# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: cacosms, irspy

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/mr_amini8/status/1413038661696987142
# Reference: https://www.virustotal.com/gui/ip-address/157.90.9.65/relations
# Reference: https://www.virustotal.com/gui/file/70b8d5cd1a364c0cf148c8fb36a9cfe85bfbf6b18fbbcf1d36de4aee5e4b9e74/detection
# Reference: https://www.virustotal.com/gui/file/5f9c5dec4856278393b8936c8145a65f8ca045aa01b71e16de6ee5b68d893ea0/detection
# Reference: https://www.virustotal.com/gui/file/46901fac5acff20fa83b8bb4f27a8f96e73a67209b799587bc46f1f6e5b8441b/detection
# Reference: https://www.virustotal.com/gui/file/835a9a1f8c6d3231a939c3070c179cb8f7e74ed5f3afebdff21f4bafe1bbf19f/detection

http://188.40.233.91
gjpay.site
ir-sana.ml
ir-shalplak.gq
ir-shparak.tk
sana-eblagh.xyz
shahparak-ir.ml
shaparak-bmc.tk
shayparak.tk
/ebiagh/
/eblagh/
/eblaghd/
/eblaghe/
/eblaghd/Mellat/recive.php
/sighe12/Mellat/recive.php
/Mellat/recive.php

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/midnight_comms/status/1461723157232951297
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/file/8e0dbe364134d00c32ebaeb7a479c4b28bcdb4b528c4a255ade404e0dccdfc21/detection

adiiran-lr.gq
adiiran.tk
adl-dadgostari.tk
adl-police.ml
adl-police.tk
adliran-paygiri.tk
adlirane.ml
adlliiran-ir.cf
adlliiran-ir.ga
adlliiran-ir.gq
asanpeygiri.tk
eblagh-f.ml
eblagh-f.tk
eblagh-iran.ml
eblagh-samane.tk
eblaghe-ghazai.cf
eblaghie-v.gq
edliran.cf
edliran.ga
fata.gq
ir-eblaghe.cf
ir-starka.cf
iran-portal.xyz
ireblaghsana-ir.ml
police-adl.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samane.cf
sana-ebiagh.tk
sana-iirani.site
sana-iran-ir.site
sana-iriraun.site
sana-lran.tk
sanabv.ga
sayboriml.ml
sna-portal.com
testsus.ml
/73526/eblagh.php
/Lopqer/sms.php
/eblagh.php

# Reference: https://www.virustotal.com/gui/file/5c388bc80bbaccb57d790dffdf61f85845f33866b1a29c372f2f9f90b5cca77d/detection

sana-eblaghiran.ml

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.tk

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.gq

# Reference: https://www.virustotal.com/gui/file/54c704ae09ebd703587ed2b78fcb6c3e9ba314fd9604767182886c0b4ad4f514/detection

eblagh-sanairan.ga

# Reference: https://www.virustotal.com/gui/file/98cf23378dcaed9165d852cc1186710ea39b14f66de6726c999ced8008a5d076/detection

eblagh-sanairan.gq

# Reference: https://www.virustotal.com/gui/file/c93721167305ba16a0c06f565d50ca37fd98b5455723d570942cb90264c21077/detection

eblagh-sanairan.cf

# Reference: https://www.virustotal.com/gui/file/bdd0fbb9cf4591d9007204da0608f0d43a58e03444768f2f856c67e152468132/detection

sana-adliran.ml

# Reference: https://www.virustotal.com/gui/file/b0f493fd7adc4c6f5165118c9da2cf07ca10a890ceb737c0ecbcc87d40c60f5f/detection

dklfjzlsdf.ml

# Reference: https://twitter.com/malwrhunterteam/status/1456978019273396229
# Reference: https://www.virustotal.com/gui/ip-address/162.0.232.163/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.82/relations
# Reference: https://www.virustotal.com/gui/file/26d7819a0f69c63fc4720720dd0c26a929ad2e77b5505c6a6b6b7102078233f6/detection
# Reference: https://www.virustotal.com/gui/file/f630893662d81f95d102ae1d4f185a5116f830fddd2ebb8e2e0f59256616233d/detection

ablaghe-sana.tk
adrilan-sana.ml
amirali56.site
amirali5665.xyz
appes-eqlab.tk
apps-eqlag.ml
aquabest.shop
black-amirpower.xyz
defacerpanel.tk
divar-appex.ml
divar1400.ml
divare-appex.ml
dklfjzlsdf.ml
eblaaghie-sana.ml
eblag-ir.ga
eblag-u-ir.tk
eblagh-09.cf
eblagh-09.ga
eblagh-09.gq
eblagh-09.ml
eblagh-09.tk
eblagh-1.cf
eblagh-1.ga
eblagh-1.gq
eblagh-1.ml
eblagh-1.tk
eblagh-47.ga
eblagh-47.tk
eblagh-55.cf
eblagh-55.ga
eblagh-55.gq
eblagh-61.ml
eblagh-61.tk
eblagh-81.cf
eblagh-81.ga
eblagh-81.ml
eblagh-81.tk
eblagh-9.gq
eblagh-9.tk
eblagh-9.xyz
eblagh-edalat-ir.tk
eblagh-elekterenoki.ga
eblagh-elekterenoki.ml
eblagh-ghazaiie.ml
eblagh-iran.ml
eblagh-pay19.ga
eblagh-pay19.ml
eblagh-pay19.tk
eblagh-sana-electronik.cf
eblagh-sana-electronik.ga
eblagh-sana-electronik.gq
eblagh-sana-online.tk
eblagh-sanairan.cf
eblagh-sanairan.ga
eblagh-sanairan.gq
eblagh-sanairan.ml
eblagh-sanairan.tk
eblagh-vx.gq
eblagh-vx.ml
eblagh-vx.tk
eblaghie-019.ga
eblaghie-019.ml
eblaghie-019.tk
eblaghie-15.cf
eblaghie-15.ga
eblaghie-15.gq
eblaghie-15.ml
eblaghie-15.tk
eblaghie-on1ine.tk
eblaghieh-online6.tk
eblaghiie-sana.tk
eblaghirsana.cf
eblaghirsana.ga
eblaghirsana.tk
eblaghiyh90.tk
eblagi-pigiri.ml
eblagie-pygiri.ga
eblagieh-ghazaei.tk
eblagihe-melat.ml
eblagye-sana.tk
eblaq-irsana.cf
eblaq-irsana.gq
eblaq-irsana.ml
eblaq-irsana.tk
eblaq-sna.cf
eblaq-sna.ml
eblaq-sna.tk
ebllaghie-sana.ml
ebllaghsisana-ir.ml
eiblaghs-ir.cf
eieblagh-ir.ml
eieblagh-ir.tk
forbidden12.tk
git7cyusid9.tk
hdfdhfudyf.xyz
iablaghs-san.ga
iablaghs-san.ml
ir-eblaghe.cf
ir-ista100.ga
iran-portal.xyz
ireblaghsamewsna-ir.ml
ireblaghsana-ir.ml
ireblaghsnna-ir.ml
irn-sana.cf
irn-sana.gq
irn-sana.ml
irn-sana.tk
irsanaeblagh.cf
irsanaeblagh.ga
irsanaeblagh.ml
irsanaeblagh.tk
jdee5ip98.tk
meli-ir.gq
meli-ir.tk
new0account.tk
oaiwj2ow.tk
online-eblaghie.cf
online-eblaghie5.ml
peygiri-12g.ml
peygiri-13p.ml
peygiri-14f.ml
peygiri-9lg.ml
peygiri-est.ml
peygiri-eyb.tk
peygiri-grc.ml
peygiri-obj.ml
peygiri-rcd.ml
peygiri-tpc.ml
peygiri-ufd.ml
peygiri-ygt.ml
peygirie-sana.tk
po-iran.ml
power405.xyz
powerx.ga
prygiri-fcd.ml
prygiri-htp.ml
pygiri-sana.ga
pygiri-sana.gq
pygiri-sana.ml
pygiri-sana.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samaneh-sana-ir.tk
san-elbg.ml
sana-adliran.ga
sana-adliran.ml
sana-ebiagh.tk
sana-eblagh.ga
sana-eblaghiran.cf
sana-eblaghiran.ga
sana-eblaghiran.gq
sana-eblaghiran.ml
sana-eblaghiran.tk
sana-lran.tk
sana-peygiri.tk
sanaadl0iran.ml
sanaadliran.xyz
sanabv.ga
sanaeblagh-iran.ml
sanaeblagh.xyz
sanaireblagh.ml
sanaireblagh.tk
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
seblogh-san.tk
shaepark.tk
shaparak-ir.xyz
shaparak-is.cf
shaparak-is.ml
shaparak-is.tk
shaparak-it.cf
shaparak-it.ga
shaparak-it.gq
shaparak-it.ml
shaparak-pw.ml
shapparek-sna.tk
shop-sa.tk
shpk-sanair.gq
shprkish.ml
sna-eblaq.tk
sna-portal.com
sus-barq.ml
testsus.ml
web-lev.ga

# Reference: https://twitter.com/ReBensk/status/1463011973071659008
# Reference: https://www.virustotal.com/gui/file/ad55c7314f666de9eaece6daaa19c38ae427156c4ebd48f37f38b7a628baf60f/detection

new-mellat-bank.xyz

# Reference: https://www.virustotal.com/gui/file/bf0c75bd80bd8bb86384e6507853293651c8a5d5a807a9fecce08fbdbd4388c7/detection

sana-com-r.ml

# Reference: https://www.virustotal.com/gui/file/763b142544767af1c9a7c1a835002ee0bc1ff58012df4dcfb556b61b0c2473b7/detection

sana.pb5.ir

# Reference: https://www.virustotal.com/gui/file/38836bc6dda4bd96764ed45619a610fcabdc46aa45a20970c6d66a950eab3504/detection

mb-shaparak.gq

# Reference: https://www.virustotal.com/gui/file/b210394d530a54e7f82c0d1d025b79d3241c845e5e27e758ce5980ec2dff7436/detection

sana.mpiko.ir

# Reference: https://www.virustotal.com/gui/file/bf3a78609c2388a6f700a9b63feccf24a5b5762cc94d81afa14bff6db5a5f984/detection

shaparak-bmi.ml

# Reference: https://www.virustotal.com/gui/file/34c81abd142db1c20369a4d7d1107e0143a0d4fc011292471455c8ddb80db46b/detection

irsetpay-ir.tk

# Reference: https://www.virustotal.com/gui/file/544e30fb8c85d078cbe64467f00abdcc54dacd6a27bae609a92c691ec1c0a1b4/detection

aid-shaoarack-ir.tk

# Reference: https://www.virustotal.com/gui/file/43cc666cf6150efa0de925334f272635b7ba81d3686bcc1936fb3e02a5a2be7c/detection

amali.pb5.ir

# Reference: https://www.virustotal.com/gui/file/deca9096f682b1d4ffce4edca6ad0865ce3add0a2bc5e1144c71799004a84936/detection

polis.pb5.ir
/eblagh2/
/eblagh2/rat/

# Reference: https://www.virustotal.com/gui/file/fd1b36fadb2e72a9e1a74687fe662d11ba10fd46f069944470ea03be09791b09/detection

sana-com-r.tk

# Reference: https://www.virustotal.com/gui/file/be4c83027264c7dc798ebfcfa8d566cb462c5e75cb15e0b70f66a6e0b7f9e706/detection

avibili-irani.tk

# Reference: https://www.virustotal.com/gui/file/7a78b3ae543069d91eebcee8e559f46ebde3cf6beffdd06955263fb7d5fe13da/detection

eblagh-mellat.tk

# Reference: https://www.virustotal.com/gui/file/d5234ef9f4274c5da1097e99887240d2ba3974bc0fa4e14008c5089f2a8a0427/detection

sanaeblaghh.tk

# Reference: https://www.virustotal.com/gui/file/a338021216604ef8b1e860ee5c36ca43887011c6b4717606a7724b1daf678716/detection

eblaghie.cf

# Reference: https://www.virustotal.com/gui/file/9d7a1a011a33bb2ffdc93041b1c42b060f888a53396f9a84588233fd6c489953/detection

dadgah-sana.tk

# Reference: https://www.virustotal.com/gui/file/c714b500b76a3631746efb94976d2301140ca5ce6af79c7c196ce0673c767de4/detection

dadyarytehran.tk

# Reference: https://www.virustotal.com/gui/file/5e6f8b8b716c42abd9af0cdcd77e547f080bda24a79452117c977135d92bdd0f/detection

sarmayeegan.tk

# Reference: https://www.virustotal.com/gui/file/104a6ab4bb5d05206fcd30dcadb4dc104e427ef1edf9ecdc20790ff64f1772b2/detection

newmelat-ir.cf

# Reference: https://www.virustotal.com/gui/file/f9774c77e55d4563bd356b6ce234f745df1813db11b45f48faf51afbca518c57/detection

time-pay.gq

# Reference: https://www.virustotal.com/gui/file/511eee2b1ec591859fecf8d4f642dfee96e3d7c5e10e65b0cf4dd4b82c82634b/detection

saa-nna.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.207/relations
# Reference: https://www.virustotal.com/gui/file/33deab5d65f48099afa722d8b6cc9b96fe35fde1ee9176a9e708879c7a539bd6/detection

