# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/Artilllerie/status/1115258738368294913

/rnm226.php
/rnm238.php

# Reference: https://twitter.com/malware_traffic/status/732996960953622528

/xtrfgdb7.php

# Reference: https://twitter.com/malware_traffic/status/723237083851022337

/ckjvgphz.php

# Reference: https://twitter.com/teoseller/status/648537487397289984

/ajuno.php

# Reference: https://twitter.com/malware_traffic/status/1138999824613687298
# Reference: https://www.virustotal.com/gui/file/d0eeef1b864c653c59242e0e90c87c24da440555217dfdda815e0b53a24c6336/detection

http://80.85.155.70
http://95.81.0.72
work.a-poster.info

# Reference: https://twitter.com/VK_Intel/status/1139926661162512384
# Reference: https://github.com/k-vitali/Malware-Misc-RE/blob/master/2019-06-14-tofsee-spambot-modules.notes.vk.txt

/pchfv.php
144.76.199.2:416
144.76.199.43:416
176.111.49.43:416
46.4.52.109:416
85.25.119.25:416

# Reference: https://blog.talosintelligence.com/2019/08/threat-roundup-0726-0802.html (# Win.Malware.Tofsee-7090196-1)

gordinka.xyz

# Reference: https://blog.talosintelligence.com/2019/10/threat-roundup-1018-1025.html (# Win.Malware.Tofsee-7349716-1)

nekfad.xyz
ponedobla.bit

# Reference: https://www.virustotal.com/gui/file/4de062a251b1b38575f8e815823b27f05e8a8eba69aec44b89bfa5a88155c747/detection

/vbyjqfw.php
/dhmuswvy.php
/bvmrgqc.php
/codfxpwuq.php
/psfyclat.php
/qxxrym.php
/frwxpvpm.php
/rusehw.php
/hmrlyx.php
/ckhadxg.php
/sslkzbml.php
/mwwqjy.php
/hrlaguph.php

# Reference: https://www.virustotal.com/gui/ip-address/51.91.31.87/relations
# Reference: https://www.virustotal.com/gui/file/b0a8c4f50a4fbddd68c67fd25f04c72c8bc82164c4cc1c63773b48d51194173b/detection
# Reference: https://www.virustotal.com/gui/file/8294d7ef6650dda837626df88d3af1f4ae21440ee5a85e3cdf9222baacea5583/detection

51.91.31.87:13333

# Reference: https://www.virustotal.com/gui/file/0de56d003ad4b2ec2b3baefc186761c0d6e7ecc957cee322b337d8317ccfdeab/detection

93.171.200.64:35000

# Reference: https://www.virustotal.com/gui/ip-address/45.128.204.56/relations

45.128.204.56:8087

# Reference: https://www.virustotal.com/gui/file/71ac7ffe233607924e6475dc2537d28a1647e78fd0e2d85f3af8760e87009e06/detection

176.9.114.177:416
188.165.238.150:416
46.28.66.2:416
78.31.67.23:416
93.179.69.109:416

# Reference: https://www.virustotal.com/gui/file/c77be7705adde8882fe9b8d2ae1120ffc978ce8993c39a1b908a595c34a44f62/detection

176.9.114.177:419
188.165.238.150:419
46.28.66.2:419
46.4.52.109:419
78.31.67.23:419
93.179.69.109:419

# Reference: https://www.virustotal.com/gui/file/401defb46887dfb03a9359ebbb257f228204b5bdbc669e1f6e48a2390ffe7737/detection

176.9.114.177:418
188.165.238.150:418
46.28.66.2:418
46.4.52.109:418
78.31.67.23:418
93.179.69.109:418

# Reference: https://www.virustotal.com/gui/file/abfe24e0c4203696a78fce0947d0badb0add61798317346d6d68942330c7ad16/detection

176.9.114.177:420
188.165.238.150:420
46.28.66.2:420
46.4.52.109:420
78.31.67.23:420
93.179.69.109:420

# Reference: 	https://blog.talosintelligence.com/2020/02/threat-roundup-0214-0221.html (# Win.Packed.Tofsee-7586819-1)

bestladies.cn
bestdates.cn
bestgirlsdates.cn
sex-finder4you1.com

# Reference: https://www.virustotal.com/gui/file/29ddb2d3b572e9d87505f655c114f35acb083d726c73c1e4ee3a796302960f3c/detection

43.231.4.7:443
85.114.134.88:486
sex-finder4you4.com

# Reference: https://www.virustotal.com/gui/file/ea9a07e2c8c8bae733c472099b4a8819ecb035d978ae10fb12de0162192ec241/detection

85.114.134.88:487

# Reference: https://www.virustotal.com/gui/file/94b9e7576fdb55902edf135d96a5d0bf48886753d4e236fc9ae77e53b5ccea36/detection

176.9.114.177:423
188.165.238.150:423
46.28.66.2:423
46.4.52.109:423
78.31.67.23:423
93.179.69.109:423

# Reference: https://www.virustotal.com/gui/ip-address/176.119.28.112/relations
# Reference: https://www.virustotal.com/gui/file/37f4c5a020461568f4870b7f55be47911575fe3ea45e8ed893f5dd47134ce5cf/detection

176.119.28.112:3333

# Reference: https://www.virustotal.com/gui/file/31cc99bdafbb1cca9fbc8ed4e909cc087471eb3ecb3343c1d5e5ee2467398032/detection

32ggswww2.info
jssbwtgssq.com
rwsb3tsgw.xyz
vyefb543.ru

# Reference: https://www.virustotal.com/gui/file/56742b2b280832be53db097ffc3cf69947588f367627151198938d683ed0afee/detection

45.126.183.208:8087

# Reference: https://www.virustotal.com/gui/file/46d510e878697c063192b6ae34af6f61e1324e94fd8dd8d4d32f1cf4966824aa/detection

176.9.114.177:417
188.165.238.150:417
46.28.66.2:417
46.4.52.109:417
78.31.67.23:417
85.114.134.88:481
93.179.69.109:417

# Reference: https://www.virustotal.com/gui/file/79aa41afc62c74ad0bad77400a6bf8a950128b1762cbf18d4ae83fc8de2a61b5/detection

144.76.173.210:5595

# Reference: https://www.virustotal.com/gui/file/9ad58966c6dbcada05cd1d7b802af1b3643c91bb62921e834d5440d14bc5ca9c/detection

176.9.114.177:430
188.165.238.150:430
46.28.66.2:430
46.4.52.109:430
78.31.67.23:430
85.114.134.88:486
93.179.69.109:430

# Reference: https://www.virustotal.com/gui/file/1dbb73d845e92a993ca73be56c987d38b7fd2921eb0fca86d8d6be3fab3a6b76/detection

185.180.196.91:25000
45.126.183.208:8087
95.181.178.17:486
144.76.199.2:422
144.76.199.43:422
176.111.49.43:422
46.4.52.109:422
85.25.119.25:422

# Reference: https://www.virustotal.com/gui/file/600a779ace9a420685a0e2b38d5302391f5732a509d691a4563d0e9d570d1cbd/detection

85.114.134.88:481
176.9.114.177:425
188.165.238.150:425
46.28.66.2:425
46.4.52.109:425
78.31.67.23:425
93.179.69.109:425

# Reference: https://www.virustotal.com/gui/file/d513c313d237d4ac514e27766b0140f18cd82f2ddef16533364457164bb6a2dc/detection

45.153.203.33:5050

# Reference: https://www.virustotal.com/gui/file/56d637b03d20f84e27caba2da1f147ff022e22f659aa26fe8e6be2cceb3cb47c/detection

fakecontact.top
heniav.xyz

# Reference: https://www.virustotal.com/gui/file/a8fd30b03500b24c3f28f24919bbad05355c837271fb4c49f6fc495afe11b9b1/detection

