# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: cabassous

# Reference: https://twitter.com/LukasStefanko/status/1367829807740944389
# Reference: https://raw.githubusercontent.com/prodaft/malware-ioc/master/FluBot/FluBot.pdf
# Reference: https://twitter.com/malwrhunterteam/status/1365793233561931782
# Reference: https://twitter.com/danlopgom/status/1366435961031307267
# Reference: https://twitter.com/danlopgom/status/1366825739966943235
# Reference: https://twitter.com/danlopgom/status/1366825434160263172
# Reference: https://twitter.com/danlopgom/status/1359966295307993091
# Reference: https://twitter.com/danlopgom/status/1367095477729185795
# Reference: https://twitter.com/danlopgom/status/1367549689990701063
# Reference: https://cert.orange.pl/ostrzezenia/to-nie-fedex
# Reference: https://www.virustotal.com/gui/file/865aaf13902b312a18abc035f876ad3dfedce5750dba1f2cc72aabd68d6d1c8f/detection
# Reference: https://www.virustotal.com/gui/file/70eea8fb0b93988c1c46460922d74ca4ab2eb0f7f51be307c12932ac510cdd27/detection
# Reference: https://www.virustotal.com/gui/file/b3008e13973f3bf6ed83b5a26407e4566772e0dbe83f7a718d56e0a18cf8f125/detection
# Reference: https://www.virustotal.com/gui/file/6c481ec9a25fa36e2e0838f036dd073ea55764db7e3c58c9ce8d74818f355270/detection
# Reference: https://www.virustotal.com/gui/file/2af548766f9a368e72dfab3c5bf4123da0d52f603e405e801f79a4a9c5b5c07c/detection
# Reference: https://www.virustotal.com/gui/file/648ea2b910bc075aaf699780ef3d906e921d91dfc0b269562d9309a509c9f5b2/detection
# Reference: https://www.virustotal.com/gui/file/c9ab1bce68498551a78c4c28cbbc36e4a827d81a51090d6ed4a5b9ca1fdfb698/detection
# Reference: https://www.virustotal.com/gui/file/4400fca6a1fd60f0d7ac038f47db379d0a7e63c73ca1ef0f4d1a039d47c94de3/detection

