payload:
  - '+.0xf20b415.ru'
  - '+.1.bdl99down.kukulaa.cn'
  - '+.10086623.top'
  - '+.139520.aioc.qbgxl.com'
  - '+.14stirling.dyndns.org'
  - '+.1717.1000uc.com'
  - '+.2.haory.cn'
  - '+.23-122-210-174.lightspeed.cicril.sbcglobal.net'
  - '+.230.sub-166-166-188.myvzw.com'
  - '+.360down7.miiyun.cn'
  - '+.5-157-110-232.dyn.eolo.it'
  - '+.78-20-115-5.access.telenet.be'
  - '+.83-87-76-41.cable.dynamic.v4.ziggo.nl'
  - '+.912648.aioc.qbgxl.com'
  - '+.9800540.ru'
  - '+.abissnet.net'
  - '+.adf6.adf6.com'
  - '+.aefieiaehfiaehr.top'
  - '+.af.peertube.red'
  - '+.aiiaiafrzrueuedur.net'
  - '+.almrwad.com'
  - '+.amoamosss.com'
  - '+.aosafrica.co.za'
  - '+.api.52kkg.com'
  - '+.app.cumpar-auto-orice-tip.ro'
  - '+.appnotrix.com'
  - '+.apslline.com'
  - '+.arcsystem.rodopibg.net'
  - '+.artemka.spb.ru'
  - '+.arza.us'
  - '+.atordeg.com.br'
  - '+.atsegypt.com'
  - '+.aulist.com'
  - '+.aureanet.com'
  - '+.automaticwebui.com'
  - '+.avastop.com'
  - '+.avastpx.com'
  - '+.avastpy.com'
  - '+.avastwp.com'
  - '+.avastxo.com'
  - '+.avocaldoperu.com'
  - '+.az200.net'
  - '+.b46.oss-cn-hongkong.aliyuncs.com'
  - '+.bafybeicnmx2fcaolinpdaiqjo7hgsourg3qzaxf57psdrbqic4qrm4pf3i.ipfs.dweb.link'
  - '+.bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4.ipfs.dweb.link'
  - '+.bafybeihxqop3q2g3f6dd6ermzqn3xg7jbtz762papo5eye2nermqothtie.ipfs.nftstorage.link'
  - '+.bahrabeauty.com'
  - '+.bazarganadero.com'
  - '+.best.obs.cn-sz1.ctyun.cn'
  - '+.bestmagazineforanimalsunicum.ru'
  - '+.bitkiselurunsiparis.com'
  - '+.blackhattoolz.com'
  - '+.blaconmachine.com'
  - '+.bot.haluodq.cc'
  - '+.botnet.remake.top'
  - '+.boutique.aintzira.com'
  - '+.brightorbitconsultancy.com'
  - '+.bsa.bsafesafety.com'
  - '+.buscascolegios.diit.cl'
  - '+.by.haory.cn'
  - '+.caca.szcoolgame.com'
  - '+.cache.ussc.org'
  - '+.catbaparadisehotel.com.vn'
  - '+.cdaonline.com.ar'
  - '+.cdn.getwave.gg'
  - '+.cdn.ly.9377.com'
  - '+.cfs10.blog.daum.net'
  - '+.cfs13.tistory.com'
  - '+.cfs7.blog.daum.net'
  - '+.cfs9.blog.daum.net'
  - '+.cheats-pack.github.io'
  - '+.chemsky.tn'
  - '+.ciscocdn.com'
  - '+.clavity.me'
  - '+.cloud.hxhd.cc'
  - '+.cloudslimit.com'
  - '+.cnom.sante.gov.ml'
  - '+.coach.028csc.com'
  - '+.comodozeropoint.com'
  - '+.conn.masjesu.zip'
  - '+.contemega.com.do'
  - '+.counterstrike2-cheats.com'
  - '+.cpanel-adminhost.com'
  - '+.cpc138130-hatf10-2-0-cust814.9-3.cable.virginm.net'
  - '+.criapediatria.com.br'
  - '+.cs.go.kg'
  - '+.d.qqzx.cc'
  - '+.dailywebstats.com'
  - '+.data-portabily.s3.amazonaws.com'
  - '+.data.over-blog-kiwi.com'
  - '+.data.yhydl.com'
  - '+.datarey.com.br'
  - '+.dcdsecurity.com'
  - '+.deauduafzgezzfgm.top'
  - '+.dedecms.xueshenit.com'
  - '+.desquer.ens.uabc.mx'
  - '+.di-nai.com'
  - '+.dist.eda1.ru'
  - '+.dl.1003b.56a.com'
  - '+.dl.aginjector.com'
  - '+.dld.jxwan.com'
  - '+.dnvk1.info'
  - '+.dow.andylab.cn'
  - '+.down.ftp21.cc'
  - '+.down.fwqlt.com'
  - '+.down.pcclear.com'
  - '+.down.qqfarmer.com.cn'
  - '+.down10d.zol.com.cn'
  - '+.download.caihong.com'
  - '+.download.cudo.org'