212.22.87.191:484

# Reference: https://www.virustotal.com/gui/domain/mx0a-0021cb01.pphosted.com/relations

mx0a-0021cb01.pphosted.com

# Reference: https://www.dragos.com/blog/industry-news/a-new-water-watering-hole/
# Reference: https://otx.alienvault.com/pulse/60a41a33d66b2282cdb15e2e

darkteam.store

# Reference: https://www.virustotal.com/gui/file/74c27d013f304005b5703dadd2d1e306b8995c5c840dc20ee2d01ea1ada2de80/detection

85.114.134.88:484

# Reference: https://www.virustotal.com/gui/file/befe9a15cfe1b2a5acd3e6935f57f1b2bd81c5b4a0a51ef58093b0c2077c952a/detection

lazystax.ru

# Reference: https://www.virustotal.com/gui/file/7157b3add71ff5e921770e829c78bf836f6864eaad12638e87007bf871c57f87/behavior/C2AE

dzydzya.biz
59.188.74.26:465
111.121.193.242:465
103.248.137.133:465
115.230.124.76:465

# Reference: https://www.virustotal.com/gui/file/411b47fa6cf20ae9f60368d9f5dd84300f4a607150c8788c8c22839631b55667/behavior/VirusTotal%20Jujubox

defeatwax.ru
193.56.146.244:480

# Reference: https://www.virustotal.com/gui/file/90f5f64f6d058a648703f5fd4875dc890ddadaa237c22e9c31fa8b2d987bab2d/behavior/C2AE

lakeflex.ru
quadoil.ru

# Reference: https://www.virustotal.com/gui/file/0229a33928016fcbd60d19563894ed028f0947f6b470c17948c05a7a26a29e9b/behavior/C2AE

refabyd.info

# Reference: https://www.virustotal.com/gui/file/bda39f9370c5cac9ccfb4bad309a6dabb92c7431aa5af0cac4cb91ac7c88443b/detection

144.76.199.2:416
144.76.199.2:417
144.76.199.2:429
144.76.199.43:416
144.76.199.43:417
144.76.199.43:429
176.111.49.43:416
176.111.49.43:417
176.111.49.43:429
185.254.190.218:484
46.4.52.109:416
46.4.52.109:417
46.4.52.109:429
5.9.32.166:481
85.25.119.25:416
85.25.119.25:417
85.25.119.25:429
93.189.41.62:8080

# Reference: https://www.virustotal.com/gui/file/55d5a5ece238cfa4e0d999c5ba0b871dbe7664ed28ebb5c5e885f6d60ddaa8d1/detection

mubrikych.top
oxxyfix.xyz

# Reference: https://www.virustotal.com/gui/file/ae56e7d113a619aba4b7a8e204bda7f345d7ea9bb9000e2a1b3288042958518c/detection

85.114.134.88:480

# Reference: https://www.virustotal.com/gui/file/70e5635f2da4c99855a33aad3a86c8124bdda23b3e1d99775d434db866fdc650/detection

185.7.214.171:431
185.7.214.210:431
185.7.214.212:431
185.7.214.213:487
45.9.20.178:431
45.9.20.179:431
45.9.20.187:431

# Reference: https://github.com/ti-research-io/ti/blob/main/DGA/Tofsee/DGALIST-Tofsee.txt

dulduld.ch
dumduma.biz
duqduqg.biz
dutdutg.ch
duuduuf.ch
duvduvc.ch
dvbdvbc.biz
dvfdvfe.biz
dvgdvgi.ch
dvhdvha.biz
dvhdvhf.ch
dvjdvjh.ch
dwadwag.ch
dwidwid.biz
dwmdwmd.biz
dwmdwmf.biz
dwmdwmj.ch
dwndwnc.biz
dwndwnc.ch
dwndwnd.biz
dwndwnd.ch
dwndwne.ch
dwodwoa.biz
dwodwob.ch
dwodwoh.ch
dwpdwpc.biz
dwpdwpd.ch
dwpdwph.ch
dwrdwrb.ch
dwrdwrc.ch
dwsdwsb.ch
dwtdwtb.biz
dwtdwtg.biz
dwtdwtj.ch
dwudwua.ch
dwudwuj.ch
dwvdwva.ch
dwvdwvg.biz
dwvdwvi.biz
dwvdwvj.biz
dwwdwwb.ch
dwxdwxb.ch
dwxdwxc.ch
dwxdwxe.ch
dwxdwxj.ch
dwydwya.ch
dwydwyf.ch
dwydwyg.biz
dwydwyj.biz
dwzdwzc.ch
dwzdwze.biz
dwzdwzf.ch
dwzdwzj.biz
dxadxaa.biz
dxadxag.biz
dxadxag.ch
dxbdxbe.biz
dxbdxbf.biz
dxbdxbg.biz
dxbdxbh.ch
dxcdxcc.ch
dxcdxcd.biz
dxddxde.ch
dxddxdg.biz
dxedxed.ch
dxedxei.ch
dxedxej.biz
dxfdxfb.biz
dxfdxfc.biz
dxfdxfd.biz
dxfdxfi.biz
dxgdxgb.biz
dxgdxgd.biz
dxgdxgh.ch
dxgdxgj.biz
dxhdxhb.biz
dxhdxhj.biz
dxidxic.biz
dxidxic.ch
dxidxie.biz
dxidxih.ch
dxjdxja.biz
dxjdxja.ch
dxjdxjg.biz
dxjdxjg.ch
dxjdxjh.biz
dxkdxkd.biz
dxkdxkf.ch
dxkdxki.biz
dxldxld.ch
dxmdxme.biz
dxndxnb.ch
dxndxnc.biz
dxndxnc.ch
dxndxnd.biz
dxndxnh.ch
dxndxnj.ch
dxodxob.biz
dxodxod.biz
dxodxoe.biz
dxpdxpc.ch
dxpdxpe.biz
dxpdxph.ch
dxqdxqc.ch
dxrdxrg.biz
dxsdxsc.biz
dxsdxsh.ch
dxsdxsj.biz
dxtdxtc.biz
dxtdxti.ch
dxudxuc.biz
dxudxui.ch
dxvdxvi.ch
dxwdxwd.ch
dxwdxwh.ch
dxwdxwi.biz
dxxdxxa.ch
dxxdxxb.ch
dxxdxxf.biz
dxxdxxi.ch
dxydxyc.ch
dxydxyg.biz
dxydxyj.ch
dxzdxzg.biz
dxzdxzh.biz
dxzdxzj.biz
dyadyae.biz
dyadyaf.ch
dyadyai.ch
dybdybc.biz
dybdybh.ch
dybdybi.ch
dybdybj.biz
dycdyca.ch
dycdycc.ch
dycdycg.biz
dycdycg.ch
dyddyda.biz
dyddydc.ch
dyddydh.ch
dyedyei.biz
dyfdyfd.ch
dyfdyfg.biz
dyfdyfj.ch
dygdygb.biz
dyhdyhi.biz
dyhdyhi.ch
dyidyic.biz
dyidyig.ch
dyjdyjb.ch
dyjdyje.ch
dyjdyjh.ch
dyjdyji.ch
dykdykb.biz
dykdykd.biz
dykdykg.biz
dyldyld.biz
dyldyld.ch
dyldyle.ch
dymdyma.biz
dymdymd.biz
dyndynh.biz
dyndyni.biz
dyodyoa.biz
dyodyoa.ch
dyodyob.biz
dypdypa.biz
dypdypc.ch
dypdypi.ch
dyqdyqa.ch
dyqdyqd.biz
dyqdyqg.biz
dyqdyqh.biz
dyqdyqi.ch
dyrdyra.biz
dyrdyrb.biz
dyrdyrd.ch
dyrdyre.biz
dyrdyrg.biz
dyrdyrh.biz
dyrdyri.ch
dysdysa.biz
dysdysa.ch
dysdysb.ch
dysdysd.ch
dysdyse.ch
dysdysg.biz
dysdysg.ch
dysdysi.ch
dysdysj.biz
dytdyth.biz
dyudyub.biz
dyudyue.biz
dyudyuf.ch
dyudyuh.biz
dyvdyvh.biz
dywdywc.ch
dywdywd.biz
dywdywe.biz
dywdywh.biz
dyxdyxj.ch
dyzdyzf.ch
dzadzah.biz
dzadzaj.ch
dzbdzbe.biz
dzcdzcj.ch
dzddzda.biz
dzddzdc.ch
dzddzde.biz
dzedzea.ch
dzedzeb.biz
dzedzef.biz
dzedzeh.biz
eaieaia.biz
eaieaia.ch
eaieaib.biz
eaieaib.ch
eaieaic.biz
eaieaic.ch
eaieaid.biz
eaieaid.ch
eaieaie.biz
eaieaie.ch
eaieaif.biz
eaieaif.ch
eaieaig.biz
eaieaig.ch
eaieaih.biz
eaieaih.ch
eaieaii.biz
eaieaii.ch
eaieaij.biz
eaieaij.ch
eajeaja.biz
eajeaja.ch
eajeajb.biz
eajeajb.ch
eajeajc.biz
eajeajc.ch
eajeajd.biz
eajeajd.ch
eajeaje.biz
eajeaje.ch
eajeajf.biz
eajeajf.ch
eajeajg.biz
eajeajg.ch
eajeajh.biz
eajeajh.ch
eajeaji.biz
eajeaji.ch
eajeajj.biz
eajeajj.ch