aanwraenfbhdaaf.cn
aaqqbfexhqugkua.cn
abfjbmqwgtroxpu.cn
abjokehvdhxfaub.ru
aciwqgxdgjowgih.cn
acnyysxxdwiuoxm.cn
acqcfapuhvcovay.cn
actgwnonjeipdko.com
adrvkxptajgukxg.cn
aeuqgxavgolxadm.com
afdajjgvammcbvi.ru
afeljdcreurlmjp.ru
afhckrfcucjbpln.com
afwcduhohhjkxkb.ru
afyvjupqxqynafp.cn
aghwispjhwixffu.ru
agiuqojiphdeauf.com
agqgeawibhbnywm.com
ahhodetoqjwfybg.com
ahhxymysvldwwio.cn
ahojxjlhxnxeykn.ru
aigecvyxywtksgw.ru
aijaawbttdfsvlv.cn
akdekfmthpymsvf.ru
aktgamjkdfiefki.ru
alldskacquuvtfu.ru
alofkkglanitkrr.ru
alpckuceunppyre.com
alqbcqlxycwvsct.ru
ameghpukktmcpvr.cn
anekoevrqvrnaro.cn
aoeaqxivuikhhdp.cn
aogedvhwqhuokpd.ru
apdjmmfdrpokfbc.com
aphsjyfxeaseein.cn
apsxleswlxubbdv.com
apvqxcvijueewul.com
apyctyvecyrevqd.com
aqdqttaeoyrnmrv.ru
aqoxitqxsrfdxhh.cn
araxnenewnhwvkr.com
argloidkapmogie.com
ariwdxibmqcxlbt.com
aroancojhbsddpb.cn
arpjswgiulewuoi.cn
asumiidttvkgbcq.ru
atauslfvfvnqols.ru
aukfjdvbgtfncdk.ru
auxdtbknhgmqnxf.cn
avmykadfqrygvdk.com
axokiobnhwhkulr.cn
axykfqcftfnpnmy.cn
aylfdcsljplfxxd.com
aypwkpletaqfnjg.com
barhpcuisnhbyst.ru
bcjynykldbiqrcg.ru
bcqkophhiqvdvgc.cn
bdcysblrsgyjqub.ru
bdoefrixkguoivh.ru
beaolwvgijvycxb.cn
bfegtxrvyvccpjc.cn
bfqvefgqtqefaad.com
bfsggebsrhigyxh.com
bfwewctmfocjicw.cn
bfwqwsfsicedupj.com
bgsyekipwthqhhx.cn
bgtakongahxtkiw.ru
bhsuhgpctoxncij.com
bihyokmcdgjkhsl.com
bjtedattupifimd.com
bknddknwurhijts.com
bknevgcbcgjgryh.cn
bkokyvkvuqvugcw.ru
bkufdlimlcirxfh.com
blaganfaqbsmgwc.ru
blarbkptgeegope.ru
bldioxafcewaqbt.com
blgtfjuivesafbr.cn
blioyjhiyivdmfq.cn
blmnbajqhvhaxuj.cn
bmoyobnrhxicpqb.cn
bmpfkgsottkswfh.com
bmxnstolaixxfjp.ru
bngeqtoukymsvvt.cn
bnuxggqlpxxmblw.ru
botwmdtnoeoplog.ru
bpptsubhhkurkwx.ru
bqmncjkrhswmdvo.ru
brdbhphqbjrjqgf.cn
briltsgfnfataep.ru
bsjruvgfhbysppu.ru
bufundsmlqtoaen.ru
bvdpisnlgvpmlrl.cn
bwjphhcjjgylyvb.com
bxtejrhenflaxxa.ru
byjlbyktoacybds.ru
byjolhtricmcbww.cn
cboatnnbtmdfvdl.ru
cbubjnmbjknedxn.ru
ccbfifbqqmlgfks.com
ccirqrgmgetmbfd.cn
cdtagcsyhcmqxih.com
cefawsyjtehnlwd.cn
cefgmykcvririro.cn
cepkpicfqsxnbmm.ru
cfbeegbsqhockhh.com
cffdhjivgwgxoio.cn
cfjpidiedjnqtfa.cn
cgbxvyihkijnxdt.cn
cghsvjnquarqgul.cn
chjlnayqtnjnbwv.com
chkglkcfkiimkwa.com
citfaqktvxqmhgr.com
cixarnjjsuybstm.com
cjnwtrejhmfkjpn.com
cjreskrfixbofeb.ru
cknvvashwcgpsji.ru
ckpgqfpjmdsnmuv.cn
clhngupmjgsriym.ru
cmgkncelmoonebi.com
cmlqcqxrkjtolol.com
cmrclludytlqyks.ru
cmyuddcjcmkufqe.cn
cmywoctgwltdoln.com
cobwuoqskkkanvd.com
corxcbfbpjcunia.ru
cphgpbyqevdfyxw.cn
cpionxvkpifvcdf.com
cpqsxqijrgveadw.com
cpsdhnmqondlllr.cn
cqdkvryndwbddvb.ru
cqneokjwcxugkcb.ru
cqwgxxoaofweejb.ru
crsmjwyfjquabwt.com
ctackwqinkrfugj.ru
ctikcljlvlvuuvm.com
ctndmnpymdeptfk.cn
cwsvwcjblfrmlwe.cn
cxvspggbgebxava.cn
cxyoxwtieqhtugy.com
cyakgvrphivqwcx.cn
daklcjvrppyyukv.com
daojeqcvcpbdccp.cn
daxyveofsrpdchm.cn
dbkxgwjrwgxruix.com
dbwerglalqgpwea.cn
dcatajccgjamucn.cn
dcguefmmoekiypu.com
dckhborssheephs.com
dcnipvgratjruvo.cn
dcqfmkqjllcluix.cn
dcwvmylfhjexyon.cn
dcxtxfkicpujnty.ru
ddeocyowmeaygbk.com
ddhyynspffewmcs.ru
ddirggmoihkooye.com
ddvntmwntvdbkoa.cn
ddwuicyulopnwie.cn
defvdhlbxhsehtx.ru
dfvqeflkuqfulmm.cn
dgkfksjvblianxj.cn
dheseholjuxfflg.ru
dibqsviwdslvmiy.ru
dieyebmgaywsbrn.ru
diojelqkrsegjym.com
diupniffbkjpyvx.ru
diyggkykiemmfal.com
djtyscqssdgcxfu.ru
djubiuwyeqbhrmc.ru
dldweihumrtnmeg.com
dmjpvnstmaykhqp.cn
dmkpheoqsfuvwxo.ru
dmtsapgopieksdy.ru
dmxugclercudxya.com
doglgmpmkftjqyu.com
dovqymddcsrlfgs.com
dpkahitrmfvrilf.ru
dpskvidirolrpcx.cn
dqeorfleriqotou.com
dqffrirckyowkvl.ru
dqwumskcdkplrxu.cn
drqrhekwucdkdby.ru
dsedhqimgoonplh.cn
dsjllaauvfxtxuu.cn
dsqunoillmcdoxj.cn
dudvfodovjobtxk.com
duldffhumngdbxv.cn
duwufemxhapjftc.ru
dvfplkvoelcujut.ru
dwkgucifeuyhrch.cn
dwpvghqerdyhmwc.com
dxpttfpovphhwjp.cn
dyfrnarseoolike.cn
dywfsybugwoghpx.com
dyymivwnefixqje.com
eammomtwdkqwmsu.cn
ebjggwjfxlafciv.com
eboyewtljkwywbr.ru
edgcwxyyvmgfnbn.com
eervsxqdgyikmhg.ru
eewejwpyhbafoef.ru
effxaeriausikua.com
egbqtjwddcxtlma.ru
egithvtwovplrxa.com
egtfwvqpsbftiqa.com
egusnkbawrrmqvj.ru
egvtvyvarmrisoc.ru
ehjhihxkxtgbayy.cn
eiobblimcjpilij.com
eitttfjfckbgelp.ru
ejbkykyxkooiigg.cn
ejojskccavcddqo.ru
elfeyiukixinahg.com
eljxatjbxepfcgr.ru
elnrxfmqsspjsyw.com
elwbqfqfghlxpot.com
emmkmqvrrkblpuv.cn
enbxwrrtggomjgc.com
enhiwngfjswdkny.cn
eohufinsvsrcbbo.com
eokanytmhjqfswf.cn
eoopqhnbpbwxclr.ru
eovcpvasgcbpjuw.cn
epkjcqbtmyfbfge.ru
epsxxsxomquwgaq.com
epvaofsgfjwvewd.ru
eslmewittylmlra.com
esyiyphpjlstvsi.com
etdrcxqtmdlutrf.ru
euawwyiswjikswl.ru
eujkglihomdmrky.com
eunglmnjuufevlb.com
evchwjiqxidktir.cn
evleovgokbeenaj.cn
evlffvtxyiwfoer.ru
ewleehcpfyydswu.cn
exmgfgrmxnynxky.cn
exxmriatntvfoob.com
eyaajmkplljwgip.cn
eyehjhccaxwcssg.cn
fafowfyqhhqxhal.com
fbaqywqsnyomill.com
fblptyfksljymrw.com
fbphqmsnjmibhro.com
fceccfqfdjlhvnp.ru
fcvyjvpvhiahxaw.ru
fdoeicdtatbclsn.ru
fduilngaddkauet.com
feojshpssinmect.cn
feqbtuynwwyggwo.ru
ffbcpscmawpbjep.cn
ffeociakegkyhhu.com
ffhvvqpgqcnjudr.com
ffiefhesleumhlc.com
ffjpbxhthftrgfb.ru
ffpswyswjjidvhq.cn
ffvxdkphbkhndty.cn
fggyptqjujebvmi.cn
fgyemsrowyycnad.cn
fhjmycynemymlrj.com
fidyaktyihncivu.cn
fjfradhxmoxyntm.cn
fjqwnvuftjohsce.ru
fllmdhmbajwgktw.cn
fmldilqvgnfbydv.com
fmoahaghasvocvt.ru
fmuwswuidukaojf.com
fmwhtnavjmpnexe.com
fnaktpcwfotoffn.cn
foetborbvauflab.ru
fpabeiodvuifqxt.ru
fpnyotcfkknfrdy.ru
fqbeabscsdtiupy.com
frfsclgljptbaxv.com
frlthhmnkqoyjvy.ru
frpbjaiufnrebxs.ru
frtfipptlbqlmwf.ru
fseybuuxsbgoxis.com
fsfehkvgnkfcpsf.ru
fsoqcbncxchrttx.ru
fsyuxixsfcseeid.com
ftdhrmkbiehcrwe.cn
fvnpavrghdbivxh.cn
fwahuhqonhyugyi.ru
fwiskpomrwlqayc.com
fxfalwypxibyhfa.com
fxfdieflbuovbcq.com
fxjjxcxhqqdpmuv.ru
fxtusjmhmifelhc.ru
gaseikatxpyossm.ru
gaselhrotobhlba.cn
gbfcdnbooxdhglj.cn
gbmbtfcluhmdcmg.ru
gbmsxoavsgkvkdh.ru
gbntqrvqlvdjhre.cn
gclflbpdaneyden.com
gdfulgrixrmygxy.cn
gdxrsuwpvjoxrmu.ru
gfnoykhgwvkkcqg.ru
gfqlpdxqxvaxcdg.com
gfwiidnfelvevqb.ru
ggjqgheomqtxolu.ru
gguelhjueiscaqd.com
ghfitfonkilwxjq.com
gicxrabunqbtdnk.ru
gidvapccvvlmcvb.ru
gijlppvrxfoldtj.cn
ginncxhjnsuwmaa.com
gjbtsodgjqblmcu.ru
gjdqfjtkdraddfx.cn
gkdbembxcvefnvh.cn
gkficpqyiiqmwga.cn
glatpucckyfadye.ru
gmcxypfrtwvxduh.com
gmqccqxusqwptyi.com
gniyjnftnqarshe.cn
gnsaiyqwecwonps.cn
goigbbbqjqypkbk.com
goosuuwoqtxlncv.com
goxymjbqvmcyuvh.com
gpcaiqfxdwnldrp.cn
gpweqfxunhlmtgx.cn
gqkvshqtjncedjo.cn
gqnsmdgrdffmtol.com
gqrhsvlhfdjctiv.ru
gqurmfpjptrxheb.com
grmwlioyojtanmg.cn
gsfijnkehhnjvil.cn
gsfviikpttsbbbs.com
gsghxihwgjvsxps.ru
gsxodywuquhqiwo.cn
gtlaqagqucyucwn.ru
gtmgdlwqbygqewc.com
gtpjvfnrmpfbtic.cn
gvdthkmcsnschgr.ru
gxbjeybvqfqhkfy.com
gxtmoxswrgvmfgy.com
gykgaiboudkqllm.com
haxhsyxmjbdbaqp.ru
hbpdygpqsmobunq.com
hclbeieqcjcyhlk.cn
hcxbtclfjwbrnrs.ru
hencwofqdhffiex.com
hethldbhrjmpkpw.com
hfgmocegbxwgdcy.ru
hfkhlwbbomjopyk.com
hfkiejptrhauscu.com
hfrsqtbdsyunoqe.ru
hhemjrcnernxogj.cn
hhpkxtbsosdsxxl.ru
hiraqaoabxlcevb.cn
hjgwdcmgqfigxdo.cn
hjkqvviirikisxr.cn
hlhygqvktjdijcu.cn
hltfpjlrmgivomx.com
hmblqkppcvswiey.com
horemwgqxwicwns.ru
hotbndyijnoecwr.ru
hrojokkcbrkbxdb.com
hsbxuxcgbaqmwwa.ru
hseqjsodtwqahvg.ru
hsoouriafowflvc.com
hspfkaqxmygxwqq.ru
hstdlxbdksgojgr.cn
huqndffpuwwidqw.com
hvvsavyesaxexri.com
hwpshloyytqdfkx.cn
hwudpgdumdonibr.cn
hwwaoyhclcyehps.com
hxbpbqhwvvcriwu.ru
hxntfaqyapsiqap.cn
iaoniykpebmonyp.ru
iavyfuioscfqvqn.cn
icnbgjhgqutnfqu.cn
icngkchdhxomtdo.cn
icxxfbqyjlnahxn.ru
icydpclofwtycwv.cn
idsjhynlpbklgqq.com
ieeoghbagexgumx.ru
ieysddhrghwqnem.cn
ifbpvmtsmdfoaqf.cn
ifyitxxysnfinje.cn
ifyybssgkvmiwpj.com
ihasfqmfcshecrg.ru
ihdggyhxcfmydtn.ru
ihgwhswhcabpeqn.ru
iijmfmmecrfppuq.ru
ijksiflsrpxhsvb.cn
ikqmrxdqubkbgjy.ru
ilmkjioilodjtlf.cn
ilrohvtsqeylbqk.ru
