# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: hlux, kelihos, slym, tibs

# Reference: https://www.virustotal.com/gui/file/764543b3608f078dd06c10f50f1e626bbe7e07e58a216192f47f343d9cf85d4c/detection

gorotza.biz

# Reference: https://www.virustotal.com/gui/file/a922d8b706bfe8d442ba4f4f09c5ec09f6fe4ea37a8d71b493aa7cf2f4056e33/detection

mydear.name

# Reference: https://www.virustotal.com/gui/file/8a768af791c8fdca6a2707345153c31d1136b1d05f06ac54eda826873541c862/detection

uvmucheb.ru

# Reference: https://www.virustotal.com/gui/file/bbea6ab93932a9ed9913fcbf9f4946a3e327fc367e8b6cd54fca854b90078705/detection

qeisybyg.ru

# Reference: https://www.virustotal.com/gui/file/2a72fd7185c937a8c518a3529fa19f323a9de8d049dd17d871a6da704139cad3/detection

gufuwcop.ru

# Reference: https://www.virustotal.com/gui/file/a7890cba51f83f9e039c3b277d86d197203414b978eb8f2251c9348c51eb009f/detection

lorbadxu.ru

# Reference: https://www.virustotal.com/gui/file/457e5011b5b443b99ac62c816a1d18bbdc0d38b7bf5e96f4d6e5ebae97d30bec/detection

ydhicdor.ru

# Reference: https://www.virustotal.com/gui/file/cf675eb18ab70e41855408ef549112182fe1e9cc0182021b7aad12b9d8495a10/detection

ci5juhe6.dofefdek.ru

# Reference: https://www.virustotal.com/gui/file/f25816805264895f31878253336d317948e4f64575cc817a273f4a7407b4e0de/detection

jyuhysdo.ru

# Reference: https://www.virustotal.com/gui/file/f1b2f8721ffa403b436c357a0b22b80d9ba7f2095c6b955b00b985f9c825aabd/detection

da92.rysdebyd.ru

# Reference: https://www.virustotal.com/gui/file/fe081b656d1438139537abedf84b746af1b02d988ac8de88f91d183628e2b3cf/detection

iheaven.us

# Reference: https://www.virustotal.com/gui/file/fba0b402eab424a792eb694eaa930c34139a1c81557a23a122e0cd56c97d5a3d/detection

admloadserver.eu

# Reference: https://www.virustotal.com/gui/file/d71923e354fabc6d97f333f814e5f5eb2b9ebcb2ef44ac56655dbe6ea51ab66f/detection

paybalinvest.biz

# Reference: https://www.virustotal.com/gui/file/e23159cda3f4fa0decfed5e4cc7a4cfb1f7c5e55b6a26ce8409a13ce7c21cea2/detection

paybalinvest.org

# Reference: https://www.virustotal.com/gui/file/4363985276fc20b368dab58da7819296c14ad4f1803a70fb58614d34f216ab21/detection

paying-days.org

# Reference: https://www.virustotal.com/gui/ip-address/1.194.153.198/relations

1.194.153.198:53

# Reference: https://blog.talosintelligence.com/2019/11/threat-roundup-1115-1122.html (# Win.Trojan.Bunitu-7394346-0)

netzsoflow.net
topfealine.com

# Reference: https://app.any.run/tasks/10709079-c948-4727-9aaf-f57790eb7778/
# Reference: https://app.any.run/tasks/938d8087-129a-4c2f-96cc-a37194394e65/

testedpon6.temp.swtest.ru
a0407615.xsph.ru

# Reference: https://www.virustotal.com/gui/file/c276d854eccce0cd0dc44935256f86e6b38ea8bcb5270b0b52d1edae82a7dbfb/detection

bigfishllc.com
24.celutytemanhattan.com
24.celutytemiami.com
24.celutytenyc.com

# Reference: https://www.crowdstrike.com/blog/farewell-to-kelihos-and-zombie-spider/

betaler.com
combach.com
goloduha.info
gorodkoff.com
greystoneexpress.com
sevpod.com
shoponlinesoft.com
ykxitfaf.ru
zavodchikshop.com