adli-iran.cf
aid-shaoarack-ir.cf
aid-shaoarack-ir.tk
alpha-host.ir
alphahosting.ir
amali.pb5.ir
amir-shirazey.tk
app-dadgah.tk
appk-dadgah.tk
arshia-bots.ir
arshia-ne2.ir
asan-pardakht-ir.cf
asan-pardakht-ir.ga
asan-pardakht-ir.gq
asan-pardakht-ir.tk
asdfgh-sdfgh.tk
ase-shaparak.ga
ase-shaparak.ml
asq-shaparak.gq
asr-shaparak.gq
asr-shaparak.ml
avibili-irani.tk
azar-soft.ml
azar-soft.tk
b-shaparak.ml
bazdid-fa.ir
best-mizban.ir
bilalgyan2000.ir
bmp-shaparrak.gq
bomber-pro.ml
claimfreeudd.ml
dad-gaahi.tk
dad-gahi.tk
dad-yari.tk
dad-yarri.tk
dadgaah-appk.tk
dadgaatehran.tk
dadgah-sana.tk
dadgah-tehran.tk
dadgahh-appk.tk
dadgahii-tehran.tk
dadgahtehran.tk
dadgahy-tehran.tk
dadyaritehran.tk
dadyarytehran.tk
divarapp.tk
divarappk.tk
dr-iliya.ir
eblagh-mellat-ir.tk
eblagh-mellat.ml
eblagh-mellat.tk
eblagh-shecayatu-iran.tk
eblaghie.cf
eblaghie.ml
etelaat.piko-server.ir
fast-mizban.ir
hedye-vizhe-tabestan.tk
herni-bot.ir
iliagram.dr-iliya.ir
imanm.gq
instapay-ir.tk
io-shaparak-c.cf
ip-shaparak-io.cf
ip-shaparak.cf
ip-shaparak.gq
ip-shaparak.ml
ip-shaparak.tk
ir-support.pb5.ir
iran-adli.ml
iran-adlii.ml
irsetpay-ir.ml
irsetpay-ir.tk
is-shaparak-ir.ga
keno-wer.tk
lashi.shirazey.cf
lite-host.ir
lwe-shaparak.cf
lwe-shaparak.ga
mb-shaparak.gq
mci-irancell.tk
mellatbank-asanpardakht.cf
mellatbank-asanpardakht.tk
melpardakht.tk
net-train.ir
new-ebl-agh-ir.xyz
new-iran-q.tk
new-kakaz-start.tk
new-majazi-q.tk
new-mellat-bank.xyz
new-sana-eblaagh.xyz
new-sana-eblagh.xyz
new-sana-eblaghiye.tk
newmelat-ir.cf
newmelat-ir.ml
oi-rokhah-new.tk
pay-pardkths.tk
pesh-pew.tk
pikohost.ir
polis.pb5.ir
pqt-shaparak.ml
pqt-shaparak.tk
psd-shaprak.tk
roborex-bot.ir
roshana.cf
sa-na.ml
sa-nna.ga
saa-na.ml
saa-nna.ml
saana-apik.tk
saana.pb5.ir
sad-behpardakht.ga
sadad-shaparak.cf
sana-adiiiran.tk
sana-adiliran1xyz.tk
sana-adliirran.tk
sana-com-r.ml
sana-com-r.tk
sana-daadgah.tk
sana-daddgah.tk
sana-dadgah-apk.tk
sana-eblaghe-iran.xyz
sana-eblaghiye-iran.tk
sana-ie.tk
sana-new.tk
sana.mpiko.ir
sana.pb5.ir
sanaadiiran.tk
sanadadgah.tk
sanaeblaghh.tk
sanaeblah.tk
sanakdrobat.pb5.ir
sarmageggan.tk
sarmayeegan.tk
selfali.ir
serverdefacer.ml
shagarak-ir.ml
shaparak-bankmellat-iran.gq
shaparak-bankmellat-iran.tk
shaparak-bmi.ml
shaparak-ftz.ml
shaparak-kq.ml
shaparak-lbl.ml
shaparak-meli.ml
shaparak-mellat-eng.tk
shaparak-melllatbank-iran.xyz
shaparak-mi-ir.ml
shaparak-phg.gq
shaparak-rtg.cf
shaparak-rtg.ml
shaparakes-0.cf
shaparakm.gq
shapark-bmp-ir.cf
shapark-bmp-ir.ga
shapark-bmp-ir.gq
shapark-bmp-ir.tk
shapark-irnm.cf
shaparrk-tj.ml
shaparrk-tj.tk
shaprk-pep-ir.cf
shaprk-pep-ir.ga
shaprk-pep-ir.gq
shaprk-pep-ir.tk
shaqarek.tk
shegayatname-eblagh-ir.tk
shirazey.cf
shirazeybomber.tk
shop-kal.tk
shop-levi.tk
shop-sap.tk
srw-pey.tk
support-iran-net.xyz
support-iran-sana.xyz
support-newsana.xyz
time-pay.gq
time-pay.ml
time-pay.tk
timesaz.tk
titelegram.ir
tract-iran.ir
trust-wallet-g.cf
trust-wallet-ge.cf
trusts-wallet.xyz
vcm-moodle.ml
viz-panel.ir
web-sh.tk

# Reference: https://research.checkpoint.com/2021/smishing-botnets-going-viral-in-iran/
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.134/relations
# Reference: https://www.virustotal.com/gui/file/1512de28f47ee802f2bd31575a47a1caa2c27f2cb5fb1c219d49301b75fbd923/detection

account-tamin-ejtemai-ir.cf
adleiran-ir.tk
adlliran-ir.ml
adllirani.ml
adllliran.ml
benkday-ir.top
blaghmalet-shapark.tk
caloprkds.ml
divaar.xyz
du-shaparak.tk
eblagh-sana126.cf
eblaghonline.tk
edalatiran.cf
edalatiran.ga
ekop.shop
googleadvercap.ml
ibligo.com
iraeblagh.tk
iranadll.ml
myeblaghye.tk
oliverdnssop.cf
oliverhome.cf
oliverhome.ml
papaoliver.com
sana-adliran.site
sana-panelr6s.cf
shprk-melli-ir.cf
taminaccount-ir.ml
texrec.tk
meraf-c128a.appspot.com
api.texrec.tk

# Reference: https://www.virustotal.com/gui/file/4b32fb019d73fad4d44c1b68ff7ec96158902014298458eec47de39e3b3aa8bd/detection

caco333.000webhostapp.com
shafarak.cf

# Reference: https://www.virustotal.com/gui/file/2ba905addab2c210d79aec0b4b185d6ed2e3fc48d55951b5668d8345c65d178e/detection

beh-pardakht.xyz

# Reference: https://www.virustotal.com/gui/file/64d9bdd869c24fa758e9e76d28bc9d399eb91c707eb9ce30aeb776cdb0a01f80/detection

edalat-app.com

# Reference: https://www.virustotal.com/gui/file/b12f057af6679df0d99606e5ae95b08004955a58b176866d67984477dc38d008/detection

nme-top.cf

# Reference: https://www.virustotal.com/gui/file/45ac78f881ff30531e95f24f003c03249bf24dece268a57a65b5f6609f423a02/detection

pec-shapalrak.gq

# Reference: https://www.virustotal.com/gui/file/966d71ed3c149eed6d0e8d412b9e464b38a2012630a94888a10d3fcbfbce6dc1/detection

http://45.147.231.11
/reza/send.php

# Reference: https://www.virustotal.com/gui/file/83f69d44a33c2033972c33c59b0a28bfacf62421a20a916b7c77be3955fc3aa1/detection

liizradvip.xyz

# Reference: https://www.virustotal.com/gui/file/9c4df97e482b228d09f4759d5a181c9bbb200ae3771150c064b6799363a39aea/detection

eblagh-post.tk

# Reference: https://www.virustotal.com/gui/file/0cb5c5eeed9afa49d4dce801777c1ae8dcb16577a3c16c76c85653acfd745f64/detection

iran-sanaeb.tk

# Reference: https://www.virustotal.com/gui/file/94e30d9bc60022c07262d8002e414cca6f3898ec4c32c95c849cefa14b0ad77a/detection

sana-eblaghieh.ml

# Reference: https://www.virustotal.com/gui/file/218545fe27ac30d6983639e2a5764b0a4477b14ecbaac269005e97661ada2318/detection

shaprak-ir.gq

# Reference: https://www.virustotal.com/gui/file/8e6d6e431186f96ddaab73767acac79cc722d203d5e34772b92063d4ba942e51/detection

shaparal.cf

# Reference: https://www.virustotal.com/gui/file/86d59b6bd8df0ba45c57e8ddab03c14e085a6a7772c92d33be776060d9365aca/detection

shaparak-prdakht.ga

# Reference: https://www.virustotal.com/gui/file/f3e4454ec7a4e4b51f0644de956e19c74ca02938ed265b3e4056298f1d0a1d90/detection

shapatak-ir.ga

# Reference: https://www.virustotal.com/gui/file/d61f6025b0dcb7ef6afa57f12c50c6a60bc6111c7a236e8381743fcfe2dd7082/detection

paymen-pay.ml

# Reference: https://www.virustotal.com/gui/file/fab6c6624bdc39db39ab88c7a90129e881ddeded89a19b2c5289fbc242a1a93b/detection

texrac.cf

# Reference: https://www.virustotal.com/gui/file/d0e7180eea4d4aa1e3a43bcc02978d1fa2fde44d18d92a5e95ddfb9a61bf5a53/detection

kiaoiiq910.xyz
sana-adliran.me

# Reference: https://www.virustotal.com/gui/file/c648ecdba5a0adb1056d4af36ce03b4d2ad56c87ed207b174e14184772b877e9/detection

bhwii80181.xyz

# Reference: https://www.virustotal.com/gui/file/ee046d94783aca4ec5620265a214d5488a12020e1b7f872b1471344792686884/detection

shaparaks-ir.tk

# Reference: https://www.virustotal.com/gui/file/b33414351b19a5589989768b6991565759a9e15e28d7dfedd97636a97738a37c/detection

smsihjje.cf

# Reference: https://www.virustotal.com/gui/file/020a2722e446851fef19963ae5da860269ee1bacd33c03a4837c0c385d07b184/detection

ebv-eblagh.xyz
/Eblagh/eblaghimport.php
/eblaghimport.php

# Reference: https://www.virustotal.com/gui/file/d1718e7292bbf77dd9191d23fad7a5ce1df4875331b6ba1634511544a651b80b/detection

mellat-pay-ir.ml

# Reference: https://www.virustotal.com/gui/file/601902a025b929c0294a5a1b0cbfa84b9f896fbce8fe82b51e416aa5c93d0e9b/detection

ebl-eblagh.tk
/mellat/payment.mellat/
/payment.mellat/

# Reference: https://www.virustotal.com/gui/file/13eddbf151f89bd2b1c4618817d20a5701c5b47ed14372d81e62bbd0d600423e/detection

shaparaks-ir.gq
zrin-pal.tk
/data/40226/sms.php

# Reference: https://www.virustotal.com/gui/file/0025225ae2ac093d2a8455305b4d7eddeb9ff457758c9d5a7c862f2bc1063629/detection

sana-irans.xyz

# Reference: https://www.virustotal.com/gui/file/b78d92ebddbc53cf3b364f70562f9213322eb921096c48648b8009d8612d1361/detection

nafasakhar.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/5a871bd80f4ff27cfd6c59f003decd5d6babee3aeee559f65536ee1cd043eefd/detection

shaparakks.gq

# Reference: https://www.virustotal.com/gui/file/e7d5370480d07e58d885170194ead261b80fe14e42e794e6ff1079a4c2f64564/detection

http://135.181.168.202
sana-adlirans.ml

# Reference: https://www.virustotal.com/gui/file/fc7c6c25d64e289b1f7ebe76c663e61c0171e0f4ad116b7053da4444f7203fa8/detection

iran-sanaadl.tk

# Reference: https://www.virustotal.com/gui/file/a0ea40eaf470b59b54fd19caced1cb832e10812906fc2bdecd4011a678cb1c62/detection

cod-change.cf

# Reference: https://www.virustotal.com/gui/file/969faae7a97a7b5d6572efe63c0d8427815590e9d86d68b26b093ad924c268b2/detection

trust--wallet.ml

# Reference: https://www.virustotal.com/gui/file/9c3e564dd99a0548cd7a42018f01cdb091b00528bef7b3603aea24ddf99b7e51/detection

shaaperak-ir.tk

# Reference: https://www.virustotal.com/gui/file/d9104bbc8043b4b8936741b48063bf577c55143be171cf62ef497da9ec492543/detection

sanairani.cf

# Reference: https://www.virustotal.com/gui/file/396d356760f08725dfc94eea3f687e422f342ea1d5bdb231df40d19c40d0ac1f/detection

bpm--shaparak.cf

# Reference: https://www.virustotal.com/gui/file/a6d464731085a091a76d14fe890ead926acdf72de300093d3876f4764fb687cf/detection

trust-marketa.tk

# Reference: https://www.virustotal.com/gui/file/1805648b238686cff9aa201e22ec25d1390fe518ebb04f98aef0d236f05ca845/detection