ilynavfqveqtaeg.cn
imcxbilsxtteiiu.ru
imwhkrfvliaycgt.ru
indlwmovfleifyw.ru
inljdnmsfrynxne.com
innnklaxjhqitnx.ru
iowdkmmsvsxhbre.ru
ipiravjcwmjpjxa.cn
ipuwwyclqdkdmta.com
ipvdewexoipwopw.cn
iqqrprkoficgsiu.com
isvfjxbvrbltisv.ru
ithhrwroxrxsxfy.cn
itltddbxhtbjlcl.com
ityulcbrusjcxks.cn
ivmikinhwnvekkt.com
ivmwoaemnttecjj.ru
ivsidewdwmtqhib.com
iwwylyffdnfdbit.com
ixexifcomsummmw.ru
ixkqsxaqklovyap.ru
ixoxgouuwurswnl.com
ixshbrjebrwhnwp.cn
iyfyavkocgfpqtx.ru
iyglxtoeoutpksn.com
iyriqxafgofwvvo.com
iywskerfbpwsyqk.cn
jagwvpmhykktllh.cn
jakyjjtvfaqnqyg.ru
japqwboytxecunt.com
jaxcwtvwifsnbwa.ru
jbdjxucduafwype.com
jbfbfsabuouicef.cn
jbifpmpwluknchs.cn
jbrfsvmivmaunmc.com
jdawgpryehptdoy.com
jghqmotvhbvumqi.com
jgjimndeoofdrsq.cn
jgntqsipmfotbxb.ru
jiewhjpjaoxyali.cn
jiuyniwbhmnrubd.ru
jlpgflyyeaoeaay.ru
jltitpgjcjekcgq.com
jlxyfjoblhbtgfu.com
jmqronkgbwrkfgp.com
jmtsjfxulhwdjac.cn
jnlwuxdomtfbijn.ru
jnvjqjqohpstoqa.com
joxcxsbjibkwoqe.cn
joysqegeomjdipq.com
jpbqlxiallxpxnf.ru
jpfjmpnljoiwhqp.ru
jppvtokpawavgiy.com
jpvcdcrdcunreya.ru
jqcwcytygfwtvil.cn
jscfxowpsxjkcwp.ru
jslfayaigibymuw.com
jsyqatkfhvebicm.ru
jtjwyjgjafafhqu.cn
jtsdocuwlccwglf.ru
jutrgkjheauvqyr.cn
juurgeejvpfnjbe.cn
jvkfvbokmapaobx.cn
jvowpfvfarsgtwl.com
jvwiyfmqkhigwst.com
jvxgrtqakurtiww.cn
jwsdcrqwapytasa.com
kaijeakafbayhhf.cn
kbpjaudvjhrnebn.com
kbrynpphwjoggbi.cn
kcvsclvvwkkvgfy.cn
kdjulkijqippwal.com
kdvspomrfxftehj.cn
keqktdewlngduhh.cn
kfpwfwsxvdsacuk.com
kggmnugishoxbgy.ru
kgrfystgetbovps.cn
khftkckeutensfh.ru
khpppvetmepsvvp.com
khxqcqdhhhfrdth.ru
kianuwmdyormcsx.ru
kidplmbgvuluaag.com
kisnddkubetywag.cn
kjktgowyjpwqsop.com
kkkbohjocvynaxw.ru
klkbulhhajiyfkf.ru
klpqittcotqdnxm.com
klwgrbbgqjbvegt.ru
kmyegenydffnsfk.cn
knapjtjnonuajnt.ru
knbaarqegqblfda.cn
knpqyuikugosbag.com
kohsijubfsemawc.ru
kpcrnmshjaoiueo.com
kqdvngbywrvmmmc.ru
kqgbwkstxniuowm.cn
krkscxwautugyxc.cn
ksddlmjcoooniti.cn
ksgrnxgxymbvbgv.ru
ksslvaotocfldln.ru
kudcbrcljqiiett.ru
kuifprqfriiyyhn.cn
kvbqlxomdfcegfw.ru
kvrphyhhvynsvwu.cn
kvuxjbbrkgevquq.cn
kvwkoyytvehadxi.ru
kwffdbsdlcfhtce.com
kwolckfgiprfdqv.com
kwxsgvfgkxmhcfi.com
kxpdgktubwsscdy.ru
lairlwinssvpcin.cn
laxhptestprwokn.cn
laxixnnswnfcoat.com
lbdvdftoknnjgnt.cn
lbocvavxnkpvbvy.com
lcocvrvdvahiggi.com
ldegfaqyuwboqwk.ru
ldnocdjqnadgahl.ru
ldowhyaagocvtdo.com
lesbfbtbdddaraw.ru
lgjbgggbdnwtqii.cn
lhbvioolmlyahhl.cn
lhkbriycuyjvomd.com
lhlpuiuondtplma.com
lhsehfdwxffuitx.com
lhvhohvxhnkvbdm.ru
ljblxkbwdwuurpp.ru
ljbyddqaojwvyje.ru
ljwwwmkqyokenuk.com
lkdiyoonwkuthmh.com
llvghtkonayepmf.ru
lmdafwovatgplrk.cn
lmripkknynioatm.ru
lmryiwxkakblkkd.ru
lnnrpwtstcbmdhn.com
lohdrgogelpkxxb.cn
lpkbiosgxpngnot.cn
lpkptkcelxciheg.com
lqibdkotaucksjv.com
lrpvtnjtrdpraom.com
ludbguwoikqxexd.com
lulssnjcqqajjgb.cn
luwardwlejahsbl.cn
lvdfyfpbohjrwwh.cn
lvgexkblrfusxey.com
lvoejsfiguknkhk.com
lwaraonwaiqhawj.cn
lwpjrswmnrydsdf.ru
lwsvrnxeynydxjk.com
lyjipqgvatsuogp.ru
lyygjgmcgtsmosr.cn
magqobsrkbbmhyp.cn
maqbkfaixyrfcsn.com
mbbdocsmxnkhgpw.com
mbhpikampombehi.com
mbmsyqjwqdregfn.cn
mclephhixqglxae.cn
mdfpyswhiiyhjai.cn
mdfyowlgrexbjwy.ru
mdjehpxhefsxifs.ru
mdmjfwjrgoufwcp.com
mduprmmkjlvqtqe.ru
mehydvdcjuigoew.ru
menevvhknaenjvr.ru
mfiwvrnhgefmyqi.com
mfksmyhyabqxkwx.com
mhdeedruvsxreel.ru
mhjybelfmyietni.cn
mibxlaweodxuliv.com
mijwllgmyvjtcvv.ru
mixqegolcaooltr.cn
mjpamkjtxbdolqr.cn
mkhhuhmjxrjtodg.cn
mkmghhairlgrdun.com
mltswjeccqkvcwj.cn
mluvjrwnqpfpvnt.ru
mmpconekgycjvvv.ru
mnbnswcbnxhpuue.ru
mndsbxnjnrjiypf.ru
mnqplujqudptpak.ru
mnywlugjajphabv.cn
moipyikngfuiolv.com
mokfrwlxvqoiefs.ru
mphmurtbopounlc.com
mpikvlyrssveawq.ru
mpjxffasubdgvyv.ru
mprowumsdyvgghh.cn
mrqsgfeffjwpkrt.cn
msjrjhgtlnctwdt.com
mtapiinwmkwseis.com
mtlrklkpjibxbpp.ru
mtoncrdutxeukcv.cn
mucvffrknrjhjxp.ru
muqgllmqtyllhwn.com
murlkkkvtskmwaa.com
muujqouejmpffxt.com
mvpokngbpjrjgnc.ru
mwbgcpjqewuygbu.ru
mwfwamivshllffv.ru
mwidejisrxepklj.ru
mwjaxydhoexrjyq.ru
mxkpxxdssvtcyie.cn
mxmpinsvyflnocr.ru
mxngngeqbvyvqrv.ru
mydfoflvtxqckjj.com
myrpledycyxoxma.cn
nakwjjgodksaqlu.cn
nbamoxlgxvtkwyo.com
nbsapslswphceqf.com
nccirnjhhxsbbjv.ru
nceoheejkfmetkc.ru
ndiqpstnaqohouk.ru
ndltcgvgcordbjf.cn
ndudrwepdwgneuv.ru
neglhorjtxytjed.com
negunsuvnyvdtth.cn
nejlqrdlrcpqxqa.com
nemijaejsbdyjrn.com
neujswqimiiyqyr.com
nfiuerwtftasnuk.com
nfsvbynnchharvh.cn
nfvvgdylfigiopt.ru
ngilabqkuldcwod.ru
niawjsysgtwcdwl.ru
nihlhyunjlqliaf.com
niqdpjnfjbyfhbd.cn
nkbxfalorbybuow.ru
nkgqmlxgwldvynm.com
nllmqwdfqodeolf.com
nnqmxbresslhabk.ru
nohnyloidcptxob.cn
npajtiulqcqptcp.ru
npfsqrodkoepprx.cn
nqxddpbemfadwbl.ru
nreqylterfaakai.ru
nsgrkhspvewffsy.com
nskslupdknospmr.ru
nsnbbjkxcgxgjjw.com
nsswougjinpvylq.ru
ntdlhorkxjfwhnl.com
ntionnipvshqtcx.cn
numhlrevekwqgpq.ru
nuwvblhdxxfmekp.cn
nvexvamourqpcxb.com
nvsblqtnifdtgoh.com
nvscuotpjdmakhk.com
nvycontxvmivsoc.ru
nwnffcpxxjdxrwb.cn
nwuatybejfmrvsn.ru
nwurnlyiqubvfkj.cn
nxbokpgblxopxvl.com
nxbpdrjvedygoss.cn
nybrjwbpsmnlsid.com
nybyfinwnjhlevi.cn
nynefkmixxdyjmw.com
oaucwtyydncadvj.cn
oavbveucikrleln.cn
obqhavwnjvffwsx.cn
obunryugtpfyssw.ru
ockhtvflukcrcyn.ru
odcevlqjgftiktv.cn
odllqejlvifrusi.com
oeghxhvgioqhmms.cn
oeqwycnluwrnsso.com
ofpgldafgifivjr.com
ogljepgtlsadmkp.ru
ogwynwflobucuai.cn
ogxlqnmlrdeogyf.cn
ohqirfhnsqsaxqs.ru
ojwukiufnqgngmp.cn
okmqovbevdshrsl.com
okoufarxbwultjr.ru
omeffvgmrmhadhg.ru
omnwcnnkdtvtiob.ru
ompvhltihymydqq.ru
onbovbflumldvqu.com
oojivbblpllechh.ru
oqoiqhurnjrissc.ru
oqpyqajfypmcubf.ru
oqrikubwewmrxyt.com
orhvcwuvelcxfem.ru
osagiucjobxnhke.ru
osgajkwnbcwmnpn.cn
ouhfhinobucavpq.ru
ovwjbxhcapejcqq.cn
owtshiuafvvanew.ru
owuddgyplnfyuvy.com
oxsuupqqpacqckw.cn
oxtomfoipilbtpn.cn
oycwtdstgdvjjyg.cn
oyxxxdlpmlofhif.ru
pbqftskkdpafhwm.ru
pdrucdrpniwtufr.com
pdveppjojfjjkfb.cn
peohskmhbiwaswx.com
pesboqatvjamlhw.com
pgkhqdviamlocyv.com
phjwalfidbxxvlb.ru
phledgdrfiyrmnw.cn
phonxgxplrdsixj.com
phrsxehbusmwffh.com
piiwejoqmhpiqmd.ru
pijwnklruikrefq.cn
pimghpkweyawjch.com
piohrsjgdyjidvh.com
piudujxgseiwray.cn
piuirquaynoxkfn.cn
pjaujttthtfprhc.com
pjicpmdialfdyqs.cn
pjmfkbcspvpgcwg.cn
pjtcpclcapghsvm.com
pkreptloyxicxve.com
plfjtpsvvqikvda.cn
plnbllwpglrsckp.cn
pmgahmprryywigs.cn
podhflxrllvjreg.cn
ppeljnkclllxmui.cn
ppmvufyxiexkind.com
pqgyenmyrelcngd.cn
pqnqjamxaokkstf.cn
pqurxflvpsoefbt.com
prhliebweummrbk.ru
prntrahykgcrnia.ru
prpmwxvwfiorjch.cn
prwwbhlxsbsmiga.ru
psikwixfjpbcabj.cn
psimdmianbjhlnc.cn
psmcdxpfsbaiddi.cn
psyqwiswnquomgn.com
ptokfjafudwymel.cn
pvojojongtosxby.com
pvtbbkiyerekrtm.com
pvuywdlnfmptmul.ru
pwaudqxqefkneny.ru
pxjirtaxlsjwgwr.cn
pyccseyrufcopyt.ru
pygihdgdeadrpdk.cn
pyomuddunnwxtlf.cn
pyyrujubbkngfnl.ru
qaarisivivypivd.cn
qammkmalgvlmidh.cn
qbubmslwomjjesp.com
qbxbisfealqjqno.cn
qepeekuqqhnsmui.com
qeqrgwoxudutvwi.cn
qetqjlvqlbjyfkx.com
qgdwihvvysnxpjh.cn
qgfqhaesbammhtl.cn
qggvsmskrtxnslu.ru
qglrxmiupcesvdp.com
qgwrovlvikkuned.cn
qhjxqbrcpsvhtfi.com
qhusfplaqitswle.cn
qjdloiivmvhbsrk.ru
qjilaekcflngllk.ru
qjtwxuqfiflawuw.com
qjxvabelptjtxdt.ru
qkcomhaxsfrrjqa.com
qlebrfvtysnwbju.ru
qmogpahqjcgoagi.ru
qmycwjlxmqongbg.ru
qndwqbicpjtlkbg.ru
qnxlaqkufnhvkuu.ru
qnxufixdwwldcle.com
qnymkylenyoqpwn.cn
qodadnchrlecycp.ru
qogvqnykvmlofgt.ru
qoyvokggjcwsync.com
qponudgniecpmtq.cn
qpuagvgmokdhndb.com
qpukbdmwunvxbwx.cn
qqwscbqhxhgomhp.cn
qrymokwrciexsdl.com
qsdfstvqkdrwaao.com
qsgobchwtjjqupe.cn
qswkgxgfuoaafer.com
qtehpiotalpwsdt.cn
qtjeskshelmuvgd.cn
qtrowsuxeikobjp.com
quavgidtipqfovh.cn
quiijmrcjnieyqg.com
qurmhgxoktkhcpr.ru
quwxisdftrhkuqx.cn
qvoftmbtkputdqq.cn
qvwwqulxxllpyro.com
qwtuaokfhsytrqk.com
qwvicqnfciumlvs.com
qwwlxmhrkbmpjnt.ru
qxbppbfooefvhok.com
ragssqgcvjpytoj.com
rashmifjmuwdasw.cn
