# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/) # See the file 'LICENSE' for copying permission # Reference: https://blog.talosintelligence.com/2018/06/my-little-formbook.html?m=1 drylipc.com handanzhize.info bddxpso.info atopgixn.info cretezzy.com casiinoeuros.info newraxz.com # Reference: https://twitter.com/avman1995/status/1038285919219068928 # Reference: https://pastebin.com/6MRD35Pq http://136.144.52.99 http://47.91.170.222 lotochain.com n01.tech ourcrazyveterans.com sy-adm.com yinuxw.info # Reference: https://twitter.com/dms1899/status/1038276577254146049 # Reference: https://pastebin.com/4pDsDuxn http://5.101.78.222 http://5.255.94.75 0day4today.com commercekorea.net magnagrecia.net npromo.eu southsidenewhomes.com # Reference: https://twitter.com/voidm4p/status/1037294325091250177 handanzhize.info # Reference: https://twitter.com/ps66uk/status/1036782703788605440 ghazicraft.com # Reference: https://twitter.com/ps66uk/status/1036773879321190400 truemusclesnow.com # Reference: https://twitter.com/ps66uk/status/1036773694243332096 sosmedplus.com # Reference: https://twitter.com/ps66uk/status/1036781260516061184 newd4y.com/sp/ # Reference: https://twitter.com/malware_traffic/status/957956818906632192 boosterfx.com cabel-ispoffers.market conditionalmachines.com derekblasberg.net exoticlocale.com idlevents.com fhsdjhfsdkj.com lynkieevents.com mansiobbok.com wshamg.com yougethosted.com # Reference: https://pastebin.com/bEqJKZfZ peliculainfantiles.com vanzundertconsulting.com # Reference: https://twitter.com/nullcookies/status/1046929109811630081 derwamanojaz.com # Reference: https://twitter.com/James_inthe_box/status/1046864076624646144 graimmer.com ww7.keygirl.site # Reference: https://twitter.com/pollo290987/status/1044947696451235840 high5fundraising.net lechevalierorange.com returnlostitem.com sftpcomponent.net # Reference: https://twitter.com/James_inthe_box/status/1044580953912266758 aldocompliance.com # Reference: https://twitter.com/James_inthe_box/status/1044324089714724870 graimmer.com # Reference: https://twitter.com/nullcookies/status/1046924081591988224 bharimatrasay.com # Reference: https://twitter.com/James_inthe_box/status/1047488230763913216 d.coka.la/ORg1ie.jpg d.coka.la/BI0asY.jpg jgc.com.mx/dat/heavy.jpg jgc.com.mx/dat/mila.jpg nothernpridecommunications.net mrawesomescloset.com # Reference: https://twitter.com/James_inthe_box/status/1047846258239401986 graimmer.com refractoriesdirectory.com # Reference: https://twitter.com/dvk01uk/status/1107851408269824000 higcaf.com # Reference: https://twitter.com/dvk01uk/status/1098070906029723649 symtual.com # Reference: https://twitter.com/dvk01uk/status/1091013599018000386 funguythings.com # Reference: https://twitter.com/dvk01uk/status/1089807824731947009 humanytc.com # Reference: https://twitter.com/dvk01uk/status/1089748801571700737 zinrop.com # Reference: https://twitter.com/James_inthe_box/status/1108064849651601408 melendyou.com/rm/ # Reference: https://twitter.com/James_inthe_box/status/1110579161884577792 liongrooming.com # Reference: https://twitter.com/makflwana/status/1068015579586453504 # Reference: https://pastebin.com/TurChwaE jeycop.com scubaarabia.com journeystudentcamp.com niger-online.com simplegreenhabits.net essayontime.science frankandmidori.com 525pwz.info check-or-wreck.com purdomlnc.com # Reference: https://twitter.com/dvk01uk/status/1118565721892634624 slideus.com # Reference: https://twitter.com/pancak3lullz/status/1092534221783158784 mitafa.com seajayssailing.com 327503788.com michkatravel.com recoil.world lianglinyiyou.com full-art.com despasito.net 23o95.com cultivatingimmaturity.win dtrchampions.com # Reference: https://twitter.com/pancak3lullz/status/1092434571889688576 w3c.ink idreamstartup.com tiaohuobuy.com droptxt.com demopex.com thebodyshelinglogic.com millcms.com artframephotography.com whitelodgingcollege.com # Reference: https://twitter.com/pancak3lullz/status/1083019107568619521 goodies.biz win603.com microbreweriesassociation.com xn--hck5aza9o8c.site orangefirestarter.com mmareligion.com elhomegifts.com mecharniser.com xinghuategang.com # Reference: https://twitter.com/pancak3lullz/status/1121108516637433859 /h383/?CneDl= # Reference: https://twitter.com/pancak3lullz/status/1034149890983641089 /eu/?Lh54A= # Reference: https://twitter.com/malware_traffic/status/1080623037471432704 /hx310/?JreXz= # Reference: https://twitter.com/pollo290987/status/1082400417370251268 /private/?Uv1x= # Reference: https://twitter.com/pollo290987/status/901090998343929859 click-ticke.site # Reference: https://twitter.com/Antelox/status/895299149284999168 wow-tracking.site # Reference: https://twitter.com/luc4m/status/1124220235656118272 arsimport.com iniwhmya.com molakalyva.com # Reference: https://twitter.com/dvk01uk/status/1125703826890199040 mecharniser.info/ni8/ # Reference: https://twitter.com/luc4m/status/1126043316305506304 alabamaseosolutions.com foodome.net humanytc.com shopnow1.com wealths.us zjydl.com # Reference: https://app.any.run/tasks/5582d288-8fef-456e-be79-a8d80d1df829 rachelkinseyforcongress.com # Reference: https://twitter.com/dvk01uk/status/1120628599793553408 