.live
covoai.live
cravatte.xyz
dfsdfgergrrtth.online
dgdetailing.pro
doeda-pvcw.xyz
droneapp.xyz
earthandiris.net
echotch.website
fasadmebelchelny.store
financialsquare.xyz
freedom.golf
gedankenlaut.xyz
getcasino.info
h34ry.top
hagitkoren.online
halo78.org
herpich.one
hptechsoft.xyz
idearchx.net
idgluxe.shop
infinityplatform.xyz
jefebusyness.net
letsgoogarage.click
quick-image.xyz
rentnt.xyz
rieo.pro
secretariaa.shop
sticker.business
teamx.club
tempoproje.xyz
turbocloud.website
vibeark.xyz
voguevanguard.xyz
vpert.online

# Reference: https://x.com/James_inthe_box/status/1929560663963144661
# Reference: https://gist.github.com/silence-is-best/ede4c444ba406003642a99017274413d

5794.loan
anguage-courses-48869.bond
arinsurancehints.xyz
craftytee.net
ctopeaux.shop
echowok.xyz
encorebrands.info
expertscloud.xyz
ikure.health
ilansocials.online
instella.net
livego.app
noahsandoval.store
parshmen.art
swordsandbox.xyz
talklayers.xyz
tartweb.click
tqzjixmd.biz
uqcdnvgr.biz
worrr17.homes

# Reference: https://x.com/skocherhan/status/1930089890026533063

031233926.xyz
031235066.xyz
031235246.xyz
2hvve.xyz
86536.pizza
actionpulse.xyz
adventurerepair24.live
aicycling.pro
allenamento.xyz
autoabmeldung.net
autonomousrich.xyz
balivegasbaru2.xyz
banjia0731.icu
baurishu.info
bitcoinescort.xyz
bitcoinvendor.xyz
bitsensor.xyz
boldhozons.website
brispere.site
brothersharetender.xyz
btbjpu.info
caral.tokyo
christmas-goods.store
covsds.info
ddvids.xyz
dogeeditor.xyz
dqvcbn.info
enkisan.xyz
esushi.xyz
exhelp.xyz
frpisealbites.cyou
fz977.xyz
gariano.info
hoaqua.xyz
hugeblockchain.xyz
infiniteve.xyz
intention.digital
iquery.xyz
israeljobs.net
j8g5rjpc.top
jeanandolive.net
kakupi.info
kalebetgirislinki.fit
kasun.wtf
kdjsswzx.club
kdrqcyusevx.info
kpilal.info
ladies.center
leveledge.sbs
liveseam.live
lucynoel6465.shop
luittard-le-mode.shop
matindi.xyz
meacci.xyz
menekankan.xyz
mykitchen-ideas.shop
nhc7tdkp6.live
openambient.cloud
pembukaan.xyz
physicsbrain.xyz
rds845.shop
safitri.shop
satoshichecker.xyz
seasay.xyz
selcukselcuklu.xyz
shibbets.xyz
sigaque.today
sofiaagibson.xyz
sonomedgroup.online
spinco.news
sscexampyq.watches
stellaritemvault.shop
stellub.site
superhoroz.xyz
tabs123.xyz
themutznuts.xyz
topear.top
travel-cure.sbs
trustai.chat
tumbetgirislinki.fit
tyxxg.net
weilaishijie.xyz
xrrkkv.info
yueolt.shop
zhuanphysical.shop
zkplant.xyz
zltbd.top

# Reference: https://x.com/skocherhan/status/1931556563463905542

031234245.xyz
031234799.xyz
3333bet.website
382d3.boats
567win.website
61081.shop
623575.xyz
6644win.mom
72422.pink
7p55-7p55.top
8vhh8.makeup
a2market.online
ai4y.life
aiphones.xyz
algerparsiyel.xyz
allinoneavenue.shop
archie.cloud
ayase-bluesky.xyz
b78urc1.shop
banayad.xyz
baratabetvip.pro
bashionisti.shop
bebigclothing.xyz
beds-campaign.sbs
bionanosurf.info
blockchainvip.xyz
blzxbet.pro
boldcatchpoint.shop
c3py4i6s.top
cargolite.app
carshowtuning.info
click68vp.store
cloudhypo.xyz
coder.shopping
computetools.xyz
critai.tokyo
cryptoannounce.xyz
curiosa.news
cyberpraxis.pro
daniloperez.net
diehutigen.shop
dietproio.info
drgnmoney-98.buzz
drippin.tech
eczanem.shop
edtechcreator.xyz
ekstrak.xyz
empero.fun
ethnicfinancial.shop
ezchem.xyz
factio.xyz
ff87558.vip
full4movies.christmas
fun1995.net
funday24.ru
futurt.website
gamewarriors.live
gdlsolarenergy.store
ggpoker.xyz
glimmerrush.live
globedesign.xyz
golleger.club
granvillesentinel.org
hakzmkt.tech
hangten.tech
heroeshaulingca.net
hocoba.net
hoskel.tokyo
ifxquw2lfld18.skin
illuminatidata.xyz
immersivemoon.xyz
jellbit.site
jinzebengye.net
kayaki.net
ku188.today
lahasen.net
lavanest.website
lbsgolf.net
loginjablay123.live
manikurseti.xyz
maticon.xyz
mczacji.top
medcangroup.net
melayari.xyz
meredithamon.shop
miconion.shop
minttide.website
moderationstation.xyz
mslgdkor.xyz
naturelingo.info
o8azymfkzk8vk.buzz
object-58974.shop
paylocap.net
pixeldrift.site
polanyaindah.xyz
powink.site
quokkajump.live
ramabuktijepe.shop
rapio.site
reviewsonline.shop
rikyuu.xyz
roastroots.lol
rtprubikslot-asli.xyz
rupto.xyz
rwefzczx.club
servisyeni.xyz
sexkoreakhongche.icu
sgtvs.top
sidd.fun
silbrco.com
slotgacorterbaru.xyz
snappypeak.top
sonddajika.bond
soyuz-zoloto.online
storii.shop
stuhlmann.cloud
swatersantuy.click
swrvnuep.xyz
thebourbongospeltn.net
thrivte.website
thrustaviation.info
tieniu09.xyz
topdogdrones.net
vipwin.buzz
vitalay.life
whalenavi.xyz
wholly-well.info
worrr13.quest
worrr19.sbs
x56uasf728r.shop
xxxvideosbox.xyz
yeupnz.info
zeniost.xyz
zestypath.xyz
zhangthird.shop
zthzzyg.top