# Reference: https://blogs.infoblox.com/community/kelihos-botnet/
# Reference: https://www.virustotal.com/gui/file/1b3c8406bada4d016c667f661c37ead8447143f6c94ce4b80c90b7486bb04ca2/detection

aletazgi.ru
mosjinme.ru
ogdowkys.ru
pevhyvys.ru
siwebheb.ru

# Reference: https://commons.erau.edu/cgi/viewcontent.cgi?article=1271&context=adfsl

2014br.biz
abrora.biz
avroran.biz
bayermun.biz
bypomsa.info
chemp14.biz
demyator.biz
ecuad69.biz
ekidjop.info
fahhtaz.biz
fucmethev.info
ggabwav.info
goloduha.info
gorodkoff.com
gorotza.biz
hockelen.info
ibayermun.biz
jagesxij.info
jiqnipun.ru
meuvbayt.info
mydear.name
newcounter.biz
niggawhat.net
niwrebsa.info
omyxiglet.info
onabgitry.info
pasbuyr.info
pookagyx.info
segbuktem.info
usdivqo.info
zadofadsun.info

# Reference: https://www.virustotal.com/gui/file/3092511483fcfc70274dffae0cbd5230288c5ec7c14fcf79fa89d600103721f1/detection

azawvos.com

# Reference: https://www.virustotal.com/gui/file/ca5384b706de458aafcb8312875f85135998be5a34704b9df7a5adb22d3e9f54/detection

http://5.105.69.96

# Reference: https://www.virustotal.com/gui/file/bb7d248296f704841113d031156b792fd7b1fd038d03c33c70d7f4966438648e/detection

http://175.207.179.129
http://31.192.57.35

# Reference: https://www.virustotal.com/gui/file/03541dc9fc75ddf14aaf63a8c522729f2eb02d1482ae4bf04a96c8f5515c546a/detection

http://103.4.225.41
colzoqko.ru
sytpigyq.ru
/api/urls/?ts=

# Reference: https://www.virustotal.com/gui/file/036807a11f86e888edea3fa199e2457a6bf714e1c249e7115ec81350608dbb0e/detection

oqcilvis.ru

# Reference: https://www.virustotal.com/gui/file/5671f785c5936b2397550e1d2178d7c8d8cc19a9e6942ff131e1c0c3c2a9a86a/detection

paunocudoreport.com
/service/OO74928KCIMG8EC.php
/OO74928KCIMG8EC.php

# Reference: https://www.virustotal.com/gui/file/177092bdb1185b0bbb60dee99ca627a1a88945714b248491a36eaac725133159/detection

http://134.17.81.179
http://190.246.40.94

# Reference: https://www.virustotal.com/gui/file/3817274936d86d6b3089580460299431a09bbe478e6d9f07741b5c927c8595e7/detection

http://114.30.187.52
http://176.8.138.34
http://89.38.206.252

# Reference: https://www.virustotal.com/gui/file/1459c786e0231d420f38906784bc487f3cda1fac70b38eae17ef94021304c838/detection

http://109.254.59.167
http://95.77.209.26

# Reference: https://www.virustotal.com/gui/file/38e6ac262fdc291fcea50227469149f4050cb7c9f43ff78ae7b1550db99404cb/detection

ebalashka.biz

# Reference: https://www.virustotal.com/gui/file/57ac710be072b6e7be0809531079f76d9b3cf1094bf21c9fc390a0ec5606f9a9/detection

http://89.149.101.46

# Reference: https://www.virustotal.com/gui/file/004bd4e3702ba4f13d6694facd457a0d20c38e5f6960e7a8b79264300532a04e/detection

batpicur.ru

# Reference: https://www.virustotal.com/gui/file/02f8af575f1cd4742ea9852fef1ffd063726981a9059c4d10313e61638121b73/detection