tiboxe.com # Reference: https://twitter.com/JAMESWT_MHT/status/1128996781054996480 # Reference: https://app.any.run/tasks/c0094589-70db-4cbe-a7de-f1a08b79168f/ /ca/?U4kp= # Reference: https://twitter.com/malware_traffic/status/1130450003422351360 /ha/?1b= # Reference: https://twitter.com/dms1899/status/1138414720199864320 mypeeps.ninja yuchuanjz.com tasmanuka.online perryleycraftgin.com ttklyn.com pipiguan.com kw7ob.com # Reference: https://twitter.com/James_inthe_box/status/1138478169755754496 explorenoblesvillehomes.com prytherchforcouncil.com # Reference: https://twitter.com/luc4m/status/1140979690758262784 tlkcloudem.com # Reference: https://twitter.com/JayTHL/status/1141056334244253698 promotionzynovawillzerodacontinuegood.duckdns.org # Reference: https://twitter.com/Racco42/status/1141672784357146624 desklink.duckdns.org # Reference: https://twitter.com/killamjr/status/1131368397617475584 joeing.duckdns.org # Reference: https://twitter.com/luc4m/status/1143815529079156738 srcalci.com paxfulk.com ajexin.com gmcpr.net shots.golf artnfoods.guru biocombustiveis.com phpcoding.life ncfgmm.com # Reference: https://twitter.com/James_inthe_box/status/1146183202467303424 virtuoussnowball.com # Reference: https://twitter.com/reecdeep/status/1149224578532741120 hsctsu.com srilankika.com westernenergymedicine.info xn--5nq67dt91acob217ad91b.com xn--fhqv52e1ueg8n.com # Reference: https://twitter.com/1ZRR4H/status/1149282913751617536 vfxwarrior.com protocol.life 15churchroad.com djcreview07.com # Reference: https://twitter.com/hexlax/status/1150113306545467393 regular123.com # Reference: https://twitter.com/hexlax/status/1150744858132451328 mecharniser.com shaxob.com shaxob.com # Reference: https://twitter.com/James_inthe_box/status/1154398293524271104 24648040.ngrok.io # Reference: https://twitter.com/dms1899/status/1165009802470277120 241369.com apachedrone.com beziehungswerk.net regular123.com sadathetoure.com telnyc.com the-brand-nursery.com trendteasindia.com # Reference: https://twitter.com/dms1899/status/1165762759738437632 aagangirlshostal.com bbo6331.com crossfitktresrios.com darts-bar-nova.com dclogisticsbrasli.com fanfantxt.com haiju365.com longlifebaba.com sixfiguresuccessmastery.com somosvip365.com starfleetcartography.com sukfat.com yj.ink # Reference: https://twitter.com/dms1899/status/1165742047539662850 americangypsealife.com andareavela.online dpthkee.com espritmoteur.com fawazalhokairfashions.com get-housesecurity.sale jeyucite81.win kzxuqf8w7.biz mbk.partners olivianaphotography.com woodlandsdogretreat.com # Reference: https://twitter.com/reecdeep/status/1166255171200004100 alptraumaclinic.com amobad.com artilary.com artistsandcreatives.com beyhanbilisim.com hunde-betreuung.com mecharniser.com pixelorlando.com ronicooper.com scjieniu.com superbotany.com khosravanigroup.net tc521.net pen6.net # Reference: https://twitter.com/reecdeep/status/1168937433171484676 eprivacyguards.com nimble.report shinrigaku-riron.com xn--gdka3eubcx5ge.com sukfat.com # Reference: https://twitter.com/smica83/status/1169553710999060481 joyhoundinc.com margaretminguy.com racooncity.net seastarways.com szahjw.com tp-hostel.com travelersintheworld.com # Reference: https://twitter.com/JAMESWT_MHT/status/1172122495652155392 selforall.info haddadunited.com # Reference: https://twitter.com/coderippers/status/1156857536026484736 burkwp.com # Reference: https://twitter.com/James_inthe_box/status/1173953038098128896 starttoto.com # Reference: https://twitter.com/malwaremustd1e/status/1175779000687325186 beautyzonebyheidi.com ristorantepagus.com sensingbridge-platform.com # Reference: https://twitter.com/dvk01uk/status/1178696483522191360 # Reference: https://app.any.run/tasks/3b84770f-b06e-47c8-b193-9be3c4c7a6bf/ dealskabaap.com drrichardorlandi.com ferienwohnung-dodel.com geohoof.com identityapparelonline.com kxmphs.com romanoimoveis.com superadminapp.com termesahiltaksi.com veroxin.com # Reference: https://twitter.com/luc4m/status/1179413765147807744 7thgenerationrabble.com # Reference: https://twitter.com/luc4m/status/1181880797399326721 cvasajhsjkls00pro.co.uk # Reference: https://app.any.run/tasks/d933e54f-4a1b-431d-ac1a-46b1f7dbe792/ alphlinic.com atlantisads.com apps-tv.com cheapmonclerjacketsoutlets.com edmov.com eurodisfraz.com hhtdhg.com nieuwtij.com pelvicheartspiritalchemy.com skylod.com xiaolinjia.com xn--dll-8n0e103b.com # Reference: https://twitter.com/JAMESWT_MHT/status/1186906425836081153 100rupeeeliquid.com allixanes.com cattybcreative.com fastbatterysystems.com lokmazel.com moonchildenterprises.com pi2023.com # Reference: https://twitter.com/wwp96/status/1187064601327919104 guzelkaybettik.com podwath.com dairobby.com danielemenchetti.com # Reference: https://twitter.com/wwp96/status/1189234871291564035 cartedevisitegratuite.net palsgraphor.com veroxin.com ferreiralove.com # Reference: https://pastebin.com/29uSdMAk cancertreatmenttransport.com chuangshunchem.com garthhassel.com golaminators.com hairminders.com kovaxy.com mizorl.com moraxy.com rwinzresearch.com # Reference: https://twitter.com/wwp96/status/1191014781911736321 camexpertangkor.com # Reference: