## hosts-blocklists ## blocklists-csirt # https://csirt.gov.it/contenuti # https://www.csirt.gov.it/contenuti/emotet-rilevata-nuova-campagna-di-distribuzione-al02-220518-csirt-ita 3dstudioa.com.br anat-bar.co.il anguianoss.com bencevendeghaz.hu berekethaber.com bosny.com bpsjambi.id ceibadiseno.com.mx claudioavelar.adv.br commune-ariana.tn cubicegg.asia demo-re-usables.inertiasoft.net dmaicinnovations.com drcreative.cz drviniciusterra.com.br elamurray.com ftp.colibriconstruction.net hqsistemas.com.ar hullsite.com ilriparatutto.eu ismarttechnologies.com itesmeitic.com kolejleri.com learnviaonline.com link2thai.com linuxajuda.org luminesthemes.com luzytextura.com melisetotoaksesuar.com meta4media.com mgmeurope.sk microlent.com milanstaffing.com mississaugataxi.com mivaria.com mythicpeak.com neoexc.com ppiabanyuwangi.or.id salledemode.com stainedglassexpress.com tgroup.ge # https://www.csirt.gov.it/contenuti/campagna-di-phishing-indirizzata-a-istituzioni-ucraine-bl01-20220314-csirt-ita forkscenter.fr nirsoft.me # https://www.csirt.gov.it/contenuti/campagna-emailthief-sfrutta-vulnerabilita-0-day-in-zimbra-al01-220702-csirt-ita amazon-check.cf amazon-check.ga amazon-check.gq amazon-check.tk amazon-team.tk bruising-intellect.ml chargedboltsentry.spiritfield.tk findtruth.ml flameshock.spiritfield.tk iceywindflow.cf iceywindflow.gq iceywindflow.ml mail.bruising-intellect.ml mx.newsonline.gq news-online.ml news-voice.ml newsonline.gq opticaleel.iceywindflow.cf playquicksand.cf playquicksand.gq playquicksand.ml playquicksand.tk secretstep.tk shadowmaster.iceywindflow.ml shadownight.playquicksand.tk shadownight.spiritfield.ga spiritfield.cf spiritfield.ga spiritfield.ml spiritfield.tk spiritx.ga support.newsonline.gq thunderchannel.cf thunderchannel.tk tigerstrike.iceywindflow.ml update.secretstep.tk winderosion.spiritfield.ml windsoft.cf windsource.thunderchannel.cf windsource.thunderchannel.tk yahoo-corporation.ml yahoo-corporation.tk yahoo-movie.spiritx.ga # https://csirt.gov.it/contenuti/squirrelwaffle-distribuito-sfruttando-vulnerabilita-note-di-exchange-al01-211124-csirt-ita aayomsolutions.co.in agoryum.com aparnashealthfoundation.aayom.com arancal.com constructorachg.cl dongarza.com grandthum.co.in headlinepost.net imprimija.com.br iperdesk.com mcdreamconcept.ng oel.tg omoaye.com.br stunningmax.com taketuitions.com # https://csirt.gov.it/contenuti/campagna-di-smishing-ai-danni-degli-utenti-xiaomi xiaomi-users.com # https://csirt.gov.it/contenuti/analisi-del-trojan-bancario-sharkbot-cb01-211116-csirt-ita sharkedtest1.xyz sharkedtestuk.xyz # https://csirt.gov.it/contenuti/attivita-malevole-verso-server-che-espongono-api-rest-docker-bl01-211110-csirt-ita teamtnt.red # https://csirt.gov.it/contenuti/ransomware-babuk-distribuito-sfruttando-vulnerabilita-note-di-exchange-bl01-211104-csirt-ita fbi.fund xxxs.info # https://csirt.gov.it/contenuti/rilevata-compromissione-della-libreria-uaparser-js-bl01-211027-csirt-ita citationsherbe.at # https://csirt.gov.it/contenuti/campagna-di-phishing-ai-danni-degli-utenti-facebook-al02-211026-csirt-ita tobink55.000webhostapp.com # https://csirt.gov.it/contenuti/campagna-a-tema-aggiornamento-software-dike-volta-alla-diffusione-di-software-malevolo-al01-211018-csirt-ita infocert-dike.firstcloudit.com # https://csirt.gov.it/contenuti/vulnerabilita-in-atlassian-confluence-sfruttata-per-distribuire-ransomware-al01-211005-csirt-ita update.ajaxrenew.com # https://csirt.gov.it/contenuti/individuata-campagna-di-diffusione-malware-con-impatto-anche-in-italia-bl01-211001-csirt-ita-2 168betclub.com 360digidives.com abogados-en-medellin.com abufarees.com acordimobiliar.ro adelmam.com aditycursos.cl akvimminerals.com alfacables.net alteadekori.hr amaimaging.com amitadesai.com anasarooms.gr arricale.it asesoriasalakazam.com ashleyskenya.com aszoran.hr bbaschools.com beautifulgist.com beem.id bet-club.co bioelectronicgroup.com bluebirdbeverages.in bpoisland.com builtbvbh-com.gq builtbybh-com.gq builtybybh-com.gq bussiness-z.ml capconstrucciones.com cctvfiles.xyz chaturanga.groopy.com clientsdemoarea.com colegiobilinguepioxii.com.co colorshine.net commercialroof.org complejobotanico.com containerlafamilia.cl contursystem.ro corpsme.com cortinastelasytrazos.com covertekceramica.com cronictechnologies.com decimaai.com desarrollolaboralsas.com digitalmeritmedia.com duamarketing.com dzairvoyages.com edmeeoutfit.com egalaspot.com elcapitanzheimer.com enjoytouring.ro eoficial.site erkent.net focus.focalrack.com fundacionverdaderosheroes.com gadhwadasamaj.techofi.in ghapan.com greenrae.net greentek.lk gruasingenieria.pe hirimmigration.com hirinternational.com hisarsms.com hishamgraphics.com hitadolawfirm.com hvacsupportservices.com ifxsoccer.com iihs.online inboundgrp.com inetworx.co.za infreejobalert.com inlighttrans.com innovapharma-tr.com insurance.akademiilmujaya.com iqurius.com jamiesonvitamins.me jesussavestoday.com jobingulfs.com jostfranko.com kalyanchartresult.in kerala-lottery.in kmslogistik.com kncci.in krizstore.com ksudesapemogan.com ktechnetwork.com ktelecomm.com liquidity-crypto.com livestreamshub.xyz logisticspartnertz.com logotale.com lotolands.com luisperezgutierrez.com maasaieye.com masajbrasov.ro matmarex.rs medspa.it meetinsrilanka.com moeinjelveh.ir mongolianteam.org musicvalley.in naelectric.com naturalhempheart.com nelberklanguages.com nisadelgado.com orquideavallenata.com outdoorroar.com paidikoskosmos.gr panduzone.com passionatepamperingllc.com paype.live petfoodpakistan.com petkingglobal.com phmundial.com picta.ps plazadetorossma.com ppbcinc.com prevenzioneformazionelavoro.it pro-tenis-club.ro procatodicadelacosta.com provak.hr psbdexam.com pttransmarco.com qrabin.com qubaacustoms.com readgasm.com recruitingpanda.com ricardopiresfotografia.com rinconadadellago.com.mx rksworld.org roofingcontractormemphis.com roofingtennessee.info saraviatowing.net sattaking-fast.in sattaking-satta.in sattakingdarbar.in sattakingsandy.in sbrentacar.me sectordemujeres.org serenidadsfm.com sextoystore.co.in shahanaschool.in shashvatswasthya.in shivrajengineering.in shopworld-cargo.com siwannews.in smartslide.hu srv7.corpwebcontrol.com stripemovired.ramfactoryarg.com