# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: cacosms, irspy, realrat

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/mr_amini8/status/1413038661696987142
# Reference: https://www.virustotal.com/gui/ip-address/157.90.9.65/relations
# Reference: https://www.virustotal.com/gui/file/70b8d5cd1a364c0cf148c8fb36a9cfe85bfbf6b18fbbcf1d36de4aee5e4b9e74/detection
# Reference: https://www.virustotal.com/gui/file/5f9c5dec4856278393b8936c8145a65f8ca045aa01b71e16de6ee5b68d893ea0/detection
# Reference: https://www.virustotal.com/gui/file/46901fac5acff20fa83b8bb4f27a8f96e73a67209b799587bc46f1f6e5b8441b/detection
# Reference: https://www.virustotal.com/gui/file/835a9a1f8c6d3231a939c3070c179cb8f7e74ed5f3afebdff21f4bafe1bbf19f/detection

http://188.40.233.91
gjpay.site
ir-sana.ml
ir-shalplak.gq
ir-shparak.tk
sana-eblagh.xyz
shahparak-ir.ml
shaparak-bmc.tk
shayparak.tk
/ebiagh/
/eblagh/
/eblaghd/
/eblaghe/
/eblaghd/Mellat/recive.php
/sighe12/Mellat/recive.php
/Mellat/recive.php

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/midnight_comms/status/1461723157232951297
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/file/8e0dbe364134d00c32ebaeb7a479c4b28bcdb4b528c4a255ade404e0dccdfc21/detection

adiiran-lr.gq
adiiran.tk
adl-dadgostari.tk
adl-police.ml
adl-police.tk
adliran-paygiri.tk
adlirane.ml
adlliiran-ir.cf
adlliiran-ir.ga
adlliiran-ir.gq
asanpeygiri.tk
eblagh-f.ml
eblagh-f.tk
eblagh-iran.ml
eblagh-samane.tk
eblaghe-ghazai.cf
eblaghie-v.gq
edliran.cf
edliran.ga
fata.gq
ir-eblaghe.cf
ir-starka.cf
iran-portal.xyz
ireblaghsana-ir.ml
police-adl.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samane.cf
sana-ebiagh.tk
sana-iirani.site
sana-iran-ir.site
sana-iriraun.site
sana-lran.tk
sanabv.ga
sayboriml.ml
sna-portal.com
testsus.ml
/73526/eblagh.php
/Lopqer/sms.php
/eblagh.php

# Reference: https://www.virustotal.com/gui/file/5c388bc80bbaccb57d790dffdf61f85845f33866b1a29c372f2f9f90b5cca77d/detection

sana-eblaghiran.ml

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.tk

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.gq

# Reference: https://www.virustotal.com/gui/file/54c704ae09ebd703587ed2b78fcb6c3e9ba314fd9604767182886c0b4ad4f514/detection

eblagh-sanairan.ga

# Reference: https://www.virustotal.com/gui/file/98cf23378dcaed9165d852cc1186710ea39b14f66de6726c999ced8008a5d076/detection

eblagh-sanairan.gq

# Reference: https://www.virustotal.com/gui/file/c93721167305ba16a0c06f565d50ca37fd98b5455723d570942cb90264c21077/detection

eblagh-sanairan.cf

# Reference: https://www.virustotal.com/gui/file/bdd0fbb9cf4591d9007204da0608f0d43a58e03444768f2f856c67e152468132/detection

sana-adliran.ml

# Reference: https://www.virustotal.com/gui/file/b0f493fd7adc4c6f5165118c9da2cf07ca10a890ceb737c0ecbcc87d40c60f5f/detection

dklfjzlsdf.ml

# Reference: https://twitter.com/malwrhunterteam/status/1456978019273396229
# Reference: https://www.virustotal.com/gui/ip-address/162.0.232.163/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.82/relations
# Reference: https://www.virustotal.com/gui/file/26d7819a0f69c63fc4720720dd0c26a929ad2e77b5505c6a6b6b7102078233f6/detection
# Reference: https://www.virustotal.com/gui/file/f630893662d81f95d102ae1d4f185a5116f830fddd2ebb8e2e0f59256616233d/detection

ablaghe-sana.tk
adrilan-sana.ml
amirali56.site
amirali5665.xyz
appes-eqlab.tk
apps-eqlag.ml
aquabest.shop
black-amirpower.xyz
defacerpanel.tk
divar-appex.ml
divar1400.ml
divare-appex.ml
dklfjzlsdf.ml
eblaaghie-sana.ml
eblag-ir.ga
eblag-u-ir.tk
eblagh-09.cf
eblagh-09.ga
eblagh-09.gq
eblagh-09.ml
eblagh-09.tk
eblagh-1.cf
eblagh-1.ga
eblagh-1.gq
eblagh-1.ml
eblagh-1.tk
eblagh-47.ga
eblagh-47.tk
eblagh-55.cf
eblagh-55.ga
eblagh-55.gq
eblagh-61.ml
eblagh-61.tk
eblagh-81.cf
eblagh-81.ga
eblagh-81.ml
eblagh-81.tk
eblagh-9.gq
eblagh-9.tk
eblagh-9.xyz
eblagh-edalat-ir.tk
eblagh-elekterenoki.ga
eblagh-elekterenoki.ml
eblagh-ghazaiie.ml
eblagh-iran.ml
eblagh-pay19.ga
eblagh-pay19.ml
eblagh-pay19.tk
eblagh-sana-electronik.cf
eblagh-sana-electronik.ga
eblagh-sana-electronik.gq
eblagh-sana-online.tk
eblagh-sanairan.cf
eblagh-sanairan.ga
eblagh-sanairan.gq
eblagh-sanairan.ml
eblagh-sanairan.tk
eblagh-vx.gq
eblagh-vx.ml
eblagh-vx.tk
eblaghie-019.ga
eblaghie-019.ml
eblaghie-019.tk
eblaghie-15.cf
eblaghie-15.ga
eblaghie-15.gq
eblaghie-15.ml
eblaghie-15.tk
eblaghie-on1ine.tk
eblaghieh-online6.tk
eblaghiie-sana.tk
eblaghirsana.cf
eblaghirsana.ga
eblaghirsana.tk
eblaghiyh90.tk
eblagi-pigiri.ml
eblagie-pygiri.ga
eblagieh-ghazaei.tk
eblagihe-melat.ml
eblagye-sana.tk
eblaq-irsana.cf
eblaq-irsana.gq
eblaq-irsana.ml
eblaq-irsana.tk
eblaq-sna.cf
eblaq-sna.ml
eblaq-sna.tk
ebllaghie-sana.ml
ebllaghsisana-ir.ml
eiblaghs-ir.cf
eieblagh-ir.ml
eieblagh-ir.tk
forbidden12.tk
git7cyusid9.tk
hdfdhfudyf.xyz
iablaghs-san.ga
iablaghs-san.ml
ir-eblaghe.cf
ir-ista100.ga
iran-portal.xyz
ireblaghsamewsna-ir.ml
ireblaghsana-ir.ml
ireblaghsnna-ir.ml
irn-sana.cf
irn-sana.gq
irn-sana.ml
irn-sana.tk
irsanaeblagh.cf
irsanaeblagh.ga
irsanaeblagh.ml
irsanaeblagh.tk
jdee5ip98.tk
meli-ir.gq
meli-ir.tk
new0account.tk
oaiwj2ow.tk
online-eblaghie.cf
online-eblaghie5.ml
peygiri-12g.ml
peygiri-13p.ml
peygiri-14f.ml
peygiri-9lg.ml
peygiri-est.ml
peygiri-eyb.tk
peygiri-grc.ml
peygiri-obj.ml
peygiri-rcd.ml
peygiri-tpc.ml
peygiri-ufd.ml
peygiri-ygt.ml
peygirie-sana.tk
po-iran.ml
power405.xyz
powerx.ga
prygiri-fcd.ml
prygiri-htp.ml
pygiri-sana.ga
pygiri-sana.gq
pygiri-sana.ml
pygiri-sana.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samaneh-sana-ir.tk
san-elbg.ml
sana-adliran.ga
sana-adliran.ml
sana-ebiagh.tk
sana-eblagh.ga
sana-eblaghiran.cf
sana-eblaghiran.ga
sana-eblaghiran.gq
sana-eblaghiran.ml
sana-eblaghiran.tk
sana-lran.tk
sana-peygiri.tk
sanaadl0iran.ml
sanaadliran.xyz
sanabv.ga
sanaeblagh-iran.ml
sanaeblagh.xyz
sanaireblagh.ml
sanaireblagh.tk
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
seblogh-san.tk
shaepark.tk
shaparak-ir.xyz
shaparak-is.cf
shaparak-is.ml
shaparak-is.tk
shaparak-it.cf
shaparak-it.ga
shaparak-it.gq
shaparak-it.ml
shaparak-pw.ml
shapparek-sna.tk
shop-sa.tk
shpk-sanair.gq
shprkish.ml
sna-eblaq.tk
sna-portal.com
sus-barq.ml
testsus.ml
web-lev.ga

# Reference: https://twitter.com/ReBensk/status/1463011973071659008
# Reference: https://www.virustotal.com/gui/file/ad55c7314f666de9eaece6daaa19c38ae427156c4ebd48f37f38b7a628baf60f/detection

new-mellat-bank.xyz

# Reference: https://www.virustotal.com/gui/file/bf0c75bd80bd8bb86384e6507853293651c8a5d5a807a9fecce08fbdbd4388c7/detection

sana-com-r.ml

# Reference: https://www.virustotal.com/gui/file/763b142544767af1c9a7c1a835002ee0bc1ff58012df4dcfb556b61b0c2473b7/detection

sana.pb5.ir

# Reference: https://www.virustotal.com/gui/file/38836bc6dda4bd96764ed45619a610fcabdc46aa45a20970c6d66a950eab3504/detection

mb-shaparak.gq

# Reference: https://www.virustotal.com/gui/file/b210394d530a54e7f82c0d1d025b79d3241c845e5e27e758ce5980ec2dff7436/detection

sana.mpiko.ir

# Reference: https://www.virustotal.com/gui/file/bf3a78609c2388a6f700a9b63feccf24a5b5762cc94d81afa14bff6db5a5f984/detection

shaparak-bmi.ml

# Reference: https://www.virustotal.com/gui/file/34c81abd142db1c20369a4d7d1107e0143a0d4fc011292471455c8ddb80db46b/detection

irsetpay-ir.tk

# Reference: https://www.virustotal.com/gui/file/544e30fb8c85d078cbe64467f00abdcc54dacd6a27bae609a92c691ec1c0a1b4/detection

aid-shaoarack-ir.tk

# Reference: https://www.virustotal.com/gui/file/43cc666cf6150efa0de925334f272635b7ba81d3686bcc1936fb3e02a5a2be7c/detection

amali.pb5.ir

# Reference: https://www.virustotal.com/gui/file/deca9096f682b1d4ffce4edca6ad0865ce3add0a2bc5e1144c71799004a84936/detection

polis.pb5.ir
/eblagh2/
/eblagh2/rat/

# Reference: https://www.virustotal.com/gui/file/fd1b36fadb2e72a9e1a74687fe662d11ba10fd46f069944470ea03be09791b09/detection

sana-com-r.tk

# Reference: https://www.virustotal.com/gui/file/be4c83027264c7dc798ebfcfa8d566cb462c5e75cb15e0b70f66a6e0b7f9e706/detection

avibili-irani.tk

# Reference: https://www.virustotal.com/gui/file/7a78b3ae543069d91eebcee8e559f46ebde3cf6beffdd06955263fb7d5fe13da/detection

eblagh-mellat.tk

# Reference: https://www.virustotal.com/gui/file/d5234ef9f4274c5da1097e99887240d2ba3974bc0fa4e14008c5089f2a8a0427/detection

sanaeblaghh.tk

# Reference: https://www.virustotal.com/gui/file/a338021216604ef8b1e860ee5c36ca43887011c6b4717606a7724b1daf678716/detection

eblaghie.cf

# Reference: https://www.virustotal.com/gui/file/9d7a1a011a33bb2ffdc93041b1c42b060f888a53396f9a84588233fd6c489953/detection

dadgah-sana.tk

# Reference: https://www.virustotal.com/gui/file/c714b500b76a3631746efb94976d2301140ca5ce6af79c7c196ce0673c767de4/detection

dadyarytehran.tk

# Reference: https://www.virustotal.com/gui/file/5e6f8b8b716c42abd9af0cdcd77e547f080bda24a79452117c977135d92bdd0f/detection

sarmayeegan.tk

# Reference: https://www.virustotal.com/gui/file/104a6ab4bb5d05206fcd30dcadb4dc104e427ef1edf9ecdc20790ff64f1772b2/detection

newmelat-ir.cf

# Reference: https://www.virustotal.com/gui/file/f9774c77e55d4563bd356b6ce234f745df1813db11b45f48faf51afbca518c57/detection

time-pay.gq

# Reference: https://www.virustotal.com/gui/file/511eee2b1ec591859fecf8d4f642dfee96e3d7c5e10e65b0cf4dd4b82c82634b/detection

saa-nna.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.207/relations
# Reference: https://www.virustotal.com/gui/file/33deab5d65f48099afa722d8b6cc9b96fe35fde1ee9176a9e708879c7a539bd6/detection

adli-iran.cf
aid-shaoarack-ir.cf
aid-shaoarack-ir.tk
alpha-host.ir
alphahosting.ir
amali.pb5.ir
amir-shirazey.tk
app-dadgah.tk
appk-dadgah.tk
arshia-bots.ir
arshia-ne2.ir
asan-pardakht-ir.cf
asan-pardakht-ir.ga
asan-pardakht-ir.gq
asan-pardakht-ir.tk
asdfgh-sdfgh.tk
ase-shaparak.ga
ase-shaparak.ml
asq-shaparak.gq
asr-shaparak.gq
asr-shaparak.ml
avibili-irani.tk
azar-soft.ml
azar-soft.tk
b-shaparak.ml
bazdid-fa.ir
best-mizban.ir
bilalgyan2000.ir
bmp-shaparrak.gq
bomber-pro.ml
claimfreeudd.ml
dad-gaahi.tk
dad-gahi.tk
dad-yari.tk
dad-yarri.tk
dadgaah-appk.tk
dadgaatehran.tk
dadgah-sana.tk
dadgah-tehran.tk
dadgahh-appk.tk
dadgahii-tehran.tk
dadgahtehran.tk
dadgahy-tehran.tk
dadyaritehran.tk
dadyarytehran.tk
divarapp.tk
divarappk.tk
dr-iliya.ir
eblagh-mellat-ir.tk
eblagh-mellat.ml
eblagh-mellat.tk
eblagh-shecayatu-iran.tk
eblaghie.cf
eblaghie.ml
etelaat.piko-server.ir
fast-mizban.ir
hedye-vizhe-tabestan.tk
herni-bot.ir
iliagram.dr-iliya.ir
imanm.gq
instapay-ir.tk
io-shaparak-c.cf
ip-shaparak-io.cf
ip-shaparak.cf
ip-shaparak.gq
ip-shaparak.ml
ip-shaparak.tk
ir-support.pb5.ir
iran-adli.ml
iran-adlii.ml
irsetpay-ir.ml
irsetpay-ir.tk
is-shaparak-ir.ga
keno-wer.tk
lashi.shirazey.cf
lite-host.ir
lwe-shaparak.cf
lwe-shaparak.ga
mb-shaparak.gq
mci-irancell.tk
mellatbank-asanpardakht.cf
mellatbank-asanpardakht.tk
melpardakht.tk
net-train.ir
new-ebl-agh-ir.xyz
new-iran-q.tk
new-kakaz-start.tk
new-majazi-q.tk
new-mellat-bank.xyz
new-sana-eblaagh.xyz
new-sana-eblagh.xyz
new-sana-eblaghiye.tk
newmelat-ir.cf
newmelat-ir.ml
oi-rokhah-new.tk
pay-pardkths.tk
pesh-pew.tk
pikohost.ir
polis.pb5.ir
pqt-shaparak.ml
pqt-shaparak.tk
psd-shaprak.tk
roborex-bot.ir
roshana.cf
sa-na.ml
sa-nna.ga
saa-na.ml
saa-nna.ml
saana-apik.tk
saana.pb5.ir
sad-behpardakht.ga
sadad-shaparak.cf
sana-adiiiran.tk
sana-adiliran1xyz.tk
sana-adliirran.tk
sana-com-r.ml
sana-com-r.tk
sana-daadgah.tk
sana-daddgah.tk
sana-dadgah-apk.tk
sana-eblaghe-iran.xyz
sana-eblaghiye-iran.tk
sana-ie.tk
sana-new.tk
sana.mpiko.ir
sana.pb5.ir
sanaadiiran.tk
sanadadgah.tk
sanaeblaghh.tk
sanaeblah.tk
sanakdrobat.pb5.ir
sarmageggan.tk
sarmayeegan.tk
selfali.ir
serverdefacer.ml
shagarak-ir.ml
shaparak-bankmellat-iran.gq
shaparak-bankmellat-iran.tk
shaparak-bmi.ml
shaparak-ftz.ml
shaparak-kq.ml
shaparak-lbl.ml
shaparak-meli.ml
shaparak-mellat-eng.tk
shaparak-melllatbank-iran.xyz
shaparak-mi-ir.ml
shaparak-phg.gq
shaparak-rtg.cf
shaparak-rtg.ml
shaparakes-0.cf
shaparakm.gq
shapark-bmp-ir.cf
shapark-bmp-ir.ga
shapark-bmp-ir.gq
shapark-bmp-ir.tk
shapark-irnm.cf
shaparrk-tj.ml
shaparrk-tj.tk
shaprk-pep-ir.cf
shaprk-pep-ir.ga
shaprk-pep-ir.gq
shaprk-pep-ir.tk
shaqarek.tk
shegayatname-eblagh-ir.tk
shirazey.cf
shirazeybomber.tk
shop-kal.tk
shop-levi.tk
shop-sap.tk
srw-pey.tk
support-iran-net.xyz
support-iran-sana.xyz
support-newsana.xyz
time-pay.gq
time-pay.ml
time-pay.tk
timesaz.tk
titelegram.ir
tract-iran.ir
trust-wallet-g.cf
trust-wallet-ge.cf
trusts-wallet.xyz
vcm-moodle.ml
viz-panel.ir
web-sh.tk

# Reference: https://research.checkpoint.com/2021/smishing-botnets-going-viral-in-iran/
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.134/relations
# Reference: https://www.virustotal.com/gui/file/1512de28f47ee802f2bd31575a47a1caa2c27f2cb5fb1c219d49301b75fbd923/detection

account-tamin-ejtemai-ir.cf
adleiran-ir.tk
adlliran-ir.ml
adllirani.ml
adllliran.ml
benkday-ir.top
blaghmalet-shapark.tk
caloprkds.ml
divaar.xyz
du-shaparak.tk
eblagh-sana126.cf
eblaghonline.tk
edalatiran.cf
edalatiran.ga
ekop.shop
googleadvercap.ml
ibligo.com
iraeblagh.tk
iranadll.ml
myeblaghye.tk
oliverdnssop.cf
oliverhome.cf
oliverhome.ml
papaoliver.com
sana-adliran.site
sana-panelr6s.cf
shprk-melli-ir.cf
taminaccount-ir.ml
texrec.tk
meraf-c128a.appspot.com
api.texrec.tk