https://app.any.run/tasks/c0597f3d-f31a-40f8-85e1-b0a8eb3af899/ 926cb.com molestuk.com shabbirinstruments.com # Reference: https://app.any.run/tasks/aa6bc7f8-a986-4a33-9595-fff5ac5a0c62 cmioffices.com # Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Formbook) emizard.com hoscury.com monkalef.com oyishu.com pursemtb.com scaker.com shaxob.com # Reference: https://pastebin.com/xwT2gAgE 3hilltopstudio.com bgtr.cymru facetheday.net gmopets.com hottennisjp.win imizin.review mnuvmg.info regiusgames.com tweakboxapp.info xn--oru96d1wax98e.net # Reference: https://twitter.com/58_158_177_102/status/1192332316917432321 bagelandcheese.com # Reference: https://twitter.com/reecdeep/status/1161233442337697793 # Reference: https://app.any.run/tasks/4a4785fe-5b8c-4a36-83ef-ea6500a72df1/ 2750tinsleydr.com # Reference: https://twitter.com/wwp96/status/1193993959074402304 # Reference: https://app.any.run/tasks/35861fd2-8962-404d-a03a-6b90f2a83dad/ chungcuhanoihay.com cubeandwater.com deltavisiontv.com flycoz.com lateliercreatifdemarie.com # Reference: https://app.any.run/tasks/954e589c-6906-4e99-9459-65a5770327ab hitechhomepaintnyc.com luxogloppeliving.com balajiphotogallery.com prlncess-hotels.com # Reference: https://twitter.com/0xCARNAGE/status/1201194262093807616 beartraditionalkayaks.com d55consulting.com my-kit.net nitsannthit.com quickful.com samperd.com wk616.com ympublishing.com # Reference: https://twitter.com/ANeilan/status/1201346143155822592 # Reference: https://www.hybrid-analysis.com/sample/945c63a512d9d62583783329cd83d2872e250fba3c40d5fe0e36483a5a831a9a/5de484aa3f6a1d32720f2eee norvicshippnig.com # Reference: https://any.run/malware-trends/formbook (Note: as seen on 2019-12-04) beauty-fullbox.com idmicoffee.com skylod.com gazoly.com gridadvisorsllc.com corvinuscrypto.com spillthegreens.com bees11congress.com atlantisads.com # Reference: https://twitter.com/ViriBack/status/1202305799445504000 allixanes.com casineuros.info # Reference: https://app.any.run/tasks/5ded2851-08b2-4fe1-a34c-45daf448e8e2/ artgrowth.fund fixref4.com hotrugged.com insidereaganmanx.com institutdebeautechablis.com jscheide.com jevmod.com presence-digitale.net shopforbabys.com sluas.com # Reference: https://pastebin.com/7Ak2nP2T domferz.com emmajcoombe.com ido-expo.com italianato.com nwsouthroad.com thankslotto.com wasserschaden-hero.com wellmadecostumes.com xosuno.com # Reference: https://www.virustotal.com/gui/file/78377897d8c6ccd0f4e59ddf94db67b2489a4010fe404659f61ebeb91a037a49/detection fisciapp.com pinkiavenue.com 061man.com nongda.group kuotacell.com clinica-financiera.com wellmadecostumes.com # Reference: https://twitter.com/James_inthe_box/status/1206944999499108353 millerjeanne.com # Reference: https://twitter.com/wwp96/status/1207739801002291200 # Reference: https://app.any.run/tasks/0e337885-db1f-412b-aa9b-1c6f75eefe17/ meinvcaita.com mipscenter.com # Reference: https://twitter.com/wwp96/status/1210228386687279115 find-a-job-online.info hextor.win middlemalta.win otomarco.net sabyestreetfoods.com # Reference: https://twitter.com/wwp96/status/1210602703279276032 earlymorningmama.com hjlh888.com thexfactorfoundation.com # Reference: https://app.any.run/tasks/fe87d214-5fab-400a-ae93-7319483ea313/ covzin.com 2220027.com jxck1688.net www139706.com # Reference: https://app.any.run/tasks/5d2b1a42-3931-4381-8f18-17b089100399/ ibelieveinbrazil.com communityhealthypharmacy.com raveltalent.com lapuphealth.com pornurlz.com t4z4f7p34y.com 0g6fivegive.men bemaaultosport.com # Reference: https://pastebin.com/E6yzi5hz adventuredogs.tours brokerofficial-fraud.com darkwhitechocolate.com liuhongli.com yashodankalpataru.com yummymornings.com # Reference: https://app.any.run/tasks/15ee6c31-b975-4f9f-ba1d-2f950f82e468/ bazmeadab.com # Reference: https://twitter.com/James_inthe_box/status/1214176338040410112 # Reference: https://pastebin.com/XMTxaQ02 creativeheadfirst.com kabsolug.com stopczynski.com # Reference: https://app.any.run/tasks/230ffb09-b135-4144-86a7-595110c4786d/ 635bifa.com amoorematrix.com chemmaths.com greatsavingsandmore.com mizorl.com pinksuper.net # Reference: https://app.any.run/tasks/de247fe2-7b3a-4c45-b0b1-0be67319bcae/ swfltropicaladventures.com sindomac.com jingxiu188.com # Reference: https://twitter.com/wwp96/status/1214936414749646849 chinabaumatic.com dealermerchantaccounts.com mizorl.com xoso168.com # Reference: https://twitter.com/wwp96/status/1214935400445358080 chinaplandexpo.com nuestrojacalito.com southerntexastitle.com # Reference: https://pastebin.com/piCYtiS8 beattheburnout.com harryhdesign.com integralhome.net kabsolug.com mocowhalo.com stage5klinger.info # Reference: https://twitter.com/wwp96/status/1216790704007065600 mizorl.com nymsf.com promptpayplus.com # Reference: https://app.any.run/tasks/1f46c9ed-e5d5-421b-8965-39d1536f02bf/ crosswalkclo.com mydnrip.com # Reference: https://app.any.run/tasks/4ef08030-7831-4eff-aa3e-7d151ccc231e/ nrojano.com luckyluxuryhomes.com quidoz.com videntesmadrid.com britelens.com # Reference: https://pastebin.com/Tz5Kaup2 # Reference: https://twitter.com/FewAtoms/status/1221057533625819136 windowsdefendersecurefilesofficesnetwork.duckdns.org windowsdefenderserversecuresofficew.duckdns.org