dohwapih.ru

# Reference: https://www.virustotal.com/gui/file/0000e8a86003204037ac0aec9b9486728f845e3aa2b4460f77d3e913eee55b0b/detection

seslopyn.ru

# Reference: https://www.virustotal.com/gui/file/0044dc65efd5fedf6d6d25c448d5e6e1f777f07c992f0a70acca01410798c5e9/detection

systeat.com

# Reference: https://www.virustotal.com/gui/file/018962859dd499a01423de509ad0fe80ddea63269f8488151779c7d4ee9af804/detection

dawkavka.ru
yphiquof.ru

# Reference: https://www.virustotal.com/gui/file/6992db594cfb0950f633ad49e2abf688f2ac83264bb7cdcf69e8122525872300/detection

http://95.58.118.17
nobunzal.ru

# Reference: https://www.virustotal.com/gui/file/569a938dab73820e9f13267c9f970195cb2e7f169b97148e765522001e4bb1b1/detection

http://200.115.212.86

# Reference: https://www.virustotal.com/gui/file/69f003b989b4528a678a06ea65fb663a1d1738855a07dad435a6b7ee62b82102/detection

http://109.162.123.232
http://212.10.222.78

# Reference: https://www.virustotal.com/gui/file/001d90cbd63c03972179c82dde4e6ad421d78c505b8e7884cb005e828ea7543f/detection

http://46.36.131.40
http://67.165.172.70
http://78.46.148.93

# Reference: https://www.virustotal.com/gui/file/ff6e46f5fcb06eebc56a2b891c9d9ee6d2fcf73cb244ae451f2dc57d6e68a4f2/detection

http://68.49.160.148
http://97.84.206.105

# Reference: https://www.virustotal.com/gui/file/f5061b0ae09ed0bbab951b360bff1b3c80462360bbdb10a4c2b90a08b0a7dcfa/detection

http://93.95.184.36
http://94.53.45.40

# Reference: https://www.virustotal.com/gui/file/f111483707861d1e0e351b2ad9875037522f9c94f5a302a06418982d721dcdfd/detection

http://151.237.12.95
http://77.238.204.61

# Reference: https://www.virustotal.com/gui/file/f05fa11dc43ef4985bd5edad4e7f4dc7ecf2433a44c0bce3deb02c0a20378263/detection

http://175.181.111.28
http://94.251.113.11

# Reference: https://www.virustotal.com/gui/file/e7df11e2c7ab9f5e9e535fe8bf13773d4ae1b224beff1b9b7ebc388de3fc9a3c/detection

http://173.23.139.93
http://97.97.89.140

# Reference: https://www.virustotal.com/gui/file/e7c303249aa859a1e0feb4f6dda4bde65e1c89daf190cbf7b140f3b4dbd4fcfd/detection
# Reference: https://www.virustotal.com/gui/file/3daa74f08f4e41748df51362aec2be843498eb0a2a7cb1a7bd4dde863d62a43d/detection

http://46.161.158.11
http://78.96.12.171
newrect.com

# Reference: https://www.virustotal.com/gui/file/e5cf8ae2b455dc5770ab7e40d8b26b700e90ac8e1177e0d984a0676ad4a88875/detection

http://178.150.170.64
http://31.148.75.111

# Reference: https://www.virustotal.com/gui/file/dc4b1046a7e7e64ac9ff18ab2047baa3000df7da12352748a81d94e6b4882929/detection

http://173.23.19.85
http://27.3.194.117

# Reference: https://www.virustotal.com/gui/file/d9dde285e06c1711febc63fd36a9fa66a26841baf2872eb7e3701c504055865a/detection

http://46.35.160.125
http://72.131.126.135
ihdidcyd.ru

# Reference: https://www.virustotal.com/gui/file/d981f8cbfa3768f491185f3d439a7d72d8af8237e7465d192c78c25a8efc6c77/detection