shapajak.gq

# Reference: https://www.virustotal.com/gui/file/2af1c66cd2ad38759788b07acde4e1781de3938c979aa4ebc245693624d6e108/detection

eblagh.xyz

# Reference: https://www.virustotal.com/gui/ip-address/192.3.154.61/relations
# Reference: https://www.virustotal.com/gui/file/e5373be93e11e8735cdde14e78c87abcbeaa2b0d3893724ddc971c5640b6cab9/detection

adliran-eblagh-ir.ga
adliran-eblagh-ir.gq
adliran-eblagh-ir.ml
adliran-eblagh-ir.tk
adliran-ir1.cf
adliran-samane-ir.cf
adliran-sana-ir.tk
adliran-sana-iran.cf
adliran1-samane.tk
adlirna-ir.tk
api-charge-bot.cf
bas-pay-ir.cf
bas-pay-ir.gq
bas-pay-ir.ml
bas-pay-ir.tk
bqm-shacparak-com.tk
chargerobot.tk
colz-vps.cf
download-edalathamrah-com.cf
ebalgh-ir.tk
ebiagh-ir.tk
eblagh-internet-ir.ml
eblaghir-sana.gq
eblaghir-sana.ml
edalat-hamrah-ir.tk
ghost3282.tk
ha-edalat.tk
ha-sana.tk
hir-san.tk
ili-oori.tk
internet-bankmellat-ir.tk
internet-mellatbank-ir.tk
ir-idpax-iran.tk
lnternet-bankmellat-ir.tk
lsp-pey.cf
mellatbank-iran-com.ga
mylicense.cf
og-req.tk
op-seq.tk
p-coin.tk
p-net.tk
p-vps.tk
pay-idpy.tk
ps-red.ml
ps-sighe.tk
salamat-ir-gov.tk
salamt-gov-ir.cf
saman-sana-ir.cf
sana-adliran-ir.ga
saz-pay.tk
shaparak-venoss.tk
shaparak-veroncs.tk
shaparak-vorons.tk
shaparakvenos.tk
shapark-mellat.gq
shop-shacpatak-py.tk
sighe-buy.tk
sigheyabi-com.tk
sopp-pey.cf
sorp-pey.cf
ssn-eblagh.tk
tr-wallet.tk
www-paylogin-com.cf
www-slamat-gov-ir.cf

# Reference: https://www.virustotal.com/gui/file/7b8babce594c8294b75d5b61ac4f9a5aec24c29a8ea294caf81bfc70d3c3398a/detection

epay-banki.ga

# Reference: https://www.virustotal.com/gui/ip-address/146.59.254.188/relations
# Reference: https://www.virustotal.com/gui/file/00fc19ea7ea18f6ce5d7a2e377cce48e7caa18ca62fa1d97109dd58805c1bbb4/detection
# Reference: https://www.virustotal.com/gui/file/fef9b60c08b225776460f98213f2343c39858451c125b307c404c742a06d6735/detection

amir-rxhmxni.ir
api-xcr.tk
bots-me.gq
bots-me.tk
eblaq-ir.cf
eblaq-ir.ml
eblgh.cf
eblgh.ga
eblgh.gq
eblgh.tk
epay-banki.cf
epay-banki.ga
epay-banki.gq
g-register.ir
iran-lancer.com
rush-link.gq
sana-gov.xyz
tron-wallet.ga
typing-rush.cf
typing-rush.gq
typing-rush.tk
weblink-sana.ga
weblink-sana.gq
weblink-site.cf
weblink-site.ga
weblink-site.ml
weblink-site.tk
xcr-bot.tk
zohreh-ahmadi.ir

# Reference: https://twitter.com/malwrhunterteam/status/1466836273256181761
# Reference: https://twitter.com/midnight_comms/status/1466971054941904896

eblgh-14000.xyz
salambarrahbar.xyz
/rat/user/nabat/

# Reference: https://twitter.com/malwrhunterteam/status/1466888626571259908
# Reference: https://twitter.com/midnight_comms/status/1466967003189682179
# Reference: https://www.virustotal.com/gui/file/b05418cab378f7c438c440110c7b61371b0d674a80cfbf5a962d06b34d913d95

adelliirann.tk

# Reference: https://twitter.com/malwrhunterteam/status/1466822463057186821
# Reference: https://twitter.com/midnight_comms/status/1466965433467248643
# Reference: https://www.virustotal.com/gui/file/2d3454ce72fbd12699262cee5ab05a068436ddafda04a49fa7a05dc48cee6605/detection

ir-46549.xyz
ir-56163.xyz
edalat.ir-46549.xyz
edalat.ir-56163.xyz

# Reference: https://www.virustotal.com/gui/file/c89b52a6bb50b96ad1d1fcb2c335b534731a5691c7a3aae49b7f7afc33624a01/detection

remote-vip.tk

# Reference: https://www.virustotal.com/gui/file/0ad7826c1de74bc0708b381741daa2ac6b87c8a8f3f38e0b4b0a202df19c09f3/detection

test-remote.tk

# Reference: https://www.virustotal.com/gui/ip-address/37.187.132.157/relations
# Reference: https://www.virustotal.com/gui/file/85b4c2bc2f97c10ed94276d5fe166ec5dfa3e8d0d8c7ed237f64e141affb5732/detection

e3blaq.com
ebiagh.com
eblaq.net
iblaqh.com
rat-1342.xyz
sana-ebiaghir.xyz

# Reference: https://www.virustotal.com/gui/ip-address/162.0.217.30/relations
# Reference: https://www.virustotal.com/gui/file/0a688d1f72d322a18a8ad2efc44c0387ea8f138449559dcd667f0a962b65d497/detection

appsanadownhere-ir-tk.xyz
landingissahna-tk.xyz
sabtsanna-tx-com.xyz
sahnayeman-tk.xyz
thisissahna-tk.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1469772282805555206
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.95/detection
# Reference: https://www.virustotal.com/gui/file/ec337b5cfc3500034c5f42443774bcbb20b9d1666296d82d37c245cdf1f891d2/detection

12gig-net.tk
12usnet.tk
30gig-net.tk
adiiran-ir.cf
adl-eblagh.ga
adl-eblagh.tk
adl-eblaghiran.cf
adl-eblaghiran.ml
adl-irin.cf
adliran.tk
adliran1.tk
adliran2.tk
adlirani.tk
adlisanaa.ga
amo-reza-login.cf
amo-reza-login.tk
bedi24.ga
claud-zax.tk
cloud-fa.tk
customer-01.tk
customer-02.tk
customer-10.tk
cyber-police.gq
cyberpolice.gq
download-maya.tk
eadl-ir.tk
eblagh--sana-ir.tk
eblagh-adiiran-ir.ga
eblagh-adiiran-ir.ml
eblagh-adliran.ga
eblagh-admiraani.tk
eblagh-ed.ml
eblagh-fata-ir.tk
eblagh-iran-sna.cf
eblagh-iran-sna.gq
eblagh-iran-sna.ml
eblagh-iran-sna.tk
eblagh-sanair.gq
eblagh-sena.cf
eblagh021.ga
eblagh1-electronic.cf
eblagh1-electronic.ga
eblagh2-adlirani.tk
eblagh2-electronic.ml
eblaghi-site.ml
eblaghi-site.tk
eblaghirsana.gq
eblaghy-irni-ir.tk
eblaghy-sana-ir.ga
eblaghy-sana-ir.tk
eblaghye-ir.gq
eblaq-fata.gq
eblaq-sana-ir.tk
eblaq021.ml
eblaqie.xyz
host-free.ml
ir-ablagh.ga
ir-pardakete.gq
iran-hamdel-sh.tk
iranu-adleblagh.ml
iranu-adleblaghi.cf
iranu-adleblaghi.ml
iranu-adleblaghi.tk
kospar.cf
kospar.ga
kospar.gq
kospar.ml
mellatbehpardakht-iran.gq
moshtari-2.tk
moshtari-3.tk
moshtari-4.tk
moshtari-5.tk
myket-ir.cf
net12us.tk
pakket-ontvangen.ga
perfect-uc.cf
peygir-iran-ir.cf
peygir-iran-ir.ml
peygir-iran-ir.tk
peygir-sna.tk
peygiri-rs.ml
peygiri.gq
peygirshi.pw
police-eadl-iran.tk
police-iran.ml
poxirn.ga
pygiri-iran.cf
remoteapk.gq
samaneh-sana.tk
sana-app.com
sana-eblagh-iran.cf
sana-eblagh-vjc-ir.cf
sana-eblagh-vjc-ir.ga
sana-eblagh-vjc-ir.ml
sana-eblagh-vjc-ir.tk
sana-eblagh11.cf
sana-eblagh11.ga
sana-eblaghye-ir.cf
sana-iran-eblagheyi.tk
sana-m-ir.cf
sana-peygiri.cf
sana-peygiri.ga
sana-peygiri.gq
sana-peygiri.ml
sana-talanir.tk
sana.tk
sanaa-adliran.tk
sanair-eb.gq
sanairen-wv.cf
sane-adliran.tk
sena-ir.tk
server-fox.tk
server-vip.site
sex-chat.gq
shaparak-12gignet.cf
shaprk-bmb-ir.ml
shaprk-iran-ir.ga
shaprk-iran-ir.ml
shaprk-iran-ir.tk
shaprk-meli.ga
shekayat.gq
shekayt-sana.cf
shekayt-sana.gq
sigheyab.ml
webamo-reza-login.tk
webcloud-fa.tk
webeadl-ir.tk
webeblaqie.xyz
webperfect-uc.cf
websana-m-ir.cf
websana-talanir.tk
webserver-fox.tk
zax-taha.tk
30gig-net.amo-reza-login.cf
eblagh-admiraani.amo-reza-login.cf
eblaghye-ir.customer-10.tk
eblaghye-ir.gq.customer-10.tk
peygirshi.customer-10.tk
sana.adiiran-ir.cf
zax-taha.customer-10.tk

# Reference: https://www.virustotal.com/gui/file/67ccdd6b89a0418a243a3ab188a7977328f623e87f95b7eb8fcb9f41a2f8f581/detection

ebanking-ir.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1475573184011255808
# Reference: https://twitter.com/midnight_comms/status/1475575581685256198
# Reference: https://www.virustotal.com/gui/ip-address/176.9.212.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.235/relations
# Reference: https://www.virustotal.com/gui/file/eab8e5dfcdc8e3c85f1e0796d0773c7a3a51e357a025be734c79ce680b1e6c3e/detection

ebblaghh3.ga
eblagh-electeronik.gq
eblagh-electeronik2.ga
eblagh-electeroniked.gq
eblagh-ir.co
eblagh-irn.ga
eblagh110-sna.tk
eblaghiie-sana.cf
eblaghsana110-ir.tk
eblaghssna-ir.tk
elobagpeygiri.cf
fata-iran.cf
fshekayat.ml
geblage3.ml
goysl.ml
internet-12giig.ml
mellatt-shop.ml
peygiri-eblaghie-sana.tk
pge-shapark.tk
qeblaghe3.ml
remote-best.tk
sghp-melli.tk
shop-melli-iran.tk
shop-melli.ga
shop-melli.tk
shop-mill.ga
shoping-mill.ga
sighe-daff.tk
sighe-shoop.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.155.173.151/relations
# Reference: https://www.virustotal.com/gui/ip-address/51.254.108.216/relations
# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

abl-irann.tk
af-shaparak.tk
app-sana.com
ara-host.xyz
bkihsjvjvdjgdjvdjvvdj.ml
bots-me.ga
bots-me.ml
bpn-shapatak.tk
bqm-shaprk.ml
clashsupercell.tk
cryptobiit.tk
cybertm.ml
daraserver.ir
deinserverhost.xyz
eblagh-pbp.ml
eblagh-pep.ml
eblagh-pep.tk
eblagh-saba-fata.tk
eblagh-sana-fate.tk
eblagh-sena.tk
eblagh-senal.tk
eblah-sana-fata.ml
eblah-sana-fata.tk
eblah-sans-fala.ml
ems-api.ml
eocic.ml
ezshoping.ir
fast-creat.ir
fater313.ir
fgvhbjnkmnbhgvhj.tk
gifti-trus.tk
gihjdgvbj568.tk
gite-tros.tk
godrat.xyz
hamsaryabi-maya.cf
hamsaryabi-maya.tk
hero-server.ir
httpwebsite.cf
iran-suport.tk
jet-host.ir
lemonrobot.ml
lotusgaming.ir
master-host.ml
master-host.xyz
megahosts.ir
metiwz.ir
mmmnbjhxojcjcjv.tk
monster-security.ml
mr-hp.ml
ms-api.ml
mweb.ml
newmizban.site
newmizban.xyz
nexgift.xyz
night-server.ir
panel-server.xyz
payepai-com.tk
phonix-host.xyz
piggiryy-ir1.tk
pocoserver.net
pocoteam.ml
power-server.ir
power-server.tk
qayehbolaghi.xyz
royaleweb.tk
rtxapi.tk
sana-adl-iran.ml
sana-s.ml
satashop.ir
satasource.ir
self-rezno1.tk
sevenmizban.ir
shaparak-ipc.tk
sighe-yab.ml
signorshop.ir
sing-in.gq
smomti.tk
trustwallet2022.cf
turk-mizban.tk
typing-rush.ga
webfgvhbjnkmnbhgvhj.tk
webtrustwallet2022.cf
webzarinpay.cf
x-pardakth-1400.gq
zarin-server.ir
zarinpay.cf
zarinpay.gq