sublimecamera.com sunnywuvisuals.com sunukoomthies.com swatpalace.pk syncun.com systemmentorsec.com tattoogo.net tecglobmec.com testpaginacalzado.grupomasis.com thebethesdahouse.org thethinktankers.in totallybaked.ca tradingview-brokers.skoconstructionng.com trustvally.com united-alsafwa.com uplauds.ai vaksanaindia.net valeriaschuhe.grupomasis.com veterinariaensuba.com vip.bitcoinspring.top vip.macroearns.com visitsrilanka.net weareomnihealth.com worldempoweredyouth.com yellowtelescope.com yoowi.net zealshipping.in # https://csirt.gov.it/contenuti/nuova-campagna-bulletprooflink-al03-210924-csirt-ita apidatacss.com apiserverdata1.com baller.top bomohsmtp.com dasmtp.com datacenter01.us earthsmtp.com f1smtp.com Failedghostsmtp.com Failedsendapidata.com Faileduebpicture.cc feesmtp.com foxsmtp.com ghostsmtp.com gpxsmtp.com gurl101.services hostprivate.us josmtp.com jupitersmt.com laptopdata.xyz link101.bid linuxsmtp.com mainsmtp.com mexsmtp.com migration101.us moneysmtp.com panelsmtp.com plutosmto.com prvtsmtp.com racksmtp.com rosmtp.com rxasmtp.com sendapidata.com ses-smtp.com smtpro101.com smtptemp.site thegreenmy87.com trasactionsmtp.com valvadi101.com vitme.bid voksmtp.com webpicture.cc winsmtp.com # https://csirt.gov.it/contenuti/approfondimento-su-vulnerabilita-proxyshell-attivamente-sfruttate-per-diffondere-ransomware-via-exchange-al01-210824-csirt-ita bomohsmtp.com f1smtp.com feesmtp.com foxsmtp.com ghostsmtp.com gpxsmtp.com josmtp.com laptopdata.xyz mainsmtp.com mexsmtp.com moneysmtp.com plutosmto.com prvtsmtp.com rosmtp.com ses-smtp.com smtpro101.com smtptemp.site trasactionsmtp.com voksmtp.com webpicture.cc # https://csirt.gov.it/contenuti/campagna-di-smishing-traccia-il-tuo-pacco-al01-210818-csirt-ita g62z.com hatonia.com l.linklyhq.com parcel-tracking-263273453452342x.ru v39c.com # https://csirt.gov.it/contenuti/campagna-di-phishing-a-tema-wetransfer-al01-210625-csirt-ita-2 auth-confirmation.austinbroadland.repl.co gethukshop.com orderlistconfimation.us-south.cf.appdomain.cloud tandcn.com # https://csirt.gov.it/contenuti/campagna-malevola-diffonde-agenttesla-sfruttando-una-nota-vulnerabilita-di-office-al01-210624-csirt-ita ck-t-hr.com # https://csirt.gov.it/contenuti/aggiornamento-campagna-lokibot-al03-210623-csirt-ita ctp1.xyz # https://csirt.gov.it/contenuti/email-di-phishing-invio-fattura-doc_-veicola-lokibot-al03-210618-csirt-ita it0b.xyz # https://csirt.gov.it/contenuti/botnet-moobot-sfrutta-vecchia-vulnerabilita-al02-210617-csirt-ita cyberium.cc # https://csirt.gov.it/contenuti/cryptbot-diffuso-tramite-siti-di-phishing-al01-210611-csirt-ita augalai.info morjgs02.top rarpc.co remexl25.top sulsxq03.top # https://csirt.gov.it/contenuti/nuova-versione-del-malware-freakout-al02-210609-csirt-ita can6dodp.servepics.com cloud-miner.de ngiwge486ln9daoo.hopto.org ublock-referer.dev # https://csirt.gov.it/contenuti/campagna-di-phishing-a-tema-agenzia-entrate-al01-210601-csirt-ita jules-castelao.fr # https://csirt.gov.it/contenuti/individuata-una-nuova-versione-del-ransomware-zeppelin-al02-210525-csirt-ita btcxchange.online # https://csirt.gov.it/contenuti/infostealer-raccoon-diffuso-tramite-versioni-compromesse-di-software-vpn-al01-210525-csirt-ita nordsecure.click nordsfreevpn.com vpn-nord.net vpnnords.com # https://csirt.gov.it/contenuti/campagna-malevola-impatta-le-utenze-di-banca-mediolanum-al01-210518-csirt-ita domande-controllo.com # https://csirt.gov.it/contenuti/nuove-campagne-diffondono-formbook-al01-20201023-csirt-ita 4006789517.com bchselfdrive.com chifaencalada.digital click2hr.com colonialtireandautomotive.com defigravity.finance globalescrowauto.com hotcountrystars.com hous12.com lmz.xyz reneebyzoe.com shgskit.com votecameltoe.com # https://csirt.gov.it/contenuti/campagna-di-malspam-invia-dridex-a-nome-di-intuit-al03-201022-csirt-ita 4code.se alcoa.fairwayconcierge.com ampcourses.com bangah.com bardenpumps.com.au camilanvanessa.memangbeda.website capek.buffaloonlinetest.co.uk cosmetic1.4code.se cygnilux.com dandaroadsideservicellc.com datarecoverservice.com davidakademia.hu davie.iservelendingconcierge.com demos.fairewebhost.com derek4333.com dev.connect865.com divey.com elranchomarkets.com eneosdemo.digitalcanali.com fashionatingworld.cn fastestnetwork.info fbomate.com fitnessserved.com helpingcause.com hokkaidoizakaya.id hotel72.com housenboldlaw.com hrroadlines.com ivanevtushenko.com.ua jgphotoart.com jphtrading.hu kimmiandco.tiemens.com.au malegazette.com manniondrilling.com.au minishp.com onlinebusinesspure.com onlinebusinessup.com opendigital.ru parkettbau-freyenstein.de propashop.mykedai2u.com ptfcatpal.com qualitycontaccenter.com radiosinus.hu refinanceworth.com renttoowncare.com saffronhotelalrigga.com shop1.4code.se speckauto.com stfcshop.com studentathlete.in tbcseguros.com.br toppedtravel.com twinpeak.iservelendingconcierge.com viihelp.com workedhome.com # https://csirt.gov.it/contenuti/nuove-evidenze-sulla-campagna-malspam-a-tema-inps-al01-201022-csirt-ita blogicompany.com linksystems.bar linksystems.casa log.technosolarsystems.net service.technosolarsystems.com systemlinks.casa windowclient.com # https://csirt.gov.it/contenuti/nuove-tecniche-per-diffondere-emotet-al01-201021-csirt-ita arifulhuq.com baltische-rundschau.eu bespokebysumitgrover.com beta.osjusa.org comercialadvance.com concrecasa.cl dailypharmajobs.com envirohubconsulting.co.za gapuragamapersada.com geoportal.rivasciudad.es grandages.org.my gymmuscle.tk leboutique-store.com myanmarlegalservices.com newtabletmall.com rossie.in royalnight.in static.rivasciudad.es sweet-diet.com techsama.com thedailysmile.com venompremiumshop.com wh-sh59.csloxinfo.com # https://csirt.gov.it/contenuti/campagne-phishing-rimborso-enel-al01-201020-csirt-ita enelrimborsoit.it # https://csirt.gov.it/contenuti/mirai-identificate-4-nuove-varianti-al01-201019-csirt-ita dotheneedfull.xyz lol.thezone.vip xyz.hxarasxg.xyz # https://csirt.gov.it/contenuti/nuove-evidenze-sulla-campagna-malspam-a-tema-inps-al01-201016-csirt-ita line.seemimigo.com link.tomshobbies.com # https://csirt.gov.it/contenuti/campagna-di-phishing-con-riferimento-a-istituto-di-credito-al04-201015-csirt-ita