  - '+.download.innovare.no'
  - '+.download.pdf00.cn'
  - '+.download.skycn.com'
  - '+.download.suxiazai.com'
  - '+.download.yourfileinfo.com'
  - '+.draconian.co.za'
  - '+.dz0nhlj1q8ac3.cloudfront.net'
  - '+.ebaltrahal.com'
  - '+.eficienciaeningenieria.com.mx'
  - '+.eguaheoghouughahsu.cc'
  - '+.eightgroup.com'
  - '+.elisans.novayonetim.com'
  - '+.eosoldesign.ro'
  - '+.epei77.direct.quickconnect.to'
  - '+.erhonics.cc'
  - '+.es-update.digiwincloud.com.cn'
  - '+.exilum.com'
  - '+.f24-zfcloud.zdn.vn'
  - '+.facturation-paiement.com'
  - '+.fallaeltro.es'
  - '+.fetchdesignprint.co.za'
  - '+.file.blackint3.com'
  - '+.file.edunet.ac'
  - '+.files5.uludagbilisim.com'
  - '+.firstviewautoservice.com'
  - '+.fish.hackbiji.cc'
  - '+.funletters.net'
  - '+.furymetin2.3x.ro'
  - '+.garanticonstruct.ro'
  - '+.gawx.florenda.com'
  - '+.gdent.bg'
  - '+.gdstatus.7m.pl'
  - '+.globallaborsupply.com'
  - '+.griservice.ro'
  - '+.hans.uniformeslaamistad.com'
  - '+.healthinsuranceinasia.com'
  - '+.heks.egrowbrands.com'
  - '+.hfs.t1linux.com'
  - '+.hitman-pro.ru'
  - '+.hitstation.nl'
  - '+.hnjgdl.geps.glodon.com'
  - '+.hook.ftp21.cc'
  - '+.host-195-103-203-106.business.telecomitalia.it'
  - '+.host-95-255-114-11.business.telecomitalia.it'
  - '+.huiip.top'
  - '+.huyanhnongdo.io.vn'
  - '+.hydewood.com'
  - '+.ibarblkacoiwlkese.s3.amazonaws.com'
  - '+.imtoken8.cc'
  - '+.in-houselegal.ro'
  - '+.ingonherbal.com'
  - '+.ini.sh-pp.com'
  - '+.innovativebuildingsolutions.in'
  - '+.inspirepk.org'
  - '+.internationalcricketboard.com'
  - '+.iprimaveral.com'
  - '+.jahez.me'
  - '+.jask.powerforxes.shop'
  - '+.jd-shop77.com'
  - '+.jeffdahlke.com'
  - '+.jobcity.com'
  - '+.jointings.org'
  - '+.jtpdev.co.uk'
  - '+.k2ygoods.top'
  - '+.kale.amwebsolution.com'
  - '+.kambud.biz'
  - '+.karer.by'
  - '+.karoonpc.com'
  - '+.kaysons-group.com'
  - '+.lamaisonquilting.com'
  - '+.lflsoftware.com'
  - '+.lh.yjjxz.com'
  - '+.licocojambamarketplace.com'
  - '+.lide.omernisar.com'
  - '+.lindnerelektroanlagen.de'
  - '+.linkvilleplayers.org'
  - '+.livetrack.in'
  - '+.loeghaiofiehfihf.to'
  - '+.lti.cs.vt.edu'
  - '+.luxurypropertiesfl.com'
  - '+.main.dsn.ovh'
  - '+.malw.esalesin.com'
  - '+.marafon.in'
  - '+.marioresidence.ro'
  - '+.maso.ge'
  - '+.mbsngradnja.com'
  - '+.medises.co.kr'
  - '+.meeweb.com'
  - '+.mesmerised.xyz'
  - '+.meteolab.it'
  - '+.mhmh1-1251344380.cos.ap-chengdu.myqcloud.com'
  - '+.microsecurityupdate.com'
  - '+.mkas.rizwanmano.com'
  - '+.monastery.mlnk.net'
  - '+.motorans.com'
  - '+.n.ddnsgratis.com.br'
  - '+.namthaibinh.net'
  - '+.neklatek.com'
  - '+.nerve.untergrund.net'
  - '+.net-killer.ooguy.com'
  - '+.nicolaf.xyz'
  - '+.noithaticon.vn'
  - '+.notariusnaydenova.eu'
  - '+.novelhc.com'
  - '+.ns1.koleso.tc'
  - '+.nunta.8z.ro'
  - '+.nurekleindesign.com'
  - '+.odoo.kseibitools.com'
  - '+.ojang.pe.kr'
  - '+.onemk3.teracomm.mk'
  - '+.otboiniki-dlia-sten.ru'
  - '+.p3.zbjimg.com'
  - '+.p6.zbjimg.com'
  - '+.palharesinformatica.com.br'
  - '+.paonancs.cn'
  - '+.park.chuitian.cn'