rbaqixumwbmyxfp.cn
rbouffjfqkowepl.com
rbssoxafckiwifj.com
rcfwhnshsapmrns.cn
rcofhhkonqyiskn.cn
rdlohtjldbnpgve.ru
rdncapkqpplmvcr.cn
rdpxvfwdcleuovy.cn
rebhdtasswhmkjc.com
redojjvtckxiofu.com
reswulypwfcvxkq.ru
rfnbwrsvrosywve.ru
rgvfheevneuacki.cn
rhcvroigmnpcmip.ru
ridnmvirwqlhdcw.com
rincaalpyucjyjr.cn
rintertbuxwapmv.cn
ripcnsfjwxgpneh.com
ripmnsywbxpdgee.ru
ririqgxbhsejlkt.ru
rjffyijoujniqwe.com
rjrewjjpsmdknlg.com
rkerxltmviyhauq.cn
rmjqcpgjflnjofv.com
rmrlrjitqkqfacv.com
rmvcjdkmredohdb.com
rnayepmwiunlyrm.ru
rpkiphlorhhkqbw.com
rqftfksniltqdxs.cn
rqqyqvbohlcvcea.cn
rrhljmjflyuhdpo.cn
rrkduvjjhlxyhcx.cn
rrxekrjcdbsdxbg.cn
rsbklnqmpabsdxa.ru
rsejbmgsngwbwvy.com
ruaxghebjddbdqc.ru
ruxqtwaslincyot.ru
rvaegorilgvnhld.ru
rvbcvnafwvsnswa.cn
rwahjqsrclpiyka.com
rwkpgmxbsawosyx.ru
rwvtsjpfpvbjfed.cn
rxxhfwaonmvcavu.com
saaapxpjglvjgrb.com
sacpiasuhmlksrq.cn
sajnwyrbfvtjdnk.cn
sapubtmxkocfbgu.ru
sbgjcvkbaagfchs.cn
scktdkxsfaqikhl.com
sdphxscadqcdonc.cn
sewlvyisxriwryu.com
sfjmlvkkprqtdrh.ru
sflwmivnswlsspj.cn
sftjyoqohpwvgvy.com
sfxjdfmstmkipfo.cn
sgbilgciwkjbmwe.com
sijniemwgjmlfjv.com
sixcskysiimnpbh.com
siybeyttpjjmbop.cn
sjbnevwvlbkvrjb.cn
sjhachsqwmuqgfq.ru
skxudnbnhxecghy.cn
slabtrqqdqusbdi.ru
sllsabcqnohsrhv.cn
smferkhrlkfvdom.ru
smpidqcicxmxtst.ru
snhmnftdbdrgkkx.com
snrpjeofcaxhbnf.com
sntcbjbrlrhwmkd.cn
sohsgdlwdcwgdfo.cn
sojvpfualvevysf.cn
spmbasvyodiybor.com
spneqflbltmhywr.ru
spspcywaafwputv.ru
spxawnystuourms.cn
spykpdmbbgladek.ru
sqsmmxuikesbsnq.cn
sralsqylauhkvec.com
srfpaglwctdyqfb.ru
ssfgybvnoklehic.cn
ssmweihrtsvybtb.com
ssrmacgshpvtcvd.ru
staciwyviksbtfc.com
stjlxcttcvhaawa.com
stpbinqmkpbteqg.ru
stqnrvuwebjrnpy.cn
suaxtqrksgchcwn.com
supnnuutuvohmig.ru
svmbnqaestsfida.com
svxcnuvulymsxnl.cn
swadcgmgxkjkwlr.ru
sxkocqlqvgcvhcq.cn
sxofaxdpgvwlcdk.cn
sxslrmlyonijylj.ru
sycmqdjoypqanwr.com
sydoabsopkrvokk.cn
sygkdyacbvspmvj.cn
syjrydlhhvqgmfj.cn
syospbqkrdmvutx.ru
tagypxecprqdbfn.com
tanorafjtajykpx.com
tbiwtyfpjgngfam.com
tcypntigaxpfoiq.com
tdmxinoscqmifdi.ru
tffhotoqtisagqh.cn
tfgwuiksvmhogcq.cn
tgckjysnsksdpqe.cn
tgcsrjnmqdfrgbk.com
tgtolpnapkulekl.com
thiifhtubrifsug.com
thyesvueyqyjdak.cn
tiphssnimcgisfl.ru
tixnvluxunqbtkd.cn
tkctiryvuqlkvcj.ru
tkfqsvjbgyleqty.cn
tkiwwrilxrtahol.ru
tkxxugvvydmroxs.ru
tnfbkkbcsgeldui.com
tnolychicxnajsj.com
todwadvhfstqvmn.cn
tpqyfuuhvyogsof.com
tqhksacttdgqblf.com
tqikhtnaryobvjv.com
tqtaqkrmpmcvyoi.com
tqujoohyveamxtr.com
trfsjbbwumejajr.ru
trrhkeerrcutxck.cn
trtpshuhxlsflyl.ru
trygpdmyjxkdsqc.com
tstwujhjsktlxjo.ru
tstymrqmtouljce.com
turfdphqcnbtcdt.ru
tvgtplxgfpsojby.com
tvquugbavqmbbbq.ru
tvugdbqqlkntocd.com
tvxheogfvtdxjhs.com
twjwflyyltwqyrf.ru
tyamcjfocyhblwu.cn
uadnewwtfulbunp.cn
ublhgyemcejpjmq.cn
ucjpepswxgapfvo.ru
ucuafvglvfjtqas.ru
udeudwmyvrlwplo.com
udywgixlogbytlx.cn
ueymmixrowmxmkk.ru
ufqtwuvhgysrjpq.ru
uftjrfktbaptvra.com
ufxwgivlmryjnod.ru
ugbfwxglnrqhfea.ru
uggpgbijtglrtrw.cn
ugiyleydfbsbdiv.ru
uhjyhkesxfyejxq.com
uhlkknbcablfmwm.com
uhrnfwbfhnslmjh.cn
uiompneqsokopks.ru
uipetolrlxddaqe.com
uivufodcapcricj.com
uiytimvquvtvwuf.com
ujyqyhpgnvqcxht.com
ukfyeipqutaudhs.com
ukrllmhlymtsrww.cn
ulabncrxgjvqhuf.ru
uljwmlsprcbojvc.cn
ulrjmyogriwwflu.com
ultsftcntlurpmo.ru
ultwshhwmkkqurq.cn
umhhtjpmjwlyvpy.com
umhrqkbnmcpheuj.cn
umkcwrmvsvkpahu.cn
umnhosjqqscqjxy.ru
unaxytalxsnrjil.com
unoabtkyhmmbxvs.ru
untmwqhkjcbvwrh.ru
upsuygewbvvcshr.cn
upvacoibigjjpyk.cn
upyxyiqlefndoqv.ru
uqbwynmwqoqctjn.com
uqhfbckltoeyass.com
usdujurilmuihol.com
utfhyabpqwkjnkd.com
uuyjevlpteuwccf.com
uvdwqqluhogoijk.ru
uvipskudiqnvigt.cn
uxcfyupcrhpaiqa.com
uxdhbiqoorlmulo.ru
uxervqujdhqrnss.cn
uxgdfelqldbdbhs.ru
uxyopvqluvihhjf.com
uybvbvrlwgqlvef.com
uynkqqmkbnlnmwk.cn
uytwscwayhyngul.ru
uyyeuuapcgsddyc.cn
vabtxdguvhawmud.ru
vadfkyofdcmdcoc.ru
vbgktmcvqhmgoja.ru
vbrhpoogaxrlsbj.ru
vbxreltcldmllcy.com
vbxstownpcnnovy.com
vcigbiphggumxtm.com
vcyepklwfxuxbwk.cn
vdcsyoagpmolayc.com
vdkpqaplqweyamp.com
vdmnpbfylttfvbc.ru
vdudsmbinrydabp.cn
velkiqantccnkxc.ru
vengxnkptdvsgsw.ru
vfmmyclvylmrqiq.ru
vfnoxlueflkvicr.ru
vgcobtmgehglppv.ru
vgyfgkbnfwjpcdv.com
vhbeuxudwdvlqmx.com
vhcedlfyavavvuj.ru
vifwqdicjodfyde.com
viptdxfvbmfqhli.ru
vjdmpxusblfjkwc.cn
vkevkpsdleyrkgo.com
vkjkrghqppnywdc.com
vkvrytillxlwchm.ru
vlkagekhmybtcvu.cn
vmnwmswtrcffxod.com
vncdaglubvghxnf.com
vneugtrknyfngos.com
vnrnmlfchnrncdw.com
vntcdtfllortgcu.cn
vnysmhuijgymock.com
vownaknthmvfmmo.cn
voxyppxgynxmjff.cn
vpchnplhwdtyhgm.cn
vpgpqwqaedvqmnh.cn
vphvafbfhdsnemn.ru
vqdannrtaoqtadq.ru
vqmbdkpqhlwmpky.ru
vqyaqfrscpqestt.cn
vtkcyetqbbpyiix.cn
vtqqlhrqcdqnoxm.com
vtrnivkfemunovm.ru
vtuvnbiuxoinnkg.cn
vuamxpdobwirqpr.cn
vujnyotxacgdqoe.com
vvvqmaecqpvflry.ru
vvxitnwrtidcjpm.com
vwdneesevcqgmbn.ru
vwlobfwryuufwfv.cn
vwtogfbhnreqnfx.ru
vxcibouassdttmd.ru
vxfldjaxxkoprxe.cn
wabvmhqakdjaxvy.com
waiujivgtbpaajt.com
wasbhdsovdhbvmp.ru
waxkenrjmgentmp.com
wbaxodbutxfheqy.ru
wbeamhdmwfttiyh.ru
wbicdmkkqqxjhhd.cn
wcdsolyaxomvmjf.com
wcpajrnhbsmtybm.ru
wcvemukcaowtymg.cn
wdnygftqmcfjcfk.com
wefjdyrunjntwan.cn
wenkgefmpgfumtk.com
wgbpxuvcvfamkdv.com
whutrxxrjchlxmg.cn
wipnhcwnsepnpka.ru
wkhpuauehjepjbw.cn
wkmxyhqjbygyvxg.com
wlpdndmptfcbyrn.ru
wmlrmceqrrihhjg.cn
wngvwnnfejqemuk.com
wnyyvojxafrtgjm.ru
wqmniyjixewwqao.com
wqtfjqmdpqhuief.ru
wqysijjhhrksrpo.cn
wrmumpkfqeqgcss.ru
wrrgopmymfndwlu.ru
wrsgljyxnrbbieh.com
wsmkamsjllqjcvm.com
wspepervneqfejl.ru
wthmpyptbtusxql.com
wtkfmdghrgcfedd.com
wwqwhnktrhexwyc.cn
wwtprwjpjmrwqmi.com
wycvnifhextducb.cn
wyfnuaxqqkjovdb.ru
xbahrlsbmmtryjj.ru
xbjcomgruonltxm.com
xbqtflvliyposxx.ru
xbvnruvgufyaefm.cn
xcmpxxritxtfyol.ru
xcnsxtocwmirxbh.cn
xctaxyrlolfxbgu.com
xcyqcvcmjbyothm.com
xcywomukxpivobw.com
xdaoallfmpofukn.ru
xdjrlxnqyxuages.com
xdlwjftgovrolxh.com
xdmdnlutgvsvwvd.com
xdykofdhhvhcnpk.com
xdyowlevuqxcwjl.cn
xebrgrxvbumvxqk.ru
xeetckoltwnxwwp.com
xffqslcosfmqbiw.cn
xfouugjfrevlwty.cn
xgkkvpargstuydl.ru
xhashhsbjvhhvby.com
xhltefjqalcqkua.ru
xhyavbcvwbdkivb.ru
xidaqybkvyoxatl.com
ximsuadccplmgii.cn
xjhqtchtlynntep.ru
xjjbfawpktllcwa.ru
xjnwqdospderqtk.ru
xjodijaqvbimiqq.ru
xkegjsghydeflng.com
xmliunwauaryqmy.cn
xmnpjigtgumbqas.com
xmtbvrcaybjexgo.com
xnantymueatctmu.cn
xnpavbeiinrjtvh.ru
xnxedhvxnupfkwr.cn
xobxpysjxgyxreb.com
xplyisqsflhtdxe.cn
xpnfmynfeexmvue.com
xpvgjytteavmdeu.ru
xqgncdiossylkpl.cn
xrgyarcskfsgviv.ru
xrjadlngomhinck.ru
xsjowjmqrloeoda.com
xtstatelqakjevy.cn
xtvoynvjjpdmvbt.cn
xtxuyybfkggiyxb.com
xvaujunxpvqwmag.cn
xvotqqbheijyagt.cn
xvslwshoqffbkej.com
xvyukfxjkjmjtfp.ru
xxdcirjfgbwtqyq.ru
xyfrycveytlsqgd.ru
yadlubmysvxwvwo.ru
yagksbdtdslfglo.com
yaigvuswcfcfhtt.cn
yclmnbbevsvdbhf.ru
ycnlbnyqrfhrxor.cn
ycrautpmqxcwvjx.com
yctimafpurliied.cn
yerlshnpyjvinll.com
yeurapicpbaolgn.com
yewlwqxegfofueq.ru
yflobenyqfulmpd.cn
yftfwxmebmdoveu.com
ygqafpxtmhibiko.cn
yguoptvnkssfsly.cn
ygythvgnfcoljrt.cn
yhxolurakulmsiu.cn
yibpjvhgskgnxwj.com
yikxbhtevblkiok.cn
yipbwrancfsddwt.cn
yiwnkkjmqakwdhx.com
yjqefgacfewiosw.com
yjtkfdsolgdmpwk.ru
ykbdbfmeromwewm.cn
ykbngclepgrxxlm.com
ykigqqcalungqmv.cn
ylhovncsvjilobi.com
yllohjknjroemwo.cn
ylnlxelxycbuyso.ru
ylswtbbqwftujbb.cn
ymgqgmktfphmrqw.cn
ymtlpcbvrvtrvpp.ru
ynemlprrkcrshic.com
ynemvycrhmphomk.cn
yocbdfumabycoqj.cn
ypaxxxsdufsynhs.cn
ypntnjcxksqwliv.cn
ypqwnsiyrpjyams.cn
ypwvenxjqtbhprw.com
yqacqfbqrmbyipb.com
yqeslhwpvheysmf.ru
yrkhkpxajjfaytd.cn
yrlvjxohnehgdcs.ru
ysdyylcbsclwbkq.cn
ysulndoywnlqbld.ru
ytqleavjdgcyxaj.cn
yubopapvnkroiuf.cn
yudqbskjratlkcn.ru
yvbcnsrlhcferui.ru
yvrooofmuedvgnr.ru
yvynhfcixeqxcby.cn
yxacjhvvuqegpwg.ru
yxalfnoogockvxa.cn
yxrpotsgitdqrkd.cn
yybrifghaetcvar.cn
yyjgltaqqejbsls.ru