# Reference: https://www.virustotal.com/gui/file/6aad2d92bb7afdb29d2aebd19ed518120a975353c46ea3db1a5c2c8a1d675646/detection

144.76.199.43:423
144.76.199.2:423
176.111.49.43:423
46.4.52.109:423
85.25.119.25:423

# Reference: https://www.virustotal.com/gui/file/05343a42626ec21c12c2e642814860efe16284278e6fd595d2efcae0647b4c0d/detection

185.215.113.71:416
185.244.41.146:416
185.7.214.171:416
185.7.214.210:416
185.7.214.212:416
91.243.44.11:416

# Reference: https://www.virustotal.com/gui/file/5a962e6116bde82aa809719f0b1872fa7b1d6a477cc915528ee5d06cea4c1b75/detection

185.7.214.171:429
185.7.214.210:429
185.7.214.212:429
45.9.20.187:429
45.9.20.178:429
45.9.20.179:429
193.56.146.146:485

# Reference: https://www.virustotal.com/gui/file/f4b9f542dfee6f40bb239c0d47296672c37d15521322b78e53daa9d7d399eebf/detection

185.215.113.71:421
185.244.41.156:421
185.7.214.171:421
185.7.214.210:421
185.7.214.212:421
185.7.214.51:485
91.243.33.4:421
763655-cs37094.tmweb.ru

# Reference: https://www.virustotal.com/gui/file/a7ee420fd3a477e690dab56f47b264dd6c8376941101065d6645716bbf4b6333/detection

185.215.113.71:425
185.244.41.156:425
185.7.214.171:425
185.7.214.210:425
185.7.214.212:425
185.7.214.51:481
91.243.33.4:425

# Reference: https://www.virustotal.com/gui/file/bff743d7d127f7ebb99f8f4560682c6428ffec0fe04e5c74ef7e987e54069b5b/detection

185.253.219.200:424
193.56.146.41:424
193.56.146.42:424
193.56.146.43:424
193.56.146.188:480
51.158.144.223:424
91.219.63.95:424

# Reference: https://www.virustotal.com/gui/file/2e56f46ade294f995ba0b40cb333193d967b4239547e7b4ea4b9b6bd896df394/detection

192.162.246.7:422
193.56.146.40:486
193.56.146.41:422
193.56.146.42:422
193.56.146.43:422
95.216.195.92:422

# Reference: https://www.virustotal.com/gui/file/5e0c288cbbfcf3d42a11b380eae2eb7d2cc9d4406ea09515f7512318df701221/detection

185.244.41.146:430
185.215.113.71:430
185.7.214.51:486
185.7.214.171:430
185.7.214.210:430
185.7.214.212:430
91.243.33.3:430

# Reference: https://www.virustotal.com/gui/file/8137f7ea287ebfce0b9663ba126fd0e117e15d566c59412abc8929566f8cfb9d/detection

148.251.137.62:10281

# Reference: https://www.virustotal.com/gui/file/10015424deb6bd49a26cb72e2ce8386f943dd2862b6bd2c33859e8ac9de4598d/detection

144.76.199.2:423
144.76.199.2:426
144.76.199.43:423
144.76.199.43:426
176.111.49.43:423
176.111.49.43:426
46.4.52.109:423
46.4.52.109:426
85.25.119.25:423
85.25.119.25:426
91.203.5.169:8087
94.23.27.38:482

# Reference: https://www.virustotal.com/gui/file/469e4aa1e6b4a0f29376943c9971946004292629f8a79820075bcb967c502aeb/detection

103.93.124.134:8087
95.181.178.17:480

# Reference: https://www.virustotal.com/gui/file/68e6fa2b60b3156318e1ff86510c56ce5d3e79936d9f4483980f8a509cd05b87/detection

193.56.146.188:484

# Reference: https://www.virustotal.com/gui/file/059b66dbf14b0ca82b30eb2799e29d0ce354a869a97c47cf5488d626ce3f7b87/detection

144.76.199.2:427
144.76.199.43:427
176.111.49.43:427
46.4.52.109:427
85.25.119.25:427
95.181.178.17:483

# Reference: https://www.virustotal.com/gui/file/79f5e36118066944dee611871702de84cf23d51af939837f5e86c4e384ad8db9/detection

144.76.199.2:428
144.76.199.43:428
176.111.49.43:428
46.4.52.109:428
78.31.67.189:484
85.25.119.25:428

# Reference: https://www.virustotal.com/gui/file/868dc7b2ec8a701555cea7f0707e26b5f4393b9d81b2c4f7884f9a4e271c3cd4/detection

144.76.199.2:420
176.111.49.43:420
190.2.131.101:420
46.4.52.109:420
85.25.119.25:420
93.179.68.4:420

# Reference: https://www.virustotal.com/gui/file/8a95fcea2d9784112668258efcce0a1c32152c829daa769d75ed4a8396ff0924/detection

144.76.199.2:429
144.76.199.43:429
176.111.49.43:429
46.4.52.109:429
85.25.119.25:429
95.181.178.17:485

# Reference: https://www.virustotal.com/gui/file/a9a6c638dce713e776dca8e1831f0483e7172957e24326211d30b39d415534a0/detection

185.7.214.171:423
185.7.214.210:423
185.7.214.212:423
45.9.20.178:423
45.9.20.179:423
45.9.20.187:423

# Reference: https://www.virustotal.com/gui/file/ce888f35283c4bc30768f6643c37606a0ee0825da4836bf9374dd5518f6f1e4b/detection

interestourflash.info
seameansto.info

# Reference: https://tria.ge/220924-rwrvwscgdk/behavioral2

176.113.115.153:426
176.113.115.154:426
176.113.115.155:426
176.113.115.156:426
176.113.115.157:426