# Reference: https://www.virustotal.com/gui/file/22d5d86fdbaf20732ea8df5293e71795a0ca1ae7c1edb31fc4ccae6735e9bf2a/detection

031233414.xyz
896bt55fz.xyz
bytes.press
computational360.xyz
fix.shopping
huanmengzhibo.net
hypehike.buzz
maizhaozhibo.net
mgf-301wu0.vip
nohuz68w.xyz
pigeoncomics.nyc
qs369.xyz
regicom.cloud
scoopdog.app
shanzhuzhibo.baby
theobservanteye.sbs
twistedradio.org

# Reference: https://x.com/skocherhan/status/1932142616638103874

2345bgnrty.lol
3groupe.business
ahamasskate.xyz
ailis.cfd
alancedteam.info
aminvip3210.sbs
ar79872479489.today
arehouse-jobs-52853.bond
arkettelligence.net
asereward.cloud
asternky.university
ataleague.xyz
avada129.casino
b-us-stone-panels-27f.today
devgirdi.cfd
eaconfactory.xyz
ealallergystudyhall.online
eforcertx5090.shop
egapersoneaals.online
egapromodealsdirect.world
eltatechnologies.info
eomappa.net
ercowboy.net
erityhub.tech
etrev.world
gkdemy.net
hatchadoin.net
iami-florida-county.cfd
implyhome.info
iomar.biz
ishlist.run
isneyai.online
itness-center-id-5619388.world
jhekite.shop
lexacons.net
lus-size-swimsuit.today
mallelectricarsgb.bond
naycrystalsava.shop
ncryptchat.xyz
ndreas-marketing.xyz
nipers.digital
nsitechsolatam.net
ntelligenceplatform.xyz
ochafariasbusiness.online
odeinfra.xyz
omfortemporium.online
ordphanter.info
ouasd.xyz
oyle-lawgroup.online
pblanket.xyz
raft-opia.app
rca-nc-test-13.fyi
ridgingruralcommunities.net
rimeone.fun
romof.irish
ronbloodtattoos.net
sghgs.xyz
tfe2f.shop
tp-jos178-a1.online
ubliccnfdcbqae.xyz
usclecarsales.online
vatardesigns.xyz

# Reference: https://x.com/K_N1kolenko/status/1929871072532250758

031235218.xyz
fourexclothing.shop
iphone16.shop
kakeksakti25.cfd
koalasan.net
petersen.photography
play-whisper-forge.xyz
private-trainer.cloud
toncho.art
turbonest.live
venturegioballng.fun

# Reference: https://x.com/skocherhan/status/1933562678254915823
# Reference: https://www.virustotal.com/gui/file/dd5edc5d6ca3505117d9f1b5bccc097dab0cbebfcb7fc373c8131f088b195520/detection

antonio-vivaldi.mobi
clubhoodies.shop
clzt.shop
cozythreads.store
cruycq.info
dnft.immo
goldenjade-travel.com
joyesi.xyz
lonfor.website
magmadokum.com
marketyemen.holdings
nosolofichas.online
overlayoasis.quest
rssnewscast.com
sonixingenuine.shop
sutbkn.info
x3kwqc5tye4vl90y.top
y6h6kn.top

# Reference: https://x.com/K_N1kolenko/status/1937479231681741070

1659bet.lol
autoscenario.xyz
kincirclehealth.xyz
lopixa.xyz
miyue457.xyz
todaysport.xyz
weborigin.xyz
workspaceplatform.xyz