http://176.73.117.64
http://94.41.132.219
3e4rssf5rsat.rw

# Reference: https://www.virustotal.com/gui/file/d26d2255c5dc1abbe9e8d59dbe040218bc682b1ad0fcf1a2c1a43dbaf2c6950c/detection

http://123.110.243.219
http://82.250.130.9

# Reference: https://www.virustotal.com/gui/file/d0e539b6b86338c13988b81eef46e2e5a0d8de3bbcbea90ba196c7f392f194a4/detection

http://24.1.149.188
http://82.162.2.168

# Reference: https://www.virustotal.com/gui/file/c83bd77a3e5d8598a10a5f9b2deb890fd09f8540e42140f65bf67450f632e941/detection

http://111.249.247.86
http://46.118.8.25

# Reference: https://www.virustotal.com/gui/file/b940f03c024c22e8b8ee07ec5414fea40dcc532bbcea2bcd55a8554dfdb368f9/detection

http://190.142.70.21
http://88.167.24.173

# Reference: https://www.virustotal.com/gui/file/b4ec7ee02fbf01745e2048141248a5e4c95960c51758dc2a42f5071fae18e2e4/detection

http://80.255.226.234
egsuista.ru

# Reference: https://www.virustotal.com/gui/file/b433589e98a4cf56c3219e456ae07d2a1bfe1065d0bfc1d739473250db7d83a0/detection

http://67.160.127.224
http://82.250.130.9

# Reference: https://www.virustotal.com/gui/file/b402feba5efcb8d124ff02cd4a637f07bbb03fb8fbd4f8453357728328183f44/detection

http://178.149.237.150

# Reference: https://www.virustotal.com/gui/file/b2af6557f7083224f7d024c88549216862e5634d80105619f062e4c991d78b1f/detection

http://125.177.42.192

# Reference: https://www.virustotal.com/gui/file/b2ab64a6b76c1cd0f5deb5ba506a8657f489df794eb1c53bc993cd28fc53da4e/detection

http://178.150.190.77
http://24.1.149.188
cucaklif.ru

# Reference: https://www.virustotal.com/gui/file/b253802400d85d50aa47cbffbe9764c1c69fadac2b2beb37c6a411227c171608/detection

http://37.251.47.207
http://5.20.144.225
rehvuwib.ru
ucxegxox.ru

# Reference: https://www.virustotal.com/gui/file/01c50d2842916f1b2a04cf52ec7822605f01287d875713ebcd48e7b5ffc27f6a/detection

ocgaextu.ru
rizsebym.ru

# Reference: https://www.virustotal.com/gui/file/6f596cf7d58c85e203f92d6a266b058b0dbcc1aa4b72e2cc281078ec69ec18f5/detection

http://109.87.184.14
http://5.79.185.29
http://62.84.46.6
http://89.137.128.62

# Reference: https://www.virustotal.com/gui/file/b1c70ca3dfde0e46d4baf351b6cf2bfa56840137de859ac66e50cac1e64d7c53/detection

http://176.8.160.106
http://178.235.190.9

# Reference: https://www.virustotal.com/gui/file/b0ce1a8b9e0decea822152e3fe80cee3d6ffa0925cfd8b958af5b74036f094aa/detection

http://77.110.139.217
http://78.45.71.117
lafdamow.ru

# Reference: https://www.virustotal.com/gui/file/b0c554ce3d73f7d355bcbcb82a53db5ee9e43c9786ccfdddc3ab9d960671c05d/detection

http://85.130.73.3
http://89.133.36.131
http://92.115.104.156

# Reference: https://www.virustotal.com/gui/file/b0614228dde98336f08d248d42a53edb67d564cba0623b5505a1b0b754ba09ce/detection

http://58.99.12.25
http://72.140.103.229

# Reference: https://www.virustotal.com/gui/file/ace43fc2b15725e28c9377542300ada8ce31e2ec51f44c3d59e006c467d491b5/detection

