payload: - '+.1q2w3.fun' - '+.abc.pema.cl' - '+.acbp0020171456.page.tl' - '+.ad-miner.com' - '+.adminer.com' - '+.aeros01.tk' - '+.aeros02.tk' - '+.aeros11.tk' - '+.aeros12.tk' - '+.afminer.com' - '+.analytics.blue' - '+.andlache.com' - '+.anybest.pw' - '+.api.inwemo.com' - '+.as.cfcdist.loan' - '+.ashgrrwt.click' - '+.authedmine.com' - '+.authedmine.eu' - '+.authedwebmine.cz' - '+.autologica.ga' - '+.axoncoho.tk' - '+.bablace.com' - '+.bafybeidravcab5p3acvthxtwosm4rfpl4yypwwm52s7sazgxaezfzn5xn4.ipfs.infura-ipfs.io' - '+.baiduccdn1.com' - '+.becanium.com' - '+.berateveng.ru' - '+.besocial.online' - '+.bestcoinsignals.com' - '+.besti.ga' - '+.bestsrv.de' - '+.bewaslac.com' - '+.biberukalap.com' - '+.binarybusiness.de' - '+.bitcoin-cashcard.com' - '+.bitcoin-cashcard.de' - '+.bitcoin-cashcard.eu' - '+.bitcoin-pay.eu' - '+.bitcoin-pocket.de' - '+.bitcoin-pocket.eu' - '+.bmcm.ml' - '+.bmcm.pw' - '+.bmnr.pw' - '+.bmst.pw' - '+.brominer.com' - '+.browsermine.com' - '+.candid.zone' - '+.cashbeet.com' - '+.cdn.adless.io' - '+.cdn.cloudcoins.co' - '+.cdn1.pebx.pl' - '+.cdnjs.cloudflane.com' - '+.cfcdist.gdn' - '+.clgserv.pro' - '+.cloud-miner.de' - '+.cloud-miner.eu' - '+.cloudcdn.gdn' - '+.cnhv.co' - '+.cnt.statistic.date' - '+.coin-have.com' - '+.coinblind.com' - '+.coinerra.com' - '+.coinhiveproxy.com' - '+.coinminingonline.com' - '+.coinnebula.com' - '+.coinpirate.cf' - '+.coinpot.co' - '+.coinrail.io' - '+.contribute.to-support.me' - '+.cryptaloot.pro' - '+.crypto-loot.com' - '+.crypto-webminer.com' - '+.crypto.csgocpu.com' - '+.cryptoloot.pro' - '+.d.cpufan.club' - '+.dark-utilities.me' - '+.dark-utilities.pw' - '+.dark-utilities.xyz' - '+.de-mi-nis-ner.info' - '+.de-ner-mi-nis4.info' - '+.de-nis-ner-mi-5.info' - '+.depttake.ga' - '+.dev.cryptobara.com' - '+.digger.cryptobara.com' - '+.donttbeevils.de' - '+.dronml.ml' - '+.easyhash.de' - '+.eth-pocket.com' - '+.eth-pocket.de' - '+.eth-pocket.eu' - '+.ethereum-cashcard.com' - '+.ethereum-cashcard.de' - '+.ethereum-cashcard.eu' - '+.ethereum-pocket.com' - '+.ethereum-pocket.de' - '+.ethereum-pocket.eu' - '+.ethtrader.de' - '+.eu.cfcdist.loan' - '+.eucsoft.com' - '+.evilsbedont.de' - '+.exdynsrv.com' - '+.f1tbit.com' - '+.flare-analytics.com' - '+.flighty.win' - '+.flightzy.date' - '+.flightzy.win' - '+.formulawire.com' - '+.g1thub.com' - '+.ganymed.beeppool.org' - '+.gasolina.ml' - '+.go.bestmobiworld.com' - '+.go.fastspot.io' - '+.go.megabanners.cf' - '+.goldoffer.online' - '+.gramombird.com' - '+.gridiogrid.com' - '+.gxbrowser.net' - '+.hashing.win' - '+.hemnes.win' - '+.hhb123.tk' - '+.hide.ovh' - '+.hive.tubetitties.com' - '+.igrid.org' - '+.ijfcm7bu6ocerxsfq56ka3dtdanunyp4ytwk745b54agtravj2wr2qqd.onion.pet' - '+.ininmacerad.pro' - '+.intelserviceupdate.com' - '+.jqcdn01.herokuapp.com' - '+.jqcdn03.herokuapp.com' - '+.jqcdn2.herokuapp.com' - '+.js.nahnoji.cz' - '+.jscdndel.com' - '+.jscoinminer.com' - '+.jurty.ml' - '+.krb.devphp.org.ua' - '+.laserveradedomaina.com' - '+.ledhenone.com' - '+.lightminer.co' - '+.losital.ru' - '+.machieved.com' - '+.mail.ghmproperties.com' - '+.mail.itseasy.com' - '+.mail.shaferglazer.com' - '+.mail.techniservinc.com' - '+.mebablo.com' - '+.mepirtedic.com' - '+.mi-de-ner-nis3.info' - '+.mine.blank.drawpad.org' - '+.mine.nahnoji.cz' - '+.mine.terorie.com' - '+.mine.torrent.pw' - '+.minemytraffic.com' - '+.miner.beeppool.org' - '+.miner.cryptobara.com' - '+.miner.nablabee.com' - '+.miner.nimiq.com' - '+.minerad.com' - '+.minero-proxy-01.now.sh' - '+.minero-proxy-02.now.sh' - '+.minero-proxy-03.now.sh' - '+.minero.pw' - '+.minescripts.info' - '+.minexmr.stream' - '+.minr.pw' - '+.mm.zubovskaya-banya.ru' - '+.mon-deu-1.inf.nimiq.network' - '+.mon-deu-2.inf.nimiq.network' - '+.mon-deu-3.inf.nimiq.network' - '+.mon-fra-1.inf.nimiq.network' - '+.mon-fra-2.inf.nimiq.network' - '+.mon-gbr-1.inf.nimiq.network' - '+.monerominer.rocks' - '+.money-maker-default.info' - '+.mxcdn1.now.sh' - '+.mxcdn2.now.sh' - '+.my.domain' - '+.nametraff.com' - '+.nathetsof.com' - '+.nch-software.info' - '+.nerohut.com' - '+.nfwebminer.com' - '+.niematego.tk' - '+.nim.sh' - '+.nimiq.icemining.ca' - '+.nimiq.terorie.com' - '+.nimiqpool.com' - '+.nimwss-us-shark.lolopool.com' - '+.ninaning.com' - '+.nitrokod.com' - '+.nmq.zxnexus.com' - '+.node.nimiq.watch' - '+.npcdn1.now.sh' - '+.nvidia-graphics.top' - '+.nvidiacenter.com' - '+.ocean2.authcaptcha.com' - '+.offerreality.com' - '+.ogrid.org' - '+.okeyletsgo.ml' - '+.p.estream.to' - '+.panelsave.com' - '+.panger-top.click' - '+.papoto.com' - '+.party-vqgdyvoycc.now.sh' - '+.pearno.com' - '+.pertholin.com' - '+.play.estream.to' - '+.play.estream.xyz' - '+.play.istlandoll.com' - '+.play.mine.gay-hotvideo.net' - '+.play.nexioniect.com' - '+.play.on.animeteatr.ru' - '+.play.pampopholf.com' - '+.play.tercabilis.info' - '+.play.video2.stream.vidzi.tv' - '+.play.vidzi.tv' - '+.pool.hws.ru' - '+.pr0gram.org' - '+.premiumstats.xyz' - '+.proofly.win' - '+.proxy-can-1.inf.nimiq.network' - '+.proxy-deu-1.inf.nimiq.network' - '+.proxy-deu-2.inf.nimiq.network' - '+.proxy-fra-3.inf.nimiq.network' - '+.proxy-gbr-1.inf.nimiq.network' - '+.proxy-pol-1.inf.nimiq.network' - '+.proxy-pol-2.inf.nimiq.network' - '+.reauthenticator.com' - '+.renhertfo.com' - '+.roastedvolt.net' - '+.rock2.authcaptcha.com' - '+.rocks.io' - '+.s01.hostcontent.live' - '+.s03.hostcontent.live' - '+.s04.hostcontent.live' - '+.s05.hostcontent.live' - '+.s07.hostcontent.live' - '+.s100.hostcontent.live' - '+.s11.hostcontent.live' - '+.s12.hostcontent.live' - '+.s13.hostcontent.live' - '+.s3.pampopholf.com' - '+.sass2.authcaptcha.com' - '+.scaleway.ovh' - '+.sea2.authcaptcha.com' - '+.seed-1.nimiq-network.com' - '+.seed-1.nimiq.com' - '+.seed-1.nimiq.network' - '+.seed-10.nimiq-network.com' - '+.seed-10.nimiq.com' - '+.seed-10.nimiq.network' - '+.seed-11.nimiq-network.com' - '+.seed-11.nimiq.com' - '+.seed-11.nimiq.network' - '+.seed-12.nimiq-network.com' - '+.seed-12.nimiq.com' - '+.seed-12.nimiq.network' - '+.seed-13.nimiq-network.com' - '+.seed-13.nimiq.com' - '+.seed-13.nimiq.network' - '+.seed-14.nimiq-network.com' - '+.seed-14.nimiq.com' - '+.seed-14.nimiq.network' - '+.seed-15.nimiq-network.com' - '+.seed-15.nimiq.com' - '+.seed-15.nimiq.network' - '+.seed-16.nimiq-network.com' - '+.seed-16.nimiq.com' - '+.seed-16.nimiq.network' - '+.seed-17.nimiq-network.com' - '+.seed-17.nimiq.com' - '+.seed-