# Reference: https://www.cyfirma.com/research/apt36-phishing-campaign-targets-indian-defense-using-credential-stealing-malware/

59292406.xyz
chillchad.xyz
kp85.cyou

# Reference: https://www.virustotal.com/gui/file/8779b70231926f6b486dea22bfe04c6659533c64582a916df3f6b4e7eab47014/detection

031235285.xyz
100lica.online
55cc.info
740900.party
azval.shop
bakor.store
credit-agricole.pics
enceladusdrop.xyz
ethicalcreator.xyz
fitnesstitan.shop
genericagi.xyz
livulse.live
mindfocusn.pro
restrainreflection.xyz
rtprubikslot-asli.xyz
skingraphica.net
visionary.finance
webcudos.xyz

# Reference: https://x.com/skocherhan/status/1942471141425041433
# Reference: https://www.virustotal.com/gui/file/575398c7fc2c460fbfba428791f2cd100f9699d6c16d6b3e200ae2fe8cb63e96/detection

12345lopkmj.lol
62258.net
apelow.top
birminghampsych.online
bolaemas88.online
qooqootv16.store
v153cbo9xcl49.buzz

# Reference: https://x.com/JAMESWT_WT/status/1942498358645645794
# Reference: https://tria.ge/250708-jm9eks1qv6

8293.sbs
868com643.app
88865.xyz
ababakh.shop
acking-jobs-17785.bond
ai8866.vip
andirussell.art
anguage-courses-93435.bond
apecash88.xyz
atamspa.net
c0518.top
creenboard.top
d25124166.cfd
del.business
eboldbraverobot.shop
electsoftwarereviewshub.top
eraka189sleepguy.xyz
estcleaningquote.info
etabeauty.clinic
etmagneticmessaging.top
ffoik.top
g-farcaster.xyz
hamarhqh.net
henhuazhai.food
hepio.click
hlbfs.top
iendaahorro.shop
ifodsiffl.pro
jalki123fa.app
kv16ybq7qm.sbs
landestinecreations.shop
latformjago89servervip.lat
limaxholdings.net
lphacustcareapp.top
lphagatherhappyhoney.forum
m444.top
obgil.xyz
occpit.net
ocumessage.click
oldenapple.studio
ollectionss.top
omagugra.cfd
otholez.xyz
ov-fze-pay.top
ov-vdotbt.vip
ovapeptide.net
ovie-tickets-89216.bond
pennatelindhq.top
pkmagic.xyz
q0.shop
q8ocuz2.xyz
rolan.shop
rtprinthop.shop
shfgr.pro
sy609.top
trezcip.xyz
txbx2.top
ubuly.xyz
ucnso.top
unseokyang.dev
uochantanhua.net
vow0bfd7z3-wc8g.shop
x06n.top
yfamily.bar

# Reference: https://x.com/skocherhan/status/1943442412938150374

14382lilliancir.info
atomicmanager.xyz
bole.asia
capturemetaverse.xyz
copygamefi.xyz
dul4dv.cfd
electric-bikes07.today
epilepsy.pro
ethtemplate.xyz
filehorse.online
mywir141.sbs
protocolvirtual.xyz
rocketkava.xyz
taxpy.net
veltowave.life

# Reference: https://x.com/JAMESWT_WT/status/1946106663829684680

aramco-files.cloud
astaoffices.com
lctechengineering.com
petrofac-files.com
saipem-files.cloud
saipem-project.cloud

# Reference: https://www.virustotal.com/gui/file/0157b660ebea0c4eaff16124abeb54a153d6dbec358456b1e383205292637d23/detection

8pxlzy.vip
centerwhale.xyz
fymo.top
gardeners31.click
handwerkeln.info
prompthub.asia
superar.info
thecelebrity.net

# Reference: https://x.com/skocherhan/status/1951491387179888910
# Reference: https://www.virustotal.com/gui/file/576a3d025cfd33442e9556b9953926a679eba8cd83b3b12a2feab9a7e021702a/detection

2026xr.xyz
429s233s.top
596767.top
78449973.xyz
78451658.xyz
9axgb6.vip
achtzehngrad.net
ascendia.club
augmentingdata.xyz
biologyedtech.xyz
buymydomain.today
clearairways1st.net
driftshark.top
editmedtech.xyz
financialbalance.xyz
frereasisted.net
gdnyems.info
hangjiayinyue.top
hiddenworld.xyz
lecerisierenfleur.net
m92ivc7bt.xyz
magicsagents.xyz
maxboxbrasil.shop
missionaccelerator.xyz
moalucky.top
northcarolinaoms.net
outputscomputer.xyz
oxymovie.sbs
seo138linkamp.dev
shhiajtdaz9bhau.top
sloshe.tokyo
staticmediax.net
streamingsite.xyz
streamsearch.xyz
synergydrop.xyz
thornsw.online
tightly.lol
ts-coaching.info
twinspapa81.shop
udupi365.bet
ukinky.shop
youpartnership.xyz

# Reference: https://x.com/skocherhan/status/1951998006686839018

airdropcafe.xyz
drlara.xyz
hyperautomationvr.shop
livream.live
michaelaowen.xyz
peetzlifestyle.net
perfumedeparis.store
primebes.live