windowsdefenderserversecureserver.duckdns.org windowsdefenderserversecurity.duckdns.org windowsdefendersecuirtysystem.duckdns.org windowsdefendergatewayweb.duckdns.org windowsdefenderprotection.duckdns.org bbo7376.com lounge-fumi.com luminaryproductions.com msp29-05.com ahjqny.net aslihansaygili.com highvaluenames.com iambookworks.com josephinegreenz.com oscarwrong.com 47bh.com 51airuyi.com kapai360.com chengkeff.com cjproducts.biz differently.us jcbbi.com 3i-j-f6rr.com s8va.com couplesense.net kingdomofspace.com nnnhg.com openrprise.net pojokpas.com theexchangere.com werberoboter.com mccannproduction.com afjkz.com baodian.ink gridhopper.net howeitservices.com keralahills.com peufclothing.com pursemtb.com # Reference: https://twitter.com/b4rtik/status/1219924865643438080 # Reference: https://app.any.run/tasks/1b0fdc77-aa65-4b35-8d97-4f85d93d992f/ conorhennessy.com crowdedfuture.com ariestikto.com emergentfamily.com dhnfv.loan yourdreamhunter.com eb1579.com nercox.com prepareforyourretirement.com nextmobility.news ahcdentaled.com actigy.com hirexr.com chefkennethclay.com # Reference: https://twitter.com/James_inthe_box/status/1220381091988529153 # Reference: https://app.any.run/tasks/e26f7e65-482e-40fe-8423-38c1ba03b09d/ windowsdefenderserversecuresofficeiq.duckdns.org joeing.rapiddns.ru hd5088.com 13622days.com moz-cafe5thst.com # Reference: https://www.virustotal.com/gui/file/67bac2e45fce51b88afbf7215a1ea27fbbea871279b29d293e1e7423c297c134/detection frehan.com mutlulukicindahacokkadikoy.com # Reference: https://twitter.com/wwp96/status/1222229357181140992 healthyroot.net mp3kaka.com msdcong.com reloadexplode.com syslinctalk.com westsidewifi.com # Reference: https://twitter.com/James_inthe_box/status/1222544907358720000 windowsfirewallsecurityauthorise.duckdns.org # Reference: https://twitter.com/wwp96/status/1222625150438453250 mandat.online saseolocal.com cryptostrongbox.com nyoxibwer.com resistmagazine.com # Reference: https://twitter.com/wwp96/status/1222642415405871104 civilinspector.com dremtnw.com # Reference: https://twitter.com/wwp96/status/1223326386234044416 zdmania.com realcapemay.com joxiny.com qgptgj.com ridingpassion.com catbaoceancruises.com 374cb.com # Reference: https://twitter.com/wwp96/status/1223330896931106822 whatsonprimevideo.com whwgkj.com gztla.com liturgyofthebrokenhearted.com # Reference: https://twitter.com/wwp96/status/1224412305577869312 fabinx.com thevendredi.com americanmotorwerks.com iraqios.com verkaufsfunnel.com thebroadcastblueprint.com # Reference: https://twitter.com/wwp96/status/1224430085064753158 tcszht.com nyoxibwer.com lslhm.com changelly.store kang-120.com # Reference: https://twitter.com/wwp96/status/1224431371751325696 pinoconsulting.net trn-harbour.com # Reference: https://app.any.run/tasks/02addc72-ea33-443b-b3ae-f4d72ef11ee6/ skylerfarm.com # Reference: https://twitter.com/wwp96/status/1224707855116382210 petrankampaamo.com parknroll.biz nyoxibwer.com emtark.com hemingway.site # Reference: https://twitter.com/wwp96/status/1224785418991947781 pinoconsulting.net colonnashipwest.com trn-harbour.com # Reference: https://twitter.com/wwp96/status/1224784499294248966 fenglingad.com lux.institute tradingforexjourneys.com outsidegraphics-cs.com dottortech.com rfpartnernetwork.com # Reference: https://twitter.com/wwp96/status/1224781167615975424 ukraivin.net sachmoi.info allworxx.com ownbitcoin.net dremtnw.com theclyo.com cleanyourdesktop.com # Reference: https://twitter.com/wwp96/status/1225529957935390720 madisonroseholtze.com softlanders.com bluecottonhome.com apachedrone.com regular123.com divineandrefined.com # Reference: https://twitter.com/wwp96/status/1226920846255689730 hypochrome.com yansixiang.com skateroads.com benh-lau.com mansiobok.com thebeseenproject.com nationalcaretrust.com # Reference: https://app.any.run/tasks/ad0cfeed-aeb4-4757-bd46-db615025bf05/ qingxunmao.com rzjie.net softgelatobusiness.com morita-m.info lovelyfeed.com vanistihdam.com jjuecorp.com cvvpp.info befindnewcarhub.live xn--9d0bt6kvvhi2dq06a.com # Reference: https://app.any.run/tasks/9fafc927-138c-4dcd-978c-6e0d3cb4937e/ liexiaoyu.com gazoly.com ihrpro.info mycoins.online keautotech.com xiaoqiug.com tialpha.net ghostwood.coffee washingtonwarrior.com # Reference: https://app.any.run/tasks/57365b94-44cd-4994-b49b-95f6d9542ee1/ chnwsdyglobalwealthandreinforcementagenc.duckdns.org know-how-products.com smfinanse.com lost-cats.com greenpathconstructionllc.info livreslive.online seedsofgreen.net taoyishun.com tahoe777.com gzakyy.com # Reference: https://twitter.com/wwp96/status/1227989980724826114 nfocorpventures.com zhangshazngmingzhu.com josieandmichael.com ionamin-international.com blackgirlmagicschool.com # Reference: https://twitter.com/wwp96/status/1228050542238326788 dbprimery.com mamaheartandhomeblog.com slacktracks.info madkrazyworld.com salienttraining.com # Reference: https://app.any.run/tasks/18d33a1b-b272-4f3a-b1f8-7743b7282dd9/ 0g1ninefall.men 5799j.com 9660123.com acbce.com airpopgrip.com claimookup.com dinu.ltd downesbuildco.com heartpotatoes.com hpnairportinfo.com jackedsonadamsarts.info koozest.com minjian-edu.com mz779.com