# Reference: https://www.virustotal.com/gui/file/f637eabfb108e216ead136f57779af4460827bbc0fb41062eb43481d3f9d4fde/behavior/VirusTotal%20R2DBox

afwqeoimudrxmxr.cn
yqdrpkjdyaailla.cn
mbashvvhiwipcsn.cn
qohnjxhmjujxdbw.cn
wllpyweaabufqsj.su
jytwkcttbqiqhcy.su
ajkywnslawhakqo.cn
lijeetffxiehgvf.ru
artinqkorsaawyi.su
momquhxicusxjau.su
ryobbibosbutjka.ru
mbcwrtsacrmrhfg.su
iisdsoyjgwmtxyn.su
blibfrjbrqusawa.su
kyvgxhyxbxfrgqr.su
erfdvkmhuiwfnlc.su
uysowwpawwfrotc.su
ymlxqxnvtqwgfel.ru
pyicgoqwapsynlg.cn
vaktgoiiyfbkjba.cn
euqsbbtgyeiaqke.cn
glchklmehjcjebs.su
aksopkgsjbfvlpc.cn
lgilntjdmnpsakf.su
gjroejnhhkiresp.cn
hvnthbkihdvyegg.ru
xbmsfjfvctwfwnf.ru
exompfnfuqchrna.ru
bmvpfvrbnlqcdyv.su
ddhpherfptqfupt.ru
lavbiustsdjplnr.cn
mqwttcqpsnevedd.cn
djfdvdhttiknivo.su
jnyqtdtvfjplmbk.cn
vcsdnoynshmkajx.su
caywgyrcuookxkv.ru
hsfimbbodxryocx.cn
ufxavwhrcjpjulg.ru
pmhgfdfykhbnkro.cn
vqlesvpqwosimba.su
jfcjwobwtpnvtsa.su
kgdlfwfrvtgkwfs.su
nfurwunfvxrmapr.ru
vhdruiivodahvtm.su
tstomnrwknymjjl.su
qwdpcwtboodatpm.cn
fgbirgdmwrfyyqv.su
hvntbvbqshdjttr.ru
ebhmqyxqekfuegc.su
optftgeqpyxubtg.ru
ykgxtyynewpefqv.cn
rnfnoycgpvfipls.cn
kdsrhkdwvlpjdbc.cn
mjlkdlmjwkjohml.ru
skjkygqvjsktfxa.ru
ubrcsxvrsmarigh.ru
cggywufidijvsyn.ru
byeryyfjpaphayj.ru
pniggxbpbbatpwf.cn
idmxmefeaviobjw.cn
oxqhhvygbalbohm.cn
eusweoockiqfvot.ru
tdausshdyvmlrvi.ru
mypvmvoyswyjctj.su
fwcyyqlxbiovjan.su
eucljviwqhmejav.cn
flbnikuinhvgoca.ru
widieskibtvuadh.cn
vljmeewdtvabukd.ru
cnqnsffvdlvisvs.cn
anmwhjehdhnyouv.cn
kfipyvafbgyajlr.ru
mupbrucjfkjfymc.cn
udayukhreygvgjb.su
pjxcxohhdaxcuuw.cn
fllacbbjmowfbsx.cn
mrocugncoyknyeb.cn
ghgcupycgcsjgol.ru
uljdpahwasremor.cn
nruuljgtcgletnn.su
idaeodymlyjwsci.cn
jikifhqdjxtvymb.cn
djityvjyvmlbpnv.cn
bdyepvllnaquuvw.ru
rqvudrtvilxdpfq.ru
ffediyhtmjhlcav.su
qskmmyanvjdebhx.ru
xoyuteksimijmbq.cn
wamhafsfgopwpjx.su
cfdwkvyxeirkthb.su
bojkfideptdbknn.ru
hysiwtnvhvgcymd.ru
cwwaenkcnxmfugb.cn
mnrebdefccecacp.ru
jxqqrykhyrlwkdw.ru
jfbdxypesyfdtbk.cn
ydsbmjrvlkclvwx.su
poelivvvtpcwdvm.cn
wtbnwinlxdxbvim.ru
xmguwvjvvdxtmau.su
legdyvmqnfbjjyn.su
tieseowhpgffhvc.su
jccjesqaxftpgel.cn
sqcimyrvdjnnjie.ru
ghjinnhbvhgvyis.su
rnhlndjnohmxbtp.ru
dxobucbqavhabkv.cn
lbhqdkkcvixemxk.ru
vqqmruxhinmgdgx.su
ershjrbyxittypn.su
hketeghrsqclahh.cn
hpnsosbtrbdlleu.ru
aercsmnhahonosu.su
sjtkdcgnwcvujdt.cn
pqorripjbspffpm.cn
uoxdrmlsgxafnxf.ru
gbqkokmqmkkyilm.cn
pwuyqdwuurubdkm.su
gfaeosmcdotqpft.ru
ubhpemqqnrndsgn.su
hhoaujlxwnommxy.cn
gikufgrokboiwfq.su
yqvyjfedmdvhbhj.cn
oafeneynrxpayde.ru
ltwitgyygiiiljt.cn
uykqgnqruolhmwb.cn
sfgcnjmewnwexny.su
rstfdgvkrsktfjw.cn
exicigfirlmrfej.su
wwrlocohdfcaqxo.su
xrlsllacttaeujj.su
bafwbyyvaogbwwg.cn
cwveyswcopidkgu.su
eqptfabgsaealha.su
svkeooqsujihsgl.cn
ucbpnkwfwtcgajl.su
nxirdyjbkrglgrc.cn
opyulsdbdwnwqbv.ru
sccvqbtdgeelvxi.ru
cxynrmpejkkktxm.su
ljyosdjypndvfkp.cn
bboleljojvhbiod.su
pfofuvbdmrwusno.ru
owqwexrcqkcnkvl.ru
afayljolkqhsmdu.ru
kdplseejcocenpg.cn
kxtceahbwovximo.ru
ljfnumcgavkvxar.su
rtvunfdaxsnnsio.cn
mhkxvancspxderb.su
nlrdpgdbrettaga.su
duqmkmtaiiebstq.cn
uydcjmlttdivbjo.su
yrtwjxcwcufwawi.ru
wintobihytobuqq.cn
gicsvrriaassofq.cn
smpetgmneipeheb.su
jhawpidgaptrcxk.cn
yqjjruuuqdobkqy.ru
qgdextvnqurcxgf.cn
totjyqbrnujvegw.su
afkbesbmstjqqpo.ru
spkvdivphwnvime.su
xmsdhkptiwiqpwj.su
ipjewqgxhkfnvtf.cn
phxgtvfygiovkob.cn
syogcycrmhxmrtc.ru
lougejkudirogjk.cn
vtojkbppumufhtq.ru
fpgygfoddxexydb.su
kaqyqfmmaryqcir.su
tgiufcaqqddyowe.su
hdlswerlyvhxbik.su
bbedxqsxrmriwju.cn
mnhoaghaonmyauf.ru
hvnxawfjgtmknwg.su
nvrsvqtaiblgyej.su
gfagracgclmksax.cn
yhwwqakubjldvbw.ru
ytokoqjkypjsimg.cn
lbekgejgtevxkqm.ru
llrfkallgbsytim.ru
fkibeaksxmxcdom.su
liyagwwhsnkqrck.cn
pmsvakqrvujpijg.ru
ucxybqxfnmojwrm.su
wajkktmbuenrwur.su
fdtficyyqlchtro.su
irleqatejegifur.ru
hsdhfnkdnvosrqy.su
tmkwsnnokmwguxy.ru
selcpjtbxtqmjhb.ru
wmaqvrcjwpxjoid.ru
lnkafyoubxkcvlq.su
etsutwkqwouuatb.ru
tkgfhfecnywjjfg.su
qfylvtdhairkock.cn
bvatjicprdimrcl.ru
wcwjrcwsagkngmu.cn
lowrwjgihmbibdi.su
mqkwitdxqfsogrc.ru
ubddksgjasfigks.cn
vmvvbdtgwlitcpt.su
ghggvumwrujfiki.su
idqirdpipwlvruf.su
bcoqxhjaeigptog.cn
ougqtabvfnrrhcs.ru
pqvrmqhufhqpftn.ru
eidjiwwmnqktcwf.su
myjebddxpxtlchr.ru
fisvjvlhbjgotjg.su
scjnbfduiiwjufm.cn
ygjvwwacrcytsns.cn
jkjlnvnnkokiqsh.ru
faaoyanxxrhccrt.su
wvmcvjulteswiws.su
tbumvswxongispn.ru
lkirqdboxnhfkqe.su
drinmuimcalagfe.ru
qoogdtckbnndhsg.su
ketthevkevkxqva.su
ltyngqjjlcugaor.ru
mvikhhyjicsjudd.ru
wcoarsaurlawtyx.cn
efiqubmovnbvkee.ru
puwjjqhedfuplsw.cn
uaddartdlgjfiku.cn
rftmbpbhthcrvpg.ru
jyusjhxutuydjwt.cn
ffvgpfpvfajjvqw.su
sdcfwmidagfyuty.su
jvhyntocdbiuapw.cn
rctrtptjouarosi.ru
lpximqhpolivuxg.cn
wlwrousnqpsrppo.su
uspohlafihvvcbp.ru
nelvemsuljfrihf.su
lyxcftvgnjligmh.cn
aaohtgxtsubuwno.ru
keemayhnmdhthux.cn
ljdmrlcedppablr.cn
dmogqrchfnqfpgc.su
ilwboqkyvysaeqs.cn
dkoeprusmqpegxy.ru
ickbtendhgjoigv.ru
acnungnxkmepahg.su
xtxwgwmnfpqpgcl.cn
gqgjsleiangknmn.cn
hpxhkpnggrtimio.ru
jdrshwgxllkysqj.cn
hvclewicovbcert.cn
msunukkkiqjdttu.cn
xghimmtlongbdxo.cn
nwcnefripthyqql.ru
sjyuifjxpldgbqp.su
hksyeolightlugp.ru
swkrfkvspsxudfp.cn
ostkjqcxjakcdrh.ru
bypcfycwlahhdqo.su
dbeahfuekmkscai.ru
lymajaedlhhbdtu.ru
ccuywndrhkcpksl.ru
dfltpmpyvjrtorc.cn
nmqlytgjhrhbvrl.ru
gfhpfudlxvbhflg.su
tuvumigtjxwrvku.su
ehjniybgmsqxnqv.cn
mftifhbftmsotpc.ru
ypqiiueoclrmfak.ru
htcydxapxcoslto.ru
huiqeihmeogeivn.ru
uujpambxclfwntk.cn
gjilsxavmqnudid.ru
xddvjjbwgcsvlcr.su
xehosafmicepdqo.ru
qhdjmdwmagcsgbc.su
yqlhigplrkwklmf.su
omqeglgryhnowou.su
blhuywjxbpnjkjk.ru
qgfuvuwmjdagrfb.su
qnqmuqjluvjeasv.su
xsxeftadohpnsyl.ru
esgwchbjhittwxq.su
ibawchadiorbwsj.su
qsgbgsrjccepxvh.su
pbhhqwplxusnlhi.cn
gxfmewncrtvplgi.su
irikpomdqwkqnbq.cn
lgmlabluiajjvol.ru
hbnnwtewguvquhu.ru
fdumubdaubtjrqm.cn
tylevwhviqkmrsw.su
umnoinqqbsjfuyp.cn
ibfpijatigefmmk.su
oqvakwskyyivuky.cn
sgwjawgjyamanwf.cn
ctjmsnhtmrwdkwf.su