my-bnl-online-ssl-index-9876543.kozow.com mypanel.https443.org # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-malspam-che-diffonde-ursnif-attraverso-una-finta-email-dellinps-al02-201014-csirt-ita log.lenssexy.com service.987images.com stats.wadadliphoto.com windowsclassic.co # https://csirt.gov.it/contenuti/nuove-evidenze-di-campagna-lokibot-al01-201013-csirt-ita pkl.xyz # https://csirt.gov.it/contenuti/13-applicazioni-malevole-nel-play-store-di-google-al03-201012-csirt-ita api.hdvideoplayer.top api.instragramvideodownload.top api.launcherfor.top api.privatemsg.top api.socialvideodownloader.top api.sportcounter.top api.supervideoplayer.top api.wallpaper4k.top t.lineranalysis.com # https://csirt.gov.it/contenuti/nuova-campagna-diffonde-lokibot-attraverso-una-falsa-copia-di-bonifico-al06-201009-csirt-ita pklz.xyz # https://csirt.gov.it/contenuti/campagna-di-phishing-con-riferimento-un-istituto-di-credito-italiano-al05-201009-csirt-ita skylarstetten.com # https://csirt.gov.it/contenuti/campagna-di-phishing-con-riferimento-a-microsoft-outlook-al04-201009-csirt-ita iko23.mw.lt # https://csirt.gov.it/contenuti/campagna-malspam-diffonde-emotet-tramite-falsi-certificati-medici-al02-201009-csirt-ita albasisgroup.com amongproject.it asmaraloka.com brycebrumley.com datvietquan.com famousdiagnosticcenter.com jubilantenterprise.com karlagaray.com thanhthatbadinh.com voguefitz.com # https://csirt.gov.it/contenuti/malware-veicolato-tramite-servizio-di-segnalazione-errori-di-windows-al01-201009-csirt-ita asia-kotoba.net yourrighttocompensation.com # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-malspam-che-diffonde-ursnif-attraverso-una-finta-email-dellinps-al04-201008-csirt-ita line.republicpracticesolutions.com link.fixuppropertysolutions.com link.hybridcorehomescc.com link.republichealthresources.com service.eftformotherissues.com # https://csirt.gov.it/contenuti/il-miner-black-t-sfrutta-api-docker-esposte-al03-201008-csirt-ita teamtnt.red # https://csirt.gov.it/contenuti/campagna-malspam-diffonde-iceid-al02-201008-csirt-ita o7s3dv4.com # https://csirt.gov.it/contenuti/malware-distribuiti-tramite-un-servizio-web-lecito-al02-201007-csirt-ita italake.com ol.thezone.vip paste.nrecom.net # https://csirt.gov.it/contenuti/campagna-di-phishing-con-riferimento-ad-aruba-al01-201007-csirt-ita aruba-ordine43.de.cool brabra-dd.blogspot.com # https://csirt.gov.it/contenuti/slothfulmedia-un-nuovo-malware-al02-201006-csirt-ita qnglsmc.com sdvro.net # https://csirt.gov.it/contenuti/ttint-la-variante-di-mirai-sfrutta-due-0-day-dei-router-tenda-al02-201005-csirt-ita back.notepod2.com cnc.notepod2.com q9uvveypiB.notepod2.com uhyg8v.notepod2.com # https://csirt.gov.it/contenuti/nuova-campagna-malspam-distribuisce-il-malware-masslogger-al01-201005-csirt-ita akinitaviotias.gr kbolias.gr milebgd.mycpanel.rs suite.kpechios.gr # https://csirt.gov.it/contenuti/malspam-diffonde-ursnif-attraverso-una-finta-email-dellinps-al02-201002-csirt-ita gstat.securezal.com gstat.sloleaks.com line.hotelcabosanlorenzo.com link.fixuppropertysolutions.com log.whateverittakesdoc.org service.21stcenturyleadersawards.org stats.21stcentury-leadership.org web.plainfielddentalcare.com # https://csirt.gov.it/contenuti/individuate-nuove-versioni-del-malware-loda-rat-al01-201002-csirt-ita roodan888tools.atwebpages.com # https://csirt.gov.it/contenuti/identificate-e-analizzate-diverse-varianti-di-joker-malware-per-android-al01-200929-csirt-ita 2j1i9uqw.oss-eu-central-1.aliyuncs.com blackdragon03.oss-ap-southeast-5.aliyuncs.com blackdragon.oss-ap-southeast-5.aliyuncs.com fgcxweasqw.oss-eu-central-1.aliyuncs.com jk8681oy.oss-eu-central-1.aliyuncs.com laodaoo.oss-ap-southeast-5.aliyuncs.com n47n.oss-ap-southeast-5.aliyuncs.com nineth03.oss-ap-southeast-5.aliyuncs.com proxy48.oss-eu-central-1.aliyuncs.com rinimae.oss-ap-southeast-5.aliyuncs.com sahar.oss-us-east-1.aliyuncs.com # https://csirt.gov.it/contenuti/installer-windscribe-vpn-sfruttati-per-diffondere-njrat-bladabindi-al03-200928-csirt-ita gamezer1hack.sytes.net # https://csirt.gov.it/contenuti/attacco-fileless-veicolato-tramite-malspam-diffonde-modi-rat-al01-200928-csirt-ita mondns.myftp.org phix.es vanesaescribano.com # https://csirt.gov.it/contenuti/campagna-malspam-sfrutta-il-nome-dellorganizzazione-mondiale-della-sanita-per-veicolare-ursnif-al02-200925-csirt-ita gstat.sloleaks.com line.queensfurnitureoutlet.com link.giantfurnitureoutlet.com log.idealfurnituredirect.com sertificatkey.com service.idealfurnitureoutlet.com stats.idealfurnituregalleryny.com web.cindycrawfordgroup.com # https://csirt.gov.it/contenuti/nuove-campagne-malspam-che-distribuiscono-emotet-al01-200925-csirt-ita aahnaturals.net armahouse.com bitbenderz.com coolcomputers.info geisterhouse.com haniyyacrafts.com kanbonim.com konican.com ladsbarbearia.com lagera.com msmartyford.com namwasports.com safiullah.com tulyboutiquehouse.com # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-malspam-a-tema-agenzia-delle-entrate-al02-200924-csirt-ita 1933peizi.com agenziaentrate.digital gestiondecorreo.info # https://csirt.gov.it/contenuti/emotet-individuati-nuovi-ioc-al01-200923-csirt-ita averyair.com drippglobal.com hulianwang114.com ixirhost.xyz priyamcollection.com querofornecedores.com weneedyourhelpnow.org # https://csirt.gov.it/contenuti/campagna-malspam-diffonde-ursnif-attraverso-una-finta-comunicazione-di-agenzia-delle-entrate-al01-200922-csirt-ita line.stopcollectionharassment.com link.stopcollectionlawsuits.com log.rstempler.com service.mymindmap.net stats.stopthecase.com # https://csirt.gov.it/contenuti/lucifer-il-cryptominer-espande-le-proprie-funzionalita-al02-200921-csirt-ita guyeyuyu.com qf2020.top qianduoduo.pw tyz2020.top # https://csirt.gov.it/contenuti/campagna-malspam-per-veicolare-emotet-a-utenti-italiani-al01-200921-csirt-ita girlgeekdinners.com marblingmagpie.com veccino56.com # https://csirt.gov.it/contenuti/mrbminer-nuovo-malware-infetta-database-mssql-al01-200918-csirt-ita mrbfile.xyz vihansoft.ir # https://csirt.gov.it/contenuti/nuova-campagna-malspam-diffonde-ursnif-attraverso-una-finta-email-dellinps-al04-200914-csirt-ita line.wedowindowsplus.com log.theziongroup.com