# Reference: https://www.virustotal.com/gui/file/4997f65b0d78456ac881aefe477aa7d47e2ac96756530bdb6ca7b0718429d01b/detection

hamdamyad.gq
litehost.site
host2333.litehost.site

# Reference: https://www.virustotal.com/gui/file/ad30bbd9430472cb06a8be1c6117952036942117717e92800344ff764157d8d9/detection

pasha.alphahosting.ir

# Reference: https://www.virustotal.com/gui/ip-address/116.202.184.197/relations
# Reference: https://www.virustotal.com/gui/ip-address/116.202.190.150/relations
# Reference: https://www.virustotal.com/gui/file/573e36366ed930637cdaf22e8c20da8768cab4fda6c9f2c61885891c57d54872/detection
# Reference: https://www.virustotal.com/gui/file/6c044ba80ba093251ca5f6c4967b514b97a681dca347e830849952c7a6f16037/detection
# Reference: https://www.virustotal.com/gui/file/c2e156051b84bf0db2045ef79c20c7e995e0b22bae8279df9ee8940f13f52587/detection

banck-shaparack-ir.tk
dn-shaparak.ga
dn-shaparak.ml
dn-shaparak.tk
ds-shaparak.ml
ds-shaparak.tk
pablo-service.tk
pes-shaparak.ml
pes-shaparak.tk
senayar.xyz
sep-novinpardakht.tk
sinatarh.tk
sobhanphp.tk
sp-shapark.cf
sp-shapark.ga
sp-shapark.ml
sp-shapark.tk
yt-shapatak.cf
yt-shapatak.gq

# Reference: https://www.virustotal.com/gui/file/5a672adb90ca4730966d2a8ed131b022a152564ff31b5871bd4b1437b2bbc493/detection
# Reference: https://www.virustotal.com/gui/file/b249f7c8b7026668195878e5a68fe74d38d927c5ceb6a339217127a03c68f223/detection

sana-apk-ir.cf
sana-apk-ir.ml

# Reference: https://www.virustotal.com/gui/file/a2b32b8875da1331ddfd2c70ce3f1ba12da1680375dff5c5b37866b30603f581/detection

sana-1adliran.cf

# Reference: https://www.virustotal.com/gui/file/be890a3a42bc79fd0dd7993dd32c564f37a6caaa67bddf886d23a1446d6f5af8/detection

00098.tk
shaadparak.gq
rat.00098.tk

# Reference: https://www.virustotal.com/gui/file/ef138f6ad939e7e3df93c42499265f06b004ce85afa2b9d9345ad7c06d337a1d/detection

client-eblaghe.ml

# Reference: https://www.virustotal.com/gui/file/3d77255a247fb9b22589fad1e92ba11e3a4cb882e893b8e805c23aab41bc8623/detection

sumerr-ir.tk

# Reference: https://www.virustotal.com/gui/file/78ad1d47c9e690a0bf0d5ea87a5622915f78388b915f413440f8989648e3d85f/detection

snowiby.ga

# Reference: https://www.virustotal.com/gui/file/e398a8bd3b98437a3cf52eb0f303ee0d4363ed10341a1a43f30fc835aba7c370/detection
# Reference: https://www.virustotal.com/gui/file/5b4da6081760628f379caa6bb585100382348397533baca1b29a4012d2dd9beb/detection

danalica.ito.gov.ir/dcore/file/js/tracker.php

# Reference: https://www.virustotal.com/gui/file/3b674f320cac7d953fd7026e65bb3e974f43b788b80b3a85c2716389960661b2/detection

shapajak-ir.ml

# Reference: https://www.virustotal.com/gui/file/dc8c42626edf4bf0b9cacc9c21d682ca32e56ed697cb229415ba29416706fc6f/detection

shapatak-ir.ml

# Reference: https://www.virustotal.com/gui/file/fdc37a0e99b53580d83e63a6f49e2c985c0cb2a3996905e7a14af62dc5f493e7/detection

icm-mellat.ga
Icm-mellat.ga

# Reference: https://www.virustotal.com/gui/file/590278726f4ee4c2db9f2afaf8c11e62dc09acd6d1368fdef448e2ec6a244818/detection

b2-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/14e946c66487102454376e04b17cf2d5ad192dd5d7542274ee294f95ca3ab686/detection

b2b-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/b31b6d93080735b25eaff4a66f0b2dc93f6cfd5efe7053199dfb5413090737a1/detection

b5-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/7816eab3b6021633ab79d11beeb6e98f3bc6dbc80aec01f8fd0bab8aaa11679f/detection

b9-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3fb52b569c110dc3cd552fb37cf6e13f6758104bcb538eaee41cdda101a6452a/detection

bf-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9cfc5d3cd6d87361ad4b1da6d29f208d03c31794f301caa865146a813274f211/detection

dl-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9be85cac1a76caf2ca66a7e613e3ec5c40b657ef5701eee60ea74c454f5f722d/detection

shafarack.ga

# Reference: https://www.virustotal.com/gui/file/ebab499e9dbfd737d69cad9bac37e5a68053f55d5ccae53dbf72d9561a7a845d/detection

shaparaks-ir.ga

# Reference: https://www.virustotal.com/gui/file/659b835b73ccb0341c7f97cfc66f959ae1192c0c2a2ae982e29f3cc6aab1079d/detection

shhaporak.cf

# Reference: https://www.virustotal.com/gui/file/35ddb00109601324423de9ed903e1aa81e164b9b62cbcf461fbd58bdfe852b13/detection

shaparuk.ga

# Reference: https://www.virustotal.com/gui/file/f645368d2cdc68a74f927822ef6590f4bf9e4ae0d82909c13a91c5d70505865a/detection

api.texrcc.tk
dp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/ce0b1c5e5ccb5e540c04b71a314b4c04c370985937c340c9e699052bb652515f/detection

shapkarak-ir.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.93/relations
# Reference: https://www.virustotal.com/gui/file/fa4524025b56dbccee06126c18b40a6105709b869345899606da20ec26129db5/detection

35yu5u.ml
5r5hjd.gq
airdrop2021.cf
api-error.cf
api-error.ga
baro-pay.tk
bas-pay.ga
basepay.ga
beso-pey.gq
biso-pey.ga
biso-pey.ml
daillytron-cc.ml
diktator-api.tk
diktator-error.tk
diktator.cf
diktator.tk
e45jrwe.ga
ehjet54.gq
error-api.ml
error-diktator.tk
et764ue.cf
kanie-pey.tk
lkhyfytd.ga
ratkiriri.ga
ratkiriri.tk
rykoedt2.gq
rykoedt2.ml
rykoedt2.tk
saro-pay.cf
saro-pay.ga
saro-pay.ml
saro-pay.tk
sero-pay.cf
sero-pay.ga
sero-pay.ml
sero-pey.cf
sero-pey.ga
sero-pey.gq
sfro-pay.ga
sfro-pay.gq
sfro-pay.ml
sfro-pay.tk
sfro-pey.gq
sfro-pey.ml
sfro-pey.tk
snro-pay.cf
snro-pay.ga
snro-pey.cf
sps-shaparak.tk
stro-pay.cf
stro-pay.gq
stro-pay.ml
stro-pay.tk
stro-pey.cf
stro-pey.ga
stro-pey.ml
stro-pey.tk
trusttwallet.cf
uniouswap-com.ml

# Reference: https://twitter.com/malwrhunterteam/status/1473406036497383425
# Reference: https://twitter.com/midnight_comms/status/1473459603073470464
# Reference: https://www.virustotal.com/gui/file/e07d155c663e8deddc0b8843de0acaddad620a15ac7d9e02397807466fb8e58a/detection

http://45.147.230.25
trustwalllet.cf
mta0.moedazmail.com.br

# Reference: https://twitter.com/malwrhunterteam/status/1473663409992445955
# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.32/relations
# Reference: https://www.virustotal.com/gui/file/9efbf303b035bb02cf5c611ed010816c04d7b91916bf9976e694ad2e246abacb/detection

http://212.114.52.201
http://45.147.230.25
abl--irann.ml
abl--irenn.ml
abl--irran.ml
abl--irren.ml
ablag.ga
ablag.tk
ablagie-adliran.tk
addludksd-sds.ml
adiran-eblagh.gq
adiran-eblagh.ml
adiran-eblagh.tk
adl--irann.ml
adl--iren.ml
adl-peygiri.ml
adl-sana-eb.ml
adlilran.xyz
adliran-ebiagh.xyz
adliran-sana.site
adliran-sano.xyz
adliranian.xyz
adlirn-ir.cf
adll--irren.ml
adlliraniian.ml
adlran-sana.ml
adlransna.ml
adrlin-site.ml
aedll.ga
benzin-ir.com
biag-sana.ml
bqm-shaparak-ir.xyz
cena-sait.cf
csynat661.xyz
dadgah-web.cf
digitalvigo.gq
dodgah-sana.cf
ebalgh-rasmi.tk
ebfamli.ml
ebilag.tk
ebilegh.tk
eblagh-adlran.ml
eblagh-ir.com
eblagh-iran.com
eblagh-lran.ml
eblagh-peygiri.ml
eblaghe-iran.xyz
eblaghe-rasmi.cf
eblaghe-site.cf
eblaghee-sana.gq
eblaghiyefta-ir1.ml
eblaghiyefta-ir4.ml
eblaghiyefta-ir5.ml
eblaghye-sena.ml
eblaghye-site.cf
eblagie-adiliran.tk
eblagie-adliran.ml
eblagye-sena.ml
eblaqe-sana.ml
eblegh-iranian.ml
eblfasaeda-ir.ml
eblfpamlei-ir.ml
eblfsaeda-ir.ml
eblgh-sana.gq
ebliagh.tk
ebliegh.tk
ebllaghe-sana.ml
edaiat.com
edalat--wab.cf
edalat--web.cf
edalat-wab.cf
edll-ir.xyz
efatimli.ml
ersal-payam.xyz
faeblaghis.ml
gov-eblagh.cf
gov-eblagh.gq
gov-eblagh.ml
gov-shaprak.ml
hdbshsj44.xyz
ir-adl-iren.ml
iradll.ml
iran-eblagh2.tk
iran-edi.com
iran-hamdel-sh.cf
iran-hamdel-sh.ga
iran-hamdel-sh.ml
iran-khodro.ml
iran-pot.tk
iran-sanaadli.site
iran-tap.gq
iranis.xyz
ireblaghix.xyz
is-sigheq.tk
kuofeesmon.ml
main3erver.xyz
mellat-sheaprkq.tk
morning-housey.xyz
mysaba.tk
new-siqe.gq
newyeargift-paycompany.ml
nlserver.ml
opshpo.tk
pancake-swap.ml
paygiry-sena.ml
paysmentra.ga
pey-dadsetani.ml
pey-eblaghq.ml
pey-eblaghq.tk
pey-eblaghw.cf
pey-eblaghw.gq
pey-eblaghw.ml
pey-eblaghw.tk
peygiri-apk.ml
peygiri-arf.ml
peygiri-dadgostari.ml
peygiri-dci.ml
peygiri-eblagh-new.gq
peygiri-eblaghye.tk
peygiri-itr.ml
peygiri-sak.ml
peygiri-sms.cf
peygiri-ytr.ml
peygiri.cf
peygiri.ga
peygri-ebleg.cf
peygry-sena.ml
proxy-null.cf
pygiri-iran.ga
randomsize-12.ml
sada-adlran.ml
saheb-dar.xyz
saite-sana.ml
saite-sena.ml
saman-sna.cf
saman-sna.ga
saman-sna.gq
saman-sna.ml
saman-sna.tk
samane-eblgh.cf
sana-adilran.ml
sana-ebl.ml
sana-eblagh-iran.cf
sana-eblagi.cf
sana-eblagi.ga
sana-eblagi.gq
sana-eblagi.ml
sana-eblagi.tk
sana-eblgh.tk
sana-eblogi.gq
sana-iran-ir.tk
sana-iran.online
sana-iranis.xyz
sanad-irani.xyz
sanaeblag.tk
sanafatk.ml
sanaire.cf
sanan-iron.ml
sanan-iron.tk
sanar-irani.xyz
sanat-irani.xyz
sanna-larn.ml
saya-gh.ml
sena-adrliins.cf
sena-adrlins.cf
sena-ira1n.tk
sena-iren.cf
sena-peyggri.cf
sena-peygri.cf
sena-sait.cf
sena-sayt.cf
sena-sita.cf
sep-shaparak-pay.cf
seq-shaqarak-ir.xyz
shaapaarak.tk
shaparak-ipc.tk
shaprak-xer.tk
shaprk-bmb-ir.ml
sighe-yab.gq
sighe-yabi.site
sighehalal.ml
siman-ersal.xyz
site-eblaghe.ml
site-sena.ml
snatrt.ml
soltaniiisirr.xyz
starpar.ml
telegram-hakc.ga
test-dargah.tk
thenull.cf
trust-walet.gq
trustswalt.ml
update-shprk.ml
xe-shaprak.tk
zeoxtm.ml
zeoxtm.tk
zr665.xyz
adl-sana-eb.sanan-iron.tk
adlransna.sanan-iron.tk
adlrdan-sana.sanan-iron.tk
eblagh-adlran.sanan-iron.tk
eblaqe-sana.ml.eblaqe-sana.ml
sada-adlran.sanan-iron.tk
sana-eblagi.main3erver.xyz
sana-eblogi.main3erver.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1474789191397556225
# Reference: https://www.virustotal.com/gui/file/19cfb063d8d43bced68cc3ebfef029bb7a39b7d7a8a6b2b3ba2889fa5cef87ed/detection