# Reference: https://www.virustotal.com/gui/file/23941746340e89fb699e4ecec106fbfd40186fc5b483bf72d82d5d5a2706863f/detection

176.113.115.153:423
176.113.115.154:423
176.113.115.155:423
176.113.115.156:423
176.113.115.157:423

# Reference: https://www.virustotal.com/gui/file/c075fd44d38604c5990bb1b273c173a97ab7b6c45063efa3393a81d593f78a20/detection

144.76.199.43:420
85.25.185.229:484

# Reference: https://www.virustotal.com/gui/file/0d018bef7dc5e274d5589cd9af8e49419cbf52bdfb9cd7d19e480c63263f9dd6/detection

185.215.113.38:423
185.244.41.156:423
91.243.33.5:423

# Reference: https://www.virustotal.com/gui/file/013b3f6f49d38432a8e11feb5dfc685b358f4eee8ee80aac1b263559ed258706/detection

130.0.232.208:417
130.0.232.208:428
144.76.108.82:417
144.76.108.82:428
185.253.217.20:417
185.253.217.20:428
217.172.179.54:417
217.172.179.54:428
45.90.34.87:417
45.90.34.87:428
5.9.72.48:417
5.9.72.48:428
83.151.238.34:40005

# Reference: https://www.virustotal.com/gui/file/56742e1089c9d98d0f7f4b3426bfeb3a4669fb8577b421a3831ae70163da45c5/detection

176.113.115.153:427
176.113.115.154:427
176.113.115.155:427
176.113.115.156:427
176.113.115.157:427
176.113.115.158:483
80.66.75.4:427

# Reference: https://www.virustotal.com/gui/file/537ec0422d183cec0fdbce49015dde564bbf36de1e0046d887cdaa2efd53ff7d/detection

62.204.41.45:482
62.204.41.46:418
62.204.41.47:418
62.204.41.48:418
62.204.41.49:418
62.204.41.50:418
91.243.33.5:418

# Reference: https://www.virustotal.com/gui/file/343899be6fbc4efdc2fc34741a3fc98e4ca56bb3b49478237b7fa6ff6c84fd5a/detection

176.113.115.153:420
176.113.115.153:427
176.113.115.153:430
176.113.115.154:420
176.113.115.154:427
176.113.115.154:430
176.113.115.155:420
176.113.115.155:427
176.113.115.155:430
176.113.115.156:420
176.113.115.156:427
176.113.115.156:430
176.113.115.157:420
176.113.115.157:427
176.113.115.157:430
176.113.115.158:483
176.113.115.158:484
176.113.115.158:486
80.66.75.4:420
80.66.75.4:427
80.66.75.4:430

# Reference: https://www.virustotal.com/gui/file/9aad941badbf8f169e0aa104d37f8299aab0a4b34112602447e4b72850e93110/detection

185.7.214.171:424
185.7.214.210:424
185.7.214.212:424
193.56.146.146:480
193.56.146.146:486
193.56.146.250:424
193.56.146.251:424
193.56.146.252:424

# Reference: https://www.virustotal.com/gui/file/dca12909c44dcfc264d795756e4e6e1b5af851fc2482d08f176c04dc27e0e124/detection

144.76.199.2:430
144.76.199.43:430
176.111.49.43:430
81.31.201.152:43594
85.25.119.25:430

# Reference: https://www.virustotal.com/gui/file/fa8aae19b41c3bebd0cf59e67336b40e3c1a36e8461d205af28cec856145405b/detection

176.113.115.153:416
176.113.115.153:431
176.113.115.154:416
176.113.115.154:431
176.113.115.155:416
176.113.115.155:431
176.113.115.156:416
176.113.115.156:431
176.113.115.157:416
176.113.115.157:431
176.113.115.158:480
176.113.115.158:487
80.66.75.4:416
80.66.75.4:431

# Reference: https://www.virustotal.com/gui/file/00190fcf5317e95bc62eab5b139e619c2ea19b2347c4c789f730ddfe96a3e92c/detection

176.113.115.153:422
176.113.115.153:428
176.113.115.154:422
176.113.115.154:428
176.113.115.155:422
176.113.115.155:428
176.113.115.156:422
176.113.115.156:428
176.113.115.157:422
176.113.115.157:428
185.215.113.38:424
185.215.113.38:425
185.244.41.156:424
185.7.214.51:480
31.41.244.82:422
31.41.244.82:428
31.41.244.85:422
31.41.244.85:428
62.204.41.23:422
62.204.41.23:428
62.204.41.24:422
62.204.41.24:428
62.204.41.25:422
62.204.41.25:428
62.204.41.48:424
80.66.75.4:422
80.66.75.4:428
91.243.33.254:484
91.243.33.254:486
91.243.33.5:422
91.243.33.5:424
91.243.33.5:425
91.243.33.5:428

# Reference: https://www.virustotal.com/gui/file/a6bd696d8e6445e1e2703a1a47988edb06ad012f9e4f0132e736b3a34df75777/detection

176.113.115.153:417
176.113.115.153:420
176.113.115.154:417
176.113.115.154:420
176.113.115.155:417
176.113.115.155:420
176.113.115.156:417
176.113.115.156:420
176.113.115.157:417
176.113.115.157:420
176.113.115.158:481
176.113.115.158:484
185.246.220.218:443
80.66.75.4:417

# Reference: https://app.any.run/tasks/e2abfc94-ea30-41c0-a816-df47963340d1/
# Reference: https://www.virustotal.com/gui/file/00076ee13b9542c8118745c7efca55f9ba6d671d0367cd52d7514c5484aaf942/detection

176.113.115.135:422
176.113.115.135:431
176.113.115.136:422
176.113.115.136:431
176.113.115.239:422
176.113.115.239:431
176.113.115.239:8080
183.79.223.249:465
31.41.244.81:419
31.41.244.81:421
31.41.244.82:419
31.41.244.82:421
31.41.244.83:419
31.41.244.83:421
31.41.244.84:419
31.41.244.84:421
31.41.244.85:419
31.41.244.85:421
80.66.75.254:486
80.66.75.254:487
91.243.33.254:483
91.243.33.254:485
91.243.33.4:424
91.243.33.5:419
91.243.33.5:421

# Reference: https://www.virustotal.com/gui/file/07f60737add24d8238a6e2846165a512d8b7a0b36410f24d02608721b7ada1dc/detection

http://176.113.115.239

# Reference: https://www.virustotal.com/gui/file/1536347be27128f25522a9b720f2f987507f9138eb84453103507ebea56eb6e5/detection

193.56.146.41:431
193.56.146.42:431
193.56.146.43:431
213.227.140.23:431
5.61.37.41:431
95.216.195.92:431

# Reference: https://www.virustotal.com/gui/file/002a4246be4001cc2fb7f2e68c52feac96653f27c128035c034ace04c65b7311/detection

176.113.115.135:416
176.113.115.136:416
176.113.115.239:416
176.113.115.84:416
45.143.201.238:416
80.66.75.254:480

# Reference: https://app.any.run/tasks/a89659cc-085d-426c-8b9b-dedaa559858a/

176.113.115.135:429
176.113.115.136:429
176.113.115.84:429
176.113.115.85:429
45.143.201.238:429
62.122.184.58:485
62.122.184.92:429
80.66.75.4:429

# Reference: https://www.virustotal.com/gui/file/a53033c9b2f99fd0e41a3d994974f6e22015af2d1ee5c197368d32a36a8d6791/detection