# Reference: https://www.virustotal.com/gui/file/ddc5894f94aa512c97411bba8002b60e51dcdeb395777ee4303f010c07999397/detection

abxgdjtqgqweiir.cn
afqemmepehbrbam.cn
afytdwbtesjnqpk.su
agejvgnltlkwmgi.su
aggqwuhwghnegkb.su
ajsixbncgampajb.su
akkypsmgmunfcvd.su
akxhjolyvtsbeja.su
aniongskvybgore.cn
anshgbwgcvhewux.ru
aqdylouopooetrt.su
arlyrjspgccdarv.cn
ateujjqdmabujlp.cn
augsqptdjbuwepa.su
avqofjhjcyasphq.cn
avviftlvijienfc.su
axcqjtehnwtvtdd.cn
baydoihthhnvbvv.ru
bdufipjchjmyvrg.cn
bglvoweqestfqmd.ru
bqogembvexrvmvq.ru
brouwmtxqivlxlx.cn
bvclnjxeaxggvpp.cn
bxhhttgmcagmgnw.su
cgprvnvpdbisllr.ru
cifwwvxjoaeqfju.cn
cipnkepyulmatul.su
cjdqhadxpprlgtq.cn
cjjayqgjmaoudds.su
clagqvodapraqfx.cn
cmtuoqsxfedrmki.su
cogtmpemasvgfnx.ru
ctifyjahkdrbyny.ru
cvdtnxgrqcxrhyb.cn
cvjbugbbpeiebyn.su
cxcvnrjhkvsynar.cn
cysnyflvfvpoipa.su
dcakgpvgccjgxka.ru
ddopftohlpuufru.su
dflimtgnxjnvggq.cn
dgdoobgrlnoxihj.ru
dgkkuwyxvecbwyl.cn
djssqbxcnmypwnh.su
dkfklerbqcdoswy.ru
dohqsgdisjcnoot.ru
dqrqkcxjvcpwwej.su
drsbphccekymega.su
dsiiuthgqjsvfrw.su
dtyppgirkelijpo.cn
dxhxfgvpaqkcfox.su
dynwarkrrduaynq.su
dyrjlcaxvdmpgum.su
ebeaxsvupqwcvyu.cn
ebmrxcljxpsofjg.ru
ebpnlvgsgkqttgy.ru
ebymtythatsjpqy.cn
ecehfupqkjkebse.ru
edgayncyboefioh.ru
edgoqbdmdhaievg.ru
efgpjoqmrcnpuwv.su
efthnlryuvelfeu.ru
ejadnphmegmlohk.ru
ejkturkxiqxxwas.su
enmdqudyoehjvei.su
eobvwncabbqdveu.su
erpekugbjntumcm.su
etiacnxhhcrgmkx.su
eutwbfulbpmaakp.ru
evgmkxlrbvbjssg.ru
evrdqukthoyjoav.ru
evuthbifionftlu.ru
evuxvnkrajrrvxr.ru
eyrxhgmmwinngwx.ru
fajpdunlujstwxb.su
fbjwhgpmyqnylra.cn
fejwpkksllhmqck.ru
fhjvofjjoflikas.cn
fjmdwtrhalipuvm.cn
fjwywvubaqweife.su
fkyhucrvglijsuq.ru
fmiylutevsjtjxo.ru
fmooiojbuumviqu.su
fmylspxrtnvjcyn.su
fvltusppdvvaijo.cn
fwjwmoegjeustdd.ru
gberfkwcqyhpdtm.ru
ghriucfmxrbygde.su
gidqkyenvskfsxa.su
gnigyjgxcqwlsiv.cn
gobkumngteabdek.cn
goomuvhhqpoixjh.su
gorybokaigrhsix.ru
gsvcwoqkmrluokc.cn
gvqvlfrgnjbeaxw.cn
gvsqwnebhnnnmkx.ru
gyjqjkehgqfefxc.cn
gywshspfdubfpvo.ru
hagnsdlgwbbicnp.cn
hebaawgohvylvlu.su
hftbqrlyyvbbtbj.su
hgipoudfggwyflr.su
hhkkgybprpsweln.ru
hnbjuqycxrpiapr.cn
hnjttwvdikqblmt.ru
hqujwqqwsmbeqrn.su
hsdvbiawvlddqpa.cn
hwyloeolcjnfijh.ru
hxgthtdlkqpinil.su
iaaixfdfsuhuxwa.cn
ibhnuofbmofabmh.su
ievciiboftqykfm.su
ievplkicjegojbu.su
ightspvthqakddp.cn
igkrkhhvsiklglp.su
ihvshpytyixseol.cn
ikfqcjqsrltaiil.su
ilksdfdvsmfwmyv.cn
imvfecbufskdqxw.cn
irjibwmnqqqadel.cn
ixmusxpvdihaate.su
iyrrdkunpiqeack.su
jcjoytmvkpsfkeo.ru
jdlqobahxakhuwt.ru
jdscipgdaxvuaae.su
jfclamjdfawyonr.ru
jgxtosbsftngwvc.su
jjwmoeontxorary.ru
jkvnhmbwubcixlr.ru
jlwlluodmqfsgbl.cn
jmsdcvmjcgswbaq.ru
joiqkfjrdggsokn.cn
jojseahipaeqbog.ru
jorigdbiybptawc.su
joxgqrwmrveosxr.su
jpminegfcgpxknc.su
jtnlpgnmnkrgwms.ru
juadnchmoyyxdwb.cn
jwdbxvjuitymuoo.cn
jxarohymqixxlmm.su
jxoyehnmlfjdcht.su
kcikwyyukmvoybs.su
kmwnvwwgxsbwfuf.su
kodmxbrbnjdfdff.cn
koiveskwyfmejwx.ru
ktfqvmmbeekpauc.su
kuugglkyrckxfjk.cn
kwdqgldvaimrlva.cn
lbyvbpqrgwwugwk.su
lciaytcmxveapih.ru
ldnwsqawfvhkmha.su
lhswnpmotanmeqt.cn
lnoqquasvtubsds.su
lottjwbgltcemcj.cn
ltfjarkorglhmrt.su
lugtgenircbmmgk.su
mbdnudetdgfolhr.ru
mddtomimmjcuyqf.cn
mfimlwojbvhvpmk.ru
mmtavmdlkychiei.cn
mmufblfdfwfupcg.su
modeeewmrxhhynp.ru
mvciyjgburhdwnd.ru
mvrmybxxwhuppif.su
mxiqsjfspygppxb.su
myamumdblfewxrg.cn
mykxdaepmiostcx.ru
navoxfjkwiebgwm.su
nbylmapyvohjokt.ru
nfmsxlptnjypqqo.su
ngaoabrvrmjmbap.cn
ngpxmhfonudmjho.cn
nlwxxqwmvijnbpl.cn
nmaogsyigjfifkv.su
nqnifjcnwbryqro.su
nrahylywbiewppp.su
nrgntsvwtalcxyx.cn
ntgltdptmrjcukr.su
nvghtheqtcqgnyb.cn
nxnwxekbklugohq.su
nyimirtrkamdpwq.cn
odsmjkunsbqkqdn.ru
oexgsfomvrqtmiq.cn
ojjesvqoigwmrba.cn
orrftdqjffwarcn.su
osrqiiqjbfnjxse.cn
otqqbefjwimrlwr.cn
ovgphgnjeklcoml.su
oxiagdoykovjeiq.su
oxrtfkbhslsbkpm.ru
oxseprycybpxgdw.cn
oxtfsdbvnrldtge.su
oxvjsyncnkyukbs.ru
pbrxhcecvahsllj.ru
pcnlrxptlgbvvqc.su
perixhjdvxakwya.cn
pgfeamcoiqgrviu.su
pilqhxlchaontby.cn
pjcdanvgjrwudjs.cn
plwialgulptvsce.ru
portwcaemicvqhh.ru
pusbdasxomvmmqy.ru
qamdbnbgggmrvnk.su
qbmyfdserrsfgol.cn
qdtbyldmcphfqvj.ru
qgpnostdtijcprl.cn
qjhaqfavgudwfba.su
qjtbmcsaqlgmjqj.cn
qkhlctsrjkdfuxv.su
qljbovwdmaelmex.ru
qndihobexnbctof.cn
qtyknlxfthwjhmb.ru
rahdbeeuttrrqpo.ru
redcpcdtekjmgkp.su
retjdjvgkmytwmb.cn
rhukggbghenawam.ru
rlauwgisriutsiw.ru
rmhkmckxsjucusn.su
rmxklgaogvbrxsy.cn
rngaxdeeacitwpk.su
rnirqvtmogygoaa.cn
rnmabikjuetdryh.cn
rrcpfifotbnhoyc.su
rwgsaiowimrhkow.cn
rwwtthddbonxujy.ru
sarblmqoquscjyv.su
scesoemhfexmgsm.cn
sfhpbfhkthuynps.cn
sfxbkfhmhktcocn.ru
shombjmwgjvdqqk.cn
shruoodypkxxibr.su
slvfsrcbhpchdrb.cn
smedmydhhtrsbas.su
smfvicjcbifxnsu.su
sxiorancquhohjh.ru
tfuwcqgpwgbfxjo.ru
tlflbdtbvrpiawm.cn
tmrpkcjpmvdflyo.ru
tmutisquqajcxya.su
tnvsrbkjualexog.ru
tokcgdkxogvkwbd.su
tpxjbeilgnjkxyw.ru
tqhrmlwqwyjshcy.ru
trgllojbehkjdkm.ru
tsdlldhgrngyeti.cn
tufomkrcpqvrxod.su
tvcipuhilwqatst.su
twdkotjajftilkr.ru
txlmucdtbgihyaf.cn
txydvfpxdsfoywa.cn
typdbqaixyqhtqa.su
ucrilyndvitqdxk.su
uhmswhgpfkxoxni.cn
uiaxvoftpndpchl.su
uiukwbrdifwnvha.su
uprtagnnqkxpdfn.su
urwlqtinvddykda.su
ushkvdrbxhlcnjx.cn
utrhujxkpqgybre.su
vfoegpcfwpupypl.su
vkftetdpvqujvnu.su
vlyavaupfhiqpfp.su
vmxmcapwhurseup.su
vopjgsojnofuggn.su
vqwrhigefrptsqc.ru
vtafvqxgmyvkeid.cn
vtycadtpbjbqfac.ru
vueyjaadxunjqkp.cn
vyftwkhtpgfptqj.cn
vyrppwapyngjqrx.cn
wolarokeofmgalb.su
wovdotentyistvu.ru
wtcjtanorwqwpoc.su
wujvfyoownoetir.ru
xakduasoulaefvh.su
xbcdppunwedfuqt.ru
xdhreimprinsuhe.ru
xfgnyoycjjwhhve.cn
xgctoyldtllhvrb.cn
xgujchwscxtmgqy.ru
xixglgcaatojxky.ru
xjphjqxqinawcgq.cn
xogwxjohvwilnbm.ru
xpnkeyjkuwqubro.ru
xrypnqnantgwnpj.su
xsvfvralobxvsuq.cn
xwmvtsbjjbiravb.su
xxmrxvabpulxirk.cn
xxodueiyyndofqk.su
xyieqbljsyqkerb.cn
xyshfivdhoolrad.su
yddrhjrnsyiowew.ru
ydyytilmgdrlagn.cn
ygkdklrnfpoyprw.su
yijwjohoipmpivk.ru
ytyotfuvdwomvkr.ru
yujbkpnewcetqfj.ru
yvksrgkwjocvuej.su

# Reference: https://twitter.com/ReBensk/status/1382640560947662851
# Reference: https://www.virustotal.com/gui/ip-address/47.91.86.73/relations

47.91.86.73:80

# Reference: https://twitter.com/olihough86/status/1387374540590829569

http://162.217.98.146
http://94.236.191.147
7iixoqoiphdhkdbq.ru
tlfboldhmeehvwl.ru

# Reference: https://twitter.com/malwrhunterteam/status/1393123624987549696

http://159.203.59.208

# Reference: https://www.virustotal.com/gui/file/a601164199bbf14c5adf4d6a6d6c6de20f2ab35ec7301588bceb4ee7bb7d1fdc/detection