# Reference: https://x.com/JAMESWT_WT/status/1968982187782365647

7130ce.vip
gooder.bar

# Reference: https://x.com/skocherhan/status/1971543474655670452

0039.love
01916.town
024739.com
03hw46d.net
06018.buzz
0602.top
06581.icu
0741.love
07zxb5g.net
0894.top
0925rc1.vip
09768.vip
0byz2ev.vip
0tcn0ng.vip
0z1eki2.net
104166.com
10621.love
11353.icu
124cj9gw.com
1430.love
1451.top
14a26rs.net
16476.co
17315.gdn
1779.love
17rf79f.net
18438.icu
19255.ad
1ekgy1i.net
1vj2or4.net
21068.icu
22181.work
22xampr.net
22yc7cj7.net
22ze4qr.vip
23232.xn--90a3ac
243825.co
247945.cc
2491.top
2493.love
26912.love
27547.love
2819.love
285863.town
28jtw.com
2s8lu7l.net
3074.top
3157.love
3167.love
3168.love
338309.vip
345jzgz.net
3473.love
3537.top
357969.town
363473.com
37335.work
3968.top
39802.one
3a2866.tv
3bdwz.net
3dzaf9w.net
3lq5f.cc
40295.co
40371.co
4229.love
4292.love
43026.work
4398.top
44584.icu
4462.love
45238.cc
45862.icu
46739.org
4816.love
48420.co
4843.top
48497.work
4s83rjt.net
4wwbqjj.net
4zqd3j1.vip
50259.icu
50591.work
51142.love
5297m.vip
53002.ad
5349.love
55249.love
55403.one
5771.love
57804.icu
57839.icu
57860.work
5795.love
58104.icu
5957.love
59651.xn--90a3ac
5ecms1z.net
5f9zndz.net
5iwhnua.vip
5touf.cc
5uhlnkh.net
6077.love
61364.co
63788.town
64163.top
65474.work
66527.cc
67058.ad
67619.top
68443.icu
68f1s.net
694147.town
6f9pd.com
6fgl4xp.net
6hg0pfq.net
6p3svqs.net
704qe.cc
70608.love
7125.love
7224.love
74537.one
74561.cc
74629.love
74x6ke6.net
7677.love
77535.icu
7795.love
791342.vip
79655.one
7arjug3.net
7gz76um.vip
7jmsq7z.vip
7k9pe.net
7m5rkfo.vip
7mzey.com
7vrnrki.vip
80742.gdn
80f5xlr.net
81650.gdn
8372.love
84413.my
84rz9e.com
853835.com
870844.town
8721.love
87735.cn
88648.gdn
8azpa9m.net
8i1zwuy.vip
8ic06qn.net
8lw7f23a.net
8mue9g.com
9018c.tv
92675.icu
9415.top
9461.love
94962.gdn
94wpqhf.net
967742.vip
973534.town
9819.love
98195.icu
99071.my
990821.town
9duj99r.net
9es71wb.vip
9hcmb8t9.com
9hf043f.net
9nnrd.com
adagg.work
adijs.gdn
alpll.work
asdel.uv5h9bl.net
asvbv.cn
augff.work
auuexe.com
ayvqr.cn
b7rbjwt.net
b7xdeyw.vip
b8x9y.vip
bbahq.loans
bczty.work
bfqrftl.net
bgsjpp.my
bhwyep.com
bj3lbug.vip
bkp5z2v.net
bm5gasj.vip
bmchd.gdn
bo7hj5k.net
bqd6dtf.net
bqilv.work
bqore.gdn
bwkae.cn
byamv.work
c8mvfku.net
cbdfu.work
cdfln.gdn
cdtba.my
cnhpjvu.vip
cobka.work
cov3xl0.net
cprbphx.net
cwml3vj.vip
cx9uv31.net
cxonkps.top
cyoth.work
danhlg.com
decxt.gdn
dejhig.com
difjnga.top
dkqsmy.com
dmedj.work
dmpvz.net
dncxqzu.net
dxekxxf.vip
dycm.rip
ea26w.net
ebqhh.com
ejcyt.gdn
ejpjp.work
elfytr.com
eqrkn.cn
f86wd2z.net
ff5s81u.net
ffevgev.net
flpa4lk.net
fmzfw.work
fox9kui.vip
fqlwg.work
ftpmv.work
fy6fofq.net
fzoeyd.com
g2itg.jqj3jq0.net
gb3mong.net
gcxct.work