dxxx.bar
eblagh-2200.xyz
sna-eblagh.com

# Reference: https://www.virustotal.com/gui/file/47f4ff8cfbf3043635217fdd6e47ea11764be66bb78be0203b88357750786ab3/detection
# Reference: https://www.virustotal.com/gui/file/97cdf8035b74e212b6da44f8af75a4540421349c58668e77d6aaedbc714c5639/detection

cxxx.bar

# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.67/relations
# Reference: https://www.virustotal.com/gui/file/8eb3b6ac76d37f5080711260e0ecff4b5f2443795c0181ca4101a5c9bbf08699/detection
# Reference: https://www.virustotal.com/gui/file/82ebe56b08c5d2810b3870e5124df2f23ae49a0a1f1e5f4293cba0d9aa3e43e3/detection

adleiran.xyz
adleran.xyz
adlian.xyz
adliran1.xyz
adliran2.xyz
adlirno.xyz
adliron.xyz
adlliran.xyz
adlor.xyz
adlrn.xyz
cvv2.xyz
divaor.xyz
divar-man.xyz
divar.bond
divar.cfd
divar.fun
divar.monster
divar.store
divarapi.xyz
divarh.xyz
divarm.xyz
divarman.xyz
divarnew.xyz
divaro.xyz
divarp.xyz
divarpay.xyz
divart.xyz
divarz.xyz
divaur.xyz
divear.xyz
ebiaghi.xyz
ebiaghie.xyz
eblagh1.xyz
eblaghiat2.xyz
eblaghiran.xyz
edalati.xyz
edalatiran.xyz
edalaty.xyz
ghazaiat.xyz
mydivar.xyz
oxxx.bar
pishgiri-sana.com
sanagv.site
ssspp.xyz
xxxsx.xyz

# Reference: https://www.virustotal.com/gui/file/8d657d372777b2e89b5e63ced5e1ab82750a190af54fe34a6953de157dec670c/detection

dadsara-1400.xyz
hello-23123.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1473016650689622025

dadsara-1500.xyz

# Reference: https://www.virustotal.com/gui/file/4d41d251c4d1d48bb213fa84c71af4ebe1b1aa026a1628e639638cb9ec29b6a2/detection

sana-miran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1359203738808893450
# Reference: https://www.virustotal.com/gui/file/a6571e7d63b10a2d323cba7f9d603a977e1c66f635ae7e40027a7a4b0a96383f/detection

shaparack-iir.ga

# Reference: https://twitter.com/malwrhunterteam/status/1349342821623459840
# Reference: https://twitter.com/malwrhunterteam/status/1350419534868578304
# Reference: https://twitter.com/bl4ckh0l3z/status/1350492882633895938
# Reference: https://www.virustotal.com/gui/file/a5657d914de9840f20bbc14b431b614dbeca5040148a569489a761a29cfbef46/detection
# Reference: https://www.virustotal.com/gui/file/53ece16de2047212ba1daba6d5dd27c7e63c7b2bcbf34b89ddce1347f590ff0a/detection

bamharmrah.site
bamimelli.xyz
my-bmi-ir.work
nablism.xyz
/melli/otp.php

# Reference: https://twitter.com/malwrhunterteam/status/1350356095831855104
# Reference: https://www.virustotal.com/gui/file/16cbbc5b747ee165de4b66fb2fc47498799bea57c2dbdb7ef09c6dc26954cec4/detection
# Reference: https://www.virustotal.com/gui/file/8416943efd3af3b11c55d9de23f2a2676c59a2154c0bb03b963ba0aab206e514/detection

hanabaf.ga
/.s/6GiG/
/.s/MelliNet/

# Reference: https://www.virustotal.com/gui/file/78c6361435a3f571db32f4a8ad0b3ab9145f7e95e4b5b781e6542b6e3f7f7c00/detection

simail.site

# Reference: https://www.virustotal.com/gui/file/5d18085f999537912f93c828adab681764f59100a0653b43fe9d408acdd9feb7/detection

amirhasani12345.gemmizban.ir

# Reference: https://www.virustotal.com/gui/file/c42e5992e34f3fed0c37ef3f4b543398f89c4c6da8b331af1bba94c7ebded596/detection

iranglobal.eliyahost.ir

# Reference: https://www.virustotal.com/gui/file/fd0226b3e50e29ed3e2b881c35730d48eadac5e78c6e1088c6c342659168a2a8/detection

keygrk.tk
mestrewas.tsohost.ir
/fuLLLLODLLLL/
/fuLLLLODLLLL/index.html

# Reference: https://twitter.com/malwrhunterteam/status/1476681714319691776
# Reference: https://twitter.com/malwrhunterteam/status/1476682317506785281
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection

aldeliirann.ml
divarir.cf
irdivarr.cf
kospof.ml

# Reference: https://www.virustotal.com/gui/file/a29e5078ee1ada2c8214d093ed8bb7813cec787bbe889c3e5b42fed658a24f87/detection

googleadvercap.cf
oliverdnssop.cf
/XMrLucyX/panel.php

# Reference: https://www.virustotal.com/gui/file/0267316e9b91ceaec617c455bcb4c6d6cd58b2ff3b394d5c8fe1518400774e97/detection

androidglbl.cf
androidsettings.cf

# Reference: https://www.virustotal.com/gui/file/d101b590b67c6d4e0cd4f1702b04328263c06d7690f2dfbc9266236d19bebb71/detection

androidsetting.cf

# Reference: https://www.virustotal.com/gui/file/22ca0aac892096288f8045199a6bf44689d99321de9b4a549b607e4a0ccfbc31/detection

googleupdates.cf

# Reference: https://www.virustotal.com/gui/file/808f0c09e176834a8f3c0750677fbe9f6ec10caab55067cbec5c98dee300e151/detection

googleglobal.cf

# Reference: https://www.virustotal.com/gui/ip-address/216.250.249.242/relations

adliran-eblagh.site
dadsara-fa.ga
eblaghir.site
mothernonsafe.tk

# Reference: https://twitter.com/malwrhunterteam/status/1478083027607687172
# Reference: https://www.virustotal.com/gui/file/7cd1fd4fe8bcf14da32579c5f173b4fb002740d4e8673528efb8d30da7239181/detection

eblagh-sna.site

# Reference: https://twitter.com/malwrhunterteam/status/1478373104372092933
# Reference: https://twitter.com/midnight_comms/status/1478398312378155011
# Reference: https://www.virustotal.com/gui/ip-address/198.54.120.224/relations
# Reference: https://www.virustotal.com/gui/file/826e1a57d0d084138389ce67b8fbb05c7fbfd4620aad59d635914e7b73c20f06/detection

purnhub.com
toprat.site

# Reference: https://twitter.com/malwrhunterteam/status/1478661638559567877
# Reference: https://www.virustotal.com/gui/file/3161cb7aa9038db5fe6954647f96b25dc6a4968d4c500b25d6904a8774caaee6/detection
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.188/relations

barghir.tk
eadll.ga
eadllir.tk
eblageirani.xyz
eblaghiyefta-ir3.ml
eblqeie.ga
fbi-eblag.ga
freefalower.tk
irbargh.tk
peygiri-21w.ml
peygiri-web.ml
sanairn-vc.ga
sena-abliron.ml
snairn-vc.ml
snairn.cf
ssena.ml
barghir.soqquz.serverbest.xyz
eadll.ga.fmhucx.serverbest.xyz
eblaghiyefta-ir3.ml.fmhucx.serverbest.xyz
freefalower.wqvzmc.serverbest.xyz
irbargh.soqquz.serverbest.xyz
peygiri-21w.zkgfzu.serverbest.xyz
peygiri-web.zkgfzu.serverbest.xyz
ssena.klyiep.serverbest.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1478687276133715972
# Reference: https://www.virustotal.com/gui/ip-address/212.1.210.150/relations
# Reference: https://www.virustotal.com/gui/file/d3a0855f301f64af98b7f965725444eee7bd73e696ec8b64f272f3bfcc40284b/detection

adllir.ml
adlsana.ml
aedll.ml
eadll.cf
edlsana.ml
ir-adl.ml
irdll.ml
iredl.ml
sadl.ga
sadl.ml
sanaedl.ml
seadl.ga
sunlovelapi.xyz

# Reference: https://www.virustotal.com/gui/file/c9f05ead614ae235efc2688966e0528fcb771f1933bd64a6ebe3de79f2dc5278/detection

sd-shaparak.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.23.172.233/relations

12gbnet.tk
1null-server.xyz
5ashparak.amin-hosting.xyz
5ashparak.tk
adding-pool.ml
addliran-sana.tk
addsal-portal.gq
addsal-portal.ml
adiiran-lr.gq
adiiran-sana.tk
adleey-ir.tk
adleye.ga
adleye.tk
adliran-dadgah.tk
adliran-lr.ga
adliran-lr.gq
adllran-sana.ml
adlye.gq
aghaze-nou.tk
amin-hosting.xyz
apicodsazan.gq
bamk-mellat.tk
bax-2021.cf
bax-2021.gq
bax-2021.ml
bdejehdtsjq.ga
bdejehdtsjq.gq
beh-shaparak.tk
besthobsite.tk
bmq-mellat-ir.ga
bmq-mellat-ir.gq
bmq-mellat-ir.tk
bmq-shapark-ir.tk
botbource.tk
bpc-mellat-ir.ga
bpc-mellat-ir.gq
bpm-sahaparak-ir.tk
bpu-mellat-ir.ml
bpu-mellat-ir.tk
bpz-mellat-ir.cf
bpz-mellat-ir.ml
bqi-shahparak-com.tk
bqi-shaparak-com.tk
buy-check.ga
coin-gold.cf
cqr-shaparak.tk
cup-shaparak.tk
darkteami.tk
ddos-odin.tk
dfq-shaparak.tk
diivare-update.ml
diivare-update.tk
diktator.cf
diva-r.ml
divare-update.tk
eblag-adliran-lr.gq
eblagh-sana-lr.ga
eblagh-sana-lr.ml
eblagh.tk
eblagie-adl.tk
eblq-sana-ir.ml
edliran.ga
edliran.ml
edliran.tk
ejeudgdv.cf
ejeudgdv.tk
foroshapp.net
hamrah-mellat.tk
hash-shaparak.tk
ho-black.cf
ho-black.ga
ho-black.gq
ho-black.ml
ho-black.tk
hub-shaparak.gq
id--bi.tk
instagram-panal.tk
ir-bqi-shahparak-ir.tk
ir-my.cf
ir-my.gq
ir-pardakt.gq
ir-pardakt.ml
ir-shahpalack.ga
ir-shahparaak.ml
ir-shahparaak.tk
ir-shahteck.ml
ir-shahteck.tk
ir-shalpalck.ml
ir-shaqarak.tk
ir-shatarak.ml
ir-starka.ml
ir-starka.tk
ir-starke.ga
ir-starke.gq
ir-starke.tk
ir-starki.tk
iran-film.cf
iran-kish.tk
iri-pay.tk
irmeli-shaparak-ir.tk
irn-shaqarak.tk
irwebdad-ir.cf
ishaparakai.ml
ishaparaki-sp.ml
ji-shaparak.ga
js-12.cf
js-12.ga
js-12.tk
karlean-sad.cf
klkmof.tk
koq-shaparak.ml
kqm-shaqarak.cf
lr-my.cf
lr-my.gq
lr-my.ml
lr-my.tk
max-item.ml
max-net.cf
max-net.gq
max-net.ml
melat-shaparak-pey.tk
melat-shaparakl.tk
melatt-bmi.tk
mellat-bamk.tk
mellat-shahparek-ir.tk
mellatt-shahparak-ir.tk
mellllat-shahparak-ir.tk
milati-ir.ml
my-lr.ga
my-lr.gq
nasa-portal.ml
neeet-std.tk
netarzan1399.ga
netbanmyllat.online
nobitux.tk
okexioir.cf
onilos-shaparak.tk
paigiri-sana.ml
pardakhit-bqm-ir.tk
pardakht-meliat.tk
pardakht-net.tk
paridakht-milat-ir.tk
pay-shapark.gq
pay-sharpak.cf
pay-sharpak.tk
payegiri-lr.cf
payegiri-lr.gq
payegiri-lr.tk
payment-pay.tk
payment-x-pay.gq
payments-page.cf
payments-page.ga
payments-page.ml
payments-page.tk
payments-pay.ml
payments-pay.tk
pip-pay-ir.tk
plass-rat.cf
polbgire-irani.ml
pshaparak.cf
pub-shaparak.cf
pub-shaparak.tk
puller.cf
pullercloud.ml
pullercloud.site
py-shaparak.ga
q-shaparak-xq.tk
rat-maker.tk
rd-divar.cf
rd-divar.ga
rd-divar.ml
rd-divar.tk
rot-shaparak.ml
s-shaparak-com.tk
sabt-sana-lr.cf
sabt-sana-lr.ml
sabt-sana-lr.tk
sahapark-iran.cf
sahparak-ir.gq
sahparak-mellat.ml
sahparak-mellat.tk
sahshsns.xyz
saman-shaparak.cf
sanaql.xyz
saparakk.gq
seop-shperk-iran.tk
sh-aparak.tk
shahparak-asiatek-ir.tk
shahparak-parrdakht-ir.tk
shahparak.ml
shahparek-ir.ga
shahqarek.tk
shalparak.cf
shalparak.tk
shapalaki.tk
shaparack-iir.ga
shaparak-9m.cf
shaparak-bank-iran.ga
shaparak-bank-iran.tk
shaparak-com.cf
shaparak-ir-ir.ml
shaparak-iran-ir.tk
shaparak-irani-com.cf
shaparak-laxlxu.tk
shaparak-my.ml
shaparak-my.tk
shaparak-phg.ml
shaparak-saman.ga
shaparak-saman.ml
shaparaka.ml
shaparakes.tk
shaparakie.ml
shaparakiii.ga
shaparakirr.tk
shaparakk-melat.gq
shaparek-ir.gq
shaparek.ml
shaparek.tk
shapariak-dqm-ir.tk
shapark-iran.tk
shapark-mellat.ga
shapark-mellat.gq
shaparka.ml
shaparkl-melat.cf
shaparkl-saman.ml
shaprak.tk
shaprcak-ir.cf
shaqaraki-asanprdkh-ir.ml
shaqrak.cf
shariparak-melati-ir.tk
sharparak.tk
shatrak.ga
shayparak.ml
shayparak.tk
shegeyab.cf
shegeyab.tk
sheypor-ir.ga
sheypor-ir.tk
shparacck.ml
shparacck.tk
shparack.tk
shprak-melatt.cf
shprak-melatt.tk
shprkkk-pardaz.tk
sm-tn.ga
sm-tn.tk
sms.pardakht-net.tk
so3h.tk
so3r.ml
suxc.tk
teq-shaparak.ga
teq-shaparak.tk
trast-wallet.tk
trast.cf
tru-chent.cf
tru-chent.ml
trust-walet.tk
uk-shaparak.cf
uk-shaparak.ml
update-divar.ml
update-divar.tk
update-divare.ml
updatee-divare.tk
updete-divari.ml
usa-shaparak.tk
vittato-psemjry.tk
vncodest.ml
wdivar.ga
wdivar.tk
webir-shahpalack.ga
webmilati-ir.ml
webparidakht-milat-ir.tk
x-shapwal.tk
xn--rgbga0hz3a.ga
yebaziche.tk