http://74.134.111.120
http://77.122.245.30

# Reference: https://www.virustotal.com/gui/file/a66b39c2dd104dfeda8e990976ce387adbf64435f08aa05f2bee647ed4a25efb/detection

http://178.175.103.251
http://67.165.172.70

# Reference: https://www.virustotal.com/gui/file/a618a739e4f642c9407f194061e162de20882e737b71b59e3f5270b90c53f84c/detection

http://190.53.225.45
http://89.165.223.5

# Reference: https://www.virustotal.com/gui/file/a46032798e32854733c4102000723fe94eaeccba7ea781d86551e43c725338aa/detection

http://42.98.183.50

# Reference: https://www.virustotal.com/gui/file/a1f0efc67cf38e3f2feecddd6c57292c3b441f84d76a34491a98cdd0a8fa7f52/detection

http://114.34.157.226
http://78.84.149.43
http://89.165.223.5

# Reference: https://www.virustotal.com/gui/file/937e3ebb5fad286c057282d1f15bf6e7a4b4a80172fbe0758e1bca47c0ddb4e4/detection

http://77.37.177.173
http://98.150.119.83

# Reference: https://www.virustotal.com/gui/file/a0bedbc1acdf87205b22a53e43149f24fe2a561dc374db68876d3f7a7b1ab9ca/detection

http://5.79.175.83
http://99.194.25.52

# Reference: https://www.virustotal.com/gui/file/9f34b8c1826ec4c3b24e179a7910657c1a21db6dd35739c4cda7433a2e85c14c/detection

http://188.2.144.37
http://24.32.70.54

# Reference: https://www.virustotal.com/gui/file/99e70edab1b69c36d01ee26cfaf95ad4991360162de4125237d7d4e1f015fe8e/detection

http://122.146.83.87

# Reference: https://www.virustotal.com/gui/file/9433d400d9419b3c83bb02708a850f61f5f714f501a4857528abb25cf29201b3/detection

http://98.124.70.20

# Reference: https://www.virustotal.com/gui/file/93853d56687020ab791f52b3ea4dfef59ec5c99217bb8b417fd6fb5b8e022428/detection

http://89.114.68.183
http://91.204.112.120
vehyfgor.ru

# Reference: https://www.virustotal.com/gui/file/925f44d844dc9efb334c96c3ce3560e3a0cd9b97c5f60295767c39b434134cbc/detection

http://176.36.151.112
http://77.247.21.54

# Reference: https://www.virustotal.com/gui/file/921086e4ed00ecfabc0b7848c8215b2df920338323358f812a236f7883a1836a/detection

http://94.53.64.212

# Reference: https://www.virustotal.com/gui/file/90a594555f9c58fc1f4fa0a25167d52ce2023ca6fd1651c7ddb2987e91e20a31/detection

http://111.242.179.223
http://82.250.130.9

# Reference: https://www.virustotal.com/gui/file/8fee5a0cbfd98a731e3ed57014973fe2b91e9ff4c69e35ef6a400bc7d4760f7e/detection

http://178.168.11.79
http://78.63.21.165
http://85.121.213.17

# Reference: https://www.virustotal.com/gui/file/8ec05e057bba876f15d328c017e8f271e3b7e487dc3222e315c5a3bb435a3b03/detection

http://122.146.82.125
http://68.53.52.25

# Reference: https://www.virustotal.com/gui/file/8930bec3c4f975310feb1ffeb2a625162f6721a2ca64aa01a86bb1a495a4b28c/detection

http://190.245.177.248

# Reference: https://www.virustotal.com/gui/file/889a2adaa7755fb2815c2fce46170689fc2094902875dc92959b0457d366d1b4/detection

http://190.246.40.94
http://201.221.108.80

# Reference: https://www.virustotal.com/gui/file/87099928534a012e07756cb7b922d62402eec110b54e427cb12509946a7952a5/detection