gkhto.town
gmvf6.cc
gt42r.4s83rjt.net
gvnmg.com
gx35r4uh.wadjajds2.com
h4lb7to.net
haiuswk.vip
hbryy.work
hgbpi.net
hkhnff.com
hlqhyqp.top
hncaxc.my
hnrbp.work
hnuzpik.vip
hqnrx.work
hrheta.com
hse07.com
hsotw.work
htpzop.com
hujykke.top
hwy4j.com
hz0gcaj.net
icfyu.work
idyut.net
ie5e0po.net
ig6p626.vip
io1fs.net
ioilul.com
iolgi.work
ipp7e.com
iptoilf.top
isakpm.com
itykozn.top
iyklu.com
izdsjr.my
j180256.net
j8mc2.cc
jbbte.work
jbpll.work
jbrib.work
jc0dyu0.net
jebzaoi.top
jeuktq.net
jewoese.top
jhniw.cn
jkrii.cn
jqj3jq0.net
juqfk.work
jw17v.cc
jwfrs.work
jzsmgm.my
k1bvdtbw.net
kafgz.work
kauut.cn
kemzs.work
ki4u56z.net
kkejr.cn
kktza.work
kmoylhy.top
knt87.com
kxcy2.net
kxktd.work
kyzsh.work
l5eic92.net
ldeax.work
ldejf.net
ldzez.com
lermw.work
lgkqi.work
lheemm5.net
lhubs.loans
ligzjlp.top
lpvdmds.top
ltdkc.town
ltgctqn.net
luu7nni.net
lwxdbrj.top
mcqyjq.com
mfely.cn
mjujgi.com
mkakf.net
mmojh.work
mrdaw.cn
mriicwh.top
mvvrv2n.vip
mwucv.gdn
mxiet.work
n44hz73.vip
nbcnm.work
ncnix.work
nfrl5gj.net
ni62q.net
niqzu.work
njprz.work
nnxewv.com
nvgaw.gdn
nx4w4.cc
nykyted.top
nzg71s1.vip
nzzcw.town
o0xtmw4.vip
obsglm.my
ocawl.cn
oeoeh.net
oeoxou.com
ofor0ih.vip
oiump86.net
oiyzh.work
okezc.com
osdtuk.com
osldn.work
ouljs.cn
ovhbp.work
owzyg.gdn
oxuhc6j.vip
pahay.work
pasda.work
pbcty.com
pbyvpvo.top
pdmcet.com
pelee.gdn
plckx9w.net
pn4lwgvvy.com
pnrmr.com
prlwcx.com
pvyem.gdn
pwdsj.work
pz926.cc
q1093.net
q6ke0.com
qd1mmcd.net
qeddkn.com
qgrkb.com
qpejv.work
qxeo0om.vip
r0pzx.net
r4gmlsk.net
rbnkk.com
rebbc.work
redty.town
rmyhb.my
rorlpri.net
rqhni.cn
rsregm.net
rsucy.work
rtg4e.com
rvgeh.com
rwpos.loans
rypxlv2.vip
sacur.work
sbnwf.work
se1laga.net
seqau9j.vip
shygv.gdn
sm2a252.net
svynji.com
tazln.work
tcocw.cn
te96tpv.net
tfdiwz.net
tfgvq.work
tidh4ko.net
tjakzno.top
tjlnyvb.top
tkqbms.com
tllktm.com
tmofm.work
tn1d1js.net
tobye.work
trkxia.my
tzciq.com
tzher.work
u28mx3np.wadjajds2.com
u2bhi6f.net
ug79a.net
ugcpv.work
ugnlijp.top
uizzcq3.net
ujqji.com
ukcyizy.top
ukozs.work
uksgz.cn
ulitvb.my
upee4.cc
uqegh.com
urejndd.top
usoslv.com
uv5h9bl.net
uvomc.net
uwuye.my
uxtil.gdn
uy4bw04.vip
uz3k9.com
v04qvk7.vip
v5zh4sd.net
v954igz6.com
vp0ckjo.net
vvp75.net
w3zhz.com
w6zhy.vip
wadjajds2.com
waub9sp.net
wgixi.work
wgoue.work
wieug.gdn
wkimynq.top
wmsdj.work
wnvpb.work
wvsntf.my
wynbo.gdn
x7ia4ez.vip
xanqvfi.net
xb2cq0f.net
xbssqom.top
xcdzx.work
xciujet.top
xfjsp.work
xipjjlu.top
xjmpbfn.top
xniyi.cn
xnzdc.com
xs99h.cc
xuudpel.net
xv9ef1s.net
xwhz11v.net
xwkqvi1.vip
xxwke.work
xzkubuv.top
xzvqz.net
yapjn.com
ygstios.vip
yhnqp.work
yl7ebtc.net
yokmt.com
ypmkrhd.net
yvcpnpg.net
zfho0y2.net
ziwlvj.my
zixpx.com
zktiasa.net
zlb6y8bzk.com
zmeud.cn
zmftq.work
zopcnn.net
zrzq9fq.net
zwtgmf.com