service.eftformotherissues.com stat.healingwithtapping.com web.alicegrange.com web.fromtheeast.org # https://csirt.gov.it/contenuti/campagna-agent-tesla-nuove-evidenze-al01-200912-csirt-ita mail.hybridgroupco.com mail.mlibano.com.br # https://csirt.gov.it/contenuti/campagna-malspam-di-masslogger-sfrutta-fedex-come-esca-al02-200910-csirt-ita ftp.ayudasaudiovisuales.com # https://csirt.gov.it/contenuti/campagna-malspam-distribuisce-il-malware-dridex-al01-200910-csirt-ita pharmacy.binarybizz.com sweepegy.com # https://csirt.gov.it/contenuti/nuova-campagna-malspam-distribuisce-malware-mekotio-sfruttando-il-dominio-mef-gov-it-al01-200904-csirt-ita comprenderebbefiscale.eastus.cloudapp.azure.com sarebbeprovafiscale.southcentralus.cloudapp.azure.com sicurezza.southcentralus.cloudapp.azure.com tassacomprenderebbe.eastus.cloudapp.azure.com # https://csirt.gov.it/contenuti/catena-di-infezione-di-masslogger-bl01-200903-csirt-ita paninoteka.si # https://csirt.gov.it/contenuti/nuovi-ioc-della-campagna-di-phishing-che-sfrutta-il-nome-del-ministero-delle-infrastrutture-e-dei-trasporti-al02-200903-csirt-ita elanstudio.hu googlchrm.online # https://csirt.gov.it/contenuti/campagna-malspam-di-masslogger-usa-istituti-bancari-come-esca-al03-200901-csirt-ita milebgd.mycpanel.rs paninoteka.si # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-di-trickbot-tramite-emotet-al04-200831-csirt-ita grzegorzkucharski.com karaz-sd.com king61tours.com # https://csirt.gov.it/contenuti/nuova-campagna-malspam-veicola-malware-lokibot-al03-200831-csirt-ita espaciointeriores.com.ar # https://csirt.gov.it/contenuti/nuova-campagna-diffonde-lemon-duck-sfruttando-lemergenza-covid-19-al03-200828-csirt-ita d.ackng.com lplp.ackng.com p.b69kq.com p.k3qh4.com t.amynx.com t.jdjdcjq.top t.zer9g.com t.zz3r0.com # https://csirt.gov.it/contenuti/nuova-campagna-malspam-diffonde-ursnif-attraverso-una-finta-email-dellinps-al01-200828-csirt-ita gstat.kangweid.com gstat.premiamo.com gstat.premiamo.eu gstat.secundamo.com gstat.secundato.com gstat.secundato.net gstat.securanto.com gstat.securanto.net gstat.securezal.com gstat.securezal.xyz gstat.securezzas.com gstat.securezzis.net gstat.sloleaks.com web.coryriley.com # https://csirt.gov.it/contenuti/nuova-campagna-diffonde-ursnif-sfruttando-lemergenza-covid-19-al03-200824-csirt-ita houunolu1.xyz # https://csirt.gov.it/contenuti/nuovi-riscontri-relativi-al-malware-emotet-ioc-aggiornati-20-08-al01-200820-csirt-ita digitalmarketingbloggers.com drshekharbiswas.com laibray.com logoonthego.com moinbariatrics.com pakgreenenterprise.com panaglobalschool.com proyectobayacu.com recuperaatupareja.com sac-serv.com srivenkateswarainfratech.com sungvalopkhongsam.com thichdirung.com zmgmedia.com # https://csirt.gov.it/contenuti/nuova-campagna-emotet-con-riferimenti-allambito-sanitario-al05-200813-csirt-ita cnoenc.com nickkind.com nikolovmedia.com phrachudadhuj.com # https://csirt.gov.it/contenuti/false-email-dal-ministero-delle-infrastrutture-e-dei-trasporti-al01-200812-csirt-ita mitgovit.online # https://csirt.gov.it/contenuti/campagna-crime-che-fa-uso-di-allegati-rtf-malevoli-bl01-200811-csirt-ita officelog.org # https://csirt.gov.it/contenuti/individuate-295-estensioni-malevole-nel-web-store-di-chrome-al01-200810-csirt-ita fly-analytics.com # https://csirt.gov.it/contenuti/ursa-loader-contro-utenti-italiani-al01-200808-csirt-ita hse.com.bn # https://csirt.gov.it/contenuti/nuovi-riscontri-relativi-al-malware-emotet-al03-200807-csirt-ita aeroasia-interior.com # https://csirt.gov.it/contenuti/nuova-campagna-diffonde-ursnif-attraverso-un-finto-rimborso-di-pagamento-brt-al03-200805-csirt-ita fattnumdelordine.com statoffbal.com # https://csirt.gov.it/contenuti/nuova-campagna-di-malspam-distribuisce-jasperloader-e-ftcode-al02-200805-csirt-ita dropbox.lightsculpters.com files.lauragoes.com nmgymda2mjc.top z2uymda1mtk.top z2uymda2mjc.top # https://csirt.gov.it/contenuti/nuove-evidenze-di-campagna-agenttesla-al01-200805-csirt-ita mail.solivera.com # https://csirt.gov.it/contenuti/malware-pony-distribuito-ad-utenti-italiani-tramite-campagna-malspam-al01-200804-csirt-ita kboyud.com # https://csirt.gov.it/contenuti/finte-email-di-rimborso-finalizzate-al-furto-di-credenziali-al04-200731-csirt-ita ni4377260-1.web17.nitrado.hosting ni4377884-1.web13.nitrado.hosting # https://csirt.gov.it/contenuti/nuova-ondata-di-campagne-guloader-distribuisce-formbook-sfruttando-brand-dhl-al03-200731-csirt-ita fbdoskitryupanel.webredirect.org # https://csirt.gov.it/contenuti/nuovi-riscontri-relativi-al-malware-emotet-al02-200731-csirt-ita aci.serabd.com acinutrilife.com aeroasia-interior.com agacenter.ro agtrade.hu aistidafa.com alaksir.com alarmnet.ph alfaltda.cl almgaard.nl alpena.com.tr altimira.es ammonhair.nl anprax.com aperfectimage.pl arcapps.org ariefsetiawan.com arizonaonsale.com armadalecfc.com arpaco.com.pk artephatun.com.br asomevenar.org asrijeweler.com atelierbrasilia.com ative.nl atsyemek.com autohausgrund.de avitech.net.au backroom.co.nz badabadabingo.com basheijns.nl bdub.net beenakker.eu behnasan.com bendys.com.au bigblue.com.tr binaghetta.it bioklinika.lv biotunes.org birosthalittc.in blaha.pl bloodcreative.co.uk bloodink.com bloomncare.com blswlaw.com bluepulse.co.za bmfestas.com.br bodenstein.co.za boincathull.net bonstock.com booyamedia.com bosco.ch bosisio.net botamotocross.site boulderinn.com bouwer.cc brainora.com brandfish.co.uk brandsstudio.pk bratecbrt.com breedenandsilver.com bremessi.com.br briffe.com.br brightmega.com brightonrooms.co.uk brownshotelgroup.com bruset.no bryanbuchan.com bumirubber.com busesworldwide.org businsurance.nl byrdits.com byteresa.com c0140529.ferozo.com cabelectrical.com.au cagev.org cairocad.com cali.de cameronandswan.co.uk campanus.cz campdevanol.com camponovo.it campsbayviews.com cankofte.com carinebelzon.nl carlosmartins.ca casadorothea.com catamountcenter.org cathelest.com caygri.com cbi.com.eg ccsau.com cddvd.kz cebucoolstuff.com ceda.com.tr ceelen.nl centeklabs.com centreforitexcellence.com.au cgemtalent.com cghmedia.com chairsdirect.eu champlain1715.com chcquimica.com.br chmiola.net choweng.com chrisdior.com.au chrisgreenhalgh.co.uk chrisrambo.com chunkagency.com