# Reference: https://www.virustotal.com/gui/file/4b32fb019d73fad4d44c1b68ff7ec96158902014298458eec47de39e3b3aa8bd/detection

caco333.000webhostapp.com
shafarak.cf

# Reference: https://www.virustotal.com/gui/file/2ba905addab2c210d79aec0b4b185d6ed2e3fc48d55951b5668d8345c65d178e/detection

beh-pardakht.xyz

# Reference: https://www.virustotal.com/gui/file/64d9bdd869c24fa758e9e76d28bc9d399eb91c707eb9ce30aeb776cdb0a01f80/detection

edalat-app.com

# Reference: https://www.virustotal.com/gui/file/b12f057af6679df0d99606e5ae95b08004955a58b176866d67984477dc38d008/detection

nme-top.cf

# Reference: https://www.virustotal.com/gui/file/45ac78f881ff30531e95f24f003c03249bf24dece268a57a65b5f6609f423a02/detection

pec-shapalrak.gq

# Reference: https://www.virustotal.com/gui/file/966d71ed3c149eed6d0e8d412b9e464b38a2012630a94888a10d3fcbfbce6dc1/detection

http://45.147.231.11
/reza/send.php

# Reference: https://www.virustotal.com/gui/file/83f69d44a33c2033972c33c59b0a28bfacf62421a20a916b7c77be3955fc3aa1/detection

liizradvip.xyz

# Reference: https://www.virustotal.com/gui/file/9c4df97e482b228d09f4759d5a181c9bbb200ae3771150c064b6799363a39aea/detection

eblagh-post.tk

# Reference: https://www.virustotal.com/gui/file/0cb5c5eeed9afa49d4dce801777c1ae8dcb16577a3c16c76c85653acfd745f64/detection

iran-sanaeb.tk

# Reference: https://www.virustotal.com/gui/file/94e30d9bc60022c07262d8002e414cca6f3898ec4c32c95c849cefa14b0ad77a/detection

sana-eblaghieh.ml

# Reference: https://www.virustotal.com/gui/file/218545fe27ac30d6983639e2a5764b0a4477b14ecbaac269005e97661ada2318/detection

shaprak-ir.gq

# Reference: https://www.virustotal.com/gui/file/8e6d6e431186f96ddaab73767acac79cc722d203d5e34772b92063d4ba942e51/detection

shaparal.cf

# Reference: https://www.virustotal.com/gui/file/86d59b6bd8df0ba45c57e8ddab03c14e085a6a7772c92d33be776060d9365aca/detection

shaparak-prdakht.ga

# Reference: https://www.virustotal.com/gui/file/f3e4454ec7a4e4b51f0644de956e19c74ca02938ed265b3e4056298f1d0a1d90/detection

shapatak-ir.ga

# Reference: https://www.virustotal.com/gui/file/d61f6025b0dcb7ef6afa57f12c50c6a60bc6111c7a236e8381743fcfe2dd7082/detection

paymen-pay.ml

# Reference: https://www.virustotal.com/gui/file/fab6c6624bdc39db39ab88c7a90129e881ddeded89a19b2c5289fbc242a1a93b/detection

texrac.cf

# Reference: https://www.virustotal.com/gui/file/d0e7180eea4d4aa1e3a43bcc02978d1fa2fde44d18d92a5e95ddfb9a61bf5a53/detection

kiaoiiq910.xyz
sana-adliran.me

# Reference: https://www.virustotal.com/gui/file/c648ecdba5a0adb1056d4af36ce03b4d2ad56c87ed207b174e14184772b877e9/detection

bhwii80181.xyz

# Reference: https://www.virustotal.com/gui/file/ee046d94783aca4ec5620265a214d5488a12020e1b7f872b1471344792686884/detection

shaparaks-ir.tk

# Reference: https://www.virustotal.com/gui/file/b33414351b19a5589989768b6991565759a9e15e28d7dfedd97636a97738a37c/detection

smsihjje.cf

# Reference: https://www.virustotal.com/gui/file/020a2722e446851fef19963ae5da860269ee1bacd33c03a4837c0c385d07b184/detection

ebv-eblagh.xyz
/Eblagh/eblaghimport.php
/eblaghimport.php

# Reference: https://www.virustotal.com/gui/file/d1718e7292bbf77dd9191d23fad7a5ce1df4875331b6ba1634511544a651b80b/detection

mellat-pay-ir.ml

# Reference: https://www.virustotal.com/gui/file/601902a025b929c0294a5a1b0cbfa84b9f896fbce8fe82b51e416aa5c93d0e9b/detection

ebl-eblagh.tk
/mellat/payment.mellat/
/payment.mellat/

# Reference: https://www.virustotal.com/gui/file/13eddbf151f89bd2b1c4618817d20a5701c5b47ed14372d81e62bbd0d600423e/detection

shaparaks-ir.gq
zrin-pal.tk
/data/40226/sms.php

# Reference: https://www.virustotal.com/gui/file/0025225ae2ac093d2a8455305b4d7eddeb9ff457758c9d5a7c862f2bc1063629/detection

sana-irans.xyz

# Reference: https://www.virustotal.com/gui/file/b78d92ebddbc53cf3b364f70562f9213322eb921096c48648b8009d8612d1361/detection

nafasakhar.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/5a871bd80f4ff27cfd6c59f003decd5d6babee3aeee559f65536ee1cd043eefd/detection

shaparakks.gq

# Reference: https://www.virustotal.com/gui/file/e7d5370480d07e58d885170194ead261b80fe14e42e794e6ff1079a4c2f64564/detection

http://135.181.168.202
sana-adlirans.ml

# Reference: https://www.virustotal.com/gui/file/fc7c6c25d64e289b1f7ebe76c663e61c0171e0f4ad116b7053da4444f7203fa8/detection

iran-sanaadl.tk

# Reference: https://www.virustotal.com/gui/file/a0ea40eaf470b59b54fd19caced1cb832e10812906fc2bdecd4011a678cb1c62/detection

cod-change.cf

# Reference: https://www.virustotal.com/gui/file/969faae7a97a7b5d6572efe63c0d8427815590e9d86d68b26b093ad924c268b2/detection

trust--wallet.ml

# Reference: https://www.virustotal.com/gui/file/9c3e564dd99a0548cd7a42018f01cdb091b00528bef7b3603aea24ddf99b7e51/detection

shaaperak-ir.tk

# Reference: https://www.virustotal.com/gui/file/d9104bbc8043b4b8936741b48063bf577c55143be171cf62ef497da9ec492543/detection

sanairani.cf

# Reference: https://www.virustotal.com/gui/file/396d356760f08725dfc94eea3f687e422f342ea1d5bdb231df40d19c40d0ac1f/detection

bpm--shaparak.cf

# Reference: https://www.virustotal.com/gui/file/a6d464731085a091a76d14fe890ead926acdf72de300093d3876f4764fb687cf/detection

trust-marketa.tk

# Reference: https://www.virustotal.com/gui/file/1805648b238686cff9aa201e22ec25d1390fe518ebb04f98aef0d236f05ca845/detection

shapajak.gq

# Reference: https://www.virustotal.com/gui/file/2af1c66cd2ad38759788b07acde4e1781de3938c979aa4ebc245693624d6e108/detection

eblagh.xyz

# Reference: https://www.virustotal.com/gui/ip-address/192.3.154.61/relations
# Reference: https://www.virustotal.com/gui/file/e5373be93e11e8735cdde14e78c87abcbeaa2b0d3893724ddc971c5640b6cab9/detection

adliran-eblagh-ir.ga
adliran-eblagh-ir.gq
adliran-eblagh-ir.ml
adliran-eblagh-ir.tk
adliran-ir1.cf
adliran-samane-ir.cf
adliran-sana-ir.tk
adliran-sana-iran.cf
adliran1-samane.tk
adlirna-ir.tk
api-charge-bot.cf
bas-pay-ir.cf
bas-pay-ir.gq
bas-pay-ir.ml
bas-pay-ir.tk
bqm-shacparak-com.tk
chargerobot.tk
colz-vps.cf
download-edalathamrah-com.cf
ebalgh-ir.tk
ebiagh-ir.tk
eblagh-internet-ir.ml
eblaghir-sana.gq
eblaghir-sana.ml
edalat-hamrah-ir.tk
ghost3282.tk
ha-edalat.tk
ha-sana.tk
hir-san.tk
ili-oori.tk
internet-bankmellat-ir.tk
internet-mellatbank-ir.tk
ir-idpax-iran.tk
lnternet-bankmellat-ir.tk
lsp-pey.cf
mellatbank-iran-com.ga
mylicense.cf
og-req.tk
op-seq.tk
p-coin.tk
p-net.tk
p-vps.tk
pay-idpy.tk
ps-red.ml
ps-sighe.tk
salamat-ir-gov.tk
salamt-gov-ir.cf
saman-sana-ir.cf
sana-adliran-ir.ga
saz-pay.tk
shaparak-venoss.tk
shaparak-veroncs.tk
shaparak-vorons.tk
shaparakvenos.tk
shapark-mellat.gq
shop-shacpatak-py.tk
sighe-buy.tk
sigheyabi-com.tk
sopp-pey.cf
sorp-pey.cf
ssn-eblagh.tk
tr-wallet.tk
www-paylogin-com.cf
www-slamat-gov-ir.cf

# Reference: https://www.virustotal.com/gui/file/7b8babce594c8294b75d5b61ac4f9a5aec24c29a8ea294caf81bfc70d3c3398a/detection

epay-banki.ga

# Reference: https://www.virustotal.com/gui/ip-address/146.59.254.188/relations
# Reference: https://www.virustotal.com/gui/file/00fc19ea7ea18f6ce5d7a2e377cce48e7caa18ca62fa1d97109dd58805c1bbb4/detection
# Reference: https://www.virustotal.com/gui/file/fef9b60c08b225776460f98213f2343c39858451c125b307c404c742a06d6735/detection

amir-rxhmxni.ir
api-xcr.tk
bots-me.gq
bots-me.tk
eblaq-ir.cf
eblaq-ir.ml
eblgh.cf
eblgh.ga
eblgh.gq
eblgh.tk
epay-banki.cf
epay-banki.ga
epay-banki.gq
g-register.ir
iran-lancer.com
rush-link.gq
sana-gov.xyz
tron-wallet.ga
typing-rush.cf
typing-rush.gq
typing-rush.tk
weblink-sana.ga
weblink-sana.gq
weblink-site.cf
weblink-site.ga
weblink-site.ml
weblink-site.tk
xcr-bot.tk
zohreh-ahmadi.ir

# Reference: https://twitter.com/malwrhunterteam/status/1466836273256181761
# Reference: https://twitter.com/midnight_comms/status/1466971054941904896

eblgh-14000.xyz
salambarrahbar.xyz
/rat/user/nabat/

# Reference: https://twitter.com/malwrhunterteam/status/1466888626571259908
# Reference: https://twitter.com/midnight_comms/status/1466967003189682179
# Reference: https://www.virustotal.com/gui/file/b05418cab378f7c438c440110c7b61371b0d674a80cfbf5a962d06b34d913d95

adelliirann.tk

# Reference: https://twitter.com/malwrhunterteam/status/1466822463057186821
# Reference: https://twitter.com/midnight_comms/status/1466965433467248643
# Reference: https://www.virustotal.com/gui/file/2d3454ce72fbd12699262cee5ab05a068436ddafda04a49fa7a05dc48cee6605/detection

ir-46549.xyz
ir-56163.xyz
edalat.ir-46549.xyz
edalat.ir-56163.xyz

# Reference: https://www.virustotal.com/gui/file/c89b52a6bb50b96ad1d1fcb2c335b534731a5691c7a3aae49b7f7afc33624a01/detection

remote-vip.tk

# Reference: https://www.virustotal.com/gui/file/0ad7826c1de74bc0708b381741daa2ac6b87c8a8f3f38e0b4b0a202df19c09f3/detection

test-remote.tk

# Reference: https://www.virustotal.com/gui/ip-address/37.187.132.157/relations
# Reference: https://www.virustotal.com/gui/file/85b4c2bc2f97c10ed94276d5fe166ec5dfa3e8d0d8c7ed237f64e141affb5732/detection

e3blaq.com
ebiagh.com
eblaq.net
iblaqh.com
rat-1342.xyz
sana-ebiaghir.xyz

# Reference: https://www.virustotal.com/gui/ip-address/162.0.217.30/relations
# Reference: https://www.virustotal.com/gui/file/0a688d1f72d322a18a8ad2efc44c0387ea8f138449559dcd667f0a962b65d497/detection

appsanadownhere-ir-tk.xyz
landingissahna-tk.xyz
sabtsanna-tx-com.xyz
sahnayeman-tk.xyz
thisissahna-tk.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1469772282805555206
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.95/detection
# Reference: https://www.virustotal.com/gui/file/ec337b5cfc3500034c5f42443774bcbb20b9d1666296d82d37c245cdf1f891d2/detection

12gig-net.tk
12usnet.tk
30gig-net.tk
adiiran-ir.cf
adl-eblagh.ga
adl-eblagh.tk
adl-eblaghiran.cf
adl-eblaghiran.ml
adl-irin.cf
adliran.tk
adliran1.tk
adliran2.tk
adlirani.tk
adlisanaa.ga
amo-reza-login.cf
amo-reza-login.tk
bedi24.ga
claud-zax.tk
cloud-fa.tk
customer-01.tk
customer-02.tk
customer-10.tk
cyber-police.gq
cyberpolice.gq
download-maya.tk
eadl-ir.tk
eblagh--sana-ir.tk
eblagh-adiiran-ir.ga
eblagh-adiiran-ir.ml
eblagh-adliran.ga
eblagh-admiraani.tk
eblagh-ed.ml
eblagh-fata-ir.tk
eblagh-iran-sna.cf
eblagh-iran-sna.gq
eblagh-iran-sna.ml
eblagh-iran-sna.tk
eblagh-sanair.gq
eblagh-sena.cf
eblagh021.ga
eblagh1-electronic.cf
eblagh1-electronic.ga
eblagh2-adlirani.tk
eblagh2-electronic.ml
eblaghi-site.ml
eblaghi-site.tk
eblaghirsana.gq
eblaghy-irni-ir.tk
eblaghy-sana-ir.ga
eblaghy-sana-ir.tk
eblaghye-ir.gq
eblaq-fata.gq
eblaq-sana-ir.tk
eblaq021.ml
eblaqie.xyz
host-free.ml
ir-ablagh.ga
ir-pardakete.gq
iran-hamdel-sh.tk
iranu-adleblagh.ml
iranu-adleblaghi.cf
iranu-adleblaghi.ml
iranu-adleblaghi.tk
kospar.cf
kospar.ga
kospar.gq
kospar.ml
mellatbehpardakht-iran.gq
moshtari-2.tk
moshtari-3.tk
moshtari-4.tk
moshtari-5.tk
myket-ir.cf
net12us.tk
pakket-ontvangen.ga
perfect-uc.cf
peygir-iran-ir.cf
peygir-iran-ir.ml
peygir-iran-ir.tk
peygir-sna.tk
peygiri-rs.ml
peygiri.gq
peygirshi.pw
police-eadl-iran.tk
police-iran.ml
poxirn.ga
pygiri-iran.cf
remoteapk.gq
samaneh-sana.tk
sana-app.com
sana-eblagh-iran.cf
sana-eblagh-vjc-ir.cf
sana-eblagh-vjc-ir.ga
sana-eblagh-vjc-ir.ml
sana-eblagh-vjc-ir.tk
sana-eblagh11.cf
sana-eblagh11.ga
sana-eblaghye-ir.cf
sana-iran-eblagheyi.tk
sana-m-ir.cf
sana-peygiri.cf
sana-peygiri.ga
sana-peygiri.gq
sana-peygiri.ml
sana-talanir.tk
sana.tk
sanaa-adliran.tk
sanair-eb.gq
sanairen-wv.cf
sane-adliran.tk
sena-ir.tk
server-fox.tk
server-vip.site
sex-chat.gq
shaparak-12gignet.cf
shaprk-bmb-ir.ml
shaprk-iran-ir.ga
shaprk-iran-ir.ml
shaprk-iran-ir.tk
shaprk-meli.ga
shekayat.gq
shekayt-sana.cf
shekayt-sana.gq
sigheyab.ml
webamo-reza-login.tk
webcloud-fa.tk
webeadl-ir.tk
webeblaqie.xyz
webperfect-uc.cf
websana-m-ir.cf
websana-talanir.tk
webserver-fox.tk
zax-taha.tk
30gig-net.amo-reza-login.cf
eblagh-admiraani.amo-reza-login.cf
eblaghye-ir.customer-10.tk
eblaghye-ir.gq.customer-10.tk
peygirshi.customer-10.tk
sana.adiiran-ir.cf
zax-taha.customer-10.tk

# Reference: https://www.virustotal.com/gui/file/67ccdd6b89a0418a243a3ab188a7977328f623e87f95b7eb8fcb9f41a2f8f581/detection

ebanking-ir.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1475573184011255808
# Reference: https://twitter.com/midnight_comms/status/1475575581685256198
# Reference: https://www.virustotal.com/gui/ip-address/176.9.212.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.235/relations
# Reference: https://www.virustotal.com/gui/file/eab8e5dfcdc8e3c85f1e0796d0773c7a3a51e357a025be734c79ce680b1e6c3e/detection

ebblaghh3.ga
eblagh-electeronik.gq
eblagh-electeronik2.ga
eblagh-electeroniked.gq
eblagh-ir.co
eblagh-irn.ga
eblagh110-sna.tk
eblaghiie-sana.cf
eblaghsana110-ir.tk
eblaghssna-ir.tk
elobagpeygiri.cf
fata-iran.cf
fshekayat.ml
geblage3.ml
goysl.ml
internet-12giig.ml
mellatt-shop.ml
peygiri-eblaghie-sana.tk
pge-shapark.tk
qeblaghe3.ml
remote-best.tk
sghp-melli.tk
shop-melli-iran.tk
shop-melli.ga
shop-melli.tk
shop-mill.ga
shoping-mill.ga
sighe-daff.tk
sighe-shoop.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.155.173.151/relations
# Reference: https://www.virustotal.com/gui/ip-address/51.254.108.216/relations
# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

abl-irann.tk
af-shaparak.tk
app-sana.com
ara-host.xyz
bkihsjvjvdjgdjvdjvvdj.ml
bots-me.ga
bots-me.ml
bpn-shapatak.tk
bqm-shaprk.ml
clashsupercell.tk
cryptobiit.tk
cybertm.ml
daraserver.ir
deinserverhost.xyz
eblagh-pbp.ml
eblagh-pep.ml
eblagh-pep.tk
eblagh-saba-fata.tk
eblagh-sana-fate.tk
eblagh-sena.tk
eblagh-senal.tk
eblah-sana-fata.ml
eblah-sana-fata.tk
eblah-sans-fala.ml
ems-api.ml
eocic.ml
ezshoping.ir
fast-creat.ir
fater313.ir
fgvhbjnkmnbhgvhj.tk
gifti-trus.tk
gihjdgvbj568.tk
gite-tros.tk
godrat.xyz
hamsaryabi-maya.cf
hamsaryabi-maya.tk
hero-server.ir
httpwebsite.cf
iran-suport.tk
jet-host.ir
lemonrobot.ml
lotusgaming.ir
master-host.ml
master-host.xyz
megahosts.ir
metiwz.ir
mmmnbjhxojcjcjv.tk
monster-security.ml
mr-hp.ml
ms-api.ml
mweb.ml
newmizban.site
newmizban.xyz
nexgift.xyz
night-server.ir
panel-server.xyz
payepai-com.tk
phonix-host.xyz
piggiryy-ir1.tk
pocoserver.net
pocoteam.ml
power-server.ir
power-server.tk
qayehbolaghi.xyz
royaleweb.tk
rtxapi.tk
sana-adl-iran.ml
sana-s.ml
satashop.ir
satasource.ir
self-rezno1.tk
sevenmizban.ir
shaparak-ipc.tk
sighe-yab.ml
signorshop.ir
sing-in.gq
smomti.tk
trustwallet2022.cf
turk-mizban.tk
typing-rush.ga
webfgvhbjnkmnbhgvhj.tk
webtrustwallet2022.cf
webzarinpay.cf
x-pardakth-1400.gq
zarin-server.ir
zarinpay.cf
zarinpay.gq

# Reference: https://www.virustotal.com/gui/file/4997f65b0d78456ac881aefe477aa7d47e2ac96756530bdb6ca7b0718429d01b/detection

hamdamyad.gq
litehost.site
host2333.litehost.site

# Reference: https://www.virustotal.com/gui/file/ad30bbd9430472cb06a8be1c6117952036942117717e92800344ff764157d8d9/detection

pasha.alphahosting.ir

# Reference: https://www.virustotal.com/gui/ip-address/116.202.184.197/relations
# Reference: https://www.virustotal.com/gui/ip-address/116.202.190.150/relations
# Reference: https://www.virustotal.com/gui/file/573e36366ed930637cdaf22e8c20da8768cab4fda6c9f2c61885891c57d54872/detection
# Reference: https://www.virustotal.com/gui/file/6c044ba80ba093251ca5f6c4967b514b97a681dca347e830849952c7a6f16037/detection
# Reference: https://www.virustotal.com/gui/file/c2e156051b84bf0db2045ef79c20c7e995e0b22bae8279df9ee8940f13f52587/detection

banck-shaparack-ir.tk
dn-shaparak.ga
dn-shaparak.ml
dn-shaparak.tk
ds-shaparak.ml
ds-shaparak.tk
pablo-service.tk
pes-shaparak.ml
pes-shaparak.tk
senayar.xyz
sep-novinpardakht.tk
sinatarh.tk
sobhanphp.tk
sp-shapark.cf
sp-shapark.ga
sp-shapark.ml
sp-shapark.tk
yt-shapatak.cf
yt-shapatak.gq

# Reference: https://www.virustotal.com/gui/file/5a672adb90ca4730966d2a8ed131b022a152564ff31b5871bd4b1437b2bbc493/detection
# Reference: https://www.virustotal.com/gui/file/b249f7c8b7026668195878e5a68fe74d38d927c5ceb6a339217127a03c68f223/detection

sana-apk-ir.cf
sana-apk-ir.ml

# Reference: https://www.virustotal.com/gui/file/a2b32b8875da1331ddfd2c70ce3f1ba12da1680375dff5c5b37866b30603f581/detection

sana-1adliran.cf

# Reference: https://www.virustotal.com/gui/file/be890a3a42bc79fd0dd7993dd32c564f37a6caaa67bddf886d23a1446d6f5af8/detection