aayabrkciqkrbxy.com
ackqjxsftybuaao.cn
adavclqfdadgpsk.cn
aekejfbsaptpkdx.com
afcqfjoneccvwbc.com
afljdrikxxoqndc.ru
aglcrmtfelydejg.ru
annxxvljavjandi.cn
asmbsqkcyjuwekl.com
auaknnhwikesprr.cn
bbulhywqgfgwiby.com
bdcdmjymkepqbrl.com
beshcaajetimwmh.cn
buldunvissewdbg.ru
cbcqpvtyxdukdmn.com
chsvpgrlbuytxfk.com
cjcpldfquycghnf.ru
cldyfgwiunqsmxp.cn
cvvifackuwnotja.com
cvwhbnxahcouwau.ru
cvyejuymolnlpma.com
cwpckmfpmxpclge.com
daukstbbgolrbsu.com
dayxhyignyxijhj.ru
dewjsygunimeqyr.com
dgiuwigtigqqoxe.com
dijunlfbmggtbap.ru
dlehuvqqdnngkmu.com
dmriorddckxwamj.ru
dowmsijjgmdvdvi.ru
dvhdxqbhqpllgvx.com
dxbeygtkxnyewmy.cn
dxkboljrbfcwgrc.com
dywhyfmxnrvuvuv.ru
eakcemusqanqrlt.com
egqqfbfvsrpxojw.cn
eicegpfrlesitcn.ru
ejjltendoawwbsp.ru
ejqcbkqoapxgure.cn
emttanfkcqydttk.com
esmxparekqrtndq.com
eunqiyfbtmiukcr.cn
exfnbogtkijjtxm.cn
fbyhsdilvhbeglg.com
fdwvcqcompvdxyo.ru
ffqkokpubgyridn.ru
fjdirvocnadepdf.com
flqpcglmxysxdlp.com
fmkhunhfcrogima.ru
fmnhimkobknpsud.ru
foxoibtbayqlqvx.ru
fwwwmllmghkomme.ru
ggkpflsrmtvulan.cn
gjujujxjgvfmiat.ru
govknbffhwevdwh.cn
greokrrpdtsxyoq.com
gvrdunbpjfjsyvj.ru
gxnpypsjmmaxhkf.com
gyawwjoietomboe.cn
hbksiyqbgjonlvn.ru
hcugixjrtatbqcp.com
hlerphbxbptfpxu.ru
hmtpihvisrltnqm.cn
hnoesskvnqwwsac.com
hxecshvimrcgehj.ru
idvnprytxqxoxeu.cn
ieasttacfgyobxw.ru
imfxmqvflxxtnrm.cn
irsxssliqlascym.cn
ivllbmmxwaclgqw.com
jmqceprifavldjl.com
jopiqfxkylhitaw.ru
jqunqkgmnwvrhis.cn
jufxusppupjyqxb.com
kaksnxpnrnhkyyb.com
kdsnjxtugmqonmh.cn
kgffsoyvqqwlvad.com
klvvtfudmunserw.com
kmauulstbiwpctr.ru
koviqllkkjivgoa.ru
kpcubvwpgktbldn.com
ksrdoxqyketmajp.cn
kyrcxxitglbibyo.cn
lhkonxnoyuggnyv.cn
ljkaglyjpsbnogv.com
llktwvpgjlwbumv.com
lnrxesokwptfers.com
lrxemiojxorccoc.ru
ludsdwjpismonga.ru
mcbrdyfuhkkfdxb.cn
mgdvdfajkeclnti.cn
mhhenynefipqaxr.ru
mnmpyynofkjbjqs.ru
mxhritivsicxxuh.cn
mxpwmnqejkfowld.com
mxxoavrvggdlcbh.cn
mybtumnnebwmqji.cn
nanwluveteiisqf.cn
ndyexnusljwqjlr.ru
nesxeprpwdswhdx.com
ngakqurigyguglu.com
nhpektrhnwpiipm.cn
nlbvyvniwsvvaaf.ru
nnmptarrhqlgpnw.ru
nvmqqxwxskiknyv.com
oeatfddmrisniya.ru
oejriblynrtlmev.ru
ogkwxejcymlcotl.cn
oirqpxfyukudwqq.com
ojwjdspdyvltxob.cn
omnnreuwinwtfcf.ru
opoagrdhlhfsiyi.ru
oyaunvedmtameib.ru
pcytnvrpbeyyrnn.ru
piqunpxsidwjnxa.ru
pteaaipcdftwsft.cn
pvvbjvedsmjphil.ru
pwixpfscysfgagq.ru
pxakbdvmohsotsu.cn
qarejvglkxrvjls.com
qcuarnivrctkekd.ru
qijxvnlbkeqqxuf.cn
qnqykjvtmkcmqaj.com
qolksltkpscwdjp.com
qxsrwxwpdsfbhlx.cn
qywanaubnxkxtaf.cn
rbotsoavskxbaoq.com
rlsthlnfbudtaoc.cn
rqxphqkvspvoydj.cn
rrrrutcbuvhltwq.cn
rsdkoypdiobwwed.com
rthghentgxuwrjr.ru
ruoqfralmphmqhp.cn
rxnodoyuwjqxppu.com
sccjtttqrgxokfy.com
skmidoiiobrekgs.ru
swgkojlmqpndskf.com
swvdbxmivdyvjun.com
tsvydyoaajjyfav.com
txaupnfxerjaaxf.cn
uarjhfmdesgeiwl.cn
ubgdorxrndwutfp.com
uceqlwpojucywog.com
ucfpitoyyjaorcb.com
udpxfggfurokkam.ru
ueowppwpfytxtha.ru
ufmimeknorcolph.ru
unntpimixeysrce.cn
uqjlxwkvejgxsui.ru
uqxwniyruqcvbvd.com
urqisbcliipfrac.com
usgljonhyoogsoq.cn
uukfvcqoxdxupau.cn
uweowbhmmrquhvg.cn
uymfgtsklxqimlx.ru
vjxhjbnopwovntn.cn
vpspjspcfalbgti.com
vstbhjudobijnlo.ru
vytmbnskjheqwdy.ru
wbmfckfltywvaco.cn
wefgjvcpuiskcit.ru
welkgjpeideihjt.cn
wkevtvmwkmchyhg.ru
worhidydkkndtrd.com
wvwyiuhjcgrflys.com
xaiectiguvrnuar.cn
xblfljfdkcarehf.ru
xbudfthkuhdtvel.ru
xlcqdyxyjiwmwwc.ru
xlonrfwhgjuyelj.cn
xmcicnxalxhustl.cn
xtqifmxqsmkfbfa.cn
xtwwhnkfnryqpaq.ru
xwjntmfphihjatw.cn
xynlxqjqclayatq.cn
yjhgxxuwagwguaj.com
yncmgdsxyhtfjig.ru
ypnrqnxaplyuepq.com
yrexbghwkwopdqp.ru
yysougwjeukgoyu.cn

# Reference: https://twitter.com/alberto__segura/status/1423206390085079040
# Reference: https://www.virustotal.com/gui/file/dcfe4d8c0265186f24f56cb774f0087cfde3d46fc0d31a7edf7e036a2006513d/detection

biyrgerenhwnppk.su
blcaskbgsqltoki.cn
bxftwdlsfgqfkgs.su
cvhbgpqavfkkbxb.cn
dxeixmrptcqglyq.ru
eawuhoqussgxjnt.su
eccfmaqnmjeeern.su
ehlcjqndnjkojwd.su
escxdqqexbslsuh.su
fkmjwcycwroiadv.ru
fqlpcupvtkcnhvv.ru
goxvwuvfdeuslvl.su
gqnkyxrxbncucvu.ru
hhlisfpgxtqjkoq.ru
hiueakfxiaqmnie.su
hrnnvfjyhrgkhtu.su
ioanbrqfvvsaurh.su
ixhekarmjtdnpxk.su
jgocaauhvmxidmu.su
jipegtklcknvlrj.su
jkribbvttvsgvdv.cn
jnqobrnlepqeiqn.su
mgkivqlqgppgofq.ru
ntafmppnwstusro.ru
ntbkrpdnqpoqkoj.ru
oakhgnkldtlkurf.su
ohbgcrixxvaydpr.cn
ojgodyvfumenstu.ru
olbtklufcmkpixm.ru
phqbtpjxgbjimom.su
pyyhhuqvifwsias.su
qfrparbnnkjeupa.ru
qgryxqsolanfvve.cn
qifxcjlydconkrd.cn
qrhjrdeqnoadpgb.su
qxradebiqnjipbx.ru
scseuxrqthgeoka.ru
shrnakvkwcdtmxb.su
tdyqlyrhajjpcjd.ru
udblydgqoeluyob.su
umdpwihawyimktw.ru
vcflhghkbcnpejt.su
vdcgjxlofqvatea.cn
voafscjtvfibacp.cn
vxceiklfqarfmcj.cn
wjvhiwwtftkgdji.cn
wkhaqkvdskxvvnw.cn
worwlguforuqpts.cn
wtvphrerqhroaiu.cn
xfehdsjgexxvpcp.ru
xgugolpfltvuboj.su
yjarssohwdskuqt.cn
ymjglewnkqikkct.su
yvxuntwhltqfsma.su

# Reference: https://twitter.com/alberto__segura/status/1426152674303561728
# Reference: https://www.virustotal.com/gui/file/a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d/detection