cimsjr.com cistilniservis-t530.com cittadivita.it cityplanter.co.uk clanwatson.co.uk classic-recipes.com classicpaint.net cleanbydesignllc.com clearcall.com cliftonsecurities.co.uk clinicavitalefsa.com.br closhlab.com clubyourlife.ca colemanco.com.au colfincas.com comars.sk comitware.de commercedusud.com compednet.com comprof.com.au compustate.com confricami.eu conilizate.com controll.cl controllchile.cl convert.gr copavflex.com.br coresite.ne.jp coruia.ro coulsongraphics.com cpmred.com crazymut.com creatrix.co.za criesagirl.com criminal23.de cryptosistem.hr cryser.com csds.ca cuadros.pe currantmedia.com cushionsandumbrellas.com cushman.net cwpfencing.co.uk cyberneticservices.in cybertech-it.co.za cygnuslabs.com dagda.es dailynetworks.com danaldea.ro dandbtrucking.com dandyair.com danirvinphotography.com daoisthealing.com darknova.eu databeuro.com davethompson.me.uk davidfetherston.com davidnemeth.com davidsgreen.net dealio.com.au defiteqazerbaycan.com deltacraft.ro demonesia.net demonpaintball.co.uk demu.hu denizyahci.com derksenwebid.nl designworx.co.nz detorre.es devaux.ch diecieventi.com digitalmind.pl dii.com.pk diprotelco.com directresponsegroup.com dishnchips.com ditec.com.my djeffries.com djhavoc.net docecreativo.com dockerydesign.com dogbluemedia.com dot2dot.com.my dotbenstar.co.uk dotmarket.rs doubledog.nl dralcalde.es drewmaughan.com dualstudio.com.mx duhallow.com duncanllc.com dunnriteplumbing.ca e-motiva.com eagleserver.org easywork.com.br eatspam.co.uk ebcsb.net eclosion.jp edandtrish.com edylawson.com.br efetiva.net.br ejder.com.tr ekramco.ir eldridgelondon.com elementalburn.com elevationadvertising.com elifmakina.net elisent.com eliteseobusiness.com elook.com.tw eltallerartistico.com emena.org empmtg.com empoderacomunicacion.pe engeserv.com.br enhancementtechnology.co.uk enkphilipsen.nl eno.si ensource.co.uk entouchgraphics.com eof.cat epicurius.com.br eragrup.ro err0r.dk especialdesign.hu espiraltravel.com essand.com etawala.com evaddesign.com ewingconsulting.com excelsiorlawpllc.com exeo.com exilum.com exprimidor.cl extelcon.com extremcopy.hu ezratisrael.org.il faccomputer.com faks.nl famaval.pt famaweb.ir fanatlanta.org fanction.jp fanda.co.ke faroholidays.in fashiondenver.com faulidi.com fenlabenergy.com ferafera.com ferienwohnung-malcesine.de fernandez-ulrich.cat fhcigars.com fiberdyneqatar.com fili.es filipesantos.com.br findesign.nl findio.co.ke finestones.dk finnigans.org.uk firman.com.au firstaid-redliv.dk fitsystems.com fizion.nl flamesofrichmond.co.uk flexitravel.com flgmedia.nl floow.co foodphotography.in foredeckmarine.com.au forestanalytics.net forexshifu.com francescoarzeni.it franelessac.com freelancerland.com frenchiesballooncreations.com.au fresu.ch frontlyeadinternationalschools.com fuertecaja.com function5.com.au galaenterprises.com.au gammapower.com.au gazedice.com geisterhouse.com geivoip.com genek.com geoav.cl geotechnic.co.uk gersonbranco.com.br giardinosullamaremma.it gironynavarro.com gjoweb.it global-ark.co.jp globaliaespacios.com goldenstatetow.com goldilockstraining.com goodbad.co.uk gooddogrescue.com gorestruly.com gptimers.com.au graduasi.com grafikos.com.ar grandautosalon.pl gravelrecords.com greatfxmedia.com greaudstudio.com grecoson.com greenvalleyschool.com gregemerson.com gregemmerth.com gregladen.com grieta.net groncrete.com groovability.nl groovyboove.co.uk grupoleferas.com gsiquick.com gtdesign.ch gtsouth.com guarany.net guariz.com.br gunesoluk.com gunesulkesi.com guppon.com guyn3.com gvits.co.uk haek.net hafder.com hamiltonslive.com hapaistanbul.com hatchdogs.com hazelfranks.me.uk hcfoods.com.au hcsnet.com.br hdsr.net healinghandsonthemove.com heartssetfree.org heemaalnews.com hegelito.de hellojohnwebb.com helpmegrowutah.org henkphilipsen.nl henseldesign.de herbanarts.com hercinovic.com herms.com hesa.co.id heyfoxcomic.com hguk.net hirken.com.au hitisland.com hitstation.nl hoelscher1.com hofhuistechniek.nl holhaug.com hollam.com hollowmoon.net homecables.net hoogveld-service.nl hostech.com.br hostmelodia.com.br houdevelt.com houseci.com howie23.org hshub.org huffpuff.com.au hwalek.com ibda.adv.br iberfoods.com icisa.cl iclebyte.com ico6.com idealli.com.br iensenada.cl ifcingenieria.cl ijselrijders.nl ikasp.se ikbenpink.be ikexpert.com illumin.org imaimax.com imammaliktetouan.com imaspro.com imdavidlee.com immediax.com immocop.ch inch.net incluschile.cl infohost.net.au infohub.com.pk ingelse.net inkarainbow.com interdentclean.com intere.com.br ipirangaonline.com.br irenicinternational.in irishcarsagadir.net itcnt.com.np jamarhomecareinc.com jawara.pro jetfuelcreative.com johnbrussel.nl jojofun.co.uk kaleembrothers.com kanchpurcity.com keasocial.com kecsfila.hu kellogic.com kellymorganscience.com kennol.pk kewcorp.ca kibrit.com.tr kiismedia.com konican.com kosses.nl kriomed.uz kustens.com kyesgroups.com labonni.com.br lakallehn.net laminingraphics.co.za lddb.org.pk leavell-photography.com ledvinaphotography.net lf-hj.cz librero.xyz likonifreighters.com lillethun.com limpio.ba logisafe.com.mx lojajosemar.com.br lokeshullamkecskemet.hu ltrybus.com luckybit.jp lupusalimentos.com.br macserwis.pl madlychic.com marisqueiraobarqueiro.pt mcgrafica.it mcomlhr.com mcsgroup.co mdk-physio.info meettheharrells.com meinhaarzauber.de meuambientedecoracoes.com.br mewolters.nl mifaingenieros.com misenar.com mitrausahacontrucion.com mjhl.com.mx modbecloset.com molco.cl monom.si mossfs.com.au muebleslostroncos.cl myhms.id najcosmetics.com nasim.hostlin.com netcorp.ec nettmart.com nevhangunduz.biz ngcdfkibra.go.ke niaayuningimandari.com nsds.hr nuwagi.com nypthealing.com omeryener.com.tr omkarcreative.co.in onourstyle.com optimus.com.sg originalone.ma orionexpresso.com.br orohass.com oshop.es ourplace.com.br overonedjs.com.br oxahaus.com paco.co.th palestina.gob.ec parvamusic.ir pastaciyiz.biz pattyprado.com.br paulancheta.com pck.ostrowiec.pl perfectprint.gr performanceactive.com perlahuelva.es pfuse.net philosopherswheel.com poskorea.kr puertosalsa.cl pushupimpex.com radiacaoweb.com.br rafamora.net ramirezllc.com ranking-site.de ravenproductionsltd.com redsolution.com.br renergyholdings.com renkegitim.com revistajanelavip.com.br