# Reference: https://twitter.com/malwrhunterteam/status/1480624878130810882
# Reference: https://twitter.com/malwrhunterteam/status/1480644526586966016
# Reference: https://twitter.com/midnight_comms/status/1480738242882248708
# Reference: https://twitter.com/midnight_comms/status/1480740266503905283
# Reference: https://www.purpl3f0xsecur1ty.tech/2022/01/10/eblagh-re.html
# Reference: https://www.virustotal.com/gui/file/b18bcac068e5827a139c590d44e093299bcedd852e9a64c17e8cfb7499261793/detection
# Reference: https://www.virustotal.com/gui/file/a594384630a4d9d238e07c76867edffa671c4675cbc9ed80c3ab614c2625480e/detection
# Reference: https://www.virustotal.com/gui/file/cbdd4514247474bee8a4368ad87afb97a0cf29a269efb7faf34c75c7646c63ab/detection
# Reference: https://www.virustotal.com/gui/file/b3dea70665740e1e43b50840a8db95debb19e897be433355a88328f2263c2309/detection
# Reference: https://www.virustotal.com/gui/file/816ffa57b028e9e67bd6aeeedffbbfb8c5e5ed8951689d6b1e47746618caaf70/detection

adel-sana.tk
chat18sal.xyz
mellat-bk.xyz
mytestprojects.xyz
lightzer0.xyz

# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

irangeimcxz.power-server.ir

# Reference: https://www.virustotal.com/gui/file/b7d67e5f5c814139ddadf9c4868d0122ed2e76908ce1cf77730c995b581e0b56/detection

panel.hero-server.ir

# Reference: https://twitter.com/malwrhunterteam/status/1480911620608086023
# Reference: https://www.virustotal.com/gui/ip-address/10.10.34.35/relations
# Reference: https://www.virustotal.com/gui/file/17e75f05bd51550f01d5e9db3809bfed37d9f5786fe92aac6e35144e20132f38/detection
# Reference: https://www.virustotal.com/gui/file/c2835809fa5c68b0e82cb62744225fd38ca99030e3453ad1f5b000710b179075/detection

ebiaq.com
ebiagh.org
eblgh.cf
eblaghe-snair.gq
eblagh-1200.xyz
peigyri-eblagh.gq
sanasamane.tk
sana-gov.xyz
sana-adsiran.tk
sana-adsiran.cf
sana-adlsiran.gq
bankmellat.gq
bmpmellimellat.tk
bpz-mellat-ir.tk
mellat.gq
mellatbanking.info
t3files.ddns.net
akhrineblagh.freehost.io
ehzariye.sana.freehost.io

# Reference: https://www.virustotal.com/gui/file/8937b057671d69b76b7449c58c28a428a56f5633e3a28db72dca63c214c72b89/detection

iranplms.ml

# Reference: https://www.virustotal.com/gui/file/f47f91db56c334c9ea265e4eaec04ca0e15832bf9dbdc33745ccc138042ab92d/detection

tejarat-benk.com

# Reference: https://www.virustotal.com/gui/file/4db5d8a9192c1139782ae237e70c052a7d7ad72f68f47567e389edf0519b2e8d/detection

livechater.tk
rayanertebat.ir

# Reference: https://www.virustotal.com/gui/file/cf6b2942374eb4977622d68b941ac148013777a34b34b2a304bf05ddce6e15c2/detection

iamdrdev.gq

# Reference: https://www.virustotal.com/gui/file/dd31fbd534196254fdcf75737f09f84b21a46d051b164e795e7add1556b2bdf7/detection

sana-adlrinom.tk

# Reference: https://www.virustotal.com/gui/ip-address/185.167.72.20/relations

shaparak.com
shaparak.digital
shaparak.me

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.5/relations

adaro.ir
adliranir-ir.cf
adliranir-ir.gq
adliranir-ir.ml
adliranir-ir.tk
ahangfollow.com
alireza-safari.ir
alopakhsh.net
amir-site.tk
arashoe.ir
avisaind.com
batweb.ir
berozlearn.ir
bmp-paya.tk
brutish.tk
burnwood.win
buttybot.tk
cardforum.cc
cch-shaprak.cf
cch-shaprak.ga
chr-shaprak.ml
ciph3r.ir
coinexapp.tk
crackers01.com
dezmond.ir
digiatom.ir
diivar-ir.tk
diivarr-ir.cf
diivarr-ir.ga
diivarr-ir.gq
diivarr.gq
diivarrr.cf
diivarrr.ga
diivarrr.gq
diivvarr.ml
diivvarr.tk
dilvar.cf
divar--ir.gq
divar-irr.gq
divarir-ir.cf
divarir-ir.gq
divarir-ir.tk
divarir.gq
divarr-ir.cf
divarr-ir.gq
divarrir.cf
divarrir.ga
divarrir.ml
divarrir.tk
divvar.ga
divvarir.cf
divvarir.gq
divvarir.ml
divvarir.tk
divvarrir.cf
divvarrir.ga
divvarrir.gq
divvarrir.ml
divvarrir.tk
dlban.ir
dluptime.tk
eblagh-dl.cf
eblagh-dl.ga
eblagh-dl.gq
eblagh-dl.ml
eblagh-post.tk
eblagh1-adliran.ga
eblagh1-adliran.ml
eblagh1-adliran.tk
eblagh1.tk
eblaghie-dl.tk
eblaghie-ir.cf
eblaghie-ir.ga
eblaghie-ir.gq
eblaghie-ir.tk
eblaghie.gq
eblaghir.cf
eblaghir.gq
eblaghiran.cf
eblaghiran.ga
eblaghiran.gq
eblaghiran.ml
eblaghiran.tk
eblaghname.cf
eblaghname.ga
eblaghname.gq
eblaqhie-dl.gq
eblaqhie-dl.tk
eblaqhie.ga
eblaqhie.gq
eblaqhie.ml
eblaqhie.tk
eblaqiran.ga
eblaqiran.gq
eblaqiran.ml
eblaqiran.tk
eblaqname.cf
eblaqname.gq
eblaqname.ml
eblghnameh-dl.ml
eblghnameh-dl.tk
eblghnameh.cf
eblghnameh.ga
eblghnameh.gq
eblghnameh.ml
eblghnameh.tk
eblqnameh-dl.tk
eblqnameh.ga
eblqnameh.ml
eblqnameh.tk
ehsanmalekinejad.ir
emenazarang.com
enchemical-hut.ir
farpak.group
fawsi.ir
feizi-derakhshi.ir
followergram.tk
followerteam.ir
gapsec.ir
gatem.ir
gatemsotre.ir
gatemtrade.ir
getfollower.info
giahnooshamani.ir
hir-shaprak.tk
hschm.ir
htgranite.com
infiniteam.ir
ir-adliran.cf
ir-adliran.ga
ir-adliran.gq
ir-adliran.ml
ir-adliran.tk
ir-eblaq.cf
ir-eblaq.ga
ir-eblaq.ml
ir-eblaq.tk
ir-shahparak.cf
ir-shahparak.gq
iran-com.tk
iran-vip.ml
iranadlir.ml
iranadlir.tk
irantse.ir
irdiivar.ga
irdiivar.gq
irdiivar.ml
irdiivar.tk
irdivar-ir.ml
irdivarr.tk
irdivvarr.ga
irdivvarr.ml
irdivvarr.tk
irpay.ga
irpay.gq
irpay.ml
irsana-ir.cf
irsana-ir.ga
irsana-ir.ml
irsana-ir.tk
ithirteen.ir
jazabam.com
jor-pa.ir
ke-shaprak.ml
larakala.ir
line-bot.xyz
lnglounge.ir
marlikdigital.ir
masteraxe.ir
matrixgram.com
mersichat.ir
milvpn.xyz
mjkhajeh.com
mohgivebot.tk
multivpn.xyz
my-rat.tk
mysutsujs.tk
n1vpn.xyz
net-covid-ir.tk
net-pool.ir
newodksj.tk
niracloud.ir
norouzi80.tk
norouzi81.info
norouzi81.tk
novincrop.ir
null-net-work.tk
otom.ir
pandatem.ir
persianpay.cf
power-service.cf
propay.cyou
pubgfrostfestival.ml
pythoniha.ir
pythoniha1.ir
rafa-tech.ir
ragram.ir
rayainst.com
rayainst.ir
rlt-shaprak.gq
rubixmovie.com
rubixmovie.top
sabbas.ir
sada-shprakmelat.cf
san-esis.cf
san-esis.ml
sana-samaneh.ga
sana-samaneh.ml
shahprk.gq
shaparak-js.tk
shapra-kvnd.ml
shaprak-pop.gq
shaprak-set.cf
shaprak-set.ml
shaprakddj.cf
sheyp-oor.tk
shprakserf.ga
shprakserf.gq
shprakserf.ml
shprakserf.tk
shprakwer.ml
soft-support.tk
stylestreet.ir
tajrishpharma.com
tebetasviri.com
the-brutish.tk
thebrutish.tk
themaqs.ir
uplmaloo.tk
uplmalooo.tk
uploaduqjdqm.tk
uplymalo.tk
vastudesign.ir
venostehranior.tk
whatsappx.tk
x200.ir
xgts.ir
xnice.gq
yaldaa.xyz
yeee.ir
yz-shaprak.tk
zarnegariran.ir

# Reference: https://www.virustotal.com/gui/file/cd3dc35a4cec05b5e3f66ae2a80a3e6bdea8ad952ed3a584927696107335f3f3/detection

iamdrdev.tk
eblaaghi-sanaa.cf

# Reference: https://twitter.com/malwrhunterteam/status/1481233824092770306
# Reference: https://twitter.com/midnight_comms/status/1481248207229181953
# Reference: https://www.virustotal.com/gui/ip-address/217.160.0.241/relations
# Reference: https://www.virustotal.com/gui/file/7cfec4dfc08443c7b1a14317625e75e2f264e64bcb22cc02ac804def54228a29/detection

samaneir-e.biz
samaneir-e.com
samaneir-e.info
samaneirn.online

# Reference: https://twitter.com/malwrhunterteam/status/1481237183981887490
# Reference: https://twitter.com/midnight_comms/status/1481245440066473988
# Reference: https://www.virustotal.com/gui/file/a25ef8f93114728b224f311e0cfcca60513e607d83672302e4edd7fb67439606/detection

ir-65163.xyz
edalat.ir-65163.xyz

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.17/relations

asiapay.cf
divar-1.cf
divarr.ml
divarr1.ml
divarsite.ml
divvar.ga
dlvar.ml
seppai.ga
seppai.tk
seppay.ml
shahpay.ga
shahprk.gq
sitedivar.ga