advpvvqnsgbmxra.ru
akpoopdqpfoknpg.cn
alahrqlhvbeilwe.su
alosekpapsflyka.ru
anbhwevpnayoppu.su
aothatqiigfnbei.ru
asbgqrmlkrnromu.su
atavlypljockrdn.su
auuwwpqrhigawys.su
awprihuaxysmend.ru
bafgxekbepcgdwy.ru
baiipagyitiuwrn.cn
bbcyfefnetnkktk.cn
bbeaigbqvyxlnin.cn
bexrstlrmlhchso.su
biglishgpnhhjyn.su
birmckxdvnkqjns.cn
bitktqmflydbkxk.su
bkxaoknlnffdusu.ru
bmpricuqqispmbq.su
bmtompebfnloxpg.cn
btexwjljhtkwnia.cn
bvoxmsacshprmei.ru
cccggwxewfakhfv.ru
cdjcptsfnitvbcc.cn
cdvmnqoxtfysohv.su
cebkffqncrpuumx.su
cgpinwivganusdq.ru
chtxvyaojlkveno.cn
cmckuorgqweuykr.cn
cnxxnvirkipaavh.ru
covxtvnievdstol.cn
csewsxibibbtcdn.su
cuulgnyadkoifei.ru
cyylmvnlbdicpkc.ru
dafrfoophkyayeu.ru
decjdpuouopeels.ru
dhpiqptkfdoxmje.ru
dnmfwrgiheuvmuq.su
dnuwlvcnlqknvnd.su
dpdetiklvytryed.cn
dwvarbshrqmttsb.su
ecqcbhpqcphewgo.su
edngikpxdyduoie.ru
efhbufcpbqrmehe.su
efmjvlsrqwnjxol.su
ekxclswrarkyxlp.ru
elajiaapycyqxwt.su
elrlgntsrfhoqag.ru
enmnbcwdkesnaoq.cn
erchrfkhdpfnwcg.cn
esdwakmgagsbici.ru
exebgpksplgmfdf.su
extydrwnpcgcfwa.cn
eylmlpwtjmstbvx.cn
fbdmqxohwmbtxow.su
fctxhiuigtgapmx.ru
fgvdfyaoowexxvb.ru
fjxxvuudrldhkov.ru
fkutcbpwwsqkjno.ru
fmwtbfjjjkhjqgc.ru
fnsldwrxywhtnny.su
fohscotxasxobql.su
frnclqewshfaugm.ru
ftjxtyfxtlmsnoy.su
fuvkdwgxdkuppnq.cn
fwwsvxlhhmoqxhg.su
fxibmsvxmnoubdo.su
fyqscgbdapbxbad.ru
gbiarthffagpete.su
gbvidwewopsfuor.ru
gbyiklpkcudpvqo.cn
gewqahanhalpyrg.cn
ggsnlaxxnmqvvjd.ru
gjofmiradmkwjss.cn
gjtkohrwhlhehqw.su
gkluanvkcxeihyk.su
gqfmpktqkcfjnky.su
gtqxwystxugpgml.ru
gvlvwnisnkvxlso.su
gwqenpmsqnvccej.su
gxydjbudmvifugj.ru
hbbnqnofrjxptnv.cn
hbbovirfbaddvyb.ru
hbfgbauyktpayvx.cn
hcafmkekskeiefu.ru
hedffcckajybeen.ru
hestceqpndjkprk.su
hgheogdvjbmukyc.cn
hisknijhrnxgymt.ru
hljvtgbmpbmjwna.cn
hlmcqcawjttcdvb.su
hmlwtjtmpcfafjc.ru
hmqlarwjfidlvew.cn
hmutlamoebbnuvd.su
hoabadsqnfnpiwo.cn
holtocahorylshi.ru
hpniyyqtwccvymj.cn
hqrdjiqwhomkxat.cn
hqrxjefpwrghfmh.cn
hryfpmhcfljpdnd.ru
hsomlwrlmuywwik.ru
htqalfmpqbmxeia.su
hydbipjdgeoasxe.su
hymtjloohhdjhbk.su
idpakjvcsnaftyn.su
ifstdqgyelobccm.cn
igegoqtyxpglmyi.cn
ihmgoredrxiynsf.ru
ilitcpfqajksyfo.ru
imcudydkjniswgm.su
imxkfpuuxllgdpj.cn
ipfgbtrospwxedw.cn
iqmxnspjgplyrlu.ru
irlcdwlbdtyxyly.ru
iyefpnnmxcjwlcc.su
jbqxdoxypihtvab.ru
jhmbrwtnareakjo.su
jhuvqngnbeedmyi.ru
jiccbxostwqusrc.ru
jqpjhbcxokjgffg.ru
jrsnuhwiyglddtn.cn
jvhpfttahyxtcud.cn
kaiwvutjojvnynm.ru
kbhmewddcqtdoyq.su
kcgovvqxvobwwqp.cn
kfuagxfwekqvtbn.cn
kfyeahiyeuqydwj.ru
kggspwwjuhgelwg.su
kgnhtxbgieshmev.su
kgptlqdtjjhjqfm.ru
kgrmrrthbflclxn.ru
kilpuijlpwdbvsy.ru
kjxewodrheidwhx.cn
kkeggjnrrttxeyi.su
kklmmwruixjkima.su
kljcqrhwoojplln.ru
kngkhfsvvskymkx.ru
kuvecmiwqlpktey.ru
lbihlrphlytqqfj.cn
leojllgwudouuya.su
lfbggxkuaiaoqnw.cn
ljtutcssiasknko.ru
lkhvlfxryviipqu.su
lkncooymtwgjeem.cn
llafmhehxptrlvp.su
lnaubapbuabxfns.su
loatdprwebxrdtb.su
lpwxvsbkqevpqnr.su
lqqoyywbkysbbla.cn
lqtgyfixkokddxe.su
lsigshvkvpecjhp.cn
ltcimfcsugpqbcu.cn
ltorvlqakoijykj.su
lubmoiiolyjbruh.cn
lwbljcoiuektwrd.su
lxiuxcsptrvpwxf.ru
lyfifllkoynbshr.ru
masurugvyukryia.ru
mawkxggiuvwkoeo.ru
mckasyixcoltpmj.ru
mengkxvlhlxdjxe.cn
mjsdjrnxkruyohw.cn
mteovhwpsrdgsbg.su
muojdyumsnyohyo.su
mwnqqaiqokcgnpx.su
mynclqshfvtaquv.cn
ncmcollegfdchyn.ru
ngqfmvopdwtbrom.cn
niqyvhoauymwyub.ru
njaleowkmjhaixp.su
njnwphtrxhtfevl.ru
nkhdjnyyyfbcmdp.cn
npdcyrggcirmyeq.su
nrdltwkxdjsjmrp.ru
nujavqljujlonby.ru
nxnrgfmntcudeye.ru
nxpqijvpgjirghq.cn
nyhjftwoqwjxmyq.cn
oaptmpsjbnleykf.ru
obtkedmjyavxfgf.cn
ocfdvkispxfabbo.su
ocmwhdcuhjfhflj.su
oddxnbnqjxbvlgx.ru
ofcsireslvbshyr.cn
oigfiglsdocseiw.su
olmmwigxnktugox.ru
oogjedoleveoses.ru
oqbkshmcegdbwxs.cn
ovfvfuotyheword.ru
oyaapeapkwmjewh.su
pidxsxtbstdqncl.ru
plabnwojhrusfkj.cn
pnoccocskxagfuo.cn
pogrkhimpnfwfbn.su
proydbwajvwingt.cn
pyixgumyfkuwdsh.cn
pywkddaroihjuki.ru
qaqthanbwvplkeu.su
qbbanpwkhkgdtyf.su
qbjbgrrlqylddpm.cn
qgotilaqhspvjwj.cn
qidxmcucfsfsijv.cn
qjukjgluvdwiyjt.su
qlvwysjssaiqtri.su
qncyddhkodibhfw.ru
qsbseuqfksbscay.cn
qwfgjiwhvbnivja.su
qwlrlfiedxcidor.su
qytpyxurhyjkjcf.cn
rcdumfwxfxqciwf.cn
rdcxcggvgorwvdp.ru
rdpvebeyilwmhnu.ru
reghqoetleipldr.ru
reibhqnwlyfjnmm.ru
riixdtpmagxvhkm.cn
rirfwtumvbhtdpm.su
rjcsxcgvhjsssvc.cn
rkcnosvlqwporox.cn
rktpqxnjlnokyor.cn
rkxwcqcllvedhhm.su
rorkugcmykabunh.cn
rsdyoqpikkucseh.cn
rsksmmymfkxggxb.su
rvebryjmwkkkjbu.ru
sdfdanpnxrtvivx.ru
sikihkuvmxavqlu.cn
sjbjjegkirqqmnq.su
skxslxjilumokji.cn
sncekhismihocha.su
snhreklalcablnd.cn
sprisomwqyfgbkm.su
sqmcwocutnonuqp.ru
syrdyvbvwkgnxjt.cn
syvkdvhxjnueiyf.cn
tihflqoftdoqbdq.cn
tinaqfmqqlhtjxa.su
tjoqnwqpkvsjtve.cn
tkvyrckenijkdlk.su
tmlwptxbhiydmxf.su
tmqjbrolydeeseb.su
tnjbbgvbqteljyt.ru
tqwfigjbtkitwcg.cn
tygsgkcwvhujavo.cn
ubsjuxekltxwyei.su
ubvngokuqjlavjd.cn
uescrwjqypcfuht.cn
uesvllfparerbaa.cn
unqspiosjdnwfjk.cn
uofwlilgmvrxtdq.cn
uumvmjjfjmauotk.ru
uuyekyclwhuovlk.su
uvaxiejxcuvhvqr.ru
vakdficxbxcdtoi.cn
vblemjtpoxxlubl.cn
vfgegsbqdjubefk.ru
vpffvylktydjycx.ru
vpwyjjttrfxvcxv.su
vrcfggxlbekatua.su
vsbtqhdgwlkivje.cn
vsrghsficmsypyh.cn
wdsaxabwtubielx.su
wdwuivmlkosqaet.cn
wgxehrbgjhglrvi.su
whfixpqirpmbiua.cn
whxpjqxyirjqqcw.su
wiglsuvepqhxbdh.su
wjbrexnpxjojavl.su
wliogaurpfsmpjf.ru
wpqmisroqkwlxmo.ru
wrqfxnhwwhqtywe.cn
wskvfjljwxcvejh.su
wssowaxxeqwydxy.cn
wtkfkcgganmcvtu.cn
wvuyxhaowvoabav.ru
wxhcodamlsgcdrl.su
xblyxewnjqdbuig.ru
xbqudcnsbtxaoou.ru
xcntftudjvbugmp.su
xcophnttcxufeyr.su
xhbwrevrsxhlrer.ru
xkfsgkqjgdbrtqm.ru
xlkcwatalvrfeoh.ru
xnwyqxiuslrsjrd.su
xsoweeiuisewsro.ru
xttyckvnbuovgss.su
xwiepqypondkxsg.ru
xwkupxvgoyjlqss.cn
xwtltiuxprquqml.cn
yejjytlreydnggw.su
yikfaiovurfqlrv.su
yoblvkgncnkyyyk.ru
ypilfitwycjhvqt.cn
yqmrlaxnxdmndfk.cn
yqncppuhthghpkp.ru
ytwbrgbigjomktw.su
ywxbprrdwktodon.cn

# Reference: https://www.virustotal.com/gui/file/07cdb0ebcd07ea35307c003c164c86469c2bcccb87866cf4169a57ba8ac3d223/detection

sovamo3lan2s4s31d.top

# Reference: https://twitter.com/ThreatFabric/status/1463121699981996032

ftyrwbjrqldodoh.ru

# Reference: https://otx.alienvault.com/pulse/61dc1f38a5b5b90adf7775d0

ajrwpbeppdjkxqa.news
aoqjaoljmhgkbjn.net
avkipjyasamupcq.website
bfrgtvapmllahdk.ru
bopgsxsclhwxjne.su
bqdykryibucterh.cn
ceprofbrqkdtlmg.su
cjuayrfphtkcrkj.cn
cppkudrwprfhmxr.net
cqynkkdsueahcdc.cn
cvgbtrsgkgikgta.ru
cvxcgaalqyaujuq.su
cwfyvftrskwpajf.shop
dcinvrymbkbkubd.cn
dfcgnpiaasdbfwc.ru
disrivylofenvpv.am
doatcitxkkqmxvj.space
dsmuhjmutneanyy.top
ebuexfmykfkuqnq.kz
ehqlyxolqccohhe.tj
eletnyjtnanvdma.site
eoclnffuhbgsami.am
exgkeqmxiviyrok.cn
eygtjycuerbfqye.news
fetdkrdlwckevyb.am
ffambnmmyixllbc.bar
flddiemycxmvish.cn
fnqfdwiuuupbsxb.ru
folcqumqnbvptwx.su
fprgtjjgjpccrhw.online
fqpvkcasumyauvc.kz
gidifviluycnkiw.biz
gkqqpdlqfmhfbgi.ru
grgdfmtkfplancm.cn
gxpjbvavepjjapk.ru
hgjyfgoffmowqhd.cn
hhtdoxedeocqgbe.su
hpekdinakyoxxer.cn
hsuvffyhihmxfcs.md
igxqnfcktnwjqxo.su
iresfcoveiwelrb.cn
ivnhsfcgxqtdpgf.ru
jbtsnuaxcqhbifa.pw
jhrrlpyouhinvjs.su
jlfyttqnjrcmemt.space
jopynuwcrtqngds.su
kawirqavasqpigh.su
kddvlhoousrjvyt.ru
kruiyvjrkckmkuw.news
kwhkpftemquwxwj.net
kwhkpwjnckjgsku.space
kylnwmbpldmxmxn.md
liwlvquihagxxma.cn
lkerprptwypnqhy.icu
lvyfkakdujketov.ru
mbjjyhtsignvwag.net
mmroeuhddmttsmf.ru
mmuhmvpxadtppwi.su
mpgeljbknuirjyn.kz
mvkvnaophgxigmc.cn
mvxiaupwjvwpnen.kim
mxruqupfueopsmw.su
nubndmladuxwsfb.su
nyadxmafvbfbufs.biz
ohheffxinyfprdi.work
omctoafnnfiwhbf.ru
orpubgxertbafxm.cn
ortixoaehwmdjsu.su
pkpywgugvvfware.com
poggimonhfhmian.cn
ppodlnogwpbssyg.com
pqrxxsahfqhfqkj.su
pvwoykvrjvpqrmv.host
qaglmvmwjfaqjkp.com
qgouswonbtkilyg.cn
qpaohdqqaihhlkc.website
qqagnrrkhotlhuh.su
qtpdbxawtacxbyv.cn
qtvghaqjpgabkcb.xyz
qvbjfpqqoltyxgc.cn
qwufcvgjxhhwbqm.pw
rfiuisvfofdhupg.su
rlxhcniaxwhenyb.bar
rmtojrivkbficso.top
rraxaotpljcbwjg.cn
rxavamskjqrcbjs.news
sanjwhqlroxeqsg.gdn
slgcgtbxklmroyp.info
sroksxoyjofsutu.su
tklgflugirlhxhw.cn
towdpkiqhwwpuai.kim
tygagpcptjnpvdd.su
uctrpqbvsgbhrdx.ru
uhhhaopaokflmuc.ru
ujolqxxdlqtwaeg.ru
uuyjuucswhjelvs.com.ua
vrrmcsnfcukpwbg.email
vukkiygwihuvicr.top
vuqrxydxebquubh.su
wgvlaehevokxvpp.kim
wkhegfltjbwnojn.cn
wtnpntujiobaruo.news
wvuigvtriblmtql.ru
wxsqualioikedot.shop
xbeifwqtioqfsbn.ru
xbweworkhtydyfu.cn
xjsounhyqtwansr.ru
xpvxfyfllbmttff.icu
xtxhdknafhfxvjc.su
xumeqlosslyghxa.md
xwjguoqsrctyqhg.work
ydcsrogydrbaark.org
ylnokptsqwyhcfl.cn
yrpbnuvmijunhui.space
ywtujyrngdkskqb.su

# APK

/bpost688_20210508_2141.apk
/FreedomAndroidUpdate.apk

# Generic

/api?method=bots.root&botid=
/api?method=bots.update&botid=
/api/?method=bots.root&botid=
/api/?method=bots.update&botid=
/api?method=number.update&botid=