00098.tk
shaadparak.gq
rat.00098.tk

# Reference: https://www.virustotal.com/gui/file/ef138f6ad939e7e3df93c42499265f06b004ce85afa2b9d9345ad7c06d337a1d/detection

client-eblaghe.ml

# Reference: https://www.virustotal.com/gui/file/3d77255a247fb9b22589fad1e92ba11e3a4cb882e893b8e805c23aab41bc8623/detection

sumerr-ir.tk

# Reference: https://www.virustotal.com/gui/file/78ad1d47c9e690a0bf0d5ea87a5622915f78388b915f413440f8989648e3d85f/detection

snowiby.ga

# Reference: https://www.virustotal.com/gui/file/e398a8bd3b98437a3cf52eb0f303ee0d4363ed10341a1a43f30fc835aba7c370/detection
# Reference: https://www.virustotal.com/gui/file/5b4da6081760628f379caa6bb585100382348397533baca1b29a4012d2dd9beb/detection

danalica.ito.gov.ir/dcore/file/js/tracker.php

# Reference: https://www.virustotal.com/gui/file/3b674f320cac7d953fd7026e65bb3e974f43b788b80b3a85c2716389960661b2/detection

shapajak-ir.ml

# Reference: https://www.virustotal.com/gui/file/dc8c42626edf4bf0b9cacc9c21d682ca32e56ed697cb229415ba29416706fc6f/detection

shapatak-ir.ml

# Reference: https://www.virustotal.com/gui/file/fdc37a0e99b53580d83e63a6f49e2c985c0cb2a3996905e7a14af62dc5f493e7/detection

icm-mellat.ga
Icm-mellat.ga

# Reference: https://www.virustotal.com/gui/file/590278726f4ee4c2db9f2afaf8c11e62dc09acd6d1368fdef448e2ec6a244818/detection

b2-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/14e946c66487102454376e04b17cf2d5ad192dd5d7542274ee294f95ca3ab686/detection

b2b-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/b31b6d93080735b25eaff4a66f0b2dc93f6cfd5efe7053199dfb5413090737a1/detection

b5-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/7816eab3b6021633ab79d11beeb6e98f3bc6dbc80aec01f8fd0bab8aaa11679f/detection

b9-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3fb52b569c110dc3cd552fb37cf6e13f6758104bcb538eaee41cdda101a6452a/detection

bf-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9cfc5d3cd6d87361ad4b1da6d29f208d03c31794f301caa865146a813274f211/detection

dl-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9be85cac1a76caf2ca66a7e613e3ec5c40b657ef5701eee60ea74c454f5f722d/detection

shafarack.ga

# Reference: https://www.virustotal.com/gui/file/ebab499e9dbfd737d69cad9bac37e5a68053f55d5ccae53dbf72d9561a7a845d/detection

shaparaks-ir.ga

# Reference: https://www.virustotal.com/gui/file/659b835b73ccb0341c7f97cfc66f959ae1192c0c2a2ae982e29f3cc6aab1079d/detection

shhaporak.cf

# Reference: https://www.virustotal.com/gui/file/35ddb00109601324423de9ed903e1aa81e164b9b62cbcf461fbd58bdfe852b13/detection

shaparuk.ga

# Reference: https://www.virustotal.com/gui/file/f645368d2cdc68a74f927822ef6590f4bf9e4ae0d82909c13a91c5d70505865a/detection

api.texrcc.tk
dp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/ce0b1c5e5ccb5e540c04b71a314b4c04c370985937c340c9e699052bb652515f/detection

shapkarak-ir.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.93/relations
# Reference: https://www.virustotal.com/gui/file/fa4524025b56dbccee06126c18b40a6105709b869345899606da20ec26129db5/detection

35yu5u.ml
5r5hjd.gq
airdrop2021.cf
api-error.cf
api-error.ga
baro-pay.tk
bas-pay.ga
basepay.ga
beso-pey.gq
biso-pey.ga
biso-pey.ml
daillytron-cc.ml
diktator-api.tk
diktator-error.tk
diktator.cf
diktator.tk
e45jrwe.ga
ehjet54.gq
error-api.ml
error-diktator.tk
et764ue.cf
kanie-pey.tk
lkhyfytd.ga
ratkiriri.ga
ratkiriri.tk
rykoedt2.gq
rykoedt2.ml
rykoedt2.tk
saro-pay.cf
saro-pay.ga
saro-pay.ml
saro-pay.tk
sero-pay.cf
sero-pay.ga
sero-pay.ml
sero-pey.cf
sero-pey.ga
sero-pey.gq
sfro-pay.ga
sfro-pay.gq
sfro-pay.ml
sfro-pay.tk
sfro-pey.gq
sfro-pey.ml
sfro-pey.tk
snro-pay.cf
snro-pay.ga
snro-pey.cf
sps-shaparak.tk
stro-pay.cf
stro-pay.gq
stro-pay.ml
stro-pay.tk
stro-pey.cf
stro-pey.ga
stro-pey.ml
stro-pey.tk
trusttwallet.cf
uniouswap-com.ml

# Reference: https://twitter.com/malwrhunterteam/status/1473406036497383425
# Reference: https://twitter.com/midnight_comms/status/1473459603073470464
# Reference: https://www.virustotal.com/gui/file/e07d155c663e8deddc0b8843de0acaddad620a15ac7d9e02397807466fb8e58a/detection

http://45.147.230.25
trustwalllet.cf
mta0.moedazmail.com.br

# Reference: https://twitter.com/malwrhunterteam/status/1473663409992445955
# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.32/relations
# Reference: https://www.virustotal.com/gui/file/9efbf303b035bb02cf5c611ed010816c04d7b91916bf9976e694ad2e246abacb/detection

http://212.114.52.201
http://45.147.230.25
abl--irann.ml
abl--irenn.ml
abl--irran.ml
abl--irren.ml
ablag.ga
ablag.tk
ablagie-adliran.tk
addludksd-sds.ml
adiran-eblagh.gq
adiran-eblagh.ml
adiran-eblagh.tk
adl--irann.ml
adl--iren.ml
adl-peygiri.ml
adl-sana-eb.ml
adlilran.xyz
adliran-ebiagh.xyz
adliran-sana.site
adliran-sano.xyz
adliranian.xyz
adlirn-ir.cf
adll--irren.ml
adlliraniian.ml
adlran-sana.ml
adlransna.ml
adrlin-site.ml
aedll.ga
benzin-ir.com
biag-sana.ml
bqm-shaparak-ir.xyz
cena-sait.cf
csynat661.xyz
dadgah-web.cf
digitalvigo.gq
dodgah-sana.cf
ebalgh-rasmi.tk
ebfamli.ml
ebilag.tk
ebilegh.tk
eblagh-adlran.ml
eblagh-ir.com
eblagh-iran.com
eblagh-lran.ml
eblagh-peygiri.ml
eblaghe-iran.xyz
eblaghe-rasmi.cf
eblaghe-site.cf
eblaghee-sana.gq
eblaghiyefta-ir1.ml
eblaghiyefta-ir4.ml
eblaghiyefta-ir5.ml
eblaghye-sena.ml
eblaghye-site.cf
eblagie-adiliran.tk
eblagie-adliran.ml
eblagye-sena.ml
eblaqe-sana.ml
eblegh-iranian.ml
eblfasaeda-ir.ml
eblfpamlei-ir.ml
eblfsaeda-ir.ml
eblgh-sana.gq
ebliagh.tk
ebliegh.tk
ebllaghe-sana.ml
edaiat.com
edalat--wab.cf
edalat--web.cf
edalat-wab.cf
edll-ir.xyz
efatimli.ml
ersal-payam.xyz
faeblaghis.ml
gov-eblagh.cf
gov-eblagh.gq
gov-eblagh.ml
gov-shaprak.ml
hdbshsj44.xyz
ir-adl-iren.ml
iradll.ml
iran-eblagh2.tk
iran-edi.com
iran-hamdel-sh.cf
iran-hamdel-sh.ga
iran-hamdel-sh.ml
iran-khodro.ml
iran-pot.tk
iran-sanaadli.site
iran-tap.gq
iranis.xyz
ireblaghix.xyz
is-sigheq.tk
kuofeesmon.ml
main3erver.xyz
mellat-sheaprkq.tk
morning-housey.xyz
mysaba.tk
new-siqe.gq
newyeargift-paycompany.ml
nlserver.ml
opshpo.tk
pancake-swap.ml
paygiry-sena.ml
paysmentra.ga
pey-dadsetani.ml
pey-eblaghq.ml
pey-eblaghq.tk
pey-eblaghw.cf
pey-eblaghw.gq
pey-eblaghw.ml
pey-eblaghw.tk
peygiri-apk.ml
peygiri-arf.ml
peygiri-dadgostari.ml
peygiri-dci.ml
peygiri-eblagh-new.gq
peygiri-eblaghye.tk
peygiri-itr.ml
peygiri-sak.ml
peygiri-sms.cf
peygiri-ytr.ml
peygiri.cf
peygiri.ga
peygri-ebleg.cf
peygry-sena.ml
proxy-null.cf
pygiri-iran.ga
randomsize-12.ml
sada-adlran.ml
saheb-dar.xyz
saite-sana.ml
saite-sena.ml
saman-sna.cf
saman-sna.ga
saman-sna.gq
saman-sna.ml
saman-sna.tk
samane-eblgh.cf
sana-adilran.ml
sana-ebl.ml
sana-eblagh-iran.cf
sana-eblagi.cf
sana-eblagi.ga
sana-eblagi.gq
sana-eblagi.ml
sana-eblagi.tk
sana-eblgh.tk
sana-eblogi.gq
sana-iran-ir.tk
sana-iran.online
sana-iranis.xyz
sanad-irani.xyz
sanaeblag.tk
sanafatk.ml
sanaire.cf
sanan-iron.ml
sanan-iron.tk
sanar-irani.xyz
sanat-irani.xyz
sanna-larn.ml
saya-gh.ml
sena-adrliins.cf
sena-adrlins.cf
sena-ira1n.tk
sena-iren.cf
sena-peyggri.cf
sena-peygri.cf
sena-sait.cf
sena-sayt.cf
sena-sita.cf
sep-shaparak-pay.cf
seq-shaqarak-ir.xyz
shaapaarak.tk
shaparak-ipc.tk
shaprak-xer.tk
shaprk-bmb-ir.ml
sighe-yab.gq
sighe-yabi.site
sighehalal.ml
siman-ersal.xyz
site-eblaghe.ml
site-sena.ml
snatrt.ml
soltaniiisirr.xyz
starpar.ml
telegram-hakc.ga
test-dargah.tk
thenull.cf
trust-walet.gq
trustswalt.ml
update-shprk.ml
xe-shaprak.tk
zeoxtm.ml
zeoxtm.tk
zr665.xyz
adl-sana-eb.sanan-iron.tk
adlransna.sanan-iron.tk
adlrdan-sana.sanan-iron.tk
eblagh-adlran.sanan-iron.tk
eblaqe-sana.ml.eblaqe-sana.ml
sada-adlran.sanan-iron.tk
sana-eblagi.main3erver.xyz
sana-eblogi.main3erver.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1474789191397556225
# Reference: https://www.virustotal.com/gui/file/19cfb063d8d43bced68cc3ebfef029bb7a39b7d7a8a6b2b3ba2889fa5cef87ed/detection

dxxx.bar
eblagh-2200.xyz
sna-eblagh.com

# Reference: https://www.virustotal.com/gui/file/47f4ff8cfbf3043635217fdd6e47ea11764be66bb78be0203b88357750786ab3/detection
# Reference: https://www.virustotal.com/gui/file/97cdf8035b74e212b6da44f8af75a4540421349c58668e77d6aaedbc714c5639/detection

cxxx.bar

# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.67/relations
# Reference: https://www.virustotal.com/gui/file/8eb3b6ac76d37f5080711260e0ecff4b5f2443795c0181ca4101a5c9bbf08699/detection
# Reference: https://www.virustotal.com/gui/file/82ebe56b08c5d2810b3870e5124df2f23ae49a0a1f1e5f4293cba0d9aa3e43e3/detection

adleiran.xyz
adleran.xyz
adlian.xyz
adliran1.xyz
adliran2.xyz
adlirno.xyz
adliron.xyz
adlliran.xyz
adlor.xyz
adlrn.xyz
cvv2.xyz
divaor.xyz
divar-man.xyz
divar.bond
divar.cfd
divar.fun
divar.monster
divar.store
divarapi.xyz
divarh.xyz
divarm.xyz
divarman.xyz
divarnew.xyz
divaro.xyz
divarp.xyz
divarpay.xyz
divart.xyz
divarz.xyz
divaur.xyz
divear.xyz
ebiaghi.xyz
ebiaghie.xyz
eblagh1.xyz
eblaghiat2.xyz
eblaghiran.xyz
edalati.xyz
edalatiran.xyz
edalaty.xyz
ghazaiat.xyz
mydivar.xyz
oxxx.bar
pishgiri-sana.com
sanagv.site
ssspp.xyz
xxxsx.xyz

# Reference: https://www.virustotal.com/gui/file/8d657d372777b2e89b5e63ced5e1ab82750a190af54fe34a6953de157dec670c/detection

dadsara-1400.xyz
hello-23123.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1473016650689622025

dadsara-1500.xyz

# Reference: https://www.virustotal.com/gui/file/4d41d251c4d1d48bb213fa84c71af4ebe1b1aa026a1628e639638cb9ec29b6a2/detection

sana-miran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1359203738808893450
# Reference: https://www.virustotal.com/gui/file/a6571e7d63b10a2d323cba7f9d603a977e1c66f635ae7e40027a7a4b0a96383f/detection

shaparack-iir.ga

# Reference: https://twitter.com/malwrhunterteam/status/1349342821623459840
# Reference: https://twitter.com/malwrhunterteam/status/1350419534868578304
# Reference: https://twitter.com/bl4ckh0l3z/status/1350492882633895938
# Reference: https://www.virustotal.com/gui/file/a5657d914de9840f20bbc14b431b614dbeca5040148a569489a761a29cfbef46/detection
# Reference: https://www.virustotal.com/gui/file/53ece16de2047212ba1daba6d5dd27c7e63c7b2bcbf34b89ddce1347f590ff0a/detection

bamharmrah.site
bamimelli.xyz
my-bmi-ir.work
nablism.xyz
/melli/otp.php

# Reference: https://twitter.com/malwrhunterteam/status/1350356095831855104
# Reference: https://www.virustotal.com/gui/file/16cbbc5b747ee165de4b66fb2fc47498799bea57c2dbdb7ef09c6dc26954cec4/detection
# Reference: https://www.virustotal.com/gui/file/8416943efd3af3b11c55d9de23f2a2676c59a2154c0bb03b963ba0aab206e514/detection

hanabaf.ga
/.s/6GiG/
/.s/MelliNet/

# Reference: https://www.virustotal.com/gui/file/78c6361435a3f571db32f4a8ad0b3ab9145f7e95e4b5b781e6542b6e3f7f7c00/detection

simail.site

# Reference: https://www.virustotal.com/gui/file/5d18085f999537912f93c828adab681764f59100a0653b43fe9d408acdd9feb7/detection

amirhasani12345.gemmizban.ir

# Reference: https://www.virustotal.com/gui/file/c42e5992e34f3fed0c37ef3f4b543398f89c4c6da8b331af1bba94c7ebded596/detection

iranglobal.eliyahost.ir

# Reference: https://www.virustotal.com/gui/file/fd0226b3e50e29ed3e2b881c35730d48eadac5e78c6e1088c6c342659168a2a8/detection

keygrk.tk
mestrewas.tsohost.ir
/fuLLLLODLLLL/
/fuLLLLODLLLL/index.html

# Reference: https://twitter.com/malwrhunterteam/status/1476681714319691776
# Reference: https://twitter.com/malwrhunterteam/status/1476682317506785281
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection

aldeliirann.ml
divarir.cf
irdivarr.cf
kospof.ml

# Reference: https://www.virustotal.com/gui/file/a29e5078ee1ada2c8214d093ed8bb7813cec787bbe889c3e5b42fed658a24f87/detection

googleadvercap.cf
oliverdnssop.cf
/XMrLucyX/panel.php

# Reference: https://www.virustotal.com/gui/file/0267316e9b91ceaec617c455bcb4c6d6cd58b2ff3b394d5c8fe1518400774e97/detection

androidglbl.cf
androidsettings.cf

# Reference: https://www.virustotal.com/gui/file/d101b590b67c6d4e0cd4f1702b04328263c06d7690f2dfbc9266236d19bebb71/detection

androidsetting.cf

# Reference: https://www.virustotal.com/gui/file/22ca0aac892096288f8045199a6bf44689d99321de9b4a549b607e4a0ccfbc31/detection

googleupdates.cf

# Reference: https://www.virustotal.com/gui/file/808f0c09e176834a8f3c0750677fbe9f6ec10caab55067cbec5c98dee300e151/detection

googleglobal.cf

# Reference: https://www.virustotal.com/gui/ip-address/216.250.249.242/relations

adliran-eblagh.site
dadsara-fa.ga
eblaghir.site
mothernonsafe.tk

# Reference: https://twitter.com/malwrhunterteam/status/1478083027607687172
# Reference: https://www.virustotal.com/gui/file/7cd1fd4fe8bcf14da32579c5f173b4fb002740d4e8673528efb8d30da7239181/detection

eblagh-sna.site

# Reference: https://twitter.com/malwrhunterteam/status/1478373104372092933
# Reference: https://twitter.com/midnight_comms/status/1478398312378155011
# Reference: https://www.virustotal.com/gui/ip-address/198.54.120.224/relations
# Reference: https://www.virustotal.com/gui/file/826e1a57d0d084138389ce67b8fbb05c7fbfd4620aad59d635914e7b73c20f06/detection

purnhub.com
toprat.site

# Reference: https://twitter.com/malwrhunterteam/status/1478661638559567877
# Reference: https://www.virustotal.com/gui/file/3161cb7aa9038db5fe6954647f96b25dc6a4968d4c500b25d6904a8774caaee6/detection
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.188/relations

barghir.tk
eadll.ga
eadllir.tk
eblageirani.xyz
eblaghiyefta-ir3.ml
eblqeie.ga
fbi-eblag.ga
freefalower.tk
irbargh.tk
peygiri-21w.ml
peygiri-web.ml
sanairn-vc.ga
sena-abliron.ml
snairn-vc.ml
snairn.cf
ssena.ml
barghir.soqquz.serverbest.xyz
eadll.ga.fmhucx.serverbest.xyz
eblaghiyefta-ir3.ml.fmhucx.serverbest.xyz
freefalower.wqvzmc.serverbest.xyz
irbargh.soqquz.serverbest.xyz
peygiri-21w.zkgfzu.serverbest.xyz
peygiri-web.zkgfzu.serverbest.xyz
ssena.klyiep.serverbest.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1478687276133715972
# Reference: https://www.virustotal.com/gui/ip-address/212.1.210.150/relations
# Reference: https://www.virustotal.com/gui/file/d3a0855f301f64af98b7f965725444eee7bd73e696ec8b64f272f3bfcc40284b/detection

adllir.ml
adlsana.ml
aedll.ml
eadll.cf
edlsana.ml
ir-adl.ml
irdll.ml
iredl.ml
sadl.ga
sadl.ml
sanaedl.ml
seadl.ga
sunlovelapi.xyz

# Reference: https://www.virustotal.com/gui/file/c9f05ead614ae235efc2688966e0528fcb771f1933bd64a6ebe3de79f2dc5278/detection

sd-shaparak.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.23.172.233/relations