17.nimiq.network' - '+.seed-18.nimiq-network.com' - '+.seed-18.nimiq.com' - '+.seed-18.nimiq.network' - '+.seed-19.nimiq-network.com' - '+.seed-19.nimiq.com' - '+.seed-19.nimiq.network' - '+.seed-2.nimiq-network.com' - '+.seed-2.nimiq.com' - '+.seed-2.nimiq.network' - '+.seed-20.nimiq-network.com' - '+.seed-20.nimiq.com' - '+.seed-20.nimiq.network' - '+.seed-3.nimiq-network.com' - '+.seed-3.nimiq.com' - '+.seed-3.nimiq.network' - '+.seed-4.nimiq-network.com' - '+.seed-4.nimiq.com' - '+.seed-4.nimiq.network' - '+.seed-5.nimiq-network.com' - '+.seed-5.nimiq.com' - '+.seed-5.nimiq.network' - '+.seed-6.nimiq-network.com' - '+.seed-6.nimiq.com' - '+.seed-6.nimiq.network' - '+.seed-7.nimiq-network.com' - '+.seed-7.nimiq.com' - '+.seed-7.nimiq.network' - '+.seed-8.nimiq-network.com' - '+.seed-8.nimiq.com' - '+.seed-8.nimiq.network' - '+.seed-9.nimiq-network.com' - '+.seed-9.nimiq.com' - '+.seed-9.nimiq.network' - '+.seed-can-1.inf.nimiq.network' - '+.seed-can-2.inf.nimiq.network' - '+.seed-deu-1.inf.nimiq.network' - '+.seed-deu-2.inf.nimiq.network' - '+.seed-deu-3.inf.nimiq.network' - '+.seed-deu-4.inf.nimiq.network' - '+.seed-fra-1.inf.nimiq.network' - '+.seed-fra-3.inf.nimiq.network' - '+.seed-gbr-1.inf.nimiq.network' - '+.seed-gbr-2.inf.nimiq.network' - '+.seed-pol-1.inf.nimiq.network' - '+.seed-pol-2.inf.nimiq.network' - '+.seed-pol-3.inf.nimiq.network' - '+.seed-pol-4.inf.nimiq.network' - '+.seed.nimiq.by' - '+.seed.nimiq.jp' - '+.serie-vostfr.com' - '+.serv1swork.com' - '+.service4refresh.info' - '+.silimbompom.com' - '+.site.flashx.cc' - '+.srcip.com' - '+.srcips.com' - '+.statdynamic.com' - '+.static.sparechange.io' - '+.staticsfs.host' - '+.stone2.authcaptcha.com' - '+.stonecalcom.com' - '+.str1kee.com' - '+.sunnimiq.cf' - '+.sunnimiq5.cf' - '+.sunnimiq6.cf' - '+.swiftmining.win' - '+.sxcdn02.now.sh' - '+.sxcdn1.herokuapp.com' - '+.sxcdn4.now.sh' - '+.sxcdn5.herokuapp.com' - '+.sxcdn6.now.sh' - '+.thewhizmarketing.com' - '+.thewhizproducts.com' - '+.thewise.com' - '+.traffic.tc-clicks.com' - '+.trustaproiam.de' - '+.trusteverything.de' - '+.tulip18.com' - '+.uoldid.ru' - '+.us.cfcdist.loan' - '+.vceilinichego.ru' - '+.video.streaming.estream.to' - '+.videoplayer2.xyz' - '+.vkcdnservice.com' - '+.vmi503011.contaboserver.net' - '+.vuryua.ru' - '+.webapi.salamantex.com' - '+.webapi.staging.salamantex.com' - '+.webassembly.stream' - '+.webmine.cz' - '+.webmine.pro' - '+.webminepool.com' - '+.webminerpool.com' - '+.webmining.co' - '+.webxmr.com' - '+.wordc.ga' - '+.wp-monero-miner.de' - '+.wpcdn1.herokuapp.com' - '+.wss.nablabee.com' - '+.wss.rand.com.ru' - '+.wtm.monitoringservice.co' - '+.www.cloudflane.com' - '+.www.coinimp.com' - '+.www.coinimp.net' - '+.www.freecontent.date' - '+.www.freecontent.science' - '+.www.freecontent.stream' - '+.www.freecontent.win' - '+.www.hostcontent.live' - '+.www.hostingcloud.racing' - '+.www.hostingcloud.trade' - '+.www.hostingcloud.win' - '+.www.jquery-cdn.download' - '+.www.jqwww.download' - '+.www.jshosting.party' - '+.www.jshosting.win' - '+.www.monero-miner.com' - '+.www.notmining.org' - '+.www.sparechange.io' - '+.www.verifier.live' - '+.xmr.2miners.com' - '+.xmr.cool' - '+.zymerget.win'