regular123.info the-littlemenu.com tnt-tunnel.com # Reference: https://twitter.com/Jouliok/status/1228271357995180033 # Reference: https://app.any.run/tasks/69ab10fe-4ddd-420a-8f8b-39b240c313d9/ 23oakgrove-malverneast.com 6oclocksupperclub.com dovfaq.com dynamicmovementmassage.com editionlevel.services fichamed.com gsjhzs.com humanityinneedcharity.net kel1erindia.com lostrabajosylosdias.com trybestinteligen.world valdezoktoberfest.com wildfolkcreations.com # Reference: https://otx.alienvault.com/pulse/5e468cf0019b4ecbc557f209 7565657.com 908763.com barrolahl.com bhjksc.com bowriverrustic.com canhocaocaplavidaplus.net chenyirail.com christopher-cloos.com discerningdomains.com goodsystem4updating.win josieandmichael.com manguifajas.com mjarvis247.com msdcong.com naturegang.com phoenixtalons.net tzxymygs.com unsdgs-ottawauniversity.com zhangshazngmingzhu.com # Reference: https://twitter.com/wwp96/status/1228366299048431618 ulxery.com jackhaworthmortgage.com stairsstickers.com flutterbags.com phaypro.com thermalguardfoam.com seniordaters.com # Reference: https://twitter.com/wwp96/status/1228355644547309573 594cb.com glamotr.com khanebazi.com saudirana.com siarelco.com # Reference: https://app.any.run/tasks/78ad3a12-6d82-46a8-9035-cecdf8b23e6f/ ribbonlogistics.com brighidreppertdesign.com szbestvision.com ungtekno.com produitsbio.net quidoz.com asdfcard.com huanglingmianfen.com thesalsakitchen.com marcelorey.com deadbeatcosmetics.com lucasws.com enesodaci.com haierjiebest.com # Reference: https://twitter.com/cyber_gato_malo/status/1227997377807691777 simonzjewelry.com naturegang.com bjhmsp.com moralloki.com # Reference: https://twitter.com/reecdeep/status/1229390645355261953 # Reference: https://app.any.run/tasks/c9bb2639-adbe-40b9-b066-8e39cf1f1522/ yuanzhitang.com aab1.top ldot.ltd lhdhwpc.com oneillfilms.com lwqkssdz.com nigi.ltd northbridgeweb.com pressurebattery.technology # Reference: https://twitter.com/wwp96/status/1229806436403830784 daditbetter.com glamotr.com rxqp1.com # Reference: https://twitter.com/wwp96/status/1229846047066927105 osplans.com mediconthemove.com iamkantha.com gpiventures.com flutterbags.com sandcherrystables.com ulxery.com # Reference: https://twitter.com/notajungman/status/1230210986554134528 # Reference: https://app.any.run/tasks/8b09a8cf-d3f8-4ffe-9b20-c35ba8622110/ 3i-lnfotech.com bmsay.xyz cmsay.xyz erasmus-france.com etliekmekkonya.net gnamall.com itisdue.com koukoudaikou.com laffsaturday.info mcats2379.com oku.world patientsportstips.com pervade.info rdllb.info samiceramic.com us1china.com xn--3e0bv81a2rhx9e.com zhejiangft.com # Reference: https://twitter.com/wwp96/status/1230224137534214144 dronv.com graememitchley.com mobileadscontrol.com # Reference: https://app.any.run/tasks/1909e9e2-6ac6-474a-8589-5a0051e662da/ michaelsdbablog.com # Reference: https://app.any.run/tasks/b4adadc1-a270-4da7-9882-fb66ce7e03ca/ vertikutierer24.info caryxo.com uniquecutters.com tatatusupports.com # Reference: https://twitter.com/JAMESWT_MHT/status/1230862696024858625 # Reference: https://app.any.run/tasks/b7bb5802-1357-4ec9-aeff-e023c9c5acb9/ njagongsik.com lytcjz.com radark.company iphonextrade.com ysitem.com gyeswu.info quanziplus.com # Reference: https://app.any.run/tasks/ed82b375-be11-4ecd-ab76-b86d11c9ed83/ based789.top ctrip.chat doingjobs.com # Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Formbook) emizard.com hoscury.com kabsolug.com monkalef.com oyishu.com pursemtb.com scaker.com shaxob.com # Reference: https://twitter.com/James_inthe_box/status/1231962545222647809 msofficeinternatiinalfilecloudtransfer.duckdns.org # Reference: https://app.any.run/tasks/098ba1ab-160a-4270-88f2-976134f289e1/ theking.kim kinakogohan.com testingtimes.info ulxery.com xn--gzra.com paintmywedding.net healtphere.net specialityhomes.com jacobgb24.info wqsfc.info hidrosalud.life ticketcerto.com # Reference: https://app.any.run/tasks/aa5e7383-71e7-450f-94e6-8fd7e1350c4b/ riverdalestandard.com cncsurplusparts.com estrellahuang.com 023yuechang.com ricard-sameofficeial.com ulxery.com genxewm.com hqygyg.com sachthudo.com kinakogohan.com zjvod.info pigeche.com # Reference: https://app.any.run/tasks/b80a84c7-35a1-4308-b688-2f85cfd29297/ thuyhoangcoto.com viwdfw.info anastasiasfantasy.com bdplaza.com athinasailing.com nyoxibwer.com js-no-tec.com kanglaotou.com focus-ecommerce.com cheap-clothes-for-women.site markmackoart.com # Reference: https://twitter.com/JAMESWT_MHT/status/1232295249306845185 allixanes.info apuestactiva.com boozebird.com crosbybowsercoleman.com cryptozia.com knowledgedrum.com mymandan.com shirtsformanagers.com silverhill.net sundogsupply.com sxmbh.co upstatecardprocessing.com # Reference: https://twitter.com/wwp96/status/1232410976147922944 homesecuritysystemsny.com medd.site czhyzy.com ulxery.com technologyspoon.com glasgowcourtslawyers.info # Reference: https://twitter.com/wwp96/status/1232409688110718977 affectcbd.com hzcmhm.com mscgrroup.com thumdyn.com wlmqmbwx.com # Reference: https://twitter.com/wwp96/status/1232395733900374017 canada49ac.com dev-ops.us onechere.com # Reference: https://app.any.run/tasks/f27ab2f5-f0d3-47e1-9081-5964e9a05b4e/ 477ope.com 150gpa.com