12gbnet.tk
1null-server.xyz
5ashparak.amin-hosting.xyz
5ashparak.tk
adding-pool.ml
addliran-sana.tk
addsal-portal.gq
addsal-portal.ml
adiiran-lr.gq
adiiran-sana.tk
adleey-ir.tk
adleye.ga
adleye.tk
adliran-dadgah.tk
adliran-lr.ga
adliran-lr.gq
adllran-sana.ml
adlye.gq
aghaze-nou.tk
amin-hosting.xyz
apicodsazan.gq
bamk-mellat.tk
bax-2021.cf
bax-2021.gq
bax-2021.ml
bdejehdtsjq.ga
bdejehdtsjq.gq
beh-shaparak.tk
besthobsite.tk
bmq-mellat-ir.ga
bmq-mellat-ir.gq
bmq-mellat-ir.tk
bmq-shapark-ir.tk
botbource.tk
bpc-mellat-ir.ga
bpc-mellat-ir.gq
bpm-sahaparak-ir.tk
bpu-mellat-ir.ml
bpu-mellat-ir.tk
bpz-mellat-ir.cf
bpz-mellat-ir.ml
bqi-shahparak-com.tk
bqi-shaparak-com.tk
buy-check.ga
coin-gold.cf
cqr-shaparak.tk
cup-shaparak.tk
darkteami.tk
ddos-odin.tk
dfq-shaparak.tk
diivare-update.ml
diivare-update.tk
diktator.cf
diva-r.ml
divare-update.tk
eblag-adliran-lr.gq
eblagh-sana-lr.ga
eblagh-sana-lr.ml
eblagh.tk
eblagie-adl.tk
eblq-sana-ir.ml
edliran.ga
edliran.ml
edliran.tk
ejeudgdv.cf
ejeudgdv.tk
foroshapp.net
hamrah-mellat.tk
hash-shaparak.tk
ho-black.cf
ho-black.ga
ho-black.gq
ho-black.ml
ho-black.tk
hub-shaparak.gq
id--bi.tk
instagram-panal.tk
ir-bqi-shahparak-ir.tk
ir-my.cf
ir-my.gq
ir-pardakt.gq
ir-pardakt.ml
ir-shahpalack.ga
ir-shahparaak.ml
ir-shahparaak.tk
ir-shahteck.ml
ir-shahteck.tk
ir-shalpalck.ml
ir-shaqarak.tk
ir-shatarak.ml
ir-starka.ml
ir-starka.tk
ir-starke.ga
ir-starke.gq
ir-starke.tk
ir-starki.tk
iran-film.cf
iran-kish.tk
iri-pay.tk
irmeli-shaparak-ir.tk
irn-shaqarak.tk
irwebdad-ir.cf
ishaparakai.ml
ishaparaki-sp.ml
ji-shaparak.ga
js-12.cf
js-12.ga
js-12.tk
karlean-sad.cf
klkmof.tk
koq-shaparak.ml
kqm-shaqarak.cf
lr-my.cf
lr-my.gq
lr-my.ml
lr-my.tk
max-item.ml
max-net.cf
max-net.gq
max-net.ml
melat-shaparak-pey.tk
melat-shaparakl.tk
melatt-bmi.tk
mellat-bamk.tk
mellat-shahparek-ir.tk
mellatt-shahparak-ir.tk
mellllat-shahparak-ir.tk
milati-ir.ml
my-lr.ga
my-lr.gq
nasa-portal.ml
neeet-std.tk
netarzan1399.ga
netbanmyllat.online
nobitux.tk
okexioir.cf
onilos-shaparak.tk
paigiri-sana.ml
pardakhit-bqm-ir.tk
pardakht-meliat.tk
pardakht-net.tk
paridakht-milat-ir.tk
pay-shapark.gq
pay-sharpak.cf
pay-sharpak.tk
payegiri-lr.cf
payegiri-lr.gq
payegiri-lr.tk
payment-pay.tk
payment-x-pay.gq
payments-page.cf
payments-page.ga
payments-page.ml
payments-page.tk
payments-pay.ml
payments-pay.tk
pip-pay-ir.tk
plass-rat.cf
polbgire-irani.ml
pshaparak.cf
pub-shaparak.cf
pub-shaparak.tk
puller.cf
pullercloud.ml
pullercloud.site
py-shaparak.ga
q-shaparak-xq.tk
rat-maker.tk
rd-divar.cf
rd-divar.ga
rd-divar.ml
rd-divar.tk
rot-shaparak.ml
s-shaparak-com.tk
sabt-sana-lr.cf
sabt-sana-lr.ml
sabt-sana-lr.tk
sahapark-iran.cf
sahparak-ir.gq
sahparak-mellat.ml
sahparak-mellat.tk
sahshsns.xyz
saman-shaparak.cf
sanaql.xyz
saparakk.gq
seop-shperk-iran.tk
sh-aparak.tk
shahparak-asiatek-ir.tk
shahparak-parrdakht-ir.tk
shahparak.ml
shahparek-ir.ga
shahqarek.tk
shalparak.cf
shalparak.tk
shapalaki.tk
shaparack-iir.ga
shaparak-9m.cf
shaparak-bank-iran.ga
shaparak-bank-iran.tk
shaparak-com.cf
shaparak-ir-ir.ml
shaparak-iran-ir.tk
shaparak-irani-com.cf
shaparak-laxlxu.tk
shaparak-my.ml
shaparak-my.tk
shaparak-phg.ml
shaparak-saman.ga
shaparak-saman.ml
shaparaka.ml
shaparakes.tk
shaparakie.ml
shaparakiii.ga
shaparakirr.tk
shaparakk-melat.gq
shaparek-ir.gq
shaparek.ml
shaparek.tk
shapariak-dqm-ir.tk
shapark-iran.tk
shapark-mellat.ga
shapark-mellat.gq
shaparka.ml
shaparkl-melat.cf
shaparkl-saman.ml
shaprak.tk
shaprcak-ir.cf
shaqaraki-asanprdkh-ir.ml
shaqrak.cf
shariparak-melati-ir.tk
sharparak.tk
shatrak.ga
shayparak.ml
shayparak.tk
shegeyab.cf
shegeyab.tk
sheypor-ir.ga
sheypor-ir.tk
shparacck.ml
shparacck.tk
shparack.tk
shprak-melatt.cf
shprak-melatt.tk
shprkkk-pardaz.tk
sm-tn.ga
sm-tn.tk
sms.pardakht-net.tk
so3h.tk
so3r.ml
suxc.tk
teq-shaparak.ga
teq-shaparak.tk
trast-wallet.tk
trast.cf
tru-chent.cf
tru-chent.ml
trust-walet.tk
uk-shaparak.cf
uk-shaparak.ml
update-divar.ml
update-divar.tk
update-divare.ml
updatee-divare.tk
updete-divari.ml
usa-shaparak.tk
vittato-psemjry.tk
vncodest.ml
wdivar.ga
wdivar.tk
webir-shahpalack.ga
webmilati-ir.ml
webparidakht-milat-ir.tk
x-shapwal.tk
xn--rgbga0hz3a.ga
yebaziche.tk

# Reference: https://twitter.com/malwrhunterteam/status/1480624878130810882
# Reference: https://twitter.com/malwrhunterteam/status/1480644526586966016
# Reference: https://twitter.com/midnight_comms/status/1480738242882248708
# Reference: https://twitter.com/midnight_comms/status/1480740266503905283
# Reference: https://www.purpl3f0xsecur1ty.tech/2022/01/10/eblagh-re.html
# Reference: https://www.virustotal.com/gui/file/b18bcac068e5827a139c590d44e093299bcedd852e9a64c17e8cfb7499261793/detection
# Reference: https://www.virustotal.com/gui/file/a594384630a4d9d238e07c76867edffa671c4675cbc9ed80c3ab614c2625480e/detection
# Reference: https://www.virustotal.com/gui/file/cbdd4514247474bee8a4368ad87afb97a0cf29a269efb7faf34c75c7646c63ab/detection
# Reference: https://www.virustotal.com/gui/file/b3dea70665740e1e43b50840a8db95debb19e897be433355a88328f2263c2309/detection
# Reference: https://www.virustotal.com/gui/file/816ffa57b028e9e67bd6aeeedffbbfb8c5e5ed8951689d6b1e47746618caaf70/detection

adel-sana.tk
chat18sal.xyz
mellat-bk.xyz
mytestprojects.xyz
lightzer0.xyz

# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

irangeimcxz.power-server.ir

# Reference: https://www.virustotal.com/gui/file/b7d67e5f5c814139ddadf9c4868d0122ed2e76908ce1cf77730c995b581e0b56/detection

panel.hero-server.ir

# Reference: https://twitter.com/malwrhunterteam/status/1480911620608086023
# Reference: https://www.virustotal.com/gui/ip-address/10.10.34.35/relations
# Reference: https://www.virustotal.com/gui/file/17e75f05bd51550f01d5e9db3809bfed37d9f5786fe92aac6e35144e20132f38/detection
# Reference: https://www.virustotal.com/gui/file/c2835809fa5c68b0e82cb62744225fd38ca99030e3453ad1f5b000710b179075/detection

ebiaq.com
ebiagh.org
eblgh.cf
eblaghe-snair.gq
eblagh-1200.xyz
peigyri-eblagh.gq
sanasamane.tk
sana-gov.xyz
sana-adsiran.tk
sana-adsiran.cf
sana-adlsiran.gq
bankmellat.gq
bmpmellimellat.tk
bpz-mellat-ir.tk
mellat.gq
mellatbanking.info
t3files.ddns.net
akhrineblagh.freehost.io
ehzariye.sana.freehost.io

# Reference: https://www.virustotal.com/gui/file/8937b057671d69b76b7449c58c28a428a56f5633e3a28db72dca63c214c72b89/detection

iranplms.ml

# Reference: https://www.virustotal.com/gui/file/f47f91db56c334c9ea265e4eaec04ca0e15832bf9dbdc33745ccc138042ab92d/detection

tejarat-benk.com

# Reference: https://www.virustotal.com/gui/file/4db5d8a9192c1139782ae237e70c052a7d7ad72f68f47567e389edf0519b2e8d/detection

livechater.tk
rayanertebat.ir

# Reference: https://www.virustotal.com/gui/file/cf6b2942374eb4977622d68b941ac148013777a34b34b2a304bf05ddce6e15c2/detection

iamdrdev.gq

# Reference: https://www.virustotal.com/gui/file/dd31fbd534196254fdcf75737f09f84b21a46d051b164e795e7add1556b2bdf7/detection

sana-adlrinom.tk

# Reference: https://www.virustotal.com/gui/ip-address/185.167.72.20/relations

shaparak.com
shaparak.digital
shaparak.me

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.5/relations

adaro.ir
adl-iran-ir.cf
adl-iran-ir.ga
adl-iran-ir.gq
adl-iran-ir.ml
adliranir-ir.cf
adliranir-ir.gq
adliranir-ir.ml
adliranir-ir.tk
ahangfollow.com
alireza-safari.ir
alopakhsh.net
amir-site.tk
arashoe.ir
avisaind.com
batweb.ir
berozlearn.ir
bmp-paya.tk
brdbeof.tk
brutish.tk
burnwood.win
buttybot.tk
cardforum.cc
cch-shaprak.cf
cch-shaprak.ga
chr-shaprak.ml
ciph3r.ir
coinexapp.tk
crackers01.com
dezmond.ir
digiatom.ir
diivar-ir.tk
diivarr-ir.cf
diivarr-ir.ga
diivarr-ir.gq
diivarr.gq
diivarrr.cf
diivarrr.ga
diivarrr.gq
diivvarr.ml
diivvarr.tk
dilvar.cf
divar--ir.gq
divar-irr.gq
divarir-ir.cf
divarir-ir.gq
divarir-ir.tk
divarir.gq
divarr-ir.cf
divarr-ir.gq
divarrir.cf
divarrir.ga
divarrir.ml
divarrir.tk
divvar.ga
divvarir.cf
divvarir.gq
divvarir.ml
divvarir.tk
divvarrir.cf
divvarrir.ga
divvarrir.gq
divvarrir.ml
divvarrir.tk
dlban.ir
dluptime.tk
eblagh-dl.cf
eblagh-dl.ga
eblagh-dl.gq
eblagh-dl.ml
eblagh-post.tk
eblagh1-adliran.ga
eblagh1-adliran.ml
eblagh1-adliran.tk
eblagh1.tk
eblaghie-dl.tk
eblaghie-ir.cf
eblaghie-ir.ga
eblaghie-ir.gq
eblaghie-ir.tk
eblaghie.gq
eblaghir.cf
eblaghir.gq
eblaghiran.cf
eblaghiran.ga
eblaghiran.gq
eblaghiran.ml
eblaghiran.tk
eblaghname.cf
eblaghname.ga
eblaghname.gq
eblaqhie-dl.gq
eblaqhie-dl.tk
eblaqhie.ga
eblaqhie.gq
eblaqhie.ml
eblaqhie.tk
eblaqiran.ga
eblaqiran.gq
eblaqiran.ml
eblaqiran.tk
eblaqname.cf
eblaqname.gq
eblaqname.ml
eblghnameh-dl.ml
eblghnameh-dl.tk
eblghnameh.cf
eblghnameh.ga
eblghnameh.gq
eblghnameh.ml
eblghnameh.tk
eblqnameh-dl.tk
eblqnameh.ga
eblqnameh.ml
eblqnameh.tk
ehsanmalekinejad.ir
emenazarang.com
enchemical-hut.ir
farpak.group
fawsi.ir
feizi-derakhshi.ir
followergram.tk
followerteam.ir
gapsec.ir
gatem.ir
gatemsotre.ir
gatemtrade.ir
getfollower.info
giahnooshamani.ir
glass-star.ir
hir-shaprak.tk
hschm.ir
htgranite.com
infiniteam.ir
ir-adliran.cf
ir-adliran.ga
ir-adliran.gq
ir-adliran.ml
ir-adliran.tk
ir-divar-ir.tk
ir-eblaq.cf
ir-eblaq.ga
ir-eblaq.ml
ir-eblaq.tk
ir-shahparak.cf
ir-shahparak.gq
iradliran-ir.ga
iradliran-ir.gq
iran-com.tk
iran-vip.ml
iranadlir.gq
iranadlir.ml
iranadlir.tk
irantse.ir
irdiivar.ga
irdiivar.gq
irdiivar.ml
irdiivar.tk
irdivar-ir.ml
irdivarr.tk
irdivvarr.ga
irdivvarr.ml
irdivvarr.tk
irpay.ga
irpay.gq
irpay.ml
irsana-ir.cf
irsana-ir.ga
irsana-ir.ml
irsana-ir.tk
ithirteen.ir
jazabam.com
jor-pa.ir
ke-shaprak.ml
larakala.ir
ler-shapark.ga
line-bot.xyz
lnglounge.ir
marlikdigital.ir
masteraxe.ir
matrixgram.com
mersichat.ir
milvpn.xyz
mjkhajeh.com
mohgivebot.tk
multivpn.xyz
my-rat.tk
mysutsujs.tk
n1vpn.xyz
net-covid-ir.tk
net-pool.ir
newodksj.tk
niracloud.ir
norouzi80.tk
norouzi81.info
norouzi81.tk
novincrop.ir
null-net-work.tk
otom.ir
pandatem.ir
persianpay.cf
power-service.cf
propay.cyou
pubgfrostfestival.ml
pythoniha.ir
pythoniha1.ir
rafa-tech.ir
ragram.ir
rayainst.com
rayainst.ir
revengine3r.ir
rlt-shaprak.gq
rubixmovie.com
rubixmovie.top
sabbas.ir
sada-shprakmelat.cf
san-esis.cf
san-esis.ml
sana-samaneh.ga
sana-samaneh.ml
shahprk.gq
shaparak-js.tk
shapra-kvnd.ml
shaprak-pop.gq
shaprak-set.cf
shaprak-set.ml
shaprakddj.cf
sheyp-oor.tk
shprakserf.ga
shprakserf.gq
shprakserf.ml
shprakserf.tk
shprakwer.ml
soft-support.tk
storm-store.ir
stylestreet.ir
tajrishpharma.com
tebetasviri.com
the-brutish.tk
thebrutish.tk
themaqs.ir
uplmaloo.tk
uplmalooo.tk
uploaduqjdqm.tk
uplymalo.tk
vastudesign.ir
venostehranior.tk
whatsappx.tk
x200.ir
xgts.ir
xnice.gq
yaldaa.xyz
ybrutish.tk
yeee.ir
yz-shaprak.tk
zarnegariran.ir

# Reference: https://www.virustotal.com/gui/file/cd3dc35a4cec05b5e3f66ae2a80a3e6bdea8ad952ed3a584927696107335f3f3/detection

iamdrdev.tk
eblaaghi-sanaa.cf

# Reference: https://twitter.com/malwrhunterteam/status/1481233824092770306
# Reference: https://twitter.com/midnight_comms/status/1481248207229181953
# Reference: https://www.virustotal.com/gui/ip-address/217.160.0.241/relations
# Reference: https://www.virustotal.com/gui/file/7cfec4dfc08443c7b1a14317625e75e2f264e64bcb22cc02ac804def54228a29/detection

samaneir-e.biz
samaneir-e.com
samaneir-e.info
samaneirn.online

# Reference: https://twitter.com/malwrhunterteam/status/1481237183981887490
# Reference: https://twitter.com/midnight_comms/status/1481245440066473988
# Reference: https://www.virustotal.com/gui/file/a25ef8f93114728b224f311e0cfcca60513e607d83672302e4edd7fb67439606/detection

ir-65163.xyz
edalat.ir-65163.xyz

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.17/relations

asiapay.cf
divar-1.cf
divarr.ml
divarr1.ml
divarsite.ml
divvar.ga
dlvar.ml
seppai.ga
seppai.tk
seppay.ml
shahpay.ga
shahprk.gq
sitedivar.ga

# Reference: https://www.virustotal.com/gui/ip-address/198.54.114.185/relations

abl-sena.gq
abl-sena.ml
abl-sena.tk
ablghee-sana.ml
ablghee-sana.tk
api-reet.tk
ebla-ghy.ml
eblagh-ir.sbs
eblao-sana.ml
samane-eblaghee.gq
samane-eblaghee.ml
samane-sanaa.tk
sana.eblagh.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1481723667037970435
# Reference: https://twitter.com/midnight_comms/status/1481729062385160202
# Reference: https://www.virustotal.com/gui/ip-address/68.65.122.100/relations
# Reference: https://www.virustotal.com/gui/file/2e4547983ed0074e46241828d09ff310122285d341c5a7705d2ebb8edbb86078/detection

adlir-eblog.ml
adlir-eblog.tk
eblagh-adlir.tk
eblagh-adliran.tk
eblagh-eblogin.tk
eblegh-ir.tk
eblogin-adlir.tk
ebv-eblagh.xyz
ebv-eblaghir.ml
ebveblagh.gq
ebveblagh.ml
ebveblagh.tk
mamaloch.xyz
trustupdatewallet.net

# Reference: https://twitter.com/malwrhunterteam/status/1431198354730622977
# Reference: https://twitter.com/bl4ckh0l3z/status/1431218876642103297
# Reference: https://www.virustotal.com/gui/file/21d7fdf3581c65a20e9199d6470de8c0f6776e86827c5c5085175fe52e2eca1e/detection

caco333.ca
vinsa.fun

# Reference: https://twitter.com/malwrhunterteam/status/1346035452894179331
# Reference: https://twitter.com/bl4ckh0l3z/status/1348324827510267909
# Reference: https://www.virustotal.com/gui/domain/karloskey.ml/relations
# Reference: https://www.virustotal.com/gui/file/5253ded3b530bbcde7f9bd8493c9d76a045670308faf15ad28b1e8c635ff9432/detection
# Reference: https://www.virustotal.com/gui/file/92e4013646e60da4c4debd6b975277acf2784352024be43ea5918abdffb0d623/detection

http://37.120.146.4
karloskey.ml
pasargaad.xyz

# Reference: https://www.virustotal.com/gui/file/45ff19a4717c556ebcb83ecff4fb09bc00bf13911f861c3a9d83e0c5462eca6b/detection
# Reference: https://www.virustotal.com/gui/file/c0d6aa4233c70e4f13d01ba858b30e27b439aaf20587de11c3705344f63aac8d/detection

uaioey.ga

# Reference: https://www.virustotal.com/gui/ip-address/162.55.9.240/relations
# Reference: https://www.virustotal.com/gui/file/440421aef5210bb1616a06e19fb6d101718ec37041fa230248fda03e930be5ab/detection

eblagh-adliran.cf
edalat.cf
edalat.ml
myrats.fun
myratsdomain.cf
myratsdomain.tk

# Reference: https://www.virustotal.com/gui/ip-address/172.67.152.80/relations

eblagh-adliran.ml
eblagh-adliran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1481729387485609984
# Reference: https://twitter.com/midnight_comms/status/1481756859681943561
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.152/relations
# Reference: https://www.virustotal.com/gui/file/82d8fdcc5d3249134c0605f00d1f8272642eed3590a30a3a906047fcf301f4e9/detection

eadl-eblagq.ga
ir-plc.ga

# Reference: https://www.virustotal.com/gui/file/b9478c1dc6ea951a6c13bf9e54ccee3a06fa84fa79ad4dd1d15690beac40abea/detection

cz-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/2e8aa1230aebf32c537c3aaa17ac9de639889fc3473fbd3f9b44c6c5e05fea8e/detection

filmsexyirmovie.tk
zrin-pal.tk

# Reference: https://www.virustotal.com/gui/file/5f5804a687951ea4b7e73ab6fd00e0ea9c4894ba407b9018c0d3c3ff6442b3a3/detection

shaaperak-ir.ga

# Reference: https://www.virustotal.com/gui/file/8c69c05dd80b478f5fc43ba05f3ad8ded8d65454b7a6a87f670e32f34f7ecfe2/detection

cew-shaparak-ir.gq
pew-shaparak-ir.gq

# Reference: https://twitter.com/malwrhunterteam/status/1481944239403634691
# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.66/relations
# Reference: https://www.virustotal.com/gui/file/9d8acbc2bfe9452e7db54c71369c7cfae04b61142fa7962238eb28d7aa97f217/detection

divarbuy.xyz
sxxx.bar
xnxnn.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1482466875065966594
# Reference: https://www.virustotal.com/gui/ip-address/142.44.160.158/relations
# Reference: https://www.virustotal.com/gui/file/736ac0bc2a85190869a24f0d56007c5b1be9f0820e5fc304f906aca5d0459780/detection
# Reference: https://www.virustotal.com/gui/file/62ae9a81c912b94c3ca8b65125e49efd028ebfd2feaa8f1422f7d9447c3f7040/detection

a-poshte.tk
admintak.tk
amirhsvip.ir
amp-ar.tk
armin-esmaeili.tk
eblagh-org.tk
eblogh-iran.tk
eblaghe-site.tk
kia000.tk
requd1.tk
requd4.tk
smartindiapanel.xyz
smartpanel.tk