185.49.68.143:417
185.49.68.143:431
193.56.146.188:481
193.56.146.188:487
193.56.146.41:417
193.56.146.42:417
193.56.146.43:417
77.222.55.43:417
77.222.55.43:431

# Reference: https://www.virustotal.com/gui/file/23b9847bd7311fabec83cecc885228a3754cfceba5420d50120934ea2a668920/detection

176.113.115.153:419
176.113.115.154:419
176.113.115.155:419
176.113.115.156:419
176.113.115.157:419
80.66.75.4:419

# Reference: https://www.virustotal.com/gui/file/a58866eb30533df161551a3264e8f9d37db52e9e018023ee9301c50b1efd7a74/detection

45.9.20.178:430
45.9.20.179:430
45.9.20.187:430

# Reference: https://threatfox.abuse.ch/browse/malware/win.tofsee/ (# 2023-10-01)

144.76.108.82:430
172.82.190.178:426
185.16.40.157:427
185.161.248.127:416
185.183.162.195:427
185.215.113.58:443
185.49.70.93:426
188.130.209.2:483
195.242.110.99:430
212.22.87.191:486
217.172.179.54:430
31.192.237.6:426
31.42.189.81:426
47.251.38.135:443
51.178.207.67:430
54.36.100.25:427
87.251.71.150:427
87.251.71.150:430
91.203.5.144:430
92.38.171.179:426
95.179.157.19:482
95.181.178.110:426
muspelheim.be
nidavellir.top
niflheimr.cn
rgtryhbgddtyh.biz
ronaldo7streams.blogspot.com
vanaheim.cn
wertdghbyrukl.ch

# Reference: https://www.virustotal.com/gui/file/67fad958b447509b27fc54262297238a6f3e45ed73b0403e8aa07aa2b24d7d7f/detection

5.9.32.166:484

# Reference: https://www.virustotal.com/gui/file/12e27e1a67fc0d17cc63769b910b080786f517c0e4f01e545f5698e9162341fc/detection

45.9.20.177:443
45.9.20.177:486
51.158.144.223:430
91.219.63.95:430

# Reference: https://www.virustotal.com/gui/file/49b527dacc10e6d0e9d2924ecc4e59a8d727d5a2eb89aea324d303f4c8e7ba28/detection

185.101.158.33:21

# Reference: https://www.virustotal.com/gui/file/0a00671012b4cc6d328abe79ae061427f25595a5996d78dba6522d13abb23647/detection

176.111.174.92:416
176.113.115.225:416
193.143.1.5:416
213.109.202.188:416
83.97.73.44:416

# Reference: https://www.virustotal.com/gui/file/e614441409a7a5a9bcec809ffc695dd19c71ac2d3eaf240b6b8d50acfefbb412/detection

176.113.115.135:420
176.113.115.135:430
176.113.115.136:420
176.113.115.136:430
176.113.115.225:420
176.113.115.84:420
176.113.115.84:430
193.143.1.5:420
193.143.1.5:430
45.143.201.238:420
45.143.201.238:430
80.66.75.11:484
83.97.73.44:420
83.97.73.44:430

# Reference: https://www.virustotal.com/gui/file/dda4901dc20eff090c140eefaf21307535ce1620be5329baaeb3dbd4d62b9fa2/detection

176.113.115.84:417
176.113.115.84:431
193.143.1.5:417
193.143.1.5:431
45.143.201.238:431
80.66.75.11:481
83.97.73.44:431

# Reference: https://www.virustotal.com/gui/file/c7237e407b491e30d0f144969b225b91a1586bc66e12f2256ef2cd2b826888ee/detection

176.111.174.92:423
176.113.115.135:417
176.113.115.135:423
176.113.115.135:424
176.113.115.136:417
176.113.115.136:423
176.113.115.136:424
176.113.115.225:424
176.113.115.84:423
176.113.115.84:424
193.143.1.5:423
193.143.1.5:424
213.109.202.188:423
45.143.201.238:417
45.143.201.238:423
45.143.201.238:424
80.66.75.11:480
83.97.73.44:417
83.97.73.44:424

# Reference: https://www.virustotal.com/gui/file/a3a289c9219af271b7e7282f07f746bf0545985427436049728547a5e0ba4ab6/detection

176.113.115.135:428
176.113.115.136:428
176.113.115.225:430
176.113.115.84:428
193.143.1.5:428
45.143.201.238:428
80.66.75.11:486
83.97.73.44:428

# Reference: https://www.virustotal.com/gui/file/a25c1b1fb5eb977ad8232e559bc8ebd06a738eb900b524100d156d94da47adb0/detection

176.113.115.225:417

# Reference: https://www.virustotal.com/gui/file/9dc3cce3ecaa1992fbc781a6029cb6e4119ace31c6acf08fe1d033b30a8dc85c/detection

176.113.115.135:418
176.113.115.136:418
176.113.115.225:429
176.113.115.84:418
193.143.1.5:418
193.143.1.5:429
45.143.201.238:418
80.66.75.11:482
80.66.75.11:485
83.97.73.44:418
83.97.73.44:429

# Reference: https://www.virustotal.com/gui/file/36ec5f7dc0c4ca8cbf221e29140f3537bdfb346c9527a7503206122d58dac470/detection

176.113.115.225:418

# Reference: https://www.virustotal.com/gui/file/2f9c9ce20410a27d2b9c6b75821899812daf14d07aa20b877c661cee71beb749/detection

176.113.115.135:426
176.113.115.135:427
176.113.115.136:426
176.113.115.136:427
176.113.115.225:427
176.113.115.84:426
176.113.115.84:427
193.143.1.5:426
193.143.1.5:427
45.143.201.238:426
45.143.201.238:427
80.66.75.11:483
83.97.73.44:426
83.97.73.44:427

# Reference: https://www.virustotal.com/gui/file/56b19794ce4b1df0c754a6a480a9bf59d030ce929cfc8140d1b822d79e7f3ef6/detection

185.215.113.38:427
185.244.41.156:427
185.7.214.210:427
185.7.214.51:487
62.204.41.45:483
62.204.41.46:427
62.204.41.48:423
62.204.41.48:427
91.243.33.5:427

# Reference: https://www.virustotal.com/gui/file/513c6eefa2a3097a951ee0deac651116fd9b14578df1397a6d5ecb75a9e19b1f/detection

http://103.15.106.221
http://130.185.108.137
http://93.115.25.110
185.147.125.145:427
185.147.125.145:431
185.147.125.146:427
185.147.125.146:431
185.147.125.147:427
185.147.125.147:431
185.243.96.106:427
185.243.96.106:431
185.42.12.45:427
185.42.12.45:431
185.7.214.51:427
185.7.214.51:431

# Reference: https://x.com/skocherhan/status/1924949074543079708
# Reference: https://www.virustotal.com/gui/file/02e86f24f42157fd8cc31cfee28f3ca3832f5192814a20e2a546f91bda412972/detection

http://111.121.193.238
http://188.190.114.21
185.11.61.15:427
185.11.61.16:427
185.156.72.27:427
185.156.72.58:427
185.42.12.21:427
185.7.214.57:483