rhinoplas.co.id riserproperty.com robotics.kinex11.info roshnijewellery.com rsplot.com.br rtisistemas.com.br ruateresaonline.com.br sacredscentsonline.com sagnosys.com saimission.org santyago.org sathobby.com scmasabacus.com scoenuganda.org sehahealth.com sertcom.net servicebras.com.br sfiromilos.gr sggogreenbags.com shadarabia.com sheilasteinfeld.com shivakunwar.com.np signworld.nl simulations.org sirthinks.com skeptic.za.org skpsoft.com slanacom.si slbqms.co.ls slideit.co.il slservicebd.com smarthub.ws smartlogo.com.br smashingcake.com smmboster.com softwarestore24.de sokouganda.net sourcetechno.com speakerrepairs.co.za spiidgas.com.br spindelaar.nl spitzertech.net stageone.dk standardcolours.com starrpromotions.co.uk stolkie.net streefkerk.be subforsanta.org sugarcoatedspider.co.uk suinfotech.net szoboszlorhinos.hu tarjetasas.com tcenteronline.com techhampton.com tecnofrota.net teploservis.info terichmir.com.pk tewoerd.eu tfosgroup.com tgmobile.es theebeautyspot.co.uk thesterlinggroup.org thoseweekendgolfguys.com tomjoosten.nl toprakmedia.com topsmartmobile.com torqueandtalk.com toutdoor.com.my trainingbodies.com tyronescleancredit.com uniaoabc.com.br uniteddatabase.net urbaneden.net urog.co.uk vaap.us valleyinsurancepro.com valorpresente.cl vandermade.eu vasinfo.com.br vemax.sk vidiantec.cl vipmein.com viportal.co vizpoets.com vizyonpr.com vonunger-representaciones.cl vpinversiones.cl vtff.ca w1glv.com w4icw.com wagls.com wak.co.ke waxtoncctv.com wedif.com werkhanden.nl whateverest.ch whenua.cl wind-dreams.co.uk wishesconcierge.com withdrake.com witje.be wormann.dk wtechsolution.com wwpayday.com yeichner.com yeumoitruong.vn ymdc786.com yumiwong.com yusufpaintings.com zakahlife.com zebracolor.fi zurfluh.net # https://csirt.gov.it/contenuti/nuova-campagna-ursnif-attraverso-finto-sollecito-di-pagamento-brt-al04-200728-csirt-ita gestioneinbizzotutto.com inviatotutoneladon.com # https://csirt.gov.it/contenuti/nuovi-riscontri-relativi-al-malware-emotet-ioc-aggiornati-28-07-al02-200728-csirt-ita arrd.ro artewebestudio.com azjones.info ballooneo.com bartboutens.nl bazarot.com bcpcircle.com bendys.com.au benluckman.com biglaughs.org billandroger.com biomayest.com shablingo.com ximboo.com yeichner.com # https://csirt.gov.it/contenuti/individuata-nuova-versione-del-ransomware-phobos-al01-200728-csirt-ita aaron.ug aleaiasko.ug alexliasko.co.ug alexliasko.ug backgrounds.pk band.pk bnixons.ug boundertime.ru dailyvideos.pk dgdfasddfs.ru evanhopping.com imobiles.pk jamshed.pk kanorkanor23.ru leatherlites.ug levitt.ug levitts.ug marcakass.ug marckapiksa.ug marketprice.pk micozup.ru myhostest.ug myhostiger.ug nvbcdfsvxcs.ug qd34g34ewdfsf23.ru qd34gf23.ru shopandpop.su skdjgfbsdkjbfns3423.ru sprakitiktitkitik2322225431.ru tarssdsfdfsdr23.ru time234wa234rper346465432.ug timebound.ug timekeeper.ug triathlethe.ug tribunal.ug uytgvhdfsdxc.ug vcxxzazxc.ug zaragoza.co.ug zaragozsa.ug # https://csirt.gov.it/contenuti/identificato-nuovo-framework-per-la-distribuzione-di-mata-bl01-200728-csirt-ita Mobielbankierenbetaalverzoek.live # https://csirt.gov.it/contenuti/formbook-contro-utenze-italiane 855v.net arbgh.com cookfrenzy.com didunmenye.com dinosaurlanddaily.com jrgqbs.com mailetcinc.com nuraniqq.com swankitty.com # https://csirt.gov.it/contenuti/nuovi-ioc-per-jasperloader-al02-200723-csirt-ita files.backroadboutique.com files.backroadboutique.info files.backroadboutique.net files.backroadboutique.us files.lauragoes.com files.orinb.com files.truxtunroad.com files.weeklywakeup.com mobile-refund.ca mobile-refund.fund new-grant-premium-accreditation.icu reality.relevelled.com webiiite.org wws.saltwatercrew.com # https://csirt.gov.it/contenuti/nuovi-riscontri-relativi-al-malware-emotet-bl01-200721-csirt-ita addahealingmusic.com beeba.io bnemati.ir dainiksomoy24.com metanor.gr musei.basilicata.beniculturali.it oraripersonale.metodoinforma.it postpolicy.it techyhint.com zahran-eg.com # https://csirt.gov.it/contenuti/nuova-campagna-di-lokibot-colpisce-utenze-italiane-al02-200717-csirt-ita colorlux.ro # https://csirt.gov.it/contenuti/attivita-di-scanning-per-sfruttare-vulnerabilita-citrix-al02-200714-csirt-ita hostwindsdns.com # https://csirt.gov.it/contenuti/compromissione-di-domini-su-infrastruttura-azure-al01-200712-csirt-ita 360stage.stahls.com a.eage.org aauw-ampostdoc.scholarsapply.org accessderm.aad.org acdadmin-tng.aia.org acsdonateadmintrain.cancer.org advanced.core.freeflow.xerox.com aem.herbalife.com ahbeardweb.microsoftcrmportals.com aicpasccm.aicpa.org am.us.rothschildandco.com analytics.donorperfect.net analytics.glamst.com api.elfcosmetics.com api.longbow.bonusxp.com apimcustomapi-dev.azure.chevron.com app.ahvoila.com applications.wirralccg.nhs.uk apps.fullertonhealth.com apps.invictusgames2017.com apps.technologydev.ihs.com architectuur.cibg.nl associate.myfortisonline.com autoattendantservicesqa.incontact.com automation.pg.com b2b.absoluteboardco.com b2bapi-service-acc.snelstart.nl b2btdc.pandora.net b2bws.julian-fashion.com beta-invited.slh.com beta.auic.org beta.pksinvest.com blog.codercamps.com blog.washingtonstem.org bmsazure.elas.uk.com booking.ramadadowntowndubai.com candidate.responsivehr.com cart.perseusacademic.com cb.us.stg.cloud.im ccc.blockshipping.io cdn02.empiretoday.com champions-d-content.generalmills.com chat.celcom.com.my chat.fnv.nl cine.naturgy.es cityofcalgarycmg.calgary.ca clouddp01.lamresearch.com cloudpilotsg.cloudatlasinc.com cloudsolvportal.synnex.com cmclouddpsgsin.autodesk.com cms.answersmediainc.com cms.facilitiessurvey.com connect.atslab.com connected.virginaustralia.com costwell.chevron.com create.cakesbyron.com dailysales.brownjordan.com dashboard.adsninja.com dashboard.boostup.com demo06.mediusflow.com demo.booktrack.com detectionapp.3m.com dev1.mdlive.com dev-cd-infocenter.ryder.com dev-oms-logistics.pvh.com dev.connectedservices.emerson.com dev.forsyteit.com dev.salesforce.integration.plex.com devagileblog.acuitybrandslighting.net devoddsapi.wallstreetenglish.com devpmforecaster.cbre.com doc.bootes.co docs.cms.orckestra.com drweb.commscope.com dvsm-uat.gsk.com dynamicsac.perficient.com easishare.bruker.com ecmcmg.broadinstitute.org