# Reference: https://www.virustotal.com/gui/file/a913d26e095e02e52dce2dff9eafa042261df6a730ca747df23f75be7df3d80a/detection

bg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/d42355c02586b032393444e567ac1b2dbdf48b73c38dab6e8ec2f6b185cc14e0/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/178bfae17d66560490592a3e3ba6bd67ab05f976038e9049cb2364f58a48569a/detection

di-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/8ebc434ec9ed5703e893ee63150b2c3a6a5e811d069c1e19f603133936064966/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/919700180d08ece9c46a3a8531664e76d4539ccbac3b96d699ab0cab043ec396/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/0c187d980667b3b1642d13cf395ae4798f4c5461ded0fe624a7e08bdba66e1cf/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a03ecf5218a69d3c313532ae9ee84bf2520bc3262ff4c7cb19181f288ead8f15/detection

czvt.cf

# Reference: https://www.virustotal.com/gui/file/cfa0391d031ffec6f2a1b2808b789d42e2aace7d90a82bb2cafb7ab46f6be202/detection

shapkarak-ir.ga

# Reference: https://www.virustotal.com/gui/file/5d9a8cc9ca2890047700583da3fe8b1172286752f0444ad73682b2badad0547f/detection

bk-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/35c08897bee529714430ac094cb83695084963881e35022c8ddd4aebca14c136/detection

cy-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5179c1b24e5c7d3ede1a0aa6708df5f4fb8a1297fe1d4988a8fda432110bd83d/detection

dg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/de34355f891af505bfbb63b191f373d6e2b850823908e3ed86a0db971f450498/detection

sfro-pey.cf

# Reference: https://www.virustotal.com/gui/file/e3bce2aa78ae1b5849b6978abfb8d44f5539ef6bc1fdd09a0d1060ddf17b8ed8/detection

dj-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/19b94b57d6e2c20597c9e93fe464a0310f44542a668dd69dc33691eb24cf6183/detection

da-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5d0e7a6c1a02af94217b8552b712d2afecb69bfe7cc8203104b6fdfd65e8edc6/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/6b0809a196881a51a5d792ed91a1bb658f4af3698ac8d24d99cbcde78d780c28/detection

shasparak.cf

# Reference: https://www.virustotal.com/gui/file/473137809b0d1e05bb24d649d7ca9693b3af596fc6115b464c2e9b30ad9191df/detection

dv-shaparak.tk
dw-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/40b27eb992c0e2fd2ec66882a2d582296b803469ae20946ebd2939a005be8aaa/detection

shhaperak.cf

# Reference: https://www.virustotal.com/gui/file/5605ef33136d7248f895a0f4b83ba5b611392d86913ce07a001a0c4b8e53d8a5/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/1409a66522d146c6e7b7153598b946cf4e1cd92ac4f5419cace904f1dbd850fc/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a50b49a6f34473b7a18d3ceadbbf9070e4e6ac4f7fc4039d324f71db8a99d79d/detection

shhaparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/38352988ee4732257835b50201e9d6b14e88db7dd0ee78708b7cd2f9459f240e/detection

cx-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3a787c88f2a40c3749a33861a01190eb1d89b9f1f4b16f19f026532df2554385/detection

siant.site

# Reference: https://www.virustotal.com/gui/file/dcce573b59bbf91cd64a84b0d194880d9de072745121e5b73a75c56624bf8f13/detection

shaptarack.ga

# Reference: https://www.virustotal.com/gui/file/b00ce4b86e21740275db14aa8bd475ada3d84558dbedaba3312fbe212980b1b5/detection

shaaparalk.ga

# Reference: https://www.virustotal.com/gui/file/f9d8d5f9d609e641d3b8c5fed28001af986d9b766ebc1809f231a99a0550f046/detection

fp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5e2e6e10d2cd01b6d116c280f4256be6a5e21ec07c96d411bb8510aaa1fdba30/detection

irblaghi-ir.ga
nlsrv.xyz
arsam.nlsrv.xyz

# Reference: https://www.virustotal.com/gui/ip-address/94.130.122.187/relations
# Reference: https://www.virustotal.com/gui/file/7b130bde0c05edfa28761f3420016c7cf76c4c9af0e868e2e7d5681058f5b2e7/detection

cana-eblaghi.ml
divar-ad.tk
divar-new.tk
e-payne.gq
e-payne.ml
ir-covid19.tk
ir-ista200.cf
ir-ista200.tk
k-paynes.cf
k-paynes.ga
pom-shq.tk
royal-amlak.ir
sana-1400-ablag.tk
shaparak-pay-org.gq
shaparal.cf
sysbsgajwh.ml
divar-new.liizradvip.xyz
shaparal.domain-com.tk

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

eblagh-qhz.cf
sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.12/relations

firan-siteroi.ml
free-base-connection.tk
ggl-pamel.ml
iraninaijwe.tk
top-eblaghieiran.ml

# Reference: https://www.virustotal.com/gui/file/eb7fbfa9800c5f0e8ff21d66b5078aa944fda29d4f3ea7c27fd67085741dbba4/detection

free-base-connection.tk

# Reference: https://twitter.com/malwrhunterteam/status/1483188960910319616
# Reference: https://twitter.com/midnight_comms/status/1483513891745419270
# Reference: https://www.virustotal.com/gui/file/3870c14cfa20a750ef3bc66fccf52c190603917d0956f833f96af99cfec3b020/detection

adl-sana-w.tk

# Reference: https://www.virustotal.com/gui/file/bca218c8d6ecdb9d6014284384518efafe16df22afaa760bbfc467447eeb27be/detection

sena-peigri-ir.cf

# Reference: https://www.virustotal.com/gui/file/d3bbe121638fa2460b24a96dbfabaa69c5b98a81c2171c835301e20e22e796cd/detection

samaneh8.com

# Reference: https://www.virustotal.com/gui/file/4ed80b06744e69d00017cf3dd616b1d2f223ba1ef463e672546477318afcd93a/detection

peygirl-sna.cf

# Reference: https://www.virustotal.com/gui/file/d76644c48b65751dfc212b2aa3e834a07944dc0a961f3f6e09dd683f63552838/detection

lreadl.site

# Reference: https://twitter.com/malwrhunterteam/status/1483919535661101061
# Reference: https://twitter.com/midnight_comms/status/1484201646863310851
# Reference: https://www.virustotal.com/gui/file/2d45fd78e6e4ab488b4280e1f8536474c6084fa9e315254e94a437d1a07202a0/detection

ceblaghxi-sanki.xyz
sna-elc.com
sna-elc.online
/ahmagh/install.php
/ahmagh/up.php
/ahmagh/ups.php

# Reference: https://www.virustotal.com/gui/file/b4acd7267da3506e139d7d349e65bbf0c0cc2d2e892e481a88f911608da7f113/detection

drgusk.tk
ir-reti.ml
api.ir-reti.ml

# Reference: https://www.virustotal.com/gui/ip-address/195.20.55.174/relations
# Reference: https://www.virustotal.com/gui/ip-address/198.12.86.54/relations
# Reference: https://www.virustotal.com/gui/file/d85376ceff770d5a23c8b08f62d3b825d040b707eadc6a11377c7c6ea0174722/detection
# Reference: https://www.virustotal.com/gui/file/aec23695695495353161a97c02770d5e9f3537df7cfc54e827537f0683349eb0/detection

irn-shaparak-ir.tk
pardakht-eblagh.tk
qaqaqa0123.cf
rep-shaparak-ir.cf
shaparakpayer.cf
shotrak.ml
vabera000.ml

# Reference: https://www.virustotal.com/gui/file/d7f331476a69a8ea74d405048b2bbe7500a76f14521c96b85e9a10fde064cb2d/detection

powker.myfr.xyz

# Reference: https://www.virustotal.com/gui/file/c326cef84e4a388639f315097fae2f21533e211fba6b1afd04cec2f6ddea9222/detection

vafersa58t.cf

# Reference: https://www.virustotal.com/gui/file/5c30199bdcaf529ea389b75562b3a89a564cc80f5641481fb61b2640d4ed2900/detection

gaaaa48fw.ga

# Reference: https://www.virustotal.com/gui/file/5095571bb6bfeaab5e5d819628d1e5f70ada7b732a87195973fb41158994c780/detection

gaa558ww.tk

# Reference: https://www.virustotal.com/gui/file/da7874d18b97893b97e870799659cf7b6ee0e29782af5c43b163e72fb3398f44/detection

ir-kosarbank.cf

# Reference: https://www.virustotal.com/gui/file/f85cfec57ee75ddfa3126f9366e95ad362989d7b869871c73bce9fad62261234/detection

ir-kosarbank.ml

# Reference: https://www.virustotal.com/gui/file/3ec09fa71f9abc12e42a5b1a6e266694e46643ac4d05d255946b2c2c131c885f/detection

fh8hwd8fa.cf

# Reference: https://www.virustotal.com/gui/file/712a66a36e7438923100128bcebab18125c591055c44bd4f3552311bc5a2f63e/detection

szm-shaparak.ml

# Reference: https://www.virustotal.com/gui/file/a57d3a3cb8ea31ea48675538613301eca8a3c49ab972426a0c6e50bd5e9e3d35/detection

ah-shaparak.cf

# Reference: https://www.virustotal.com/gui/file/ec65535740ba0f83eee88ff5f7a0dbeb875369949a42ea864cda79489f30cda9/detection

bpm-ir.ml

# Reference: https://www.virustotal.com/gui/file/4a8e4f52776de56a59f51d1531d952189631f5ae183c9de61531d4f0164d12da/detection

saeena-eblghiy-ir.ml

# Reference: https://www.virustotal.com/gui/file/38cfb100b68f63bbaf6e0c1c9976308b272e6101f29dacc35f3d6789b284d499/detection

pqm-shaparak-portal.ml

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.40/relations

account-tamin-ejtemai-ir.tk
adiley-iran.ml
al-saparak.cf
al-saparak.gq
application-eblagh.tk
asanprdaket1400.ml
asu-shaparak.ga
bmp-paya.cf
bmp-paya.ga
bmp-paya.ml
bot-learn.ir
eblagh-iranian.ga
epzy-shaparak.cf
epzy-shaparak.tk
fa-sana.ml
free-ir.tk
ir-asanpay.tk
ir-bmp-sepah.ml
ir-mellat.ga
ir-pardakht.tk
iranapps.ml
ireblaghie.ga
mellatbnk.ml
mtniirancell.ml
pgm-iranpardakht.ml
portal-adsl.tk
postbank.cf
postbank.ga
pqm-portal-shaparak.ml
pqm-shaprak.ga
sana-fa.ml
shaparak-mi-ir.cf
shaparak-rtg.tk
shaparak-services.tk
szm-shaparak.tk

# Reference: https://www.virustotal.com/gui/ip-address/198.12.85.88/relations

2030s.gq
30ia-pay.ml
ad-ir.ga
addliiran.tk
adiley-iran.ml
adiley-iran1.ml
adili.ga
adleey-ir.ml
adleey-lr.gq
adley-ir.ga
adleye-ir.ga
adleye.gq
adleye.ml
adli.ga
adliey-iran.ml
adlir-sna.ml
adliran-eblagh.ml
adlirsana-ir.tk
adlye.cf
aeeeeershaparak.tk
ahblagnew.tk
airdrop-trustwaleet.tk
americanussa.tk
apk-ebl.tk
apk-eblagh.tk
apk-pardakht.tk
asanprdaket1400.ml
bedi24.gq
best-price.ml
boofanoo-crm.tech
bpi-shahparek.tk
bullertakpar-com.ga
bullertakpar-com.ml
crm-sarema.tk
da-ga-h.tk
dad-g-a-h.ga
dad-gaa-h.tk
dad-gaa-hi.ga
dad-ir.ga
dad-saana.tk
dadd-yar.tk
daddgahi.ga
daddgahi.tk
dadga-sasna.tk
dadgaaahi.tk
dadgaahh.tk
dadgah.tk
dadsare.tk
divara.xyz
djejjdjdjs.gq
drgpec.tk
duodigital.ml
duodigital.tk
ebblagi2.ml
ebblagi4.ml
ebbllaq-sana-ir.ga
ebiaghe-snai.tk
ebl-ag1-ir.tk
ebl-eblaghey-ir.tk
ebl-ir.ml
ebl-ir.tk
eblag-adliran-ir.ga
eblag-adliran-lr.cf
eblag-adliran-lr.ga
eblag-adliran-lr.ml
eblag-adliran-lr.tk
eblageh-iran.tk
eblagh-adlir.cf
eblagh-adlir.tk
eblagh-iran.ga
eblagh-iran.gq
eblagh-iran.tk
eblagh-irani.cf
eblagh-irani.ga
eblagh-irani.ml
eblagh-irani.tk
eblagh-panel.cf
eblagh-panel.ml
eblagh-panel.tk
eblagh-s.ga
eblagh-s.ml
eblagh-s.tk
eblagh-sana-iran.gq
eblagh-sana-iran.ml
eblagh-sana-iran.tk
eblaghe-snai.tk
eblagheye.tk
eblaghi-sana.ml
eblaghir-sana.tk
eblaghq-ir.tk
eblaghs.tk
eblaghsana-ir.ml
eblaghsana-ir.tk
eblaghye-adliran.tk
eblaghye.gq
eblagie-sana-iranin.ga
eblaq-ada.ga
eblaq11.ga
eblaq12.ga
eblaq19.ga
eblaq856.ga
eblaqie-19-ir.ga
eblaqq-19.ga
eblaqqye.ga
eblghfa.ga
ebllage-iran.ga
ebllaq-ad.ga
ebllaqi-ir.ga
ebllaqsheeka-ir.tk
ebllaqwo.ga
eblogh-sans.cf
eblogh-sans.ga
ebloghs-ir.tk
eblogi1.tk
ee-melat-pay.cf
eghbaghi.ml
eiblag-ir.tk
eiblogh-sana.tk
elaq-ir.ga
elbaghsnas.tk
geeyyabii.tk
hamjens.tk
hostmmll.tk
iablaghs-san.tk
iamgay.gq
ieblaghi-ir.tk
iebloghs.tk
ir-dad-ir.ga
ir-eblgh.tk
ir-ieblagh.tk
ir-pardaket.ml
iran-addl-ir.ga
iran-adli-ir.ga
iran-dad-ga.tk
iran-dadga-ir.ga
iran-ebblaq.ga
iran-ebbllaq.ga
iran-eblage.ga
iran-eblagh-f.cf
iran-eblagh-f.ga
iran-eblagh-f.ml
iran-eblagh-f.tk
iran-eblaq-ir.ga
iran-eblaqi.ga
iran-ebllaq.ga
iran-jorm-ir.ga
iran-saana-ir.ga
iranad.ga
iranadilatil.ga
iranadldi.tk
iranadliera.ga
iranadlile-ir.ga
iraneblaq19.ga
iranirsana-ir.ga
iransana-ir.ga
iransanair-ir.ga
iransanat.tk
iranshekaya.tk
iranshekyaat.ga
iranwebir.ga
ireblaghie.cf
ireblaghie.ml
irsanairan-ir.ga
jorm-ir-ga.ga
kos-nne-fata.gq
livesxs-ir.ml
malletttrg.ml
malllet-llk.cf
melat-pay.tk
nazeem-vscode.ml
nazeem-vscode.tk
pardakht-eblaghey-ir.tk
paresh.gq
pay-eblagh-ir.tk
pay-eblaghey-ir.tk
pay-red.tk
pay-sjkrkrak.tk
pay-sjpkowak.tk
pay-sjpkrak.tk
pay2-ebyl.tk
payelza.ml
pep-shprak-ir.tk
pes-eblagh-ir.tk
pes-eblaghey-ir.tk
pes-shaparack.tk
pes-shiparek.tk
pey-shahparacki.gq
peygiri-adress.xyz
peygiri-eblagh.tk
peyman-ir.ga
qwi-shahparek-ir.gq
qwi-shahparek-ir.ml
qwi-shahparek-ir.tk
qwqwqwqwe5yuuiiu.ml
rubika-freenet.tk
saaana-dadga.tk
sad-behpardakht.ga
sad-behpardakht.ml
sad-behpardakht.tk
sad-shaparak.cf
samannesaana.tk
sana-airdroni.ga
sana-airdroni.ml
sana-alirdran.cf
sana-alirdran.tk
sana-alirdran.xyz
sana-c.tk
sana-eblaq-ir.ga
sana-i.tk
sana-ie.cf
sana-ieblagh.tk
sana-iranv.cf
sana-irn.tk
sana-irran-ir.ga
sana-n.cf
sanaeblagh-ir.tk
sanair-ir.ml
sanairana-ir.ga
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
sep-divar.tk
sep-eblagh-ir.tk
sep-ebyl.tk
sep-shekayat.tk
sep1-ebyli.tk
shapaark.tk
shaparak-pw.tk
shapark-tg.tk
shaprrk-zri.ml
sheekayyatt.tk
sheekkayyatt.tk
shekaayyaat.tk
shirazey.cf
shirazeyhost.tk
shpk-sanair.cf
shpk-sanair.ga
shpk-sanair.gq
shpk-sanair.tk
sigeh.tk
sjjwudidisieis.tk
sna-adl.cf
sna-eblaq.ml
soft-ezy.tk
sop-shekayat.tk
syy-pay.gq
trust-walettt.tk
trust.pay-red.tk
trustwallet-price.ml
trustweliat.ml
trustweliat.tk
utctm.tk
utyagram.ga
utyagram.ml
zir-pay.cf

# Reference: https://www.virustotal.com/gui/file/6556d68b85d691132db832318389431d46cc3fe3434c4fb438d2e8dd5beefda0/detection

robatsazking.pikohost.ir

# Reference: https://www.virustotal.com/gui/file/f5e2d1dab18a333aad29646337743fb5f039733993f08224cb1084e6ff205dea/detection

shaparak-internet-bank.cf

# Reference: https://www.virustotal.com/gui/file/d12cb0187e09ef35fc6f2acd5904c9ea4a6a2376d72408b0230cf71b042426b7/detection

meli-ir.xyz

# Reference: https://www.virustotal.com/gui/file/55ff02dd1388ccc6b471cf645a5cafef31c02b34316714e3e8ac34babc638abc/detection

yoindomin-irs.ga

# Reference: https://www.virustotal.com/gui/file/2fd928d640c4bf36fffc94ea7eca8de3a2a93ec074883a474409b49bb64a294d/detection

yoindomin-irs.gq

# Reference: https://www.virustotal.com/gui/ip-address/157.90.16.114/relations

ad-shparake-ir.cf
bci-shaparak.ml
bci-shaparak.tk
behpardakh-ir.ga
bmp-divvar.tk
dikak.ir
eblagh-electronic.tk
followerirani.tk
ir-mile.ml
iran-meiatt.cf
iran-meiatt.ga
iran-meiatt.gq
irmeli-shaparak-ir.tk
meiat-shaparak.ga
mellat-in.xyz
memberirani.tk
milat-ir-iran.tk
pardakht-bank-ir.tk
prdakht-melat-ir.tk
pyiran-shaparak.tk
sahparak-meliat.tk
shahparek-ir.ml
shailrk-lir.ml
shalioprk-ir.tk
shaliparik-ir.tk
shaolpark-bqm-milir.ml
shaparak-1nternet.ga
shaparak-1nternet.ml
shaparak-bamk-iran.ml
shaparak-bamk-iran.tk
shaparak-bmc.ga
shaparak-bmc.gq
shaparak-internet-bank.ga
shaparak-internet-bank.ml
shaparak-ir-ir.tk
shaparak-n.cf
shaparak-n.gq
shaparak-n.ml
shaparak-n.tk
shaparak-script.ga
shaparak-script.ml
shaparlik-irani.gq
shaprrak-melati-ir.ml
x-number.tk
x-shapwal.ga
yoindomin-irs.cf
yoindomin-irs.ml

# Reference: https://www.virustotal.com/gui/ip-address/88.218.17.127/relations

abl-edalat.cf
abl-edalet.cf
ablagh.site
abpa.pw
ah-shaparak.gq
al-saparak.cf
alinaghdi.ir
app-xron.gq
app-xron.tk
bot-iran051.ga
bottesthazratphp.tk
buyfrosgah.ml
cena-edalat.ml
cena-edalet.ml
cena-iran.ml
cena-iren.ml
cs-shaparak.cf
digital-ir.ml
dsdddgh.tk
eblaghe-sana-1.tk
edalat-iran-ir.ml
edalat-iran.ml
edalat-iren-ir.ml
edalat-iren.ml
edalat-saham-ir.tk
edalet-abl.ml
edalet-sena-ir.ml
edlp-d.cf
edlp-d.gq
edlp-ir.gq
edlp-ir.tk
edolat-cana-ir.tk
edolat-sena-ir.ml
edolet-sena-ir.ml
edolet-sena.tk
eghlnir.com
emcchanged.xyz
eqghbl.com
eqghlit.com
haf-kolez.ml
internet-digital.gq
internet-digital.ml
internet-digital.tk
ir-edalat-iran.ml
ir-edolat-sena.tk
ir-edolet-sena.tk
ir-iran-sena.cf
ir-iron--sena.tk
ir-iron-paigri.tk
ir-iron-paygri.cf
ir-iron-sena.tk
ir-sena-iran.cf
ir-sena-iron.tk
iran-sena-ir.ml
iren-edalat.ml
iren-sena-ir.ml
iron-paigri.ml
iron-paygri-irr.ml
iron-paygri.tk
iron-peygri-ir.cf
iron-sena-ir.tk
iron-sena.tk
iron-web-ir.cf
keshvwar.pw
makhbaz.tk
modern-digital.ir
peigisp1jqh.pw
pena7n.pw
peygirie-sna.tk
peygirshi.pw
sana-eblaghe-1400.ga
sanartir.com
sena-iren-ir.ml
sena-iron-ir.cf
sena-iron.ml
shaparak-ev.tk
shprk-iran-ir.ml
sighe-yabii.ml
taaaawe5555.ga
tajjcrete.ir
telegramself.ml
www-dadgah-ir.ml
www-dadgah.ml
www-iran.ml
www-iren.ml
www-iron-ir.ml
www-peygri-ir.ml
www-sana.ml
www-sena.ml
ze-ejrraftanet.pw