shukastu.com caryxo.com 37collingwoodst.com xolcoin.com # Reference: https://app.any.run/tasks/448d9f9b-af58-4a95-a317-77e4f6d86dd3/ mudanyadaotel.com conmdemamen.com sgcpic.com caryxo.com 150gpa.com codeedge.net leletaovip.com zaco.top barrio-libro.com # Reference: https://app.any.run/tasks/cf45229c-410d-499a-8577-927c5c33bfa5/ carrotaller.com 1523sussextpke.info enpuntoni.com 830manbet.com alkcz.link republlcco.com worstig.com provinciaricaurte.com vwabo.info # Reference: https://twitter.com/1ZRR4H/status/1232441079837777920 snbnamibia.com # Reference: https://app.any.run/tasks/9b6cfba3-3edf-4044-b6d0-90690afa5cda fitgime.com allixanes.info ugot2b.com # Reference: https://twitter.com/killamjr/status/1233714210816704512 americancloudfiletransferprogramin.duckdns.org # Reference: https://twitter.com/wwp96/status/1234505353527689218 modernboot.com/h2o/ decormagz.com/h2o/ elomafus.com/h2o/ amitywomenspt.com/h2o/ agitatorfactory.com/h2o/ # Reference: https://twitter.com/wwp96/status/1234512894588575744 auroraexpres.com/m5g/ sluttychefs.com/m5g/ resplendentsoul.com/m5g/ jxpingji.com/m5g/ angryfatman.com/m5g/ singlechimp.com/m5g/ mainahao.com/m5g/ # Reference: https://twitter.com/wwp96/status/1234523991739596801 worstig.com/kx9/ carrotaller.com/kx9/ worstig.com/kx9/ christinamjkim.com/kx9/ guidaalluso.com/kx9/ # Reference: https://twitter.com/wwp96/status/1234511070146027527 quidoz.com/r30/ 9227kkk.com/r30/ sellanews.com/r30/ gominou.com/r30/ woodruna.com/r30/ andlynweb.com/r30/ tributenora.com/r30/ casaboquete.com/r30/ # Reference: https://twitter.com/wwp96/status/1234926865556606978 carrotaller.com/kx9/ showshow.club/kx9/ guidaalluso.com/kx9/ foodindia-bysial.com/kx9/ sebengriffin.com/kx9/ christinamjkim.com/kx9/ # Reference: https://twitter.com/wwp96/status/1234931238076657665 vinoblay.com/tx3/ sexualitymenshop.com/tx3/ healingherds.com/tx3/ ricsawproperties.com/tx3/ # Reference: https://twitter.com/wwp96/status/1235242516825415687 # Reference: https://app.any.run/tasks/081940ee-da4b-4466-bd9b-66a6aeb1268c/ psychesiren.com/j9t/ bigdickfuckgay.com/j9t/ 7565657.com/j9t/ zhangshazngmingzhu.com/j9t/ vulcan-mania.com/j9t/ momvibez.info/j9t/ ionamin-international.com/j9t/ # Reference: https://app.any.run/tasks/119740cc-d4b5-46b1-94dd-6090a2d07f6d/ americancloudfiletransferexcelfile.duckdns.org # Reference: https://app.any.run/tasks/ce4cc99b-3e9f-437d-bdc2-e15229b8ae73/ shgshgsndy6nationalindustrialgoogleklm.duckdns.org # Reference: https://twitter.com/wwp96/status/1235249891904978946 # Reference: https://app.any.run/tasks/41796c37-40c8-49a5-8581-66a24fdf2f5c/ fulltimepreschool.com/q0s/ trianting.com/q0s/ gpiventures.com/q0s/ shipinluoliao.com/q0s/ flutterbags.com/q0s/ lefongplaza.com/q0s/ ulxery.com/q0s/ # Reference: https://twitter.com/wwp96/status/1235585908637868032 proofresearch-germany.com/e8p/ import945.com/e8p/ 4lcoin.com/e8p/ combscollisioninc.com/e8p/ xn--s80b57jcsde6fcyau51f.com/e8p/ # Reference: https://twitter.com/wwp96/status/1235950654524448774 costabravadoctors.com/ot2/ eventierspace.com/ot2/ naturehealingshop.com/ot2/ asyule225.com/ot2/ lazydoona.com/ot2/ vlemi.com/ot2/ norjax.com/ot2/ triom.tech/ot2/ # Reference: https://twitter.com/wwp96/status/1235968366680117249 classiccurtainskent.co.uk/kx9/ enpuntoni.com/kx9/ breakapp-view.com/kx9/ worstig.com/kx9/ thepilltheplay.info/kx9/ myattendance.today/kx9/ # Reference: https://twitter.com/wwp96/status/1236013793290878976 amistadcristianairapuato.net/zy8/ sousvidemasters.com/zy8/ parosbet.com/zy8/ dronv.com/zy8/ dgsellsrealestate.com/zy8/ fjellburet.com/zy8/ prboatrentals.com/zy8/ # Reference: https://twitter.com/w3ndige/status/1237078724786479104 # Reference: https://app.any.run/tasks/9ee06ab6-2741-4547-bd64-3437c241b3cd/ officearchives.duckdns.org sommernph.com # Reference: https://twitter.com/wwp96/status/1237107769129553922 # Reference: https://app.any.run/tasks/7ec58842-7c33-4623-8c5a-6058074b45b9/ ssquid.net/mr02/ aoikyoutei.com/mr02/ cqyongs.com/mr02/ samuraisracing.com/mr02/ grievingly.com/mr02/ discountsclicks.info/mr02/ wanyaobxg.com/mr02/ 808korean.com/mr02/ # Reference: https://twitter.com/wwp96/status/1237460282647199745 # Reference: https://app.any.run/tasks/6b3c7009-01ec-4739-9d54-9d2d8320d6a1/ junhao12131.com/r30/ milar.farm/r30/ kalpnacaters.com/r30/ quidoz.com/r30/ lumencos.com/r30/ andlynweb.com/r30/ trekofpersia.com/r30/ ilyakids.com/r30/ # Reference: https://twitter.com/wwp96/status/1237458425287712768 # Reference: https://app.any.run/tasks/4b7ada4b-f96d-4516-b9e3-54ef9dc4bf33/ sidinstitute.org/ri01/ whatareyousoafraidof.com/ri01/ trumpcoin.online/ri01/ me-mart.com/ri01/ discountsclicks.info/ri01/ longrunohm.com/ri01/ 34lv.com/ri01/ # Reference: https://twitter.com/wwp96/status/1237466791322046464 # Reference: https://app.any.run/tasks/2b83d26c-b74f-4ed2-8929-5d9df254ddd0/ 5554975.com/l89/ nercox.com/l89/ unicigar.com/l89/ raztrans.com/l89/ drousehair.com/l89/ # Reference: https://twitter.com/wwp96/status/1237477304009240576 # Reference: https://app.any.run/tasks/bd661e9c-92a8-4508-b3b0-1f8ecd380e55/ 808korean.com/mr02/ discountsclicks.info/mr02/ ssquid.net/mr02/ planetmecharnical.com/mr02/ samuraisracing.com/mr02/ bulmmaf.com/mr02/ yibo.ltd/mr02/ # Reference: https://twitter.com/wwp96/status/1237485063366942722 # Reference: https://app.any.run/tasks/b0178458-4783-4cdc-bf95-0683c92e775f/ crokve.com mix2025.net midasrxpharmacy.info kreasidesain.com livelifeoutonalimb.com linkseepay.com # Reference: https://twitter.com/wwp96/status/1237487962566393858 # Reference: https://app.any.run/tasks/50b155ce-7d71-4f09-b3d6-6c6236722c9f/ aprils-website.info/r30/ sipenyuluh.com/r30/ buy-cyprus.com/r30/ appsdidi-secaccount.com/r30/ sellanews.com/r30/ fidem-consecuta.com/r30/ woodruna.com/r30/ # Reference: https://twitter.com/wwp96/status/1237802222991413258 # Reference: https://app.any.run/tasks/f4e1007c-482b-49b7-a972-abeabe34af29/ cutdream.com/kx9/ showshow.club/kx9/ christinamjkim.com/kx9/ myattendance.today/kx9/ guidaalluso.com/kx9/ # Reference: https://twitter.com/wwp96/status/1237794145940525057 # Reference: https://app.any.run/tasks/b3b3beef-bb19-4343-b078-7fb1e923873a/ leaseloveown.com/l0x/ bridalphotographystudio.com/l0x/ doverax.com/l0x/ ecomcollege.com/l0x/ teetailz.co.uk/l0x/ # Reference: https://twitter.com/JAMESWT_MHT/status/1238078045027794944 # Reference: https://app.any.run/tasks/69676e2c-6f89-463a-be79-1c26e03fc734/ ariafm.gr flammaart.com isome2018.com opebet199.com # Reference: https://twitter.com/malwrhunterteam/status/1239863667409276928 mastervisacloudesystemprtomicrosftwareus.duckdns.org # Reference: https://www.virustotal.com/gui/file/be3cfbf10a732af9965dab5b769ef622233eeca26dc1a3e541326e7ce6788bab/detection indexcalbromarisportallservices.duckdns.org # Reference: https://app.any.run/tasks/83bd9eb8-7e5a-43af-b131-361590b336b5/ freehobbysolutions.com moswanted.com votravo.info # Reference: https://twitter.com/FewAtoms/status/1240322356880576513 msofficewordfiletransfertotheadmintrue.duckdns.org # Reference: https://twitter.com/Jouliok/status/1242187207588405248 tescohomegroseryandelectronicstday2store.duckdns.org # Reference: https://github.com/silence-is-best/c2db#formbook liuhe127.com # Reference: https://twitter.com/JayTHL/status/1242196123848245248 # Reference: https://pastebin.com/raw/8qSuUVB4 1ameem.com 1billionhappy.com 1billionwell.com 5product.com 60apexchecks.com 60checks.com 6figurepayraise.com abillionhappy.com abillionwell.com acton.in actonlabs.in ahcprheumatology.com apexasset.io apextech.biz apextech.info apexworld.io apexworldlaunch.com apexworldlaunch.tv ashfaque.me atefehjewellers.in auracoolum.com.au awakencharlotte.com bellkrank.com beonbeauty.co.uk bestexoticdogs.com brandon--sellers.com bunkworks.co.uk cakesque.com caraconsulting.services careandcompanion.co.uk caribbeanwebfestival.com classysun.com classysun.info classysun.net clownpenis.solutions colwellandcolwell.com comfortzonemarketing.com coronadocobshop.com crystalindiainfra.com danandrobbie.com davidhareart.com dealerships-suck.com dianetyrrell.com diyajewel.com dotadois.com drkswrks.com dubaiexoticdogs.com earn60apexchecks.com earn60checks.com earn60techchecks.com epica.life epicassets.info epicassets.io exoticmicrobullydogs.com exoticmicrodogs.com expertsat.io fidatoo.in finalclear.com funerarianevarez.com get60checks.com getservices365.com globonovo.com gmshorses.com golitech.com goodygifter.com goteamdeveloper.com grandmascheesecakes.com griotplus.com harvestyourownhemp.com haula.net helo.life heloworld.us henready.co.uk hilaryreading.com houseprof.ca iamallin.com iamhappyandwell.com ilearner.com.tw incrediblykayla.com iowabaseballranch.com iqteamfreedom.com iqzoom.us isai4me.com islandspect.com isthisforme.com isyys.net janfitzpatrickhomes.com jeremyroma.com jointhecoinclub.com jonicablog.com kamanait.com kimmys.com kimmysrestaurant.com kinderism.org korling.de labaccidenttheband.com levatemediamarketing.com lifetech.io lilannie.com livecryptostatus.com magnabusinessconsulting.com martinidewinter.com matchmymatrimony.com memeingoflife.com middlewaremaniacs.com mil-leon-clothing.com milleonclothing.com millionairebootcamp.io mohanlakshmipathy.com moist-towelettes.com moneyiq.tech mortgageclaimscentre.co.uk mustbenyce.com mybtcdeposit.com mymoneyiq.io nanghtikeaung.com nashvilleeastrentals.com natureswebb.ca newchain.io neweuphoria.com newlotions.com nicegirl.nyc ninewestfinancial.com nitramax.in okayspark.com ollie-wood.com pennyfables.com perilli.com pharmdcareers.com pippingstudio.com primegusclub.shop psychotherapyandcounsellingmelbourne.com rashtraudhyog.com reliefcbg.com repdestroyer.com repdestroyers.com rerecall.com rhumboogie.ws richdeboer.com rollingwithjoe.com romasboutique.com rubell.nyc rubellmanagement.com ruhiz.fashion rushcode.in secautotransport.com shittlez.com simonmiminis.com solosugiero.com steelecreekpresby.com sunshinecoastmow.com.au switchuations.life taichibham.org td.world thaomoctrungdong.com thebrainworkacademy.com thebulldogpubgrille.com thecottagepiecompany.co.uk thedistractedwriter.com theellisgroupholdings.us therealworldchangers.com theroommom.com thesuccessalliance.in tmpist.com tnmedonline.xyz topexoticdogs.com totheranchandback.com transforselogistics.in trizle.com tylascountrygarden.com uberspace.co.in umidaroma.com urbnwarrior.com