# Reference: https://x.com/abuse_ch/status/2044133378560029111
# Reference: https://x.com/BlinkzSec/status/2054999308915679643
# Reference: https://www.virustotal.com/gui/file/ddb25d7d4afe95a5ca96985565e5b0d14240f8d5122c20243facccc77796da9b/detection
# Reference: https://www.virustotal.com/gui/file/f5f579608320fe1b8b681ddb371cb78a18118c187722a4dbba1a1dd11aec611b/detection
# Reference: https://www.virustotal.com/gui/file/ee59448fcaeb7f23be8b251162bad586186963a6a7f66e7757b3603c84567c18/detection
# Reference: https://www.virustotal.com/gui/file/d9af86b525749fa635e1e0df2c7307be990ea226a281c9d4d85beb480c44fdc8/detection
# Reference: https://www.virustotal.com/gui/file/d088597ce92e428f6aef6323138c334406399f4205f20e8636e97ee915ed9a32/detection
# Reference: https://www.virustotal.com/gui/file/805b8a769266da2e8fa8204eeba08bd9d2a2ec7057e445a5a2e08864e83808c5/detection
# Reference: https://www.virustotal.com/gui/file/6e52721f01bb16b3d35dd4848ec401e76fb93e2b9521c7103f98ad72ca129fb2/detection
# Reference: https://www.virustotal.com/gui/file/237bfd3f9e423e7aec957f62fbaa8a889d95cabb242b8bdf96967e8410e32899/detection
# Reference: https://www.virustotal.com/gui/file/13dd0eccccc0b1662d696940a4e53bd24c4a0cc4233ea3b54c4f1324b9dc4ef1/detection
# FAVICON_HASH-HOST=203c5a5efaacf524222e38b8a78c7542
# FAVICON_HASH-HOST=d0cb84cd600892a611c127b299a08d45
# TITLE-IP=Сетевой монитор за 3 дня