# Reference: https://www.virustotal.com/gui/ip-address/198.54.114.185/relations

abl-sena.gq
abl-sena.ml
abl-sena.tk
ablghee-sana.ml
ablghee-sana.tk
api-reet.tk
ebla-ghy.ml
eblagh-ir.sbs
eblao-sana.ml
samane-eblaghee.gq
samane-eblaghee.ml
samane-sanaa.tk
sana.eblagh.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1481723667037970435
# Reference: https://twitter.com/midnight_comms/status/1481729062385160202
# Reference: https://www.virustotal.com/gui/ip-address/68.65.122.100/relations
# Reference: https://www.virustotal.com/gui/file/2e4547983ed0074e46241828d09ff310122285d341c5a7705d2ebb8edbb86078/detection

adlir-eblog.ml
adlir-eblog.tk
eblagh-adlir.tk
eblagh-adliran.tk
eblagh-eblogin.tk
eblegh-ir.tk
eblogin-adlir.tk
ebv-eblagh.xyz
ebv-eblaghir.ml
ebveblagh.gq
ebveblagh.ml
ebveblagh.tk
mamaloch.xyz
trustupdatewallet.net

# Reference: https://twitter.com/malwrhunterteam/status/1431198354730622977
# Reference: https://twitter.com/bl4ckh0l3z/status/1431218876642103297
# Reference: https://www.virustotal.com/gui/file/21d7fdf3581c65a20e9199d6470de8c0f6776e86827c5c5085175fe52e2eca1e/detection

caco333.ca
vinsa.fun

# Reference: https://twitter.com/malwrhunterteam/status/1346035452894179331
# Reference: https://twitter.com/bl4ckh0l3z/status/1348324827510267909
# Reference: https://www.virustotal.com/gui/domain/karloskey.ml/relations
# Reference: https://www.virustotal.com/gui/file/5253ded3b530bbcde7f9bd8493c9d76a045670308faf15ad28b1e8c635ff9432/detection
# Reference: https://www.virustotal.com/gui/file/92e4013646e60da4c4debd6b975277acf2784352024be43ea5918abdffb0d623/detection

http://37.120.146.4
karloskey.ml
pasargaad.xyz

# Reference: https://www.virustotal.com/gui/file/45ff19a4717c556ebcb83ecff4fb09bc00bf13911f861c3a9d83e0c5462eca6b/detection
# Reference: https://www.virustotal.com/gui/file/c0d6aa4233c70e4f13d01ba858b30e27b439aaf20587de11c3705344f63aac8d/detection

uaioey.ga

# Reference: https://www.virustotal.com/gui/ip-address/162.55.9.240/relations
# Reference: https://www.virustotal.com/gui/file/440421aef5210bb1616a06e19fb6d101718ec37041fa230248fda03e930be5ab/detection

eblagh-adliran.cf
edalat.cf
edalat.ml
myrats.fun
myratsdomain.cf
myratsdomain.tk

# Reference: https://www.virustotal.com/gui/ip-address/172.67.152.80/relations

eblagh-adliran.ml
eblagh-adliran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1481729387485609984
# Reference: https://twitter.com/midnight_comms/status/1481756859681943561
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.152/relations
# Reference: https://www.virustotal.com/gui/file/82d8fdcc5d3249134c0605f00d1f8272642eed3590a30a3a906047fcf301f4e9/detection

eadl-eblagq.ga
ir-plc.ga

# Reference: https://www.virustotal.com/gui/file/b9478c1dc6ea951a6c13bf9e54ccee3a06fa84fa79ad4dd1d15690beac40abea/detection

cz-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/2e8aa1230aebf32c537c3aaa17ac9de639889fc3473fbd3f9b44c6c5e05fea8e/detection

filmsexyirmovie.tk
zrin-pal.tk

# Reference: https://www.virustotal.com/gui/file/5f5804a687951ea4b7e73ab6fd00e0ea9c4894ba407b9018c0d3c3ff6442b3a3/detection

shaaperak-ir.ga

# Reference: https://www.virustotal.com/gui/file/8c69c05dd80b478f5fc43ba05f3ad8ded8d65454b7a6a87f670e32f34f7ecfe2/detection

cew-shaparak-ir.gq
pew-shaparak-ir.gq

# Reference: https://twitter.com/malwrhunterteam/status/1481944239403634691
# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.66/relations
# Reference: https://www.virustotal.com/gui/file/9d8acbc2bfe9452e7db54c71369c7cfae04b61142fa7962238eb28d7aa97f217/detection

divarbuy.xyz
sxxx.bar
xnxnn.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1482466875065966594
# Reference: https://www.virustotal.com/gui/ip-address/142.44.160.158/relations
# Reference: https://www.virustotal.com/gui/file/736ac0bc2a85190869a24f0d56007c5b1be9f0820e5fc304f906aca5d0459780/detection
# Reference: https://www.virustotal.com/gui/file/62ae9a81c912b94c3ca8b65125e49efd028ebfd2feaa8f1422f7d9447c3f7040/detection

a-poshte.tk
admintak.tk
amirhsvip.ir
amp-ar.tk
armin-esmaeili.tk
eblagh-org.tk
eblogh-iran.tk
eblaghe-site.tk
kia000.tk
requd1.tk
requd4.tk
smartindiapanel.xyz
smartpanel.tk

# Reference: https://www.virustotal.com/gui/file/a913d26e095e02e52dce2dff9eafa042261df6a730ca747df23f75be7df3d80a/detection

bg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/d42355c02586b032393444e567ac1b2dbdf48b73c38dab6e8ec2f6b185cc14e0/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/178bfae17d66560490592a3e3ba6bd67ab05f976038e9049cb2364f58a48569a/detection

di-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/8ebc434ec9ed5703e893ee63150b2c3a6a5e811d069c1e19f603133936064966/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/919700180d08ece9c46a3a8531664e76d4539ccbac3b96d699ab0cab043ec396/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/0c187d980667b3b1642d13cf395ae4798f4c5461ded0fe624a7e08bdba66e1cf/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a03ecf5218a69d3c313532ae9ee84bf2520bc3262ff4c7cb19181f288ead8f15/detection

czvt.cf

# Reference: https://www.virustotal.com/gui/file/cfa0391d031ffec6f2a1b2808b789d42e2aace7d90a82bb2cafb7ab46f6be202/detection

shapkarak-ir.ga

# Reference: https://www.virustotal.com/gui/file/5d9a8cc9ca2890047700583da3fe8b1172286752f0444ad73682b2badad0547f/detection

bk-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/35c08897bee529714430ac094cb83695084963881e35022c8ddd4aebca14c136/detection

cy-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5179c1b24e5c7d3ede1a0aa6708df5f4fb8a1297fe1d4988a8fda432110bd83d/detection

dg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/de34355f891af505bfbb63b191f373d6e2b850823908e3ed86a0db971f450498/detection

sfro-pey.cf

# Reference: https://www.virustotal.com/gui/file/e3bce2aa78ae1b5849b6978abfb8d44f5539ef6bc1fdd09a0d1060ddf17b8ed8/detection

dj-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/19b94b57d6e2c20597c9e93fe464a0310f44542a668dd69dc33691eb24cf6183/detection

da-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5d0e7a6c1a02af94217b8552b712d2afecb69bfe7cc8203104b6fdfd65e8edc6/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/6b0809a196881a51a5d792ed91a1bb658f4af3698ac8d24d99cbcde78d780c28/detection

shasparak.cf

# Reference: https://www.virustotal.com/gui/file/473137809b0d1e05bb24d649d7ca9693b3af596fc6115b464c2e9b30ad9191df/detection

dv-shaparak.tk
dw-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/40b27eb992c0e2fd2ec66882a2d582296b803469ae20946ebd2939a005be8aaa/detection

shhaperak.cf

# Reference: https://www.virustotal.com/gui/file/5605ef33136d7248f895a0f4b83ba5b611392d86913ce07a001a0c4b8e53d8a5/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/1409a66522d146c6e7b7153598b946cf4e1cd92ac4f5419cace904f1dbd850fc/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a50b49a6f34473b7a18d3ceadbbf9070e4e6ac4f7fc4039d324f71db8a99d79d/detection

shhaparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/38352988ee4732257835b50201e9d6b14e88db7dd0ee78708b7cd2f9459f240e/detection

cx-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3a787c88f2a40c3749a33861a01190eb1d89b9f1f4b16f19f026532df2554385/detection

siant.site

# Reference: https://www.virustotal.com/gui/file/dcce573b59bbf91cd64a84b0d194880d9de072745121e5b73a75c56624bf8f13/detection

shaptarack.ga

# Reference: https://www.virustotal.com/gui/file/b00ce4b86e21740275db14aa8bd475ada3d84558dbedaba3312fbe212980b1b5/detection

shaaparalk.ga

# Reference: https://www.virustotal.com/gui/file/f9d8d5f9d609e641d3b8c5fed28001af986d9b766ebc1809f231a99a0550f046/detection

fp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5e2e6e10d2cd01b6d116c280f4256be6a5e21ec07c96d411bb8510aaa1fdba30/detection

irblaghi-ir.ga
nlsrv.xyz
arsam.nlsrv.xyz

# Reference: https://www.virustotal.com/gui/ip-address/94.130.122.187/relations
# Reference: https://www.virustotal.com/gui/file/7b130bde0c05edfa28761f3420016c7cf76c4c9af0e868e2e7d5681058f5b2e7/detection

cana-eblaghi.ml
divar-ad.tk
divar-new.tk
e-payne.gq
e-payne.ml
ir-covid19.tk
ir-ista200.cf
ir-ista200.tk
k-paynes.cf
k-paynes.ga
pom-shq.tk
royal-amlak.ir
sana-1400-ablag.tk
shaparak-pay-org.gq
shaparal.cf
sysbsgajwh.ml
divar-new.liizradvip.xyz
shaparal.domain-com.tk

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

eblagh-qhz.cf
sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.12/relations

top-eblaghieiran.ml

# Reference: https://www.virustotal.com/gui/file/eb7fbfa9800c5f0e8ff21d66b5078aa944fda29d4f3ea7c27fd67085741dbba4/detection

free-base-connection.tk

# Reference: https://twitter.com/malwrhunterteam/status/1483188960910319616
# Reference: https://twitter.com/midnight_comms/status/1483513891745419270
# Reference: https://www.virustotal.com/gui/file/3870c14cfa20a750ef3bc66fccf52c190603917d0956f833f96af99cfec3b020/detection

adl-sana-w.tk

# Reference: https://www.virustotal.com/gui/file/bca218c8d6ecdb9d6014284384518efafe16df22afaa760bbfc467447eeb27be/detection

sena-peigri-ir.cf

# Reference: https://www.virustotal.com/gui/file/d3bbe121638fa2460b24a96dbfabaa69c5b98a81c2171c835301e20e22e796cd/detection

samaneh8.com

# Reference: https://www.virustotal.com/gui/file/4ed80b06744e69d00017cf3dd616b1d2f223ba1ef463e672546477318afcd93a/detection

peygirl-sna.cf

# Reference: https://www.virustotal.com/gui/file/d76644c48b65751dfc212b2aa3e834a07944dc0a961f3f6e09dd683f63552838/detection

lreadl.site

# Reference: https://twitter.com/malwrhunterteam/status/1483919535661101061
# Reference: https://twitter.com/midnight_comms/status/1484201646863310851
# Reference: https://www.virustotal.com/gui/file/2d45fd78e6e4ab488b4280e1f8536474c6084fa9e315254e94a437d1a07202a0/detection

ceblaghxi-sanki.xyz
sna-elc.com
sna-elc.online
/ahmagh/install.php
/ahmagh/up.php
/ahmagh/ups.php

# Reference: https://www.virustotal.com/gui/file/b4acd7267da3506e139d7d349e65bbf0c0cc2d2e892e481a88f911608da7f113/detection

drgusk.tk
ir-reti.ml
api.ir-reti.ml

# Reference: https://www.virustotal.com/gui/ip-address/195.20.55.174/relations
# Reference: https://www.virustotal.com/gui/ip-address/198.12.86.54/relations
# Reference: https://www.virustotal.com/gui/file/d85376ceff770d5a23c8b08f62d3b825d040b707eadc6a11377c7c6ea0174722/detection
# Reference: https://www.virustotal.com/gui/file/aec23695695495353161a97c02770d5e9f3537df7cfc54e827537f0683349eb0/detection

irn-shaparak-ir.tk
pardakht-eblagh.tk
qaqaqa0123.cf
rep-shaparak-ir.cf
shaparakpayer.cf
shotrak.ml
vabera000.ml