ecom-qa-nl.bambonature.com elevate17.bittitan.com emergencyresponse.bristowgroup.com eperfectlaunchdev.optum.com es-stgics-avm.jll.com farmtoschoolmap.georgiaorganics.org findyourstyle.fisherpaykel.com fnmaxcmgdp.fanniemae.com football.swisslife.ch full-service-suite.ch game.autoshow.ca geaux.lsufoundation.org gettyclouddp1.gettyimages.com gifts-uat.unrefugees.org.au go.daymarksi.com greathallcontacts.flydenver.com hatchery.entrepreneurial-spark.com hippotalk.total.com icqa.skillsinsight.honeywell.com iknow.dr.cch.com.au inflightentertainment.sas.no inhabit-portal.arkadium.com innovapulse.innovasi.com internationalservicesstage.rrd.com iot-accelerator-dev2.ddm.iot-accelerator.ericsson.net iq.aecom.com itpolicies.ycp.edu leprdsccmdistpteuwest.lincolnelectric.com library.inthehand.com linode.hki.org login.ec.co loveisajourney.proflowers.com lti.intelequia.com m.macaronigrill.com mail.somersetcm.com map.carlgross.com mclambda-devtest.cpsextsandbox.mayo.edu media.antenna.gr members.dotnetfoundation.org members.i.playboy.com members.ussvi.org microsoft.icertis.com mitanorifusa.com mobile-beacons.clearchannel.co.uk mobile.apply4housing.com mobile.hullcitytigers.com mobile.stratasys.com mossupport.mcd.com my.disciplesmade.com myaccount.scottish-enterprise.com myob-multi-dc-sit-singapo-cfs-v1.myob.com myusa.veinteractive.com nexarc1service.kemin.com nlgsccmconnect1.nationallife.com nucleus.robomateplus.com nw-b.ecolab.com ohmy.disneylatino.com old.deleteagency.com oneanalytics.capita-one.co.uk onesiteportal-stage.rrd.com onespie.spie.de op.elfcosmetics.com partners.honeygroup.co.uk pay.willassociates.co.uk peerwatch.complianceweek.com pfp-int.az-bots-gre-projets.viseo.com poc9.icertis.com portfolio.theglobalfund.org ppkpi.cbre.com prdmarep.udtrucks.com prepd-sitecore.solr.arm.com press.desigual.com prixmnbawards.musicnb.org prod.vallen.ca production.go-dove.com pspapimgmt-test.premera.com pwcs-grants.pwcs.edu qa.api.sapaccess.warnerbros.com qa.boh.com qaappcenterng.deloitteresources.com qcsampler.genpact.com quantumleap.pason.com quote.model.healthmarkets.com recommendations.govx.com referencement.levio.ca remote.packtech.dk returns.americas.pandora.net rldp.redlobster.com rmspecialstamps.com rss-prototype.bd.com s-sccmdp-cloud01.loandepot.com satisfaction.darty.com sccm-dp.acuitybrands.com sccmclouddp.providence.org scm.ordermanagement-test.maersk.com search.us.epg.toshiba.com secure.openenergymarket.com secure.web.powerapps.com seminario.iipe.unesco.org sensformer.cloud.siemens.com sessions.digitalwpc.com sfgateway-prod-east-api.carmax.com site.chopup.me sitgbapi.globalblue.com smartusw-sts.gep.com smoke1.remix3d.com spaspera.cloud.jci.com sportsfirstaid.redcross.org.uk sso-api-poc.mybswhealth.com stage.cleanwithkeystone.com staging-consulting-covid19.euromonitor.com staging.auth.idahopower.com staging.capturetech.com staging.ecofastensolar.com stagingcms.johnsoncontrols.com stgwww.ispeedyloans.com storelocator.dtc.newbalance.com storetool2.albertsons.com storetool.albertsons.com stpaul.partnerinhousing.com sts.hgem.com summary.batransfer.com survive.infocomm.org tastings.neudesic.com test-cbreitp.intrepid.cbre.com test.lark-it.com test.scandichotels.de testazure.drivetime.com testwebservices.hawaiianairlines.com tevatogostgrw.tevapharm.com tge.tradeglobal.com thevillagesatpinevalley.com thor.mdlive.com thweb-azure.teknikhuset.se tibco-service-dev.usga.org ticari.mercedes-benz.com.tr timesheets.cfed.org tra.g4s.com trace.accenthealth.com training.iverson.com.my training.trin.net tuap.teamusa.org uat.ovhq.msc.com uatstandby-www.cushmanwakefield.com uk.ziraat.turkline.com un1cdp01.uno.adt.bms.com uoncmgtst.newcastle.edu.au uopxcmg2.phoenix.edu usersapipre.vertele.eldiario.es v2.basic.net ve-service.genecards.org voar-tracking.volvo.com voyager-dev.kindred.com wiki.gibson.com wine.mydexrewards.com wisent.mitt.ru wisent.mosbuild.com wordpress-itec.azurewebsites.net xlcatlin.leopard-np.swissre.com zew-api.travelport.com # https://csirt.gov.it/contenuti/ursnif-veicolato-anche-tramite-file-word-al02-200708-csirt-ita 9ygw2.com 35lvt.com amehota2gfgh.com e9bja.com gofast22gfor.com ioyyf.com lets-drink.ru lha-sa.ru nix4e.com qumogtromb2a.com softson.ru vpsrating.top # https://csirt.gov.it/contenuti/phishing-per-la-diffusione-di-avaddon-al02-200707-csirt-ita tldrnet.top # https://csirt.gov.it/contenuti/nuova-email-di-phishing-dellagenzia-delle-entrate-veicola-ursnif-al02-200708-csirt-ita gstat.careinmexico.com gstat.peshtigodental.com gstat.sloleaks.com zdesigns-studio.net # https://csirt.gov.it/contenuti/campagna-ursnif-veicolata-attraverso-finto-messaggio-dhl-impatta-utenze-italiane-al01-200708-csirt-ita casevacenze2020top.com uncomfermed.com # https://csirt.gov.it/contenuti/nuovi-ioc-della-campagna-ursnif-agenzia-delle-entrate-al02-200707-csirt-ita gstat.sergiocilli.com line.winneratlaw.com # https://csirt.gov.it/contenuti/strongpity3-utilizzato-per-il-furto-di-dati app-system2-update.com apt5-secure3-state.com awe232-service-app.com cdn2-system3-secrv.com file3-netwk-system.com fileservingpro.com hostoperationsystems.com inhousesoftwaredevelopment.com mailtransfersagents.com mentiononecommon.com ms6-upload-serv3.com ms21-app3-upload.com ms-sys-security.com mx3-rewc-state.com network-msx-system33.com safecopydisk.com secure-upd21-app2.com service-net2-file.com state-awe3-apt.com syse-update-app4.com system2-access-sec43.com system2-cdn5-mx8.com upd3-srv-system-app.com upd8-sys2-apt.com upd32-secure-serv4.com upd-ncx4-server.com update5-sec3-system.com updt-servc-app2.com # https://csirt.gov.it/contenuti/campagna-di-malspam-distribuisce-formbook-al01-200705-csirt-ita cifcolorado.com easterncarryoutva.com kungwsdycommunicationtariffsuplier30mgh.duckdns.org yofdyk.com # https://csirt.gov.it/contenuti/finta-fattura-brt-veicola-il-malware-ursnif-al01-200703-csirt-ita lavorosubordinatosmartw.org # https://csirt.gov.it/contenuti/aggiornamento-campagna-di-malspam-che-veicola-avaddon-al01-200701-csirt-ita transip.digital # https://csirt.gov.it/contenuti/codice-malevolo-per-sottrarre-dati-di-pagamento-nei-metadati-di-immagini-al02-200701-csirt-ita ads-fbstatistic.com apilivechat.com