  - '+.passagetoeastafrica.com'
  - '+.paswo.org'
  - '+.pb.agnt.ru'
  - '+.perfectperu.com'
  - '+.pg.zu.edu.ly'
  - '+.pid.fly160.com'
  - '+.plhinc.com'
  - '+.pns.org.pk'
  - '+.portal.cdglobalclouds.com'
  - '+.pouya.blob.core.windows.net'
  - '+.powercx1.wetolink.com'
  - '+.productbucket3.s3.amazonaws.com'
  - '+.protechasia.com'
  - '+.providence.net.br'
  - '+.proxy.amazonscouts.com'
  - '+.pub-97694a1358de4edbb16efd939f516a29.r2.dev'
  - '+.pvas01b.inet.ws'
  - '+.qgf338jtt8tty7rx.myfritz.net'
  - '+.qiniuyunxz.yxflzs.com'
  - '+.quasa.ddns.net'
  - '+.quickpresentationdoc.xyz'
  - '+.ramanujan.edu.in'
  - '+.raptwinter.shop'
  - '+.rd.chuitian.cn'
  - '+.rddissisifigifidi.net'
  - '+.reifenquick.de'
  - '+.reshenie.info'
  - '+.reusable-flex.com'
  - '+.royriox.us'
  - '+.ruterk.com'
  - '+.s088.silver.fastwebserver.de'
  - '+.saf-oil.ru'
  - '+.sbelegi.com.br'
  - '+.seocompanypensacola.com'
  - '+.ser.nrovn.xyz'
  - '+.server.toeicswt.co.kr'
  - '+.servisaludocupacional.pe'
  - '+.sfa.com.ar'
  - '+.sgz-1302338321.cos.ap-guangzhou.myqcloud.com'
  - '+.sistema.intensegroupgt.com'
  - '+.sister-1324943887.cos.ap-guangzhou.myqcloud.com'
  - '+.smartupeg.com'
  - '+.soft.110route.com'
  - '+.soft.lannaoke.com'
  - '+.soft.wsyhn.com'
  - '+.softbank126023203236.bbtec.net'
  - '+.softcatalog.ru'
  - '+.softdl.360tpcdn.com'
  - '+.sos.vivi.sg'
  - '+.soyjak.download'
  - '+.spaceframe.mobi.space-frame.co.za'
  - '+.specificsecurity.ru'
  - '+.src1.minibai.com'
  - '+.ssl.ftp21.cc'
  - '+.static-91-225-132-57.devs.futuro.pl'
  - '+.static.3001.net'
  - '+.static.zongheng.com'
  - '+.stdown.dinju.com'
  - '+.storage.soowim.co.kr'
  - '+.sumiyuki.co.jp'
  - '+.support.clz.kr'
  - '+.syn-047-229-251-027.res.spectrum.com'
  - '+.taodianla.com'
  - '+.technecare.technecare.com'
  - '+.techniguitare.com'
  - '+.technoweb.homeip.net'
  - '+.tecni-soft.com'
  - '+.tecunonline.com'
  - '+.telesavers.co.za'
  - '+.tengfeidn.com'
  - '+.test.aintzira.com'
  - '+.testgenerateur.alwaysdata.net'
  - '+.the-server.duckdns.org'
  - '+.thursdayyyyyyfileeee.duckdns.org'
  - '+.tianyinsoft.top'
  - '+.tmars.net'
  - '+.tools.kali.pro.s3.amazonaws.com'
  - '+.topsoft.info'
  - '+.totalhorsehealth.com'
  - '+.tqshoes.shop'
  - '+.travelwithmanta.co.za'
  - '+.tricotexbacau.ro'
  - '+.unicorpbrunei.com'
  - '+.up.maolaoban.top'
  - '+.update.cg100iii.com'
  - '+.utka.xyz'
  - '+.uyul.oss-cn-beijing.aliyuncs.com'
  - '+.valseg.com.br'
  - '+.vapecracked.7m.pl'
  - '+.vjkillianco.com'
  - '+.vmi1547155.contaboserver.net'
  - '+.voineasa.ro'
  - '+.web.johnmccrea.com'
  - '+.win.down.55kantu.com'
  - '+.www999999asgasg-1327129302.cos.ap-chengdu.myqcloud.com'
  - '+.www999999safagqwhg-1327129302.cos.ap-chengdu.myqcloud.com'
  - '+.wynecare.com'
  - '+.xiangshunjy.com'
  - '+.xinhgai.tv'
  - '+.xss-1253555722.cos.ap-singapore.myqcloud.com'
  - '+.yk66.vip'
  - '+.yp.hnggzyjy.cn'
  - '+.ysbaojia.com'
  - '+.yzkzixun.com'
  - '+.zffsg.oss-ap-northeast-2.aliyuncs.com'
  - '+.zhengxinpeixun.oss-cn-qingdao.aliyuncs.com'
  - '+.zmail.broadmediacloud.com'