# Reference: https://www.virustotal.com/gui/file/d7f331476a69a8ea74d405048b2bbe7500a76f14521c96b85e9a10fde064cb2d/detection

powker.myfr.xyz

# Reference: https://www.virustotal.com/gui/file/c326cef84e4a388639f315097fae2f21533e211fba6b1afd04cec2f6ddea9222/detection

vafersa58t.cf

# Reference: https://www.virustotal.com/gui/file/5c30199bdcaf529ea389b75562b3a89a564cc80f5641481fb61b2640d4ed2900/detection

gaaaa48fw.ga

# Reference: https://www.virustotal.com/gui/file/5095571bb6bfeaab5e5d819628d1e5f70ada7b732a87195973fb41158994c780/detection

gaa558ww.tk

# Reference: https://www.virustotal.com/gui/file/da7874d18b97893b97e870799659cf7b6ee0e29782af5c43b163e72fb3398f44/detection

ir-kosarbank.cf

# Reference: https://www.virustotal.com/gui/file/f85cfec57ee75ddfa3126f9366e95ad362989d7b869871c73bce9fad62261234/detection

ir-kosarbank.ml

# Reference: https://www.virustotal.com/gui/file/3ec09fa71f9abc12e42a5b1a6e266694e46643ac4d05d255946b2c2c131c885f/detection

fh8hwd8fa.cf

# Reference: https://www.virustotal.com/gui/file/712a66a36e7438923100128bcebab18125c591055c44bd4f3552311bc5a2f63e/detection

szm-shaparak.ml

# Reference: https://www.virustotal.com/gui/file/a57d3a3cb8ea31ea48675538613301eca8a3c49ab972426a0c6e50bd5e9e3d35/detection

ah-shaparak.cf

# Reference: https://www.virustotal.com/gui/file/ec65535740ba0f83eee88ff5f7a0dbeb875369949a42ea864cda79489f30cda9/detection

bpm-ir.ml

# Reference: https://www.virustotal.com/gui/file/4a8e4f52776de56a59f51d1531d952189631f5ae183c9de61531d4f0164d12da/detection

saeena-eblghiy-ir.ml

# Reference: https://www.virustotal.com/gui/file/38cfb100b68f63bbaf6e0c1c9976308b272e6101f29dacc35f3d6789b284d499/detection

pqm-shaparak-portal.ml

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.40/relations

account-tamin-ejtemai-ir.tk
adiley-iran.ml
al-saparak.cf
al-saparak.gq
application-eblagh.tk
asanprdaket1400.ml
asu-shaparak.ga
bmp-paya.cf
bmp-paya.ga
bmp-paya.ml
bot-learn.ir
eblagh-iranian.ga
epzy-shaparak.cf
epzy-shaparak.tk
fa-sana.ml
free-ir.tk
ir-asanpay.tk
ir-bmp-sepah.ml
ir-mellat.ga
ir-pardakht.tk
iranapps.ml
ireblaghie.ga
mellatbnk.ml
mtniirancell.ml
pgm-iranpardakht.ml
portal-adsl.tk
postbank.cf
postbank.ga
pqm-portal-shaparak.ml
pqm-shaprak.ga
sana-fa.ml
shaparak-mi-ir.cf
shaparak-rtg.tk
shaparak-services.tk
szm-shaparak.tk

# Reference: https://www.virustotal.com/gui/ip-address/198.12.85.88/relations

2030s.gq
30ia-pay.ml
ad-ir.ga
addliiran.tk
adiley-iran.ml
adiley-iran1.ml
adili.ga
adleey-ir.ml
adleey-lr.gq
adley-ir.ga
adleye-ir.ga
adleye.gq
adleye.ml
adli.ga
adliey-iran.ml
adlir-sna.ml
adliran-eblagh.ml
adlirsana-ir.tk
adlye.cf
aeeeeershaparak.tk
ahblagnew.tk
airdrop-trustwaleet.tk
americanussa.tk
apk-ebl.tk
apk-eblagh.tk
apk-pardakht.tk
asanprdaket1400.ml
bedi24.gq
best-price.ml
boofanoo-crm.tech
bpi-shahparek.tk
bullertakpar-com.ga
bullertakpar-com.ml
crm-sarema.tk
da-ga-h.tk
dad-g-a-h.ga
dad-gaa-h.tk
dad-gaa-hi.ga
dad-ir.ga
dad-saana.tk
dadd-yar.tk
daddgahi.ga
daddgahi.tk
dadga-sasna.tk
dadgaaahi.tk
dadgaahh.tk
dadgah.tk
dadsare.tk
divara.xyz
djejjdjdjs.gq
drgpec.tk
duodigital.ml
duodigital.tk
ebblagi2.ml
ebblagi4.ml
ebbllaq-sana-ir.ga
ebiaghe-snai.tk
ebl-ag1-ir.tk
ebl-eblaghey-ir.tk
ebl-ir.ml
ebl-ir.tk
eblag-adliran-ir.ga
eblag-adliran-lr.cf
eblag-adliran-lr.ga
eblag-adliran-lr.ml
eblag-adliran-lr.tk
eblageh-iran.tk
eblagh-adlir.cf
eblagh-adlir.tk
eblagh-iran.ga
eblagh-iran.gq
eblagh-iran.tk
eblagh-irani.cf
eblagh-irani.ga
eblagh-irani.ml
eblagh-irani.tk
eblagh-panel.cf
eblagh-panel.ml
eblagh-panel.tk
eblagh-s.ga
eblagh-s.ml
eblagh-s.tk
eblagh-sana-iran.gq
eblagh-sana-iran.ml
eblagh-sana-iran.tk
eblaghe-snai.tk
eblagheye.tk
eblaghi-sana.ml
eblaghir-sana.tk
eblaghq-ir.tk
eblaghs.tk
eblaghsana-ir.ml
eblaghsana-ir.tk
eblaghye-adliran.tk
eblaghye.gq
eblagie-sana-iranin.ga
eblaq-ada.ga
eblaq11.ga
eblaq12.ga
eblaq19.ga
eblaq856.ga
eblaqie-19-ir.ga
eblaqq-19.ga
eblaqqye.ga
eblghfa.ga
ebllage-iran.ga
ebllaq-ad.ga
ebllaqi-ir.ga
ebllaqsheeka-ir.tk
ebllaqwo.ga
eblogh-sans.cf
eblogh-sans.ga
ebloghs-ir.tk
eblogi1.tk
ee-melat-pay.cf
eghbaghi.ml
eiblag-ir.tk
eiblogh-sana.tk
elaq-ir.ga
elbaghsnas.tk
geeyyabii.tk
hamjens.tk
hostmmll.tk
iablaghs-san.tk
iamgay.gq
ieblaghi-ir.tk
iebloghs.tk
ir-dad-ir.ga
ir-eblgh.tk
ir-ieblagh.tk
ir-pardaket.ml
iran-addl-ir.ga
iran-adli-ir.ga
iran-dad-ga.tk
iran-dadga-ir.ga
iran-ebblaq.ga
iran-ebbllaq.ga
iran-eblage.ga
iran-eblagh-f.cf
iran-eblagh-f.ga
iran-eblagh-f.ml
iran-eblagh-f.tk
iran-eblaq-ir.ga
iran-eblaqi.ga
iran-ebllaq.ga
iran-jorm-ir.ga
iran-saana-ir.ga
iranad.ga
iranadilatil.ga
iranadldi.tk
iranadliera.ga
iranadlile-ir.ga
iraneblaq19.ga
iranirsana-ir.ga
iransana-ir.ga
iransanair-ir.ga
iransanat.tk
iranshekaya.tk
iranshekyaat.ga
iranwebir.ga
ireblaghie.cf
ireblaghie.ml
irsanairan-ir.ga
jorm-ir-ga.ga
kos-nne-fata.gq
livesxs-ir.ml
malletttrg.ml
malllet-llk.cf
melat-pay.tk
nazeem-vscode.ml
nazeem-vscode.tk
pardakht-eblaghey-ir.tk
paresh.gq
pay-eblagh-ir.tk
pay-eblaghey-ir.tk
pay-red.tk
pay-sjkrkrak.tk
pay-sjpkowak.tk
pay-sjpkrak.tk
pay2-ebyl.tk
payelza.ml
pep-shprak-ir.tk
pes-eblagh-ir.tk
pes-eblaghey-ir.tk
pes-shaparack.tk
pes-shiparek.tk
pey-shahparacki.gq
peygiri-adress.xyz
peygiri-eblagh.tk
peyman-ir.ga
qwi-shahparek-ir.gq
qwi-shahparek-ir.ml
qwi-shahparek-ir.tk
qwqwqwqwe5yuuiiu.ml
rubika-freenet.tk
saaana-dadga.tk
sad-behpardakht.ga
sad-behpardakht.ml
sad-behpardakht.tk
sad-shaparak.cf
samannesaana.tk
sana-airdroni.ga
sana-airdroni.ml
sana-alirdran.cf
sana-alirdran.tk
sana-alirdran.xyz
sana-c.tk
sana-eblaq-ir.ga
sana-i.tk
sana-ie.cf
sana-ieblagh.tk
sana-iranv.cf
sana-irn.tk
sana-irran-ir.ga
sana-n.cf
sanaeblagh-ir.tk
sanair-ir.ml
sanairana-ir.ga
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
sep-divar.tk
sep-eblagh-ir.tk
sep-ebyl.tk
sep-shekayat.tk
sep1-ebyli.tk
shapaark.tk
shaparak-pw.tk
shapark-tg.tk
shaprrk-zri.ml
sheekayyatt.tk
sheekkayyatt.tk
shekaayyaat.tk
shirazey.cf
shirazeyhost.tk
shpk-sanair.cf
shpk-sanair.ga
shpk-sanair.gq
shpk-sanair.tk
sigeh.tk
sjjwudidisieis.tk
sna-adl.cf
sna-eblaq.ml
soft-ezy.tk
sop-shekayat.tk
syy-pay.gq
trust-walettt.tk
trust.pay-red.tk
trustwallet-price.ml
trustweliat.ml
trustweliat.tk
utctm.tk
utyagram.ga
utyagram.ml
zir-pay.cf

# Reference: https://www.virustotal.com/gui/file/6556d68b85d691132db832318389431d46cc3fe3434c4fb438d2e8dd5beefda0/detection

robatsazking.pikohost.ir

# Reference: https://www.virustotal.com/gui/file/f5e2d1dab18a333aad29646337743fb5f039733993f08224cb1084e6ff205dea/detection

shaparak-internet-bank.cf

# Reference: https://www.virustotal.com/gui/file/d12cb0187e09ef35fc6f2acd5904c9ea4a6a2376d72408b0230cf71b042426b7/detection

meli-ir.xyz

# Reference: https://www.virustotal.com/gui/file/55ff02dd1388ccc6b471cf645a5cafef31c02b34316714e3e8ac34babc638abc/detection

yoindomin-irs.ga

# Reference: https://www.virustotal.com/gui/file/2fd928d640c4bf36fffc94ea7eca8de3a2a93ec074883a474409b49bb64a294d/detection

yoindomin-irs.gq

# Reference: https://www.virustotal.com/gui/ip-address/157.90.16.114/relations

ad-shparake-ir.cf
bci-shaparak.ml
bci-shaparak.tk
behpardakh-ir.ga
bmp-divvar.tk
dikak.ir
eblagh-electronic.tk
followerirani.tk
ir-mile.ml
iran-meiatt.cf
iran-meiatt.ga
iran-meiatt.gq
irmeli-shaparak-ir.tk
meiat-shaparak.ga
mellat-in.xyz
memberirani.tk
milat-ir-iran.tk
pardakht-bank-ir.tk
prdakht-melat-ir.tk
pyiran-shaparak.tk
sahparak-meliat.tk
shahparek-ir.ml
shailrk-lir.ml
shalioprk-ir.tk
shaliparik-ir.tk
shaolpark-bqm-milir.ml
shaparak-1nternet.ga
shaparak-1nternet.ml
shaparak-bamk-iran.ml
shaparak-bamk-iran.tk
shaparak-bmc.ga
shaparak-bmc.gq
shaparak-internet-bank.ga
shaparak-internet-bank.ml
shaparak-ir-ir.tk
shaparak-n.cf
shaparak-n.gq
shaparak-n.ml
shaparak-n.tk
shaparak-script.ga
shaparak-script.ml
shaparlik-irani.gq
shaprrak-melati-ir.ml
x-number.tk
x-shapwal.ga
yoindomin-irs.ml

# Generic

/ahmagh/
/DargaSaz/
/eblaghe
/eblagh/
/chelchele/url.txt
/mytop/receive.php?sms=
/Nobitex/UploadSms.php
/Ramzinex/UploadSms.php
/Remote/1005063728/req.php
/pay/mellat/Mellat.php
/public_html/senddata.php
/rat-webpage2
/ebimport.php
/eblagh.php
/eblagh1.php
/eblaghpay.php
/eblaghresult.php
/sana/pay.php
/sms5.php?phone=
/sna_eblagh.php

# APK

/abp-sana.apk
/adliran-eblagh.apk
/dadsara.apk
/divar.apk
/eblagh-adliran.apk
/eblagh.apk
/eblaghie.apk
/edalat.apk
/hamrahedalat.apk
/mellat.apk
/sana.apk
/shad.apk
/sigheyabi.apk