# Reference: https://www.virustotal.com/gui/file/2d9945db53c96fc8acfb19dcc51acc1945f968a53927c7af2176aef447b3fae1/detection

bizim-kala.ir

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.223/relations
# Reference: https://www.virustotal.com/gui/file/1367d326a07392e4068b5c27cf9528af8141e0f589876484209a8d065ad69db4/detection

0--0.gq
0--0.ml
1--1.ga
adele-gov.ml
adiiran.tk
adl-eblagh-onlinir.tk
adl-eblaghe.online
adl-eblaghsana.com
adl-irane.ml
adl-online.tk
adl-pygiri.ml
adl2eblagh.com
adle-irane.cf
adle-irane.ga
adle-irane.gq
adle-irane.ml
adle-irane.tk
adlebir.ml
adleiran-gov.cf
adleiran-gov.ga
adliran-sena.tk
adliran-sna.cf
adliran2-eblagh.com
adliran2-eblaghi.com
adlirane.cf
adlirane.com
adlirane.ga
adlirane.gq
adlirane.tk
adliranmane.ml
adlirann.com
adll-irani.cf
adll-lran-ir.ga
adllebir.ml
adlliren-sana.ga
adlliren-sana.gq
adlliren-sana.tk
adlliron-sana.cf
adlliron-sana.ga
adlliron-sana.gq
adllran-eblagh.tk
adlsite.ml
aedl-iran.tk
agahi-eblagh.com
ajfgfesyefg.gq
api-res.cf
apr-irn.tk
barghmb.ga
bemolallremte.tk
benzin-sahmie.ml
byjmogk.ml
dadgostar-ir.ga
dadgostar-ir.gq
dadgostar-ir.ml
dadgostar-ir.tk
dadgostar.cf
dadgostar.ga
dadgostar.gq
dadgostar.ml
dadgostar.tk
dadgostari.ga
dadgosteei.ml
dadsra-meli.cf
dadsra.tk
dbu-irn.ml
dby-irn.tk
ddgostare-tk.tk
ddgstari.tk
ddgstri.cf
divar-downloed.ga
divar-downloed.ml
divar-downloed.tk
dostiyab8w.cf
dowload-irsna.tk
downlodsana-ir.ml
downlodsn-ir.tk
downlodsna-ir.cf
downlodsna-ir.ga
downlodsna-ir.gq
downlodsna-ir.ml
downlodsna-ir.tk
dowsn-ir.ga
e-pioygir.ml
e-samaneh.xyz
eadl.online
ebl-iranian-ir.cf
ebl-irenian-ir.tk
ebl-irenien-ir.cf
ebl-ironian-ir.ml
eblaagh-sna.ml
eblagaqaz.cf
eblage-cenaea.ga
eblage-cenaea.ml
eblagh-adii.ml
eblagh-adl.online
eblagh-adle.gq
eblagh-adle.tk
eblagh-agahi.com
eblagh-eir.ml
eblagh-fq.ml
eblagh-fq.tk
eblagh-ghzae.ml
eblagh-in.cf
eblagh-in.ga
eblagh-in.gq
eblagh-in.ml
eblagh-in.tk
eblagh-login.com
eblagh-mir.ml
eblagh-mm.tk
eblagh-mtf.cf
eblagh-new.gq
eblagh-oiri.ml
eblagh-pygiri.cf
eblagh-pygiri.ga
eblagh-pygiri.ml
eblagh-pygiri.tk
eblagh-shaparak.tk
eblagh-view.com
eblagh-w.ml
eblagh-web.info
eblagh-wk.cf
eblagh-wk.ga
eblagh-wk.gq
eblagh-wk.ml
eblagh-wk.tk
eblagh110police.tk
eblagh2-adliran.com
eblaghc.cf
eblaghe-kk.tk
eblaghe-snair.gq
eblaghe.com
eblagheh.cf
eblaghge-dolat.ga
eblaghh.cf
eblaghi-irm.ml
eblaghi-irmli.ml
eblaghi-irt.ml
eblaghi-iry.ml
eblaghi-m.ml
eblaghir-ir.ml
eblaghiy-sana.cf
eblaghom.cf
eblaghy.cf
eblaghy.ga
eblaghye.ml
eblaghyeh-s.cf
eblaghyehmeli.cf
eblaghyen.ga
eblagpqw.cf
eblap-aldea.ga
eblap-aldea.ml
eblape-fete.tk
eblape-sane.tk
eblaphe-cene.tk
eblaqe-eadell.ga
eblaqe-eadell.gq
eblaqhadliran.com
eblaqie-sna.tk
ebleghi-ir.cf
ebleghi-ir.ga
ebleghi-ir.tk
eblgh-adl.cf
eblgh-adl.ml
eblgh-adl.tk
eblgh-dadsra.ml
eblgh-hmrah.cf
eblgh-hmrah.ga
eblgh-new.cf
eblgh-new.gq
eblgh-new.tk
eblghie.ml
eblgie-sna.ga
eblgie-sna.gq
eblgie-sna.ml
ebligu.ml
ebllagh-ml.tk
ebllagh-paygiri.gq
ebllagh-sna.online
ebllagh-sna.tk
ebllape-fete.tk
ebllapea-fefe.tk
ebllgh-sana.tk
edalat-eblaghi.com
edalat-hamarah.com
edalat-hamrahdl.tk
edalat-iri.tk
edalat1-eblagh.com
edalat2-eblagh.com
edalathamrah.cf
edalathamrah.click
edalathamrahe.cf
edalathamrahe.gq
edalet-hamrah.tk
edallate-hamrrah.gq
edallathmrah.cf
edallathmrah.ga
edallathmrah.tk
edalthamrah.tk
edl-iiiran.ml
edl-iran.tk
edlathamrahe.gq
elbaghe.ml
enterone.site
eol1-eblaghe.ga
erin-blilq.ml
fata-eblaghe.tk
fata-eblaghie.tk
fata-eblaghj.tk
fata-eblagie.ml
fata-eblagie.tk
fata-eblghe.ga
fata-eblghe.tk
fata-ebllagh.tk
fata-ebllaghi.tk
fata-eblogh.tk
fete-eblapea.tk
fetea-cenw.tk
gaz-gz.ml
ghvye-ddsra.ml
giftirancellapp.cf
hafezom.ml
hafezxexop.ml
hamta-mobile.gq
hamyar-meli.cf
iampedaret.cf
idal-eblagh.ml
idal-eblagh.tk
ir-ebl-iranian.cf
ir-eblaghi.ga
ir-eblaghi.gq
ir-eblaghi.ml
ir-samane.xyz
iran-edalat.cf
iran-edalat.gq
iran-edalat.ml
iran-edalat.tk
iran-irsana.ml
iran-samane.tk
iran-sanaeblagh.cf
iran-sanna.ga
iran-sanna.gq
iran-sanna.ml
iran-sanna.tk
ireblaq-sanal.cf
irn-irbilq.cf
irsana-eblagh.ga
iyegfhkjd.ml
kirkhartokosnanat.cf
kurdnameserver.tk
link-eblagh.ml
maykat.ir
nameserver.cf
norton-movingostar.cf
norton-movingostar.ga
norton-movingostar.ml
norton-movingostar.tk
ok-eblagh.tk
pancakes.cf
qouvve-qazaiie.tk
qouvve-qazayie.tk
qouvve-qazayye.tk
qovve-qazayye.ml
quvve-qazaiie.cf
quvve-qazayie.cf
quvve-qazayye.cf
rahgirisana-gov.ml
remtoe-zeuse.tk
rioblaqh-ien.cf
roboxz.ga
rubika-fil.ga
samanee-sana.ml
samaneh.site
sana-adl.cf
sana-ald.ga
sana-eblaghiyeeee.tk
sana-ebli.ml
sana-ebllgh.cf
sana-gostar.ml
sana-gostar.tk
sana-iranian.site
sana-troy.cf
sana-troy.ga
sana-troy.ml
sana-troy.tk
sana1-app.com
sana1-edalat.com
sanaa-ej.ml
sanaa-ej.tk
sanaa-wk.gq
sanaa-wk.ml
sanaa-wk.tk
sanaeblaghlyir.ml
sanaireblagh.tk
sanna-mellatt.tk
semaneadl-gov.cf
semene-eblape.tk
sena-adl.tk
sena-ald.tk
sena-ir-iron.ml
sena-ireniai.ml
sena-site-ir.ml
senai-wab.ml
senai-web.ml
setting-api-trust.ml
shapaarack-ir.ga
shaparako.tk
shaqarack-pay.ml
sheaparakf.tk
shekayat-iran.tk
si-gh-e.tk
sld-ebllaghie.ml
slo-edliran.ml
smnlq.ga
snaeblaghir.tk
snair-eblagh.ml
snair-eblagh.tk
snowyka.tk
snowyna.tk
sqdir.ga
ssana-ebllaghe.ml
svt-irn.tk
t-wallet-airdrob.ml
t-wallet-apa.ml
tk0r-ebllaghe.ml
tog-eblloghe.ml
trust-gift-airdrob.ml
trust-org.ml
twalletbonus.tk
uo-rahgir.ml
vhy-irn.tk
wallet-api-docks.ga
web-sana-ir.ml
www-adliran-ir.cf
www-eblagh-ir.ml
www-sana-ir.ml
www-sena-ir.ml

# Reference: https://twitter.com/malwrhunterteam/status/1487049183207075842
# Reference: https://www.virustotal.com/gui/ip-address/208.91.104.146/relations
# Reference: https://www.virustotal.com/gui/file/71eff95073a5fcd5f270f4aaba72d90460304bdb71fd4d32844bf38ea6b4a11d/detection
# Reference: https://www.virustotal.com/gui/file/70f6af40cd8e90e4d5d5339d03e35b9067d5840131fe6c98b945861c65d771c4/detection

aadl-iran.cf
aadl-iran.ml
aadl-iran.tk
aadll-iran.ml
abdullah.cf
abdullah.gq
ablag-u.cf
ablag-u.ml
adi-sfir.ml
adii-iran.ga
adii-iran.tk
adil-cen.email
adil-irqm.tk
adilait.ga
adilapp.digital
adilisnm.ml
adilr-com.cf
adilr-com.email
adilr-sn.cf
adir-sana.email
adir-wb.email
adl-link.cf
adl-pay-1400.ml
adli-tech.ml
adli-web.email
adlibln.email
adlir-fir.ga
adlir-web.email
adlira-sn.tk
adliran-dadagah.gq
adlirani-ir.cf
adlirn-sn.email
adlisana.ml
adlisnai.email
adsanae.ml
adsgiz.email
aedie.email
aedl-iran.ga
aedl-iran.gq
aeslde.email
ahmadi.tk
air-sna.email
airdrop-gp.ga
aktareh-sana.ml
all-edgar-cayce.com
app-peigiri.xyz
asaigwndbwh.cf
asdana.xyz
asdilcv.ml
asnal.email
asnal.ml
asnaval.email
asnel.email
asnl.email
asnli-sn.email
balqhsn.email
bem-shekayt-ir.tk
blagh-com.cf
bmi-edi.tk
bq-bmi.cf
bq-sn.ga
c0llab-land.link
check-edalat.ml
check-edalat.tk
d-payment.cf
dadsara-irin.tk
dail-qa.email
dhusiyebie.gq
dinvtuger.ml
divar--update.tk
divar-download.me
divar-downloed.cf
divar-downloed.ga
divar-downloed.ml
divar-downloed.tk
divar-login.cf
divar-login.ga
divar-login.gq
divar-login.ml
divar-login.tk
divar-online.ga
divar-open.cf
divar-open.ga
divar-open.gq
divar-open.ml
divar-open.tk
divar-pay-ir.gq
divar-uepdte.ga
divar-uepdte.ml
divar-uepdte.tk
divar-updatea.cf
divar-updatea.ga
divar-updatea.gq
divar-updatea.ml
divar-updatea.tk
divar-updaten.xyz
divar-updato.tk
divar-updeti.cf
divar-updeti.ga
divar.email
divarapp-download.cf
divarapp-download.ga
divarapp-download.gq
divarapp-download.ml
divarapp-download.tk
djvisicm.ml
dr-rem2.tk
drio-sn.ml
dum-irn.xyz
eadil-com.email
eblageh-1400.ml
eblageh-iran.ml
eblagh-efa.xyz
eblagh-mn.cf
eblagh-mtf.cf
eblagh-mtf.ga
eblagh-mtf.gq
eblagh-mtf.ml
eblagh-mtf.tk
eblagh-novin.xyz
eblagh-pro.xyz
eblagh-qhz.ml
eblagh-rina.gq
eblagh-rina.tk
eblagh-roy.cf
eblagh-roy.ga
eblagh-roy.gq
eblagh-roy.ml
eblagh-roy.tk
eblagh-saman.cf
eblagh-saman.ga
eblagh-saman.ml
eblagh-saman.tk
eblagh-sanairr.ga
eblagh-sna1.tk
eblagh.email
eblaghah.ml
eblaghre.ml
eblagi-u.ga
eblaqh-sn.email
eblaqhi.email
eblegh-ir.site
ebllaapea-sana.tk
ebllagh-sana.tk
eda-lat.cf
edallat-saham.tk
edallat.co
edialat.email
edie.email
edli-wb.email
eedl-iran.tk
eidalait.tk
eidalat-web.email
eidalat.email
eidalit.email
eidalt.email
erimblqhi.email
erinsn.digital
esnbalq.email
estkhdam-kar.ml
exn-dfil.ga
farasana.ml
fastssdserver.tk
fatae-eblaqyea.tk
fdio-ernm.tk
fdiom-dfim.tk
fvn-wer.tk
gerl-dfil.tk
gugjsyge.ml
hamta-ir.ml
hamtaa.ga
hejab.tk
iam-dialt.tk
iblqsni.email
idalat.email
idalliat.tk
im-ed.tk
im-eidlt.ml
im-erdalay.tk
install-ratking.ml
install-ratking.tk
ion-df.ga
ir-dalit.tk
ir-eblagh-sad.tk
ir-link.tk
ir-nm.ml
ir-saham.ml
ir-sana-hoviyat.cf
ir-sana.xyz
ir-shprak.xyz
ir-sn.cf
ir-xyz.tk
irbilohq.ga
irdailt.email
irdalat.ml
iren-sna.tk
irin-erml.tk
irldalat.tk
irn-duim.xyz
irn-dum.xyz
irsnl.digital
iry-ofd.ga
it-bnf.cf
it-bni.ga
jrc-kyoto2.org
kapark-ir.ga
live-sexsy.ml
ll-shapark.tk
login-sana.tk
logistical.monster
lsana.ml
mayket-ir-tk.tk
mig-ads.ga
modernie2020.tk
mrin-ibn.cf
newsion-oi.cf
nixselphtest.tk
ofogh-koorosh.tk
on-sana.xyz
otpdfkxc.tk
otpfamsdkf.ml
p4zserver.tk
panel-eblaghy.tk
panel-ratat.tk
panel-ratr.tk
panel-ratta.tk
pay-pamant.ga
pay-vn.tk
paygieiyy.tk
paygiriyughh.tk
paygiry-aief.tk
payment-sana.tk
pesareshoja.tk
pesarshoja.tk
peygiri-app-ir.tk
peygiri-eblagh-ir.tk
peygiri-org.online
peygiri-portal.ml
pigirii.site
pishgiri-app.me
poyasana.ml
pulsana.ml
qdj-irn.tk
qo-zi.ml
qsanae.ml
rdil-ir.email
rem-hugo.ml
rih-ern.tk
rikn-dsn.tk
ril-dri.tk
rimot-ml.ml
rimot-ml.tk
rterterg.ml
sabt-ahval.tk
sabtahval.tk
saham-edalat.tk
saham-ir.tk
saham-ir1.ml
saham-iran.ml
saham-iran.tk
saham-meli.ml
saham-meli.tk
saham.email
sahami.email
sahamir.ml
salamt-beh1.ml
sana-adilm.tk
sana-adl.me
sana-adlya.tk
sana-com.tk
sana-fax.xyz
sana-fgo.cf
sana-fgo.ga
sana-fgo.ml
sana-fgo.tk
sana-goev.me
sana-gostar.cf
sana-gostar.ga
sana-gostar.ml
sana-gostar.tk
sana-gozar.xyz
sana-ir.ga
sana-login.me
sana-nom.cf
sana-nom.ga
sana-nom.gq
sana-nom.ml
sana-nom.tk
sana-panal.tk
sana-peigir.me
sana-piget.tk
sana-pishga.tk
sana-prot.cf
sana-prot.ga
sana-prot.gq
sana-prot.ml
sana-prot.tk
sana-prot.xyz
sana-save.ga
sana-server.xyz
sana-tor.ga
sana-uni.ga
sana-uni.tk
sanaeae.ml
sanaf.ml
sanagov.ml
sanaia.ml
sanairan.email
sanako.ml
sanaoa.ml
sanata.ml
sanaua.ml
sanaus.ml
sehge.ml
self-rez1.ml
sena-on.email
shagarak-ir.tk
shami.ml
sianat.tk
sianatnet.tk
sianl.ml
sighe-federal.tk
sighe-online.tk
sighei.cf
sigheyabir.ml
sihamim.cf
sihge.cf
sihgeir.tk
simcart.ga
sinsona.tk
sn-ed.ml
snal.tk
snaleblq.digital
sndir.email
spicyod.tk
teck-web.ml
trustsetting.tk
vtp-uio.cf
web-edalat.email
web-idalat.email
web-sn.ml
wer-asnl.email
wrbir.ml
xzc-vbn.tk
yadalat.tk
yiu-zil.ml
zcm-rim.cf
zzzvncodest.tk

# Reference: https://www.virustotal.com/gui/file/7e2ba298f06277c8a94d9c456e33ae41fc005d520884fec018a7bf29f781cc40/detection

rat-1223.xyz

# Reference: https://www.virustotal.com/gui/ip-address/46.4.197.237/relations
# Reference: https://www.virustotal.com/gui/file/9e18ff6b88adabadaff6103a9baf0e025d35f27f5c6b8b4a47b6dada40fd5b80/detection
# Reference: https://www.virustotal.com/gui/file/9e18ff6b88adabadaff6103a9baf0e025d35f27f5c6b8b4a47b6dada40fd5b80/detection

kutahyaisgood.xyz
mytestprojects.xyz

# Reference: https://www.virustotal.com/gui/file/d096a6e8e530b31167d985d044e05b1a79d194475e7f88b63868648af8545d68/detection

rk-shaprak.ga

# Reference: https://www.virustotal.com/gui/file/4f42c41b45f462a3ce8f2397bdce8f3e24972fd62dfec539190e2a8430d494f8/detection

dem-pwer.tk

# Reference: https://www.virustotal.com/gui/ip-address/46.4.197.237/relations

araghijat-kashan.ir
dgr-shaprqk.ga
divar-shaprakc.tk
eblagh-internet-ir.tk
forosh-kala.tk
frs-shapark.ga
gay-yabi-iran.cf
hotan-payment.xyz
internet-98.xyz
ir-madarebakhtak.tk
ir-saman.tk
ir-shalpoal.tk
ir-shalpolak.tk
iran-rf.com
lcn-shaprak.tk
m-akhgargodaz.ir
mellat-segkbx.ml
mellatnet-ir.ml
pey-park.cf
pirmensuy.tk
posti1.xyz
saberghadimi.ir
sahaparak.tk
sana-lran-com.tk
sem-parsan.tk
shap-pewt.tk
shatel.xyz
shhaparkii.ga
shomal-cityeert.tk
shomal-papiount.tk
tejarabnk.xyz
up-kiteseen.xyz
upkit.xyz