http://194.28.226.45
130.12.180.119:428
130.12.182.175:417
130.12.182.175:421
130.12.182.175:423
130.12.182.175:424
130.12.182.175:425
130.12.182.175:428
130.12.182.175:430
130.12.182.175:431
130.12.182.175:8080
176.65.148.55:8080
176.65.150.25:8080
204.76.203.162:428
204.76.203.162:8080
204.76.203.165:8080
217.60.241.17:417
217.60.241.17:421
217.60.241.17:423
217.60.241.17:424
217.60.241.17:425
217.60.241.17:430
217.60.241.17:431
217.60.241.17:8080
217.60.241.8:8080
31.57.216.27:417
31.57.216.27:421
31.57.216.27:423
31.57.216.27:424
31.57.216.27:425
31.57.216.27:428
31.57.216.27:430
31.57.216.27:431
31.57.216.28:417
31.57.216.28:421
31.57.216.28:423
31.57.216.28:424
31.57.216.28:425
31.57.216.28:428
31.57.216.28:430
31.57.216.28:431
46.151.182.19:417
46.151.182.19:421
46.151.182.19:424
46.151.182.19:428
46.151.182.19:430
46.151.182.19:431
46.151.182.19:8080
46.151.182.245:417
46.151.182.245:421
46.151.182.245:424
46.151.182.245:428
46.151.182.245:430
46.151.182.245:431
62.122.184.92:424
62.122.184.92:431
64.89.161.178:480
64.89.161.178:481
64.89.161.178:484
64.89.161.178:485
64.89.161.178:486
80.66.75.4:424
83.142.209.228:417
83.142.209.228:421
83.142.209.228:423
83.142.209.228:424
83.142.209.228:425
83.142.209.228:430
83.142.209.228:431
91.107.157.58:8000
4ysmgauoic60uoicwqke82wqkeysmga4ysmgauoic60uoicwq.com
52ecy.com
5g.sybbdh81.top
8897857857.top
8897857857.vip
8897857857.xyz
a1b2c3d4.xycn32.buzz
adept-vormgeving.com
ai.eeoo.cn
air-ce.icu
air-ig.vip
air-le.vip
air-lg.icu
anyedh.net
app.dljzy23.top
baonaruihz.com
beta.dljzy23.top
cgqbz.top
cgqbz1.top
cgqbz10.top
cgqbz11.top
cgqbz12.top
cgqbz13.top
cgqbz14.top
cgqbz15.top
cgqbz16.top
cgqbz17.top
cgqbz18.top
cgqbz19.top
cgqbz2.top
cgqbz20.top
cgqbz21.top
cgqbz22.top
cgqbz23.top
cgqbz24.top
cgqbz25.top
cgqbz26.top
cgqbz27.top
cgqbz28.top
cgqbz29.top
cgqbz3.top
cgqbz30.top
cgqbz31.top
cgqbz32.top
cgqbz33.top
cgqbz34.top
cgqbz35.top
cgqbz36.top
cgqbz37.top
cgqbz38.top
cgqbz39.top
cgqbz4.top
cgqbz40.top
cgqbz41.top
cgqbz42.top
cgqbz43.top
cgqbz46.top
cgqbz5.top
cgqbz6.top
cgqbz7.top
cgqbz8.top
cgqbz9.top
chat.eeoo.cn
dljzy.top
dljzy1.top
dljzy10.top
dljzy11.top
dljzy12.top
dljzy13.top
dljzy14.top
dljzy15.top
dljzy16.top
dljzy17.top
dljzy18.top
dljzy19.top
dljzy2.top
dljzy20.top
dljzy21.top
dljzy22.top
dljzy23.top
dljzy24.top
dljzy25.top
dljzy26.top
dljzy27.top
dljzy28.top
dljzy29.top
dljzy3.top
dljzy30.top
dljzy31.top
dljzy32.top
dljzy33.top
dljzy34.top
dljzy35.top
dljzy36.top
dljzy37.top
dljzy38.top
dljzy39.top
dljzy4.top
dljzy40.top
dljzy42.top
dljzy43.top
dljzy44.top
dljzy5.top
dljzy6.top
dljzy7.top
dljzy8.top
dljzy9.top
doc.eeoo.cn
eeoo.cn
foodfouryou.com
gkzn1.top
gkzn10.top
gkzn11.top
gkzn12.top
gkzn13.top
gkzn14.top
gkzn15.top
gkzn16.top
gkzn17.top
gkzn18.top
gkzn19.top
gkzn2.top
gkzn20.top
gkzn21.top
gkzn22.top
gkzn23.top
gkzn24.top
gkzn25.top
gkzn26.top
gkzn27.top
gkzn28.top
gkzn29.top
gkzn3.top
gkzn30.top
gkzn31.top
gkzn32.top
gkzn33.top
gkzn34.top
gkzn35.top
gkzn36.top
gkzn37.top
gkzn4.top
gkzn40.top
gkzn41.top
gkzn42.top
gkzn43.top
gkzn44.top
gkzn47.top
gkzn5.top
gkzn7.top
gkzn8.top
gkzn9.top
hlcsm1.top
hlcsm10.top
hlcsm11.top
hlcsm12.top
hlcsm13.top
hlcsm14.top
hlcsm15.top
hlcsm16.top
hlcsm17.top
hlcsm18.top
hlcsm19.top
hlcsm2.top
hlcsm20.top
hlcsm21.top
hlcsm22.top
hlcsm23.top
hlcsm24.top
hlcsm25.top
hlcsm26.top
hlcsm27.top
hlcsm28.top
hlcsm29.top
hlcsm3.top
hlcsm30.top
hlcsm31.top
hlcsm32.top
hlcsm33.top
hlcsm34.top
hlcsm35.top
hlcsm36.top
hlcsm37.top
hlcsm38.top
hlcsm39.top
hlcsm4.top
hlcsm40.top
hlcsm41.top
hlcsm42.top
hlcsm43.top
hlcsm45.top
hlcsm46.top
hlcsm5.top
hlcsm6.top
hlcsm7.top
hlcsm8.top
hlcsm9.top
krcyh.com
love.yy.mba
m0.xycn11.cc
m0.xycn20.cc
m1.xycn12.cc
m1.xycn21.cc
m1.xycn30.cc
m2.xycn13.cc
m2.xycn22.cc
m2.xycn31.cc
m2.xycn40.cc
m3.xycn14.cc
m3.xycn23.cc
m3.xycn32.cc
m3.xycn41.cc
m4.xycn15.cc
m4.xycn24.cc
m4.xycn33.cc
m4.xycn42.cc
m5.xycn16.cc
m5.xycn25.cc
m5.xycn34.cc
m6.xycn17.cc
m6.xycn26.cc
m6.xycn35.cc
m7.xycn18.cc
m7.xycn27.cc
m7.xycn36.cc
m8.xycn19.cc
m8.xycn28.cc
m8.xycn37.cc
m9.xycn29.cc
m9.xycn38.cc
ma.xycn39.cc
mjrk1.top
mjrk10.top
mjrk11.top
mjrk12.top
mjrk13.top
mjrk14.top
mjrk15.top
mjrk16.top
mjrk17.top
mjrk18.top
mjrk19.top
mjrk2.top
mjrk20.top
mjrk21.top
mjrk22.top
mjrk23.top
mjrk24.top
mjrk25.top
mjrk26.top
mjrk29.top
mjrk3.top
mjrk30.top
mjrk31.top
mjrk32.top
mjrk33.top
mjrk34.top
mjrk35.top
mjrk36.top
mjrk37.top
mjrk38.top
mjrk39.top
mjrk4.top
mjrk40.top
mjrk41.top
mjrk42.top
mjrk43.top
mjrk45.top
mjrk46.top
mjrk47.top
mjrk48.top
mjrk49.top
mjrk5.top
mjrk6.top
mjrk7.top
mjrk8.top
mjrk9.top
mnm3smnm3s.sybbdh36.top
mollyspix.com
mx1.dljzy23.top
o8.mjrk3.top
ob.mjrk6.top
oc.mjrk7.top
od.gkzn2.top
od.mjrk8.top
oe.gkzn3.top
oe.mjrk9.top
og.gkzn5.top
oi.gkzn7.top
oj.gkzn8.top
ok.gkzn9.top
pe40.com
pj.mjrk11.top
pj.mjrk20.top
pk.mjrk12.top
pk.mjrk21.top
pl.mjrk13.top
pl.mjrk22.top
pl.mjrk31.top
pl.mjrk40.top
pm.mjrk14.top
pm.mjrk23.top
pm.mjrk32.top
pm.mjrk41.top
pn.mjrk24.top
pn.mjrk33.top
po.gkzn10.top
po.mjrk16.top
po.mjrk25.top
po.mjrk34.top
po.mjrk43.top
pop.cgqbz17.top
pp.gkzn11.top
pp.gkzn20.top
pp.mjrk17.top
pp.mjrk35.top
pq.gkzn12.top
pq.gkzn21.top
pq.gkzn30.top
pq.mjrk18.top
pq.mjrk36.top
pr.gkzn13.top
pr.gkzn22.top
pr.gkzn31.top
pr.gkzn40.top
pr.mjrk19.top
pr.mjrk37.top
pr.mjrk46.top
ps.gkzn14.top
ps.gkzn23.top
ps.gkzn41.top
ps.mjrk29.top
ps.mjrk38.top
ps.mjrk47.top
pt.gkzn15.top
pt.gkzn24.top
pt.gkzn33.top
pt.gkzn42.top
pu.gkzn25.top
pu.gkzn34.top
pu.gkzn43.top
pu.mjrk49.top
puremarula.com
pv.gkzn17.top
pv.gkzn26.top
pv.gkzn35.top
pw.gkzn18.top
pw.gkzn27.top
pw.gkzn36.top
pw.gkzn45.top
px.gkzn19.top
px.gkzn28.top
px.gkzn37.top
py.gkzn29.top
py.gkzn38.top
py.gkzn47.top
pz.gkzn39.top
qy.cgqbz2.top
qy.hlcsm2.top
qz.cgqbz3.top
qz.hlcsm3.top
r0.cgqbz4.top
r0.hlcsm4.top
r1.hlcsm5.top
r2.cgqbz6.top
r2.hlcsm6.top
r3.cgqbz7.top
r3.hlcsm7.top
r4.cgqbz8.top
r5.cgqbz9.top
r5.hlcsm9.top
r5.wbfls2.top
r6.wbfls3.top
r7.wbfls4.top
r8.wbfls5.top
r9.wbfls6.top
rb.wbfls8.top
rc.wbfls9.top
rm.dljzy4.top
rn.dljzy5.top