# Reference: https://www.virustotal.com/gui/file/66c139f7356dceff6b1000b7eb3721a40a672c8989892a4aeff7547a046a58d5/detection

073jce.vip
51580.vip
78451770.xyz
alunos.fun
blackapi.xyz
brokensilenze.cfd
fsle8n.vip
nexbloom.site
olinsautodiagnosis.net
piyar.shop
poker88gacor2025.xyz
projecttopics.xyz
thenorthtrade.net
/r4ze/?DDgTlF=
/r4ze/?JNODSZ=

# Reference: https://x.com/D3LabIT/status/1975850676820582444

254-badaimaxwin.sbs
klikdewaadsdisini8.shop

# Reference: https://x.com/JAMESWT_WT/status/1978708045355000118
# Reference: https://x.com/skocherhan/status/1979142501869957519

77y7fl.vip
bfufe.town
senora.life
simpy.store
specialultra.xyz
symbolx.xyz

# Reference: https://www.virustotal.com/gui/file/6a2d9b504dfdb7eeab3ed16b3529618639d16044e6927fea6282b0aaba207675/detection

11stv5.xyz
1sidik.vip
20955.town
31789ww.xyz
62uxok.top
76chw.mobi
78448748.xyz
appetit.shop
berkshirefibre.store
blaisi.tokyo
boluskinho.xyz
builder.lol
chanceera.online
cloud-adsync.click
coinvest.shop
df88w.top
ebrxau.mobi
fundingtrusted.xyz
goldenway.biz
herophotos.live
i5djp5.top
j77e8b.vip
ls865.top
managementcouch.net
medatendimento.pro
medicalapi.xyz
merivo.live
ogzbfm.mobi
okejek88.club
oxpmn2.top
pigvl.mobi
polajekpotfw.xyz
rocketecology.xyz
salon-kaigyo.net
tacticalvr.xyz
takbynano.duckdns.org
tempestap1.net
token-dymension.xyz
ugodh0.vip
urbeagents.xyz
vft-s.mobi
weddingmy.xyz
whalesapp.xyz
xgsukmhwpb.xyz
xvideoscomsexthu.icu
yisb.tokyo
yousellers.xyz
zgydyx.top