http://136.169.13.69
http://89.28.52.30

# Reference: https://www.virustotal.com/gui/file/8013d6adc40ec60091496e6e562ba7436db33a4163253022ee07b4c77647eeff/detection

http://75.81.205.138
xoztyhto.ru

# Reference: https://www.virustotal.com/gui/file/7fd8601febc6db505389fd3361c0ab234511c9d1568aa64c3c8a944877cea42b/detection

http://212.10.121.173
http://84.205.30.45

# Reference: https://www.virustotal.com/gui/file/7f5d1aa947e00a24dd7db54db3df2e34a1cd2b82bd730e5edd56cac92d6fdd76/detection

http://123.241.113.8
http://89.165.223.5

# Reference: https://www.virustotal.com/gui/file/7dde235c333cb3ca1612c6962bf3242c2e9ee9b4e83b2346dfacb91c79aff20e/detection

http://119.42.117.72

# Reference: https://www.virustotal.com/gui/file/7b7995a57f5e02a4070e95f8a148837f5242b73be7602fa7c07d0722fcde6f44/detection

http://94.176.159.122

# Reference: https://www.virustotal.com/gui/file/7aa7410d7a30f1f314005ea3392d2770eea9eaad20e1a8d303c33d577ced74f3/detection

http://186.93.137.2
http://77.93.7.25

# Reference: https://www.virustotal.com/gui/file/76a975cf2fa4b5f87332518c810c2f29ac6b8dd46d1854085a0f64b503161be6/detection

http://24.1.149.188

# Reference: https://www.virustotal.com/gui/file/75a1b333efd0a564f91fb7b6e8a9815253282c02bfba8ee5609ff1afaa7a7509/detection

http://1.171.228.16
http://31.14.204.132

# Reference: https://www.virustotal.com/gui/file/7598dc9dd0d50c190d7a126d86b7758070c9572c089748d537f3c6d13fe2b088/detection

http://190.99.0.133
http://217.172.245.191

# Reference: https://www.virustotal.com/gui/file/6bfc14277735d903bdd0b5ed95985d1a89ad69083bd196361ecdcde8fdc66166/detection

http://213.240.219.135

# Reference: https://www.virustotal.com/gui/file/6a60c48c2fcf60baae06b9b6edef220ade15a65b251c977cce89dedcd1d3584d/detection

http://182.235.189.174
http://84.109.190.57

# Reference: https://www.virustotal.com/gui/file/67f9c396b1a5c58a4ed05033581971d3cdaa77d156298f9ae281a9900b70bdc4/detection

http://67.187.155.174
http://95.160.27.181

# Reference: https://www.virustotal.com/gui/file/63321ab69dc1d67941b1b14625ff81f34b86a2386015080b286b7210cd39fbcc/detection

http://90.57.71.237
lafdamow.ru

# Reference: https://www.virustotal.com/gui/file/5d9b821cccf51754d66ffc0cbc6a2a473121df5634f13f7887b5eef7ced0bf4a/detection

http://82.250.130.9
http://94.251.113.11

# Reference: https://www.virustotal.com/gui/file/5d38e3c9708cc8158cf320b5a289cd591e56f80fc3eaefd32e3437346fc57425/detection

http://58.99.12.25
http://76.109.38.2

# Reference: https://www.virustotal.com/gui/file/5ba98aaed6d31096ea9b08e5b596397f458a13fb9ab27600cf9acd22a393732f/detection

http://144.13.40.119

# Reference: https://www.virustotal.com/gui/file/55713a25d6bdc634da74e387d1040870a1330c5bf10a85a21cee3be83c174c6a/detection

http://31.223.222.43
http://89.69.201.243

# Reference: https://www.virustotal.com/gui/file/5459818d29eecb06cd17f5fe8b4471299ed1d32e0da23d1c4fd8f83547931909/detection

http://209.54.15.125

# Reference: https://www.virustotal.com/gui/file/53ac9f5f75544ce373b4a6c51086d40620bdeb211281bff133abc62201f480b2/detection