# Reference: https://www.virustotal.com/gui/file/1dd5b90d208a476bf7fbc0f4e9429088dd0f663487657354dbb9288c1215f208/detection
# Reference: https://www.virustotal.com/gui/file/4deab5a6b65c6359809259d1764e3a7443b9f0f4161af77448e850467921cc20/detection

sh-k-rem.tk

# Reference: https://www.virustotal.com/gui/file/b59bcb7588a51557cf48b20734afa2531b756399853e5b34420992e51bbf7556/detection
# Reference: https://www.virustotal.com/gui/file/9227a9615569eba65e2d86930a33a4b1de257459a25de064a6d2eb25be124ef7/detection

sesverffvar.co.vu
toxic-remote.xyz

# Reference: https://www.virustotal.com/gui/file/527bc6b3382e6c780822922d2bc36ae2cfc5a013df48432b056cbb2700bcb3f9/detection

hahadev.tk

# Reference: https://www.virustotal.com/gui/file/5aab1fc870638c506b2eb2cf4de042ab90d30530d3a856d9a14856128ca0d3bc/detection
# Reference: https://www.virustotal.com/gui/file/1b0bfd8fc03035f3ffb737461e41368b5bd8b81021b87e8016b5b304fdb0369f/detection

nipald.tech
qovve-qazaie.tk

# Reference: https://www.virustotal.com/gui/file/f37a685d6162125f6ab48f29b392841c7a1d385b723e7690053c7f5d3fbece9a/detection

teodor.click
trustwailette.tk

# Reference: https://www.virustotal.com/gui/file/e5d8929f07a55966e3bcd6e79603acefe65175895e902912ff525972a2629345/detection

eblaghye-iran.tk

# Reference: https://www.virustotal.com/gui/file/e5993a0cc0ec2a9cf0d51474d9621ce2d263cef87619c86f170dff316783ac38/detection

baccxaz.tk

# Reference: https://www.virustotal.com/gui/file/dd32bee8613974fe5b8b21af2b2e61852d158bfa6641ed5fd7f3c83cf43a036a/detection

thisiskia.tk

# Reference: https://www.virustotal.com/gui/file/d6cef1fd235750646f53aee70849bfb79c2bfb8271ca8488e807aa4c94044e48/detection

teodor.iromizban.ir

# Reference: https://www.virustotal.com/gui/file/d233685af1b13191219cd3e0425cf5af324e11ae90fcd932b569338389e48ac3/detection

ir-melibank.tk

# Reference: https://www.virustotal.com/gui/file/b6eb2c1a5d829e20119dc6f53bdb366f5e5cf873f696ff575951808a681d3e85/detection

dadgostari.link

# Reference: https://www.virustotal.com/gui/file/26774e1c32e13407cbac4fc2a53c7dcbd1e2ed0511ae14fc83cffc247b7fe9f0/detection

shasparak-ir.tk

# Reference: https://www.virustotal.com/gui/file/c9ac805ffedd739eb3556a80e1fd4a9978f230643da03e6a975f3f3d69a7421e/detection

sana-irplran.gq

# Reference: https://www.virustotal.com/gui/file/b9a8e4c3800ca0939c83cf508ba0fcea23623724d8361e356b422c7081304965/detection

adl-sana-peygiri.tk

# Reference: https://www.virustotal.com/gui/file/b3cf2924e55753f29860e30e9bf48783011dc75a83d01fd4c1164b099297d9e9/detection

dadsetani.online
portal.dadsetani.online

# Reference: https://www.virustotal.com/gui/file/9775d15769d12340899adee58f55e7c9d825e56e1930c39d0629c3fe568a8601/detection

anlghie.com

# Reference: https://www.virustotal.com/gui/file/85970d790096ec8023eab216342878bfc1b468e78ce99a25cb47f73d85c6bdd5/detection

pardakht.subnitro.xyz

# Reference: https://www.virustotal.com/gui/file/61c00faa048750696d34e2a786c604232de27a7513b03fa8265288b7a57ac33f/detection
# Reference: https://www.virustotal.com/gui/file/2eea4e883a6b7aa955ee1de815da157f769d04777ece24a4695f58b86dd1e8dd/detection

devamir.nlsrv.xyz
api.devamir.nlsrv.xyz
remote.devamir.nlsrv.xyz

# Reference: https://www.virustotal.com/gui/file/5f3990cf6f84473805d24f5d020b7ba3bb58861e0a15c2fdd872925b68909bfc/detection

adl-webeb.com
irandl.de

# Reference: https://www.virustotal.com/gui/file/395387f97126d0ccc16240d7ad1e21ef2121861a8953d73a87976f99c7e51836/detection

divarlenjan.ir

# Reference: https://www.virustotal.com/gui/ip-address/64.44.139.170/relations

adlliran.cf
dadgah.online
dadgoostari.site
dadgostari.site
dadsetani-online.gq
dadsetani.online
dadsetani.xyz
dadseteni-online.ml
eadliran.ml
eblghi-irp.ml
konkoor.online
sanairani.online
shekayat.online
shekayat.site
shekayat.space
teodor.host
adl.dadgostari.site
adliran.dadgostari.site
bot.nipald.tech
eblagh.dadgostari.site
peygiri.dadgostari.site
pigiri.dadsetani.online
rat.dadgostari.site
sana.dadgostari.site
test.dadgostari.site

# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

sana2v-ir.ml

# Reference: https://www.virustotal.com/gui/file/e45065a3368e68c58ead61832714c98672ef64d124763a45aaaec51c848a7dc5/detection

shapalack.gq

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.144/relations
# Reference: https://www.virustotal.com/gui/file/e85302bab5c106ce3fcd30fd527929c83b1a068240313bd21267934b6fc45c55/detection

adl-mi.xyz
adl-sana-1400.cf
adl-sana-ir.ga
adl-sana-pay.ml
aitdayidayifw.tk
dex-network.tk
dowapp-sna.tk
eblagh-hh-h.ml
eblagh-hh-h.tk
edailet.xyz
edallat-bi.tk
edallet.xyz
edllat.xyz
edllir.xyz
er-sn.ga
eri-mni.tk
fataeeblagh.tk
fr-in.ml
ir-dadgostari.gq
ir-dadgostari.ml
ir-qmi.ml
irn-qm.tk
jstfakykwcoyf.tk
kkl-irn.tk
live-sexsy.tk
orn-bmi.ga
police-adlsana.cf
qm-hi.cf
ratttt.ml
samanres.tk
sana-allrdronll.ml
siqe-yabi.ml
trust-api.ml
ucgcuugcugcuufuf.tk
www-peygiri-ir.ml
www-sanna.ml
ratroid.xyz

# Reference: https://www.virustotal.com/gui/ip-address/46.4.98.114/relations

30panel.ml
a-h-karimi.ir
amirh-rezaii.ir
api-rasatm.tk
dehkadeh-salamat.ir
epay-bank.ga
epay-bank.ml
epay-shaprak.ga
estelam-ir.ml
hadaf-host.ir
imen-shaparak.ml
imen-shaparak.tk
ir-melibank.tk
ir-sana.com
ir-sepahbank.tk
lr-sana.ml
mellat-sodt.cf
mellat-sodt.gq
mmd-alizade.tk
nme-top.tk
reza-hacker.tk
sajadfarshidi.ir
sana-gps.ir
sana-online.ga
saaaanaa.ir
sanagps.ir
sanaradyab.ir
sanat-polymer.ir
sep-bimarzx.tk
sep-mellat-pay.ml
service-majazi.tk
bot.nlsrv.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1495843293116215299
# Reference: https://www.virustotal.com/gui/file/82e60036bc67844e755e156af8073da9a85e2c456064655e785e97b8bf19e1d7/detection

dolat-sahm-ir.tk
sanaavir.ga
/rat-webpage

# Reference: https://www.virustotal.com/gui/file/8e27b8c5fbe82062b24041f5ca6fbcedee2ea7fddd5295faa12a5f817eefb3fb/detection

cefouccqw.tk
sanaweb-ir.gq

# Reference: https://www.virustotal.com/gui/file/304e3f2147cfb766cff07a2be24a806ed0e26775986ba76d29de1d082bdbc898/detection

sana-ewdliran.tk

# Reference: https://www.virustotal.com/gui/file/3023afb6e8c8eb8a70d5e103081d4bbb29562ac4b0c889cb7af7749726168b19/detection

sanaducir.ml

# Reference: https://www.virustotal.com/gui/ip-address/51.68.204.165/relations
# Reference: https://www.virustotal.com/gui/file/58e9a36836d627c01a833a617fc9a5eed81a8e0ed2b0d0d3677852ce9ca49c79/detection

eg-tk.tk
eblage-sn.tk
chat-web.tk
dadsetani-online.tk
eblage-sn.tk
ablagh-in.tk
ablaghie-samene.tk
black-scam.cf
siqeh-vip.tk
ablagh-on.cf
siqeh-vip.tk
claim389-xyz.ml

# Reference: https://twitter.com/malwrhunterteam/status/1501528659018063872
# Reference: https://www.virustotal.com/gui/file/28afc35f57f8efd59ded0d7e17239b46d1167a8e411b699374c611eea7308893/detection

semanehe.tel

# Refecerence: https://www.virustotal.com/gui/ip-address/64.44.139.142/relations

adl-irane.tk
adliran.in
ald-iren-sena.ga
dadgoostari.online
fata.adliran.in
fewrt-ater.tk
khalifa.host
norton-movingostar.ga
cyber.dadgoostari.online
server.khalifa.host

# Reference: https://www.virustotal.com/gui/ip-address/83.149.110.150/relations

apprimote.ml
mummy-remote.tk
remote-best.xyz
vip-toxic.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1448942274692386821
# Reference: https://twitter.com/malwrhunterteam/status/1450115138535710723
# Reference: https://twitter.com/malwrhunterteam/status/1450171823010861058

adlliran-ir.tk
du-shaparak.tk
my-divar.xyz
/kurddarv/
/ratsms.php

# Reference: https://twitter.com/malwrhunterteam/status/1460311901041213442
# Reference: https://www.virustotal.com/gui/file/662c25851648793ef276f6da53bd57e6375ec2f219b9d47a510c10b2ade9ac52/detection

bpm-shaparck.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1510268204567961611
# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.170/relations
# Reference: https://www.virustotal.com/gui/file/8f77d7e50fae594dd1d8925c98d775b2ce681a3a4336b85cd66d086803d1aa3c/detection

adiiran.cf
adiiran.ml
adilrni.digital
adliiran.email
adlilran.digital
adliraneb.digital
adliranpa.digital
adllran.digital
amoo-godret.ga
coinsolotions.tk
cointrust.tk
daad-sara.digital
dad-saraa.digital
dad-sarae.digital
dadd-sara.digital
daddsara.digital
dadgostary.digital
dadsara.email
ddadsara.digital
eblaghri.cf
eblaq-sna.tk
ed-adli.digital
edalat-hamrah.digital
edalat-saham.digital
edalat-sod.digital
edallat-hamrah.bike
edallat-hamrah.digital
edallat-hamrah.org
edallate-hamrah.bike
eddl-ir.digital
er-snmi.cf
erin-bql.tk
erinsn.digital
firm-ern.tk
gay-irani.tk
gmx8z.tk
goin-dr.cf
hack-pedart.tk
hamta-peygiri.digital
iranfaloweer.cf
iraniamil.digital
kardar-manzel.ml
kardarmanzel.ml
mm-peygiri.tk
nameserver0.tk
new-sas.ml
new-sas.tk
peygiri-ausy.tk
peygiri-hiir.tk
qoirnm.tk
ratzx0572.tk
remote-godrat.tk
samane-sana.digital
samane-sanam.tk
sana-mp.tk
sighei.cf
sinalei.digital
sirnad.digital
snataji.digital
trustsolution.tk
vop-shaparak.tk
xxx-com.ml
yaranedolati.online
iranfaloweer.sana-mp.tk
samane-sanam.sana-mp.tk

# Reference: https://www.virustotal.com/gui/file/58e9a36836d627c01a833a617fc9a5eed81a8e0ed2b0d0d3677852ce9ca49c79/detection
# Reference: https://www.virustotal.com/gui/file/4ea85b171c4c3f6d4ef8831860bb5f9a81f06be9394941ffd400b8bb14be42e4/detection

sianat-iran.ml

# Reference: https://twitter.com/malwrhunterteam/status/1514674246689206276
# Reference: https://www.virustotal.com/gui/ip-address/137.74.247.226/relations
# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.78/relations
# Reference: https://www.virustotal.com/gui/file/585a58a92e4cd71abbb7aedd297f263c934439f903759b00d546a9cc2d460ce1/detection
# Reference: https://www.virustotal.com/gui/file/986940169e3976b20541389128431c13198ff9898c0e5e4189702288fb53cb9b/detection
# Reference: https://www.virustotal.com/gui/file/502db17a210e226d4b2a842f1e51bfb8381b6b34e3f3743a4e1bb103b558b41b/detection
# Reference: https://www.virustotal.com/gui/file/88a7fb687bdf99aa5a6ac457b3a6f51c8a6bff3768e0dacc48ae725e51d7d770/detection
# Reference: https://www.virustotal.com/gui/file/73d97171058f68af8877fbafc06bcd24adc11b4917c382caf831ad76ba2e8825/detection
# Reference: https://www.virustotal.com/gui/file/3ecbabb1c5f89eb79e6fc29088b3da192011573b8c905ee7726729079882e97c/detection
# Reference: https://www.virustotal.com/gui/file/1941165af140ad4ffe5a009077c58e632b161b6324760db6722a116305b84257/detection
# Reference: https://www.virustotal.com/gui/file/d802fe9b0cc7144197d85bfea2d3df95accf76106fe1e8c4d3cbbd337fc090c4/detection

aamirb.tk
adliran-lr.digital
adlirani.uno
amqwpoho.cf
badgirl.ml
davidsexy.tk
deldadyar.tk
ebailgiesna.digital
ebalasghksna-lir.ml
ebalasghsna-lir.tk
ebalasglhksna-lir.ml
eblaghsna-ir.tk
eblfhsna-air.ml
eblfhsna-air.tk
edalsanair.tk
ireblgh-isai.tk
jesusdastan.tk
kardarmanzel.gq
khodrosellir.tk
kirkoloft.tk
lezatsara.tk
pancakeswap.ga
pay-peygiri-vv.gq
peygir.digital
samanese.digital
sanab.digital
sanairan.email
sani-spn.digital
sarapkishlm.ml
seksoloz.tk
seyedhastam.tk
shprkishi.ml
sigeirn.ml
siggeyab.ml
sighe-hooilo.tk
sighebazan.tk
sigheirn.tk
sigheyabiyar.tk
sigheyaran.ga
sigheyaran.ml
sigheyaran.tk
sinbelq.digital
singin-adela.ml
singin-adelan.ml
trustsolution.tk
walletrust.tk
wallettrust.ml

# Reference: https://twitter.com/malwrhunterteam/status/1516138822563942400
# Reference: https://www.virustotal.com/gui/file/0d5ce5d95ccc63171bf093846fc5cded61fa139ec46b537e41e61dff02d0214c/detection

classicbody.ir

# Reference: https://www.virustotal.com/gui/ip-address/148.251.66.48/relations
# Reference: https://www.virustotal.com/gui/file/1c18842c99ab0e13e3cef1055be8d1644263bd5057c979fc1f6c581271eb614a/detection

gahertp.ga

# Reference: https://www.virustotal.com/gui/file/577f8851e85fcf3801bef2595910fd5cde82dd01678d17a5692007a77743cd1c/detection

bb-shaperak.gq

# Reference: https://www.virustotal.com/gui/file/610f11051f26e24785907da5fcf5437e4f6ee7b26a7d30073dabd15774339033/detection

adlir.site
irlink.uno

# Reference: https://www.virustotal.com/gui/file/c4164474725bc57dbd6687491555e50ffec6fd850dd458af8d7455ddf1944b54/detection

sana-ireblagh.ml

# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.183/relations

airdorop-terkk.ml
eadl-iran.ml
eb-snn-ir.xyz
edilte-lr.today
plc-melli-sana.tk
samane-lr.digital
samaneh.digital
samanehi.today
sanaa-adliran-ir.tk
sharparak.cf
sharparak.ml
sharparak.site
v-eblaghe.ml

# Reference: https://www.virustotal.com/gui/ip-address/116.202.132.155/relations
# Reference: https://www.virustotal.com/gui/ip-address/185.224.129.204/relations

ablag.cf
ali-hm.tk
edlir.ga
poye-set.tk
sana-sork.ga
sana-sork.tk
sato-valahir.tk
shiila.tk
sigheh-iran.ml
sina-bot.tk

# Reference: https://www.virustotal.com/gui/file/391ae849d06813632cf071de3ce061583a2d57e8ed2b49687c895077c064e85c/detection

bqm-im.ml

# Reference: https://www.virustotal.com/gui/file/c41613463e4a30720b880c9b7927f85f18e769e9af086d4c8aa25f55377cc483/detection

sahamety.ml

# Reference: https://www.virustotal.com/gui/ip-address/185.7.33.56/relations

aatrau.ml
aatrau.tk
adll-iiran.cf
aidl-iran.tk
aodl-iran.tk
ardl-iran.tk
bqm-ir.cf
d-payment.tk
dartstsjk.ml
dghsdhdf.tk
ebelighahy.ml
eblaghe-da.tk
eblaghe-er.tk
eblaghu-sana.tk
edaiat-ir.gq
edalat-lr.ga
edalat-lr.ml
edallat-saham.gq
edallate.fun
eedl-iran.ml
emamatbnd.tk
ghkljbpl.ml
hamta-ir.tk
ir-hamta-t.ml
ir-onlineir.ga
iran-sana-ir.ml
iren-qmi.ga
it-bint.tk
kaqaz.ml
live-sexsy.ml
otpfamsdkf.tk
peygiri-simcart.tk
peygiri.tech
radl-iran.ml
rat-install.cf
rathathu.ml
rem-kirkoloft.tk
rezaking19083.tk
rimot.ml
sabtahval.ml
saham-adlt.tk
sahamedalat-ir.ml
sahamety.cf
sahamety.ga
sahamety.gq
sahamety.tk
sahmieff.tk
san-new.tk
san1-new.tk
settestyy.ml
shekayate-ed.cf
sighep-bmb.ml
webardl-iran.tk
webcoinsuloton.tk
webir-hamta-t.ml
webiran-sana-ir.ml
webit-bint.tk
webradl-iran.ml
webrat-install.cf
websahmieff.tk
y-divar.tk
yksjsuns.tk

# Reference: https://virustotal.com/gui/ip-address/23.235.232.236/relations

adalat-app.lol
adalat.lol
adaltiran.lol
adliran.pics
app-eblagh.lol
divar.pics
eablgh.autos
eadalatu.me
eadlat.xyz
eadlt.blog
eadualat.ml
eadualat.tk
ebilagh.blog
ebilagh.lol
ebilangh.lol
eblaegh.lol
eblagh-org.lol
eblagh.homes
eblagh.pics
eblaghi.lol
eblaghiu.lol
eblaghj.lol
eblaghl.lol
eblaglh.lol
eblagoh.lol
eblaigh.com
eblaigh.lol
eblajgh.gifts
eblangh.lol
ebleagh.mom
ebliegh-gov.autos
ebllagh.lol
edalat.autos
eunlagh.lol
novin-pay.lol
peigiry.autos
peygiri.lol
peygiri130.lol
peyguri.buzz
peyjgiri.buzz
peytgiri.buzz
samaneh.blog
samaneh.pics
sana.pics
sanaen.digital
seana-ir.buzz
update-divar.lol

# Reference: https://www.virustotal.com/gui/ip-address/194.36.191.196/relations
# Reference: https://www.virustotal.com/gui/file/02e3c37acc6d9f1c4352f5203a101ae02958333c61a8773487f807b256926781/detection

bghana.online
dlivar.mobi
dlivar.pics
duivar.blog
eablagh.lol
ebilaigh.lol
eblaghc.lol
eblaght.lol
ebluagh.lol
ebolagh.lol
edalat-pay.xyz
eiblagh.lol
eublagh.lol
iran-adi.blog
iran-dadl.mobi
iran-sna.ml
iran-sna.mobi
iran-sna.tk
orgsna.cf
orgsna.ga
orgsna.gq
orgsna.ml
orgsna.tk
sana-irj.tk
sanago.me
sinanem.tk
sininame.tk
sinoname.tk
sna-news.mobi
sna-org.digital
sna-pro.digital
sna130iraeian.com
snaio.cf
snaio.ga
snaio.ml
snaio.tk
snaorg.cf
snaorg.ga
snaorg.ml
snaorg.tk
snioun.tk
snoinu.tk
sunina.tk
cf.sininame.tk
ga.sininame.tk
gq.sininame.tk
ml.sininame.tk
tk.sininame.tk
dlivar.mobi.sininame.tk
dlivar.sininame.tk
duivar.sininame.tk
eablagh.sininame.tk
ebilangh.sininame.tk
eblagh.sininame.tk
eblaghc.sininame.tk
eblaght.sininame.tk
ebluagh.sininame.tk
ebolagh.sininame.tk
edalat-pay.sininame.tk
eiblagh.sininame.tk
eublagh.sininame.tk
iran-dadl.sininame.tk
iran-sna.sininame.tk
iran-sna.tk.sininame.tk
mobi.sininame.tk
orgsna.cf.sininame.tk
orgsna.ga.sininame.tk
orgsna.gq.sininame.tk
orgsna.ml.sininame.tk
orgsna.sininame.tk
sana-irj.sininame.tk
sanago.sininame.tk
sinanem.sininame.tk
sinoname.sininame.tk
sna-news.sininame.tk
sna-org.sininame.tk
sna-pro.sininame.tk
sna130iraeian.sininame.tk
snaio.cf.sininame.tk
snaio.ga.sininame.tk
snaio.ml.sininame.tk
snaio.sininame.tk
snaorg.cf.sininame.tk
snaorg.ga.sininame.tk
snaorg.gq.sininame.tk
snaorg.ml.sininame.tk
snioun.sininame.tk
snoinu.sininame.tk
sunina.sininame.tk