# Generic trails

/config.php?account=
/05yk/?hTHMTDZA=
/09rb/?BL3=
/0irq/?UFNDs8V=
/0vh9/?A8=
/2cur/?p0D=
/3iw/?URfhe=
/3nop/?zt=
/3nop/?-Zd0qV80=
/3nop/?BBZ4xph=
/3nop/?oN6xjP=
/63j/?RHD8=
/66op/?8ptlzV=
/68yb/?y4L0=
/6hsc/?i88=
/6ihh/?2d=
/6qne/?bw99=
/6rnk/?FFNTRl=
/6tjv/?RsZHuW=
/75gn/?3f4=
/8mwu/?86Eqi=
/8o3b/?Him=
/8var/?Cr4TFn=
/9d1o/?5j=
/9d1o/?jDKt_=
/a42m/?Y8=
/a42m/?ylD=
/a5wz/?TLFdL=
/ahc8/?Cfc=
/ahc8/?dvx0q=
/a8c/?r6=
/agbz/?VpIXMZ=
/aggq/?gPdL=
/agjr/?d8fDs0=
/ahc8/?9rIx=
/ahc8/?ON9d9ZdP=
/ahc8/?RJ=
/aiwv/?hTHMTDZA=
/ajr/?Jt78=
/ajr/?oj=
/ajr/?gzrP4xE=
/aofk/?yPMl=
/aofk/?XrxlCh=
/aofk/?ZvlpdD3X=
/aofk/?SfV=
/aofk/?VXVxArBH=
/aofk/?yp=
/aq88/?0VKdcx=
/ar73/?5jGTz=
/ar73/?nndDe=
/b2w3/?5jRDfl=
/b4d/?mrj030Qx=
/b5sf/?x2J8=
/b62n/?B8CDV=
/b62n/?efX0fHtP=
/b80i/?9rF=
/b80i/?K6AlwZ=
/bg6/?Pds=
/bjtd/?7nUt_4=
/boa/?GDHDW=
/boa/?CDH=
/boa/?Ozud=
/boa/?RDK0=
/bqko/?3f=
/bs5/?sBj8R=
/bti/?CBLl4=
/bu2n/?JR-PJ=
/bu2n/?tXQLjb3p=
/bw82/?7nU0_4=
/bw82/?ixlp=
/bw82/?kHQX_L=
/bw82/?m2MpP03h=
/bwk/?phbxg4sP=
/bwk/?uRqHO=
/c0a7/?DTJL=
/c0in/?3UfGs01o=
/c0wb/?rJ=
/c1k0/?z6A=
/c22b/?GPFPs=
/c239/?NN=
/c9wt/?Ok=
/cfn8/?2dqp=
/cgc/?vR8XO=
/cgf3/?jZHL8FV8=
/cgf3/?kGQP_SL=
/ckvl/?RF=
/ct6s/?rF=
/cx0u/?J0Dd=
/cxbz/?a6Al=
/cy88/?rF=
/czqa/?2put=
/czqa/?4yv_JF=
/d10a/?AN=
/d15n/?aBWDfHh=
/d15n/?SfR=
/d30y/?zPah=
/dcn0/?fXV8y2ip=
/dgrg/?Bf=
/dmpz/?_0GxxfX=
/dum/?NjBDlp=
/dty/?Mv18=
/dy/?7nRL=
/dy47/?6lzd4R3=
/e23y/?ApjLzT=
/e23y/?BZFPW=_
/e2au/?7nol2HT=
/e2wa/?MDKtU=
/e3eb/?3f5=
/e3eb/?PBZ0=
/eauu/?qZktM6=
/ec14/?cdlpd=
/ec14/?JxotnDq=
/ee3s/?Pb=
/ei9s/?5jfHZlY=
/ei9s/?lnzH=
/ej/?3fvH1nq=
/ej/?5jxTV4Ux=
/ej/?AnB=
/ej/?d8FL=
/ej/?mL30v=
/ergs/?kPLL=
/euv4/?VN6dNdgH=
/evcy/?2dl=
/f43e/?MDKxd=
/f43e/?MRL0cd=
/figc/?ITUTAN=
/figc/?PBDlF=
/flc/?lhud=
/fqqa/?gKrAc=
/fp58/?06=
/fs44/?rB=
/fs8/?0V=
/fs8/?AX1=
/fs8/?q6Q=
/fth/?aBZPdF=
/g25e/?-Z8p3nd=
/g25e/?4h40=
/g25e/?yL=
/g2fg/?mvHpT=
/g31s/?j80t=
/g832/?OReXw=
/g832/?Vzut_2=
/gh/?9r=
/gh/?pdfX=
/gh/?wtzx=
/g8kn/?1bIxl=
/gkp9/?KvAtvL=
/gkp9/?TB=
/g2m3/?Cxo=
/gnt/?Tzu=
/gnt/?zPah=
/gqx2/?UDK8jj=
/gqvv/?UL3=
/grh2/?JTRxBp=
/grv/?LZv8=
/gu5d/?ljF=
/gut0/?PBZ0=
/gvqa/?DBZlKP=
/qwg6/?2do=
/gy14/?lJBtHNX=
/h26/?9rfx9hDX=
/h96v/?2dLtNL=
/h9t0/?QXg8-=
/hdzz/?FnWTdB=
/he2a/?4h_Tw=
/he2a/?ytx=
/henz/?MtxX=
/heth/?CBLl4=
/heye/?GZo8s=
/hi5f/?LhJL=
/htqs/?glqhT=
/je14/?K48Lebx0=
/jjk/?1bn4ip=
/jr22/?KlD=
/jy0b/?Qzr07t=
/i6rb/?BFQLRT=
/i19/?tzsDXFa=
/i286/?lrjPuXF=
/ih8i/?FH=
/j0eu/?WB=
/jy93/?3fo=
/kfr/?0dnLRd=
/y8r/?kFQl7b=
/kdz/?axlP=
/kdz/?cf=
/kdz/?m2MpPNip=
/kdz/?nH9=
/kmge/?e81hyLsp=
/kp1/?r6=
/kqna/?LDHHu=
/kt0/?Lh54A=
/kvsz/?8peTw=
/kvsz/?ajL=
/kvsz/?an=
/kvsz/?cd=
/kvsz/?MvX4BN=
/kvsz/?NlI46pq=
/kvsz/?OlG=
/kvsz/?OL34=
/kvsz/?yzutZfsP=
/kvsz/?zv=
/l3ld/?2dup=
/l3ld/?H4ElV2k8=
/l3ld/?rDK4=
/l9yc/?UN=
/la1/?cf=
/la1/?TB=
/lmh/?BN6=