http://24.23.172.206
http://71.192.87.93

# Reference: https://www.virustotal.com/gui/file/538f7a8a97766100782d75808e72b7754973082d40e7f21f2c19c0c722ffc5db/detection

http://24.217.79.37
http://66.65.50.151

# Reference: https://www.virustotal.com/gui/file/52bb8e44ebd9ee0715f4490ad86f5c10ed8c4e71e3b51b9a7505cbdb3e88d7c7/detection

http://31.133.34.103
http://74.134.111.120

# Reference: https://www.virustotal.com/gui/file/4f58a1c40816a59bdea118c7536d26f3275e22385c67bce9ce74a0397d02ba8f/detection

http://66.191.213.61
tiglatep.ru

# Reference: https://www.virustotal.com/gui/file/47705ec8bc8da2fd4c7052cbbfd1b64becfb11f284b3b34f351f86c20064144d/detection

http://31.211.249.164
http://46.55.74.65

# Reference: https://www.virustotal.com/gui/file/3c97b03823943d475994a681dca2a64a60d0d96242a8054925ee61284d152229/detection

http://123.110.243.219

# Reference: https://www.virustotal.com/gui/file/3b5df92545e852a399af6f82c0ed457026f795be3c8d1447ce280cb2d93341d8/detection

http://76.109.38.2
http://76.29.41.89

# Reference: https://www.virustotal.com/gui/file/394f64c55a771d2994cd832b35a26f4932ea6a117f948ce6bb4e58a5d7d895ab/detection

http://202.78.81.197

# Reference: https://www.virustotal.com/gui/file/342a4f013232f4b9dab576c2d7ba54d76fb2e3fc8a3ef1ab2ca57733b02b63f6/detection

http://109.105.28.56
http://89.228.127.38

# Reference: https://www.virustotal.com/gui/file/341eac838d93531f3986ef6903deedbd28eede23859a7193e244762fc174bcd9/detection

http://89.230.119.27

# Reference: https://www.virustotal.com/gui/file/2aa598932934b446519e5a35a3e7b9847dbb981f1ecfc21a061afb09279c44e6/detection

http://114.47.77.158
http://78.61.238.3

# Reference: https://www.virustotal.com/gui/file/2a5526eb85e0f15c880c3fc850ae975749a4e2693791a5a2ea4ced4b5e85740c/detection

http://84.109.190.57

# Reference: https://www.virustotal.com/gui/file/2a2cd990d85b9b323a6d665e957c7251b69815a6dbe0fb3c69d0407d3ee6ef1a/detection

http://159.224.156.186
http://31.11.86.91
http://89.114.116.17

# Reference: https://www.virustotal.com/gui/file/2505652c2801628c5482f5a09ac958bb75926574cdca1e1c30d9a69de0afdb71/detection

http://93.105.64.206

# Reference: https://www.virustotal.com/gui/file/242955b0d2ace8d28457d76dc003ac5b55fefb880dd3cc935772a82842e8d0fd/detection

http://58.137.220.220
http://86.100.126.48

# Reference: https://www.virustotal.com/gui/file/2223bcac05ff4f18cb8708ebd4ad42da0c44fb6854c378ee4b8fba88a930698b/detection

http://93.100.65.11
http://97.81.101.113

# Reference: https://www.virustotal.com/gui/file/20f537e021ab5d57a139be6a723e5dcbdf1ac07c2c79c276e67d3717526c5b15/detection

http://84.1.188.174
http://94.240.136.9

# Reference: https://www.virustotal.com/gui/file/204617e285b294f68ae89d067fa12025e0dd78e992ec067fd203e7d455263714/detection

http://89.228.42.74

# Reference: https://www.virustotal.com/gui/file/1c2e403fe7a40c9d11bb71ed92f488d9bfe560bb794649e6ca07dee53886a8fe/detection