ro.dljzy6.top
root.dljzy23.top
rr.dljzy9.top
ru.cgqbz12.top
rz.syhlz4.top
s0.syhlz5.top
s1.syhlz6.top
s2.syhlz7.top
s3.syhlz8.top
s4.syhlz9.top
s9.cgqbz10.top
s9.hlcsm10.top
sa.cgqbz11.top
sa.hlcsm11.top
sa.hlcsm20.top
sb.cgqbz12.top
sb.cgqbz21.top
sb.cgqbz30.top
sb.hlcsm12.top
sb.hlcsm21.top
sb.hlcsm30.top
sc.cgqbz22.top
sc.cgqbz31.top
sc.hlcsm13.top
sc.hlcsm22.top
sc.hlcsm31.top
sc.hlcsm40.top
sd.cgqbz23.top
sd.cgqbz32.top
sd.cgqbz41.top
sd.hlcsm23.top
sd.hlcsm32.top
sd.hlcsm41.top
se.cgqbz15.top
se.cgqbz33.top
se.cgqbz42.top
se.hlcsm15.top
se.hlcsm24.top
se.hlcsm33.top
se.hlcsm42.top
sf.cgqbz16.top
sf.hlcsm16.top
sf.hlcsm25.top
sf.hlcsm34.top
sg.cgqbz17.top
sg.cgqbz26.top
sg.cgqbz35.top
sg.cgqbz44.top
sg.hlcsm17.top
sg.hlcsm26.top
sg.hlcsm35.top
sh.cgqbz18.top
sh.cgqbz27.top
sh.cgqbz36.top
sh.hlcsm18.top
sh.hlcsm45.top
sh.wbfls11.top
sh.wbfls20.top
si.cgqbz19.top
si.cgqbz37.top
si.hlcsm19.top
si.hlcsm28.top
si.hlcsm37.top
si.hlcsm46.top
sj.cgqbz29.top
sj.cgqbz38.top
sj.hlcsm29.top
sj.wbfls31.top
sk.cgqbz39.top
sk.hlcsm39.top
sk.wbfls14.top
sk.wbfls23.top
sk.wbfls32.top
sk.wbfls41.top
sl.wbfls15.top
sl.wbfls24.top
sl.wbfls33.top
sl.wbfls42.top
sm.wbfls16.top
sm.wbfls34.top
sm.wbfls43.top
sn.wbfls17.top
sn.wbfls26.top
sn.wbfls44.top
so.wbfls18.top
so.wbfls27.top
so.wbfls36.top
sp.wbfls19.top
sp.wbfls28.top
sp.wbfls37.top
sq.wbfls29.top
sv.dljzy10.top
sw.dljzy11.top
sw.dljzy20.top
sx.dljzy12.top
sx.dljzy30.top
sy.dljzy13.top
sy.dljzy22.top
sy.dljzy31.top
sybbdh.top
sybbdh12.top
sybbdh13.top
sybbdh14.top
sybbdh16.top
sybbdh17.top
sybbdh18.top
sybbdh19.top
sybbdh22.top
sybbdh24.top
sybbdh26.top
sybbdh29.top
sybbdh30.top
sybbdh31.top
sybbdh32.top
sybbdh33.top
sybbdh34.top
sybbdh35.top
sybbdh36.top
sybbdh37.top
sybbdh38.top
sybbdh39.top
sybbdh4.top
sybbdh40.top
sybbdh41.top
sybbdh42.top
sybbdh43.top
sybbdh44.top
sybbdh45.top
sybbdh46.top
sybbdh47.top
sybbdh48.top
sybbdh49.top
sybbdh5.top
sybbdh50.top
sybbdh51.top
sybbdh52.top
sybbdh53.top
sybbdh54.top
sybbdh55.top
sybbdh56.top
sybbdh57.top
sybbdh58.top
sybbdh59.top
sybbdh60.top
sybbdh61.top
sybbdh62.top
sybbdh63.top
sybbdh64.top
sybbdh65.top
sybbdh66.top
sybbdh67.top
sybbdh68.top
sybbdh69.top
sybbdh70.top
sybbdh71.top
sybbdh72.top
sybbdh73.top
sybbdh74.top
sybbdh75.top
sybbdh76.top
sybbdh77.top
sybbdh78.top
sybbdh79.top
sybbdh8.top
sybbdh80.top
sybbdh81.top
sybbdh82.top
sybbdh83.top
sybbdh84.top
sybbdh85.top
sybbdh86.top
sybbdh87.top
sybbdh88.top
sybbdh89.top
sybbdh90.top
sybbdh91.top
sybbdh92.top
sybbdh93.top
sybbdh95.top
sybbdh97.top
syhlz.top
syhlz1.top
syhlz10.top
syhlz11.top
syhlz12.top
syhlz13.top
syhlz14.top
syhlz15.top
syhlz16.top
syhlz17.top
syhlz18.top
syhlz19.top
syhlz2.top
syhlz20.top
syhlz21.top
syhlz22.top
syhlz23.top
syhlz24.top
syhlz25.top
syhlz26.top
syhlz27.top
syhlz28.top
syhlz29.top
syhlz3.top
syhlz30.top
syhlz31.top
syhlz32.top
syhlz33.top
syhlz34.top
syhlz35.top
syhlz36.top
syhlz37.top
syhlz38.top
syhlz4.top
syhlz40.top
syhlz41.top
syhlz42.top
syhlz45.top
syhlz46.top
syhlz5.top
syhlz6.top
syhlz7.top
syhlz8.top
syhlz9.top
sz.dljzy14.top
sz.dljzy23.top
sz.dljzy32.top
sz.dljzy41.top
t0.dljzy15.top
t1.dljzy16.top
t1.dljzy34.top
t2.dljzy17.top
t2.dljzy26.top
t2.dljzy35.top
t3.dljzy18.top
t3.dljzy36.top
t4.dljzy19.top
t5.dljzy29.top
t5.dljzy38.top
t9.syhlz11.top
t9.syhlz20.top
t9.xycn20.buzz
ta.syhlz12.top
ta.syhlz21.top
ta.syhlz30.top
ta.xycn21.buzz
ta.xycn30.buzz
tb-ajx.vip
tb.syhlz13.top
tb.syhlz22.top
tb.syhlz31.top
tb.xycn22.buzz
tb.xycn31.buzz
tc.syhlz14.top
tc.syhlz32.top
tc.xycn23.buzz
tc.xycn32.buzz
td.syhlz15.top
td.syhlz24.top
td.syhlz33.top
td.syhlz42.top
td.xycn24.buzz
td.xycn33.buzz
te.syhlz25.top
te.syhlz34.top
te.xycn25.buzz
te.xycn34.buzz
test.chat.eeoo.cn
tf.syhlz26.top
tf.syhlz35.top
tf.xycn26.buzz
tf.xycn35.buzz
tg.syhlz18.top
tg.syhlz27.top
tg.syhlz36.top
tg.syhlz45.top
tg.xycn27.buzz
tg.xycn36.buzz
th.xycn28.buzz
ti.syhlz29.top
ti.syhlz38.top
ti.xycn29.buzz
tj.syhlz39.top
v7.sybbdh60.top
v8.sybbdh61.top
v8.sybbdh70.top
v9.sybbdh53.top
v9.sybbdh62.top
v9.sybbdh71.top
v9.sybbdh80.top
va.sybbdh54.top
va.sybbdh63.top
va.sybbdh72.top
va.sybbdh81.top
va.sybbdh90.top
vb.sybbdh55.top
vb.sybbdh64.top
vb.sybbdh82.top
vb.sybbdh91.top
vc.sybbdh56.top
vc.sybbdh65.top
vc.sybbdh74.top
vd.sybbdh66.top
vd.sybbdh84.top
ve.sybbdh58.top
ve.sybbdh67.top
ve.sybbdh76.top
ve.sybbdh85.top
vf.sybbdh68.top
vf.sybbdh77.top
vf.sybbdh86.top
vg.sybbdh69.top
vg.sybbdh78.top
vg.sybbdh87.top
vg.sybbdh96.top
vh.sybbdh79.top
vh.sybbdh88.top
vh.sybbdh97.top
wbfls.top
wbfls1.top
wbfls10.top
wbfls11.top
wbfls12.top
wbfls13.top
wbfls14.top
wbfls15.top
wbfls16.top
wbfls17.top
wbfls18.top
wbfls19.top
wbfls2.top
wbfls20.top
wbfls21.top
wbfls22.top
wbfls23.top
wbfls24.top
wbfls25.top
wbfls26.top
wbfls27.top
wbfls28.top
wbfls29.top
wbfls3.top
wbfls30.top
wbfls31.top
wbfls32.top
wbfls33.top
wbfls34.top
wbfls35.top
wbfls36.top
wbfls37.top
wbfls38.top
wbfls39.top
wbfls4.top
wbfls41.top
wbfls42.top
wbfls43.top
wbfls45.top
wbfls46.top
wbfls5.top
wbfls6.top
wbfls7.top
wbfls8.top
wbfls9.top
xb-aaa.pages.dev
xycn10.buzz
xycn11.buzz
xycn11.cc
xycn12.buzz
xycn12.cc
xycn13.buzz
xycn13.cc
xycn14.buzz
xycn14.cc
xycn15.buzz
xycn15.cc
xycn16.buzz
xycn16.cc
xycn17.buzz
xycn17.cc
xycn18.buzz
xycn18.cc
xycn19.cc
xycn20.buzz
xycn20.cc
xycn21.buzz
xycn21.cc
xycn22.buzz
xycn22.cc
xycn23.buzz
xycn23.cc
xycn24.buzz
xycn24.cc
xycn25.buzz
xycn25.cc
xycn26.buzz
xycn26.cc
xycn27.buzz
xycn27.cc
xycn28.buzz
xycn28.cc
xycn29.buzz
xycn29.cc
xycn30.buzz
xycn30.cc
xycn31.buzz
xycn31.cc
xycn32.buzz
xycn32.cc
xycn33.buzz
xycn33.cc
xycn34.buzz
xycn34.cc
xycn35.buzz
xycn35.cc
xycn36.buzz
xycn36.cc
xycn37.cc
xycn38.cc
xycn39.cc
xycn40.cc
xycn41.cc
xycn42.cc
xycn5.buzz
xycn6.buzz
xycn7.buzz
xycn9.buzz
yy.mba

# Reference: https://x.com/BlinkzSec/status/2043992070797341025
# Reference: https://www.virustotal.com/gui/file/5ec30eee79375992113484eb74be32aa78cbc2ddc1f7d59cd1f06c54cd916d4c/detection

fkpuzejoty38dinsxchmrw16bglqvafkpuz49ejotydinsx27chmrwbglq.com
jshjow6llfdr7jib0cmxfecigibb0ozbf0p3zd5rffqr77t.com