/lmh/?MdItZ=
/lmh/?OJEtdtiH=
/lmh/?oPO4K6C=
/lmh/?tDK=
/m02u/?iJBl5DH=
/m1n9/?WzZx_h8p=
/m25m/?sH=
/m6us/?XL3=
/m858/?5eg5n=
/m8a3/?CLZll=
/m9ae/?Njx0rZ0=
/mbx/?OL3D=
/mcn/?_nD434I
/mcn/?pL08=
/mh04/?0duH=
/mh04/?rHm=
/mh04/?z6t4vf=
/mqr7/?2dz=
/mqr7/?8paxn=
/mqr7/?bn=
/mqr7/?erah=
/mqr7/?LPW0d=
/mqr7/?ZhUpphA0=
/mqr7/?ZX50dDih=
/mjl/?M2MpdRT=
/mi8/?1bwhC=
/moc/?0TG=
/moc/?BL=
/moc/?OrD=
/moc/?_L30=
/mt88/?LN9dL=
/mzk6/?UPa=
/mzu5/?ClsV=
/n6i5/?d2MdxHVP=
/n10i/?OP=
/n10i/?qT=
/n1wh/?72xJM=
/nic4/?UN=
/n7ak/?lrDtuB=
/n8ds/?tzr=
/n8t5/?yz_SDajJ=
/nahb/?axCY8=
/nahb/?LLTod70y=
/nahb/?YtSrkY=
/nang/?YPxdA=
/nbg/?K0Gd=
/ni24/?HZHxy4b=
/niku/?nV3TFh=
/njo/?KPO4XxjH=
/njo/?s2=
/njhr/?-ZlDQ=
/njhr/?NreTZ=
/nk6l/?wN98br=
/nnmd/?erah=
/nqpg/?Yj8Yy=
/nsag/?6lop4xQ8=
/nt8e/?qNG=
/nu/?n4=
/nu/?8p=
/nu/?rvKdSp48=
/nu/?w2Kdbz9=
/nurc/?9rF8b=
/nwc9/?NreTZ=
/nyk/?Gdj8=
/odse/?CdL=
/oecd/?LDHDp=
/ogg/?3fk=
/ogg/?F2=
/ok6h/?L6J-8=
/ok6h/?SR=
/oncs/?SL=
/onqm/?JJBtglX0=
/os16/?JvK=
/oiwu/?3WQJUZ=
/oiwu/?6u6AyI=
/oiwu/?aGv=
/oiwu/?aRvcsIY=
/oiwu/?H61Q=
/oiwu/?lzI7=
/oiwu/?PuVoB=
/oiwu/?ZyFo4d=
/oqhk/?AhS=
/op6t/?OdrXC=
/oy30/?yVlpidI=
/p01e/?CJE=
/p01e/?H4D4s8f0=
/p2he/?1bz0Vl=
/p2io/?1bUl=
/p6ai/?Xrx4qlt=
/p8ce/?y4L0=
/pg21/?d484rJlH=
/poub/?-ZF=
/pth/?lL04m04=
/qmek/?57wTk=
/qmek/?psR=
/qmek/?wd=
/qmsj/?jzrDED=
/qr26/?0rZli=
/q3m8/?wYDJ=
/q4kr/?CBZt8=
/qjnt/?GDKPHRd0=
/qmek/?9iBF=
/qmek/?fU397=
/qmek/?K8KRH-M5=
/qtpn/?8p=
/qtpn/?g0DlvJP=
/r0bh/?3fD=
/r3hg/?_jG4S=
/r690/?9rId4=
/r690/?aBZPMh=
/r690/?0l8=
/r690/?X6I8=
/rb5e/?iIbtL=
/rf5o/?cB=
/rf5o/?3fl=
/rgoe/?AN9=
/rht6/?AN6=
/rqth/?2d30m=
/rrc/?CBr=
/rrc/?MP=
/rrc/?Rfd8=
/rrc/?VZxTAfKP=
/rse/?vDH8F=
/rse/?VR-XC=
/rv7/?CBZXp=
/wdc8/?lf=
/y88/?uZ-D=
/s0iw/?z6A0I=
/s0s2/?K6AliR=
/s0v/?cdH=
/s0v/?qR70f=
/s3s3/?RF=
/s48/?Yn=
/s86o/?nZ=
/s86o/?y33oDN5=
/s8y/?zXq4AN=
/sa/?HZaxUrJ=
/sbjq/?oZotnV_=
/sfd8/?jzuPNd=
/sg03/?iN6h3=
/sl7/?p0q=
/sk49/?2dz=
/sm3g/?Ml=
/sm3g/?PbvtUt=
/sn31/?UrjPbNmp=
/st28/?-Z5=
/st28/?uz=
/stcf/?KnpM=
/suiz/?bda=
/sy22/?6lzpL=
/sy22/?Axl4i4-=
/sy22/?tfL0m=
/sy22/?9rI8n8=
/sy22/?UXL=
/sy22/?vP=
/sy22/?yP7Plp=
/sy2h/?J6A0d4iP=
/sy2h/?W4Q=
/t0r3/?1bwhC=
/t2p/?Ezg47B=
/t36t/?00DpA=
/t36t/?svm=
/t36v/?jyu=
/t65q/?M2JHn=
/te/?9rmDEzj=
/tgqh/?dh=
/tmz/?2dul=
/tmz/?APcP7D=
/tmz/?YR-0=
/tn73/?elHH=
/tn73/?Yr=
/to12/?ebft=
/tpd2/?kjm81=
/txuu/?AX=
/uar3/?B81062R=
/uia2/?ARd46F=
/uia2/?oL0xqXQH=
/urde/?AN=
/urde/?Ztxhw=
/utg6/?PV40d8R=
/u8nw/?Bzr8U4l=
/u8nw/?LFQPH=
/pjn/?yVcHTBN=
/uszn/?3fUt=
/uszn/?a2MtxLZ=
/uu0p/?Up8l=
/uv34/?2db=
/uv34/?eBZl=
/hx227/
/hx321/
/u2kb/?GZ=
/u2kb/?rSHG2h6H=
/w88t/?_PAp=
/w8n5/?KrO4XnMP=
/w8t/
/wh23/?5ja0c8rh=
/wh23/?azuxWju=
/wnoa/?2dtl=
/wszm/?BRQlPj=
/tef/?Tj=
/x0h/?MfPxb=
/xczm/?ZVatuBj8=
/xczm/?NN=
/xy18/?GZwdbR=
/ymb8/?-rnjn4Q4=
/xle/?OrpDKZ=
/z7a/?pJEdPf_=
/zzun/?tL=
/?_DHxTPyP=
/?flDhjrj=