# Reference: https://www.virustotal.com/gui/ip-address/162.55.170.81/relations
# Reference: https://www.virustotal.com/gui/ip-address/167.235.56.216/relations
# Reference: https://www.virustotal.com/gui/file/5b3b612e0b32c57fd5469337b809cdd85cc92ca2b5ad45fcb136d083f4b5897e/detection

api-tel.xyz
daad-sara.lol
daadsara.mom
dad-saara.lol
dad-sara.lol
dad-sara.mom
dadd-sara.lol
daddsara.mom
dadsara.mom
dadssara.mom
ddad-sara.lol
ddadsara.mom
eblagie12.vin
edaallt.mom
edalaat.wtf
edalat.lol
edalat.mom
edalat.wiki
edalati.mom
edalati.wiki
edalitan.mom
edallat.lol
edallat.mom
edallat.wtf
eddalat.lol
edi2001f.xyz
edilat.mom
eedalat.lol
eedalat.mom
eedalat.wtf
iedalat.wtf
iranmeli.vip
iransaman.vip
livesex-iran.tk
redalat.lol
samaniran.vip

# Reference: https://www.virustotal.com/gui/ip-address/178.162.159.1/relations
# Reference: https://www.virustotal.com/gui/file/91fe8567ab09036639c495436867dc2e923fd631e25f51bd66e8bcae3a1de7d1/detection

bbb-dl.ir
blaze-api.site
bmq-shaparak.ml
digimajaz-bot.ir
herni-bot.ir
hidden-bot.tk
homaion-bot.ir
onlne-shop-bot.ir
panel-bot.xyz
qma-bot.ir
saiaair.site
shaikhaliii.tk
shaparack-iir.ga
shaparack-iir.tk
shapark-qp.tk
shapparak.tk
tame-salamati.ir
wedlost001.ir

# Reference: https://www.virustotal.com/gui/file/7888e4e7e9211f9fd771a5962f57d450879dcb1bf1672131ce6dc2cb460c7333/detection

fjzgsgsbusnak.gq
ueblaghocdgh.xyz

# Reference: https://www.virustotal.com/gui/ip-address/104.21.84.235/relations

eadalat.lol

# Reference: https://twitter.com/midnight_comms/status/1531037250275794945
# Reference: https://www.virustotal.com/gui/file/fcf3723de67b948068e4bb61edb18448648242e8be2a9e1548e2eef1ddd8049c/detection

app-lurd.xyz

# Reference: https://www.virustotal.com/gui/file/ba746e66e40bb7f888d5b0d5ebe185a45fd3a8343f1739c77943198a5b34a3aa/detection

scandarremote.xyz

# Reference: https://www.virustotal.com/gui/file/072b8d78574d6820c14781e47dbdaa00bdc1c9b79641e620c58948c22821224c/detection

lordremote.xyz

# Reference: https://www.virustotal.com/gui/file/1302e12ee2fe4425ffc370ed06d0983aa8de87d323d0ddf3fc86b463a68b1c49/detection

defeserremote.xyz

# Reference: https://www.virustotal.com/gui/file/55ba423284602722e8212f15899a5b40eab5fe69616d8b98e45a75e65b484d57/detection

estelame.boutique
mummy-vip.xyz

# Reference: https://www.virustotal.com/gui/ip-address/185.73.115.138/relations

sarane-nan.ml
taqva.cf

# Reference: https://www.virustotal.com/gui/ip-address/45.148.145.51/relations
# Reference: https://www.virustotal.com/gui/file/306cb23b6a95150dafd066e693210223f25753b2ee81f25c75e3ae319125cbd5/detection

0o0o0o00o.cf
adealat.xyz
adilq.com
adl-qmo.xyz
adli-wetin.ml
adlilran.cf
adlilran.ga
adlilran.gq
adlilran.ml
adlilran.tk
adlio-dir.xyz
ads-edif.ml
adualat.stream
adz-dfx.ml
aedalat.xyz
asdfgh-qqez1.tk
asdilt.com
asn-ijn.cf
asn-nqm.ml
bandar-bamdar.ml
bmiorn.cf
dadgh.lol
dadreci-ir.com
dogah.lol
dost-ir.ga
eblaghty.xyz
eblaghye-ediiran-gq.gq
eblaghyi.xyz
edarlat.xyz
edig-gof.cf
edilotsn.cf
edisn.xyz
esirdl.makeup
faffffffffmilyhsvsjsbsgs.tk
familylijnaikomsrjsg.tk
fkljwrw.com
ghsna.com
go-adlatcyon.cyou
gobtozendegi.tk
help-live.ml
hemtaw-ir.gq
hgad-ir.com
hmtlran22.tk
httphttpshttp.ga
httpshttpssl.cf
httpshtttpsslman.ga
i-dadres.com
i110-0o.ga
iedlati.cf
ir-bgft.tk
iran-ca.cf
iran-pas.ml
iran-pot.ml
irankhaldaliraniranghoreshshiran.tk
jshsyy.cf
jsnxjejsjsksks.ml
lichereuueueue.gq
livesexia.cf
markazi-tc.cf
markazi-tc.gq
markazi-tc.ml
mayket-iran.ga
mayket-iran.ml
mislon.ml
mountaining.tk
novin-adalat.click
o010101010j.cf
p0rdakhti.cf
paeygiri.com
peygieri.com
peygirei.com
peygiri-panel.cloud
peygiyri.com
polwer.xyz
portalesn.com
portkalesn.xyz
prakqme.tk
prc-ir.com
putifar-gangan.gq
q0i1-zx0m-01010js-https.ga
q0z1tb4im5p.ga
rayan-sana.xyz
refahe.xyz
remot-hell.ml
remot-seyedi.ml
rimot-tst.ml
salon-dl.tk
samaneyha.cf
samanosmani23.ml
samiram-mame.ga
samiram-mame.gq
samiram-mame.ml
samiram-mame.tk
sanator.lol
sandilom.ga
sarane-nan.cf
sarane-nan.com
sarane-nan.gq
sdfion.xyz
sdghim.ml
sdilen.co.uk
sdilsn.co.uk
sdinmg.cf
sedil.wiki
senea.cf
senea.ga
senea.gq
senea.ml
senea.tk
ser-opo.tk
serdlin.tk
serlinr.cf
siaqwe.ga
sighai.cf
sighe-iran-ir.cf
sighe-iran-ir.ga
silion.xyz
siljmr.ml
sissn-1om.ga
slidrin.wiki
sn-adl-eblqsnilopn0.ga
snaedil.com
sndirm.cf
snildl.co
sopi-edg.ml
star-new.lol
taqva.cf
tfdrtdtfdjk.ml
ufisna.com
up-dadsara.com
webedarlat.xyz
webpolwer.xyz
wern-asdfm.ga
wert-asxbn.tk
yno-peygir.cyou
yunbanm5.ga
ns1.o010101010j.cf
ns1.samanosmani23.ml
ns2.o010101010j.cf
ns2.samanosmani23.ml

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.254/relations
# Reference: https://www.virustotal.com/gui/file/17f154479152a372be70d5441246a6e85e71a32cdce0e470065b031bb3715c86/detection

remote-best.cf
ad-lie.ga
ad-qm.xyz
adil-iren.cf
adir-li.tk
adkholrey.ml
adl-conteir.ml
coinsolution.tk
fir-gh.ml
gfhfghghhgfj.tk
goir-go.ga
hamta-iran.gq
hemayt-rayane.ml
htmta-iran.ml
htmta-iranmmmm.ml
ir-adli.ga
ir-foir.tk
nw-rea.tk
pn-eblegh.ml
qmi-adl.xyz
shop-rdix.ml
tabchi-arsllan.ml
tikwebir.cf
vzartir.cf

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.209/relations
# Reference: https://www.virustotal.com/gui/file/e93dd572c08dd5402fb3a34dd7015c521fbfa0e9daba9dedb7955782f0ca167d/detection

adl-center.in
adl-center.online
adl-snae.tk
adlirn-sana.ml
bargheman-ir.ml
dadgstreie.gq
dark-rem.tk
ddsra.ga
ddsra.ml
djvisicm.ml
dr-saz.cf
ebiligiieh-sanap.ml
ebiliqie-irsna.ml
ebl-edallate.tk
eblagh-da.ml
eblagh-er.ml
eblghiehe-irsna.ml
ebliqiehe-sanaps.ml
edl-center.nl
edu-center.eu
edu-center.us
hamdam-yab-ir.cf
hamta-fan-ir.ml
insta-log.ml
ir-ablaghie.ml
ir-dadgostari-sana.ml
ir-follwertik.ml
kart-melii.tk
melat-ir.ml
newe-eblghe.tk
semaneh.uk
shop-sap.ml
sianat-meli.cf
sighe-hallahs.cf
sighe-ir.ml
sigheg-on.ml
siyanat-ir.ml
snafta-ir.tk
snapkomak.tk
trustwallet-im.ml
vacsan-ir.tk

# Reference: https://www.virustotal.com/gui/file/e50d15ea51e487272e017b5ec39f8278e02a879496a1ff26a037c77179420de0/detection

commo.ir

# Reference: https://www.virustotal.com/gui/ip-address/91.223.82.6/relations

addlern.digital
adianqo.uno
adilapp.digital
adilran-ir.ga
adilran-ir.gq
adilran-ir.tk
adliran-ir.space
adliran-meli.site
adliran-site-ir.cf
adlisna.uno
adllity.zone
arizydigitall.tk
bqmi-ern.tk
bqmi-ernx.cf
d-payment.cf
d-payment.ga
diwarha.tk
ebliqhs.tk
edalat.email
edalatir.ga
edalatire.tk
edilat.digital
edilti.uno
ediltie.tk
ediltoi.uno
ediltoiq.tk
edlsanhj.tk
edlsanop.email
edrsmf.uno
eidalat.zone
eidalatd.uno
elatadesan.ml
elatadesan.tk
esamam.me
fetasnb.ml
i-shan.ir
inelat.uno
ir-edisn.tk
iran-eblagh-ir.cf
iredsln.tk
isnial.digital
king-mester.tk
mediadll.tk
neew-sha.gq
new-saq.ml
new-see-iran.email
payment-sana.ml
payment-sana.tk
pom-new.xyz
pom-shq.com
pom-shq.ml
rat-remote-kingscam.tk
samaneye-sana.ga
san-neew.cf
san-new.gq
san-pomw.cf
sernide.tk
shapark-eblagh.ml
sihge.ga
sna-edlt.tk
snaied.uno
snedalm.tk
tabgi-host.tk
vair.uno
vamir.digital

# Reference: https://www.virustotal.com/gui/file/580651faba9fe0f9d188b721697e6f560211155d816708078b5c2852bbacf856/detection

rimot.xyz

# Reference: https://www.virustotal.com/gui/file/c438a3794207612fb6a04234db93ea0d6afbd6c5533e058657e011d5571d2cd9/detection

farmspn.ml

# Reference: https://www.virustotal.com/gui/file/11a6eda2e4c3e2184983c70995c206bdab8d0cc84595d3cde047db6071606652/detection

irantafb.tk

# Reference: https://twitter.com/malwrhunterteam/status/1536447238611804160
# Reference: https://twitter.com/midnight_comms/status/1536464844194447360
# Reference: https://www.virustotal.com/gui/file/b2ee8266233bd20b3b477fb36a69b07c6043cdb0192c844d88c49e606cc1381b/detection

alidizstartf.xyz
indastanabade.xyz
/RezaDivar/GetLink.php
/RezaDivar/PingDevice.php
/RezaDivar/RegisterDevice.php
/RezaDivar/UpdateDevice.php
/RezaDivar/UploadSms.php

# Reference: https://www.virustotal.com/gui/file/1a8342f79b002ff8b3140f27d54a9cb2962d2a6d946e9339b779838aef81ac54/detection

ad-shaparak.gq

# Reference: https://www.virustotal.com/gui/ip-address/185.73.115.158/relations
# Reference: https://www.virustotal.com/gui/file/fb77a0e0ce719877c7104d2206eca9800ae390ea441996af2ca1aa03c6baa35f/detection
# Reference: https://www.virustotal.com/gui/file/f763535f6137bf4295c494e205d31a2b8c0fa271dbbfd9aacd4a5186db849b22/detection
# Reference: https://www.virustotal.com/gui/file/ad0ccd8886ee7d594047c7aa59eeca8a1671e0eba84ad9029424fa849da15033/detection
# Reference: https://www.virustotal.com/gui/file/85dcb883d0a3b75d18069d46d6b891603436f22744b0f3dde4ccc290dc90a079/detection
# Reference: https://www.virustotal.com/gui/file/6e9bafe47ceaeda715015f1439ef83402ee7273fbf920ca7ea14c2e95128664d/detection
# Reference: https://www.virustotal.com/gui/file/60d4847d936d9f8f26bc6f86b506bc17c2c28b23cc4610a94fe622bd6a91fd89/detection

defeserremote.xyz
wprowprorlflr2w.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1539612228051165186
# Reference: https://www.virustotal.com/gui/ip-address/192.227.158.58/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.148.145.156/relations
# Reference: https://www.virustotal.com/gui/file/1aebaec4e84c940f63d5c1186e8b6ad1d7beb79f2b4c9ff12c523e309be09f3d/detection
# Reference: https://www.virustotal.com/gui/file/fda58e1a679fe1797dcd06048eb58dbf65c0b58e254ae552a87449a906d22341/detection
# Reference: https://www.virustotal.com/gui/file/cc5c482d8afc11d06c5f270126a1665ce3a40e64b975e3255deac9fef82dd175/detection

abnsdf.ml
abpoll.ga
abpoll.ml
abpoll.tk
acdpe.cf
acdpe.gq
acdpe.ml
acdpe.tk
adalet.ml
adcgdr.ml
adcgdr.tk
addbzna.ml
adelane.ml
adesri.cf
adesri.ga
adesri.gq
adesri.ml
adesri.tk
aetqwoi.tk
ahnzb.gq
aisioiie.ml
aisioiie.tk
alikinghell1.tk
amasip.tk
amestar.cf
amestar.ga
amestar.gq
amirturk.tk
amirwex.tk
amsdp.tk
ap-sighea.ml
apidas.ml
apksi.ml
aponk.ml
apouch.ga
apouch.gq
apouch.ml
apouch.tk
app-edlle.tk
apps-ebie.tk
apps-edle.tk
apps-sna.tk
areuri.cf
areuri.ga
areuri.gq
areuri.ml
aryuio.ga
aryuio.tk
asiosi.gq
asiosi.ml
aswei.ml
aszwi.ga
aszwi.ml
ausuc.cf
ausuc.ml
avnmz.tk
awf87t7igaufhgajh.tk
awfihwfhfwook.tk
awfrywafgh.tk
axcver.ga
axcver.ml
axcver.tk
azoiro.gq
azpwe.tk
barqq-ir.tk
barrq-ir.ml
bauskc.tk
bich-remot.cf
bk-to3el.xyz
bobew.gq
bobew.ml
brghmn2.tk
bsrak.tk
cchckecermmdapi.ml
cecioe.cf
cecioe.gq
cecioe.ml
cecioe.tk
cionic.cf
cionic.tk
cna-eblagh.tk
crate-wallet.tk
dabnzm.gq
dajajsjsshah.tk
dalxna.tk
dapbek.gq
daporn.gq
daudgah.cf
daudguh.ga
daudguhi.ml
daudguhi.tk
daunbs.tk
daymon.tk
divan-keshvar.ga
ebaun.ml
ebblqh-ir.tk
ebl-agie.ml
eblagh-asi.tk
eblagh-ir.ml
eblaghbn.tk
eblghlran2.tk
ebllagh-ir.ml
edalate-ir.tk
edie-ir.xyz
edipk.builders
edla-ir.xyz
edle-ft.tk
edle-ir.builders
edle-ir.xyz
edle.beauty
edlpk.builders
ehzarey.cf
ehzarey.ga
ehzarey.gq
ehzarey.ml
ehzarey.tk
ehzareye.ml
ehzareye.tk
epirk.tk
eqpwo.tk
etepat.ml
fast-follower.tk
ffuxhikmmjin.gq
fopami.ml
givelran2.tk
gyybie.ml
haamta-ir.ml
hampa-co.tk
hellofucker.tk
hellofuycer.tk
huslav.ga
huslav.gq
huslav.ml
huslav.tk
idrat.tk
iniawfhkfrfwa.tk
inkoial.ml
interrnetarzan.ml
iopqo.cf
iopqo.gq
iopqo.ml
iozexc.ga
ir-dsaz.tk
ir-snnaa-shprk.cf
irann.tk
isi-sharpak.cf
katds.tk
kaznsm.tk
khone-khaly.tk
kissybi.gq
kosnanatagekartnazani.tk
laeiebx.tk
laopls.gq
livealirezadalqak.ml
livedse.tk
livedsexy.tk
liveeeeemshikasrmoj.tk
liveeeemola.ml
liveemolayiietdhx.tk
livemashiiihi.tk
livemollayi.ml
livemollayimsh.tk
lives-sex.tk
lseueyeueueiei.tk
luvejsjskskeek.tk
madarsagmmdf.tk
masterrcraft.ga
maxgame.ml
nahubn.ml
neqw.ml
neqw.tk
nerios.cf
nerios.ml
newtm.xyz
neziwo.cf
oabhsm.tk
obneie.tk
obsah.tk
odlran2.tk
opwc.tk
paychsaz2.tk
payment-tokan.ml
piehcz.tk
pokya.gq
pokya.ml
remot-koniy.tk
remoteclowns.ml
remotepppo.ml
remsai.gq
remteseyedasal.ml
roewz.cf
roewz.gq
sabibd.tk
sabnme.tk
sahame-edait-ir.tk
samane-barq.cf
sapor.tk
saunbz.tk
sazman-bargh.tk
seghehmdl2.tk
setting-wallet.ga
settingwallet.ml
settting-wallet.tk
sexe-live.tk
sexjaj.tk
sexlivei.ml
sexlives.tk
sghe-ap.tk
sghe-hmdm-2.tk
shakvay.tk
sharj-r.tk
shaypor2.tk
sig-e.tk
sigh-e.cf
sigh-ham.ml
sighae.tk
sighe-ap.tk
sighe-app.tk
sighe-b.tk
sighe-epn.tk
sighe-hlo.tk
sigheai.tk
sighean.tk
sighey.tk
sigheyae.gq
siko.tk
sikokillerbet.tk
sjsshss.tk
snadebl.gq
spauab.xyz
stting-wallet.ml
supere-karlos.tk
suportwaiiet.com
syghe-i.tk
taobda.tk
terkswap.ml
thekingofbet.ml
trqlbn.gq
trqlbn.ml
trqlbn.tk
trust-setting.ml
trust-wallet.ga
ubskam.ml
ukedg.ml
unbiak.tk
unskam.gq
upaygir2.tk
upirre.ml
upirre.tk
userda.gq
usrnbsj.tk
uvbzna.gq
viopm.gq
viopm.ml
viopm.tk
vipcodel.ga
viponio.ga
viponio.ml
viponio.tk
volaka.tk
vopawio.tk
vorod-dudgah.tk
vwexi.ga
vwexi.gq
web-trustwallet.tk
webamsdp.tk
wiprh.tk
wiqlr.mom
wisna.tk
wrbir.tk
xarmy.cf
ybalfm.tk
ycakd.gq
yoyrego.tk
yzxch.ml

# Reference: https://www.virustotal.com/gui/file/0110aec813c4c0d75ad2d18491b80ba6affcabb9e7d553fb0d1e9d9cf5bac981/detection
# Reference: https://www.virustotal.com/gui/file/52931ebf8a5192ba328d64eac9c2fb275c19013c04891b33f8d124713eafc1b3/detection
# Reference: https://www.virustotal.com/gui/file/b4b0e5d1170f8c6085860845437b861dde757a34620fddee1d258d9df97f1d28/detection

rimote.xyz
welaogh.shop

# Generic

/ahmagh/
/DargaSaz/
/eblaghe
/eblagh/
/ARMAN/requests.php?sms=
/chelchele/url.txt
/Eblagh/app.php
/mytop/receive.php?sms=
/Nobitex/UploadSms.php
/Ramzinex/UploadSms.php
/Remote/1005063728/req.php
/pay/mellat/Mellat.php
/public_html/senddata.php
/rat-webpage2
/ebimport.php
/eblagh.php
/eblagh1.php
/eblaghpay.php
/eblaghresult.php
/sana/pay.php
/sms5.php?phone=
/sana-result-post.php
/sna_eblagh.php
/ratsms.php?phone=

# APK

/%D9%87%D9%85%D8%AA%D8%A7%20.apk
/abp-sana.apk
/abiagh.apk
/adliran-eblagh.apk
/dadsara.apk
/divar.apk
/eblagh-adliran.apk
/eblagh.apk
/eblaghie.apk
/edalat.apk
/hamrahedalat.apk
/mellat.apk
/saham1401.apk
/sana.apk
/shad.apk
/sighe.apk
/sigheyabi.apk