bestcdnforbusiness.com bizrateservices.com cddn.site cxizi.net j-queries.com jquery-analitycs.com jqueryanalise.xyz koinweb.site lebs.site magentorates.com pixasbay.com sonol.site teamsystems.info towbarchat.com undecoveria.com webtrans.site wosus.site xciy.net xoet.site yxxi.net yzxi.net # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-di-malspam-che-veicola-jasperloader-nuovi-ioc-01-07-al01-200701-csirt-ita documents.catherineschepise.com documents.cfmontessori.com documents.hopedaletech.com documents.olivasmarket.com mamontenius.club z2uymda1mtk.top # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-di-malspam-di-ursnif-nuovi-ioc-30-06-al02-200630-csirt-ita gstat.peshtigodental.com gstat.premiamo.com gstat.premiamo.eu gstat.secundamo.com gstat.secundato.com gstat.secundato.net gstat.securanto.com gstat.securanto.net gstat.securezal.com gstat.securezal.xyz gstat.securezzas.com gstat.securezzis.net gstat.securityguardlisting.com gstat.sloleaks.com line.ehrlum.com # https://csirt.gov.it/contenuti/malware-lucifer-sfrutta-vulnerabilita-critiche-per-impattare-i-sistemi-windows-al01-200628-csirt-ita qf2020.top yzzswt.com # https://csirt.gov.it/contenuti/campagna-sfrutta-tema-del-coronavirus-per-veicolare-bootkit-rovnix-al02-200626-csirt-ita 0077.x24hr.com alex.dnset.com bamo.ocry.com edge.microft.dynssl.com loge.otzo.com microft.dynssl.com ruclient.dns04.com # https://csirt.gov.it/contenuti/nuovi-ioc-relativi-alla-campagna-malspam-di-trickbot-al02-200625-csirt-ita memberlogin.cloud # https://csirt.gov.it/contenuti/campagna-malspam-di-masslogger-al02-200624-csirt-ita geohydroconsult.com klisa.com.tr opticaoptigral.cl # https://csirt.gov.it/contenuti/campagna-di-lokibot-colpisce-utenze-italiane-al01-200624-csirt-ita nnasout.com # https://csirt.gov.it/contenuti/nuova-campagna-agent-tesla-al02-200623-csirt-ita mail.protege.com.mx # https://csirt.gov.it/contenuti/campagna-massiva-jasperloader-veicola-ftcode-via-pec-al02-200618-csirt-ita documento.haileywilkinson.com documento.jescy.com documento.mialeeka.com documento.noothercouncil.com documento.selltokengarffhonda.com z2uymda1mtk.top # https://csirt.gov.it/contenuti/exploit-sfrutta-la-vulnerabilita-remote-code-execution-in-exim-mta-al01-200618-csirt-ita hostapp.be # https://csirt.gov.it/contenuti/campagna-spam-di-trickbot-sfrutta-il-tema-black-lives-matter-al01-200617-csirt-ita copsbiau.monster mnjcszrh.monster shmbidgp.monster vmrriktf.monster ygzggxeh.monster # https://csirt.gov.it/contenuti/attacchi-a-pulse-secure-vpn-al02-200615-csirt-ita anno1119.com host.cutestboty.com keepass.cutestboty.com # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-di-malspam-di-ursnif-nuovi-ioc-17-06-al01-200615-csirt-ita gstat.peshtigodental.com gstat.sloleaks.com gstat.vmf216.com line.harpbyrequest.com line.monalisapizzeriasi.com line.orangetheorymb.com link.icloudcowboy.com # https://csirt.gov.it/contenuti/campagna-di-phishing-ai-danni-di-utenti-amazon-al03-200612-csirt-ita earnmoney.lk # https://csirt.gov.it/contenuti/identificata-apk-malevola-che-sfrutta-lemergenza-covid19-al04-200611-csirt-ita inps-forma.online inps-informa.website # https://csirt.gov.it/contenuti/aggiornamento-sulla-campagna-di-malspam-di-agent-tesla-al02-200611-csirt-ita mail.ductoslimpios.com.mx # https://csirt.gov.it/contenuti/campagna-di-malspam-distribuisce-agent-tesla-al01-200609-csirt-ita dextrotrading.com # https://csirt.gov.it/contenuti/continua-la-campagna-di-distribuzione-di-apk-malevoli-tramite-finti-siti-inps-al01-200608-csirt-ita comunicazioneinps.top # https://csirt.gov.it/contenuti/siti-di-phishing-ai-danni-di-istituti-bancari-italiani-al04-200604-csirt-ita aggiarnamentointesasanpaolo.com aggiorna-dati.info aggiornamento-updt.com aggiornamento.info appintesa.com assistenza-gruppoisp.com auitoaccessomail.com bpolsbloccare5333.com direttivasicurezza.online gruppointesaisp.info info-dati-020.com infodati-020.com infosecurepsd2mps.com intesa-sicura-cliente.com intesasanpaolo-it-login.com it-authentication-fcc-job-fcc.com it-jod-fcc-fcc-authentication.com m-cartablocco-unicreditonline-verificare.com nexi-aggiorna.com poste-it-pay-fcc-html.com poste-it-pay-fcc-jod-html.com poste-it-pay-fcc-jod.com poste-it-pay-fcc.com protocollo-poste-l1taliane.com protocollo-poste-ltaliane.com psd2intesaweb.com remissione-carta-isp.com riemissione-carta-isp.com security-fineco.com sicurezza-bancobpm.com sicurezza-web.cloud sicurezza-web.site sicurezzaaggiornamentiintesa.com sicuro-accesso.com stabilisci-nuova-sicurezza.com verificaisp.online web-dati2020.online # https://csirt.gov.it/contenuti/campagne-di-diffusione-del-trojan-bancario-ursnif-al01-200601-csirt-ita attenzione.hazlotumismapr.com client.seamospracticas.com gstat.couturefloor.com gstat.peshtigodental.com gstat.premiamo.eu gstat.secundamo.com gstat.secundato.com gstat.secundato.net gstat.securezal.com gstat.securezal.xyz gstat.sloleaks.com gstat.ylonnsalonchicago.com line.mbclegacyllc.net line.starlightgroupllc.com # https://csirt.gov.it/contenuti/nuova-versione-comrat-al01-200528-csirt-ita anger.scieron.com arinas.tk bedrost.com branter.tk bronerg.tk callsoft.mrbasic.com celestyna.tk ceremon.2waky.com crusider.tk davilta.tk deme.ml dixito.ml duke6.tk elizabi.tk eu-travellyta.dns-report.com foods.jkub.com ftp.callsoft.mrbasic.com ftp.ceremon.2waky.com ftp.fueldust.compress.to ftp.geraldic.zzux.com ftp.linear.wikaba.com ftp.mysterysoft.epac.to ftp.onlineshop.sellclassics.com ftp.robot.wikaba.com ftp.tower7.epac.to ftp.zebra.wikaba.com fueldust.compress.to geraldic.zzux.com hofa.tk hunvin.tk lakify.ml lindaztert.net linear.wikaba.com misters.ml mouses.strangled.net mysterysoft.epac.to nexus.x24hr.com onlineshop.sellclassics.com pewyth.ga pneumo.mooo.com progress.zyns.com razory.mooo.com robot.wikaba.com robotech.lflink.com sameera.gq sanitar.ml scrabble.ikwb.com showme.twilightparadox.com stager.ignorelist.com sumefu.gq tellmemore.4irc.com tower7.epac.to umefu.gq vefogy.cf vylys.com wekanda.tk zebra.wikaba.com # https://csirt.gov.it/contenuti/scansioni-massive-a-danno-di-siti-wordpress-e-vulnerabilita-individuata-nel-plug-in-ninja-forms-al02-200508-csirt-ita count.trackstatisticsss.com ws.stivenfernando.com