http://77.38.240.3
http://85.222.98.52

# Reference: https://www.virustotal.com/gui/file/195daf228d40f25aa12adcf33d783bfd9436c1ae315ebc0c0fbd533488159311/detection

http://1.171.228.16
http://186.36.49.68

# Reference: https://www.virustotal.com/gui/file/16fd099eb4b7f51d7b27f96be5d286b38e772f7fce3bdb8ab50c21f9f52d7f61/detection

http://37.57.13.2
http://80.99.254.11

# Reference: https://www.virustotal.com/gui/file/15c324dbbad996b75c42a581a0b2ad422cf50cc1af8809ce000767a5bac22016/detection

http://74.128.239.236
http://88.223.36.44

# Reference: https://www.virustotal.com/gui/file/112887d39873c0ad0451f834da759a57ef7da72edca03065ffc49dd23e8dbb44/detection

http://188.129.227.202
http://37.229.185.199
http://94.251.113.11

# Reference: https://www.virustotal.com/gui/file/0dad5dac81a9170f2b6b09492c5094f7d070e246e17f5150f63690465fa984bf/detection

http://216.186.194.32
http://87.207.101.220

# Reference: https://www.virustotal.com/gui/file/0d510167a862b874f19635a67e175e7ed3ad7f6503b90b81eef064065ab4d785/detection

http://77.223.226.93

# Reference: https://www.virustotal.com/gui/file/0bca60cae3cf36e848e40b364fdc44f0ab8bc530aa835f16cdfa856f1c00dbf6/detection

http://114.45.110.92
liwmiccu.ru

# Reference: https://www.virustotal.com/gui/file/048e99465c55805e06af2f7d223db7a7af7eeb57718aa157497b53267497d27d/detection

http://188.2.144.37
http://89.36.94.59

# Reference: https://www.virustotal.com/gui/file/039192dffcda1f87104a8969259db5994332e58f4f7a16ceabdb4f9c2c6d6b10/detection

http://173.17.24.87
http://80.99.254.11

# Reference: https://www.virustotal.com/gui/file/022dfb4aff03442948961e87a1e7220e042c524480bab8a8fce2fe3cdb853e91/detection

http://76.29.41.89
http://97.69.223.208

# Reference: https://www.virustotal.com/gui/file/968601631d640073642d58ca1d56373613b3a6fe5e35403dd5fc537e6db2859c/detection

http://95.64.88.242

# Reference: https://www.virustotal.com/gui/file/4f18c52afa59842eb9c74a30cc2960a3195cf32e0a3d3831b5f6955c868ce630/detection

http://86.63.85.213
luhhinwa.ru
scenes.suroot.com

# Reference: https://www.virustotal.com/gui/file/0e658f1ed88c2a23843e495065e88be55960188aa9d1b9e553aad64680b667b4/detection

http://49.158.210.107
http://83.8.134.76
secegbiw.ru
btvl.secegbiw.ru

# Reference: https://www.virustotal.com/gui/file/00dc4b9bd023731c6c6360442abcf5bc1472ec2e9d07acd522978ef45bf11e58/detection

http://24.54.242.243

# Reference: https://www.virustotal.com/gui/file/16e46c9ce4e3d3f4cbcb6fe2e799b53b00c629620bb441e414983e661bad1c11/detection

http://91.105.65.217
keturduq.ru
nudysmih.ru

# Reference: https://www.virustotal.com/gui/file/0bf96515555e72f9cb85eb01179e33ab00592b41382a93a9ee7b3bcf1d750a40/detection

http://82.211.165.43
http://94.137.168.12

# Reference: https://www.virustotal.com/gui/file/712cf1ce5fbd20c875a155926aafd9010155edb761fb6a93d729fe83f4db1e4f/detection

http://186.36.49.68
http://201.253.175.242

# Reference: https://www.virustotal.com/gui/file/01661369282e8bab186369752f13780c7d16f4be4bfe153cd8b653b739d36a66/detection

http://190.195.187.106
http://88.223.36.44