vagastophostels.com waldorfian.com wisconsinmicrogreens.com # Reference: https://app.any.run/tasks/847e1945-3b02-422f-8030-5722b20ffc44/ rogerssmarthealth.com ahzike.com sonnensteinwasser.com alxbrtn.com # Reference: https://www.virustotal.com/gui/file/6fe43863e02d4a6fb20cbb2c2ad39368abef81636f597da94f7234af2dea47e4/detection 0573sghp.com/sm02/ 44exex.com/sm02/ discountsclicks.info/sm02/ istikhara786.com/sm02/ labo10.com/sm02/ lifflander.net/sm02/ piczum.com/sm02/ piknus.com/sm02/ selfieblast.com/sm02/ sluas.com/sm02/ ventouse-carrosserie.com/sm02/ wulkan-mania.com/sm02/ # Reference: https://www.virustotal.com/gui/file/ec7d04da5408d773d949a47cdbbe102b5548ca7358b8d6bf677c3033df5bf04f/detection athlete50.com/cs2/ govaj.com/cs2/ htma.us/cs2/ jinshengintl.com/cs2/ movingtowardsmeaning.com/cs2/ shengdestone.com/cs2/ susapflug.com/cs2/ vaisnavalife.com/cs2/ yb77777.com/cs2/ # Reference: https://twitter.com/FewAtoms/status/1243249736662028288 systemserverrootmapforfiletrn.duckdns.org # Reference: https://www.virustotal.com/gui/file/bc000ae8600c8e6fadceb92af23b0f929ec90ea9184675428f88c01b61af6c63/detection 2070pe.com/te/ crisngrt.com/te/ jlzbtx.com/te/ kranche.com/te/ # Reference: https://app.any.run/tasks/cc60c746-1cf8-4adf-8055-4964111c1c9f/ catalinacustomcreations.com/y8r/ # Reference: https://twitter.com/58_158_177_102/status/1245619205833031683 # Reference: https://otx.alienvault.com/pulse/5e8618aa07d72250efbcc853 grabascoop.com/e8p/ # Reference: https://www.virustotal.com/gui/file/c07e2d84c2f5cef7c52c89516cddb219451e2ca0a9bc8c2c98a438cd16db351f/detection alarmaconhumo.com/zu/ episdenergy.com/zu/ kervax.com/zu/ lautrevision360.com/zu/ medialab-infos.com/zu/ nadirezeki.com/zu/ twfutures.com/zu/ viviselfie.com/zu/ xinheguoji.com/zu/ xinyanjiazheng.com/zu/ # Reference: https://www.virustotal.com/gui/file/616662d9be4b626c73d56cdd6ab4992dbe124de7ce8769630da99397087eea3f/detection kervax.com/nu/ networkmarketinghq.com/nu/ zswei.com/nu/ # Reference: https://www.virustotal.com/gui/file/d31f7974458508d491e0840db4385c5a38731195cae24a891abb24bb4699c9b3/detection cambridgehomeimprovements.com/nu/ # Reference: https://www.virustotal.com/gui/file/125a3d4bdb49a67bb4a9dfb6a7c3a09f82083392a76ea1b5cec87bb477ca6bda/detection bowerbirdnest.com/nu/ mauritiusurlaub.com/nu/ # Reference: https://www.virustotal.com/gui/file/24a1fd76b3daece9142d9ec00807f9bf1bb15831bf72646f013464c8dd94acd1/detection buildthemind.com/ej/ chuanyuemeili.com/ej/ goldmanjewelers.com/ej/ kervax.com/ej/ kevincurley.net/ej/ newconnectbiblestudy.com/ej/ # Reference: https://www.virustotal.com/gui/file/5d7a56e18e95592673a4c922d86375a168e695966502007cb6b67c1bcc0f16b8/detection kervax.com kervax.com/dy/ traumainformedlens.com/dy/ varolemlak.net/dy/ # Reference: https://www.virustotal.com/gui/file/7e756510a7ed412001857c371cafb5af3158eb0a73c9b51eb5823d9002c7d3a8/detection dalu.ltd/gh/ purespeech.net/gh/ # Reference: https://www.virustotal.com/gui/file/1c57ad28bc07997adeb829bda45513521d95fe2c6880736f69fa701828a30255/detection cricketxtreme.com/sk/ dikaiyun.com/sk/ hypno.solutions/sk/ kervax.com/sk/ playlanddaycare.biz/sk/ tunegeartech.com/sk/ ukholidayhome.com/sk/ ybsankeshu.com/sk/ # Reference: https://www.virustotal.com/gui/file/af14c1c7562021939f0a68e699a3ba28e26cb6d8d12e8df2c8ca4deba6ceacd7/detection dalu.ltd dalu.ltd/gh/ fangjiedaikuan.com/gh/ kervax.com/gh/ massimogirardi.com/gh/ shiweitian.net/gh/ vidolin.info/gh/ # Reference: https://www.virustotal.com/gui/file/fc9be600e3961102a93f5096cac156c1be7e875af98e12ab4f85698f8442475b/detection byhisgraceestate.com/sh/ comet-sunsun.com/sh/ honeyanda.com/sh/ kervax.com/sh/ maltafarmhouse.com/sh/ shciicoe.com/sh/ zpjrt.com/sh/ # Reference: https://www.virustotal.com/gui/file/3e85d65f5ea95309ad331f5c371449ae85bad3efd0e272b3983377f54a5dee32/detection fensier.com/sh/ kervax.com/sh/ lapanganpoker.com/sh/ lex-investigations.info/sh/ napshoes.com/sh/ sunbul-phone.com/sh/ umrah-visa.com/sh/ # Reference: https://www.virustotal.com/gui/file/47b251c6e857843db7f377471c90ec48d3ea0f0f5ced461aebf607644815f181/detection byhisgraceestate.com/sh/ cbd-innovation.com/sh/ eba-ecoenergy.com/sh/ sabetta.family/sh/ # Reference: https://www.virustotal.com/gui/file/b066282209652ab35d7f93ce103b33b06a10e9d4b74e1ea3263466e2789b422d/detection dharmaworksonline.com/gh/ dukabcn.net/gh/ fangjiedaikuan.com/gh/ gppz999.com/gh/ kervax.com/gh/ mirinavsgorgon.com/gh/ niyoufan.com/gh/ yinstkd.com/gh/ # Reference: https://www.virustotal.com/gui/file/bb8d0853cb0dad63c6098031f2166ba7171259efc5ce83968bdf121cfdff8763/detection # Reference: https://www.virustotal.com/gui/file/21deeba7640f04a0149d5bd890d8a638c1e126e82c49d0d04a5fcf42c3e5af75/detection 5injlq.com/wi/ 720wangzhan.com/wi/ adjointlab.com/wi/ adskitchen.com/wi/ ashishtank.com/wi/ backroomcoffee.com/wi/ cbelleza.com/wi/ chocoval.com/wi/ formattressesok.live/wi/ iron-rain.com/wi/ jamaltooley.com/wi/ janeadamwedding.com/wi/ kervax.com/wi/ lec88.com/wi/ lingnuoguanjia.com/wi/ mengxiangfengcai.com/wi/ musicbyrivals.com/wi/ nvwang41.com/wi/ pg5-formations.com/wi/ tinymarvels.com/wi/ understandingbitcoin.info/wi/ web-design.review/wi/ wm-sb.com/wi/ xyfps.com/wi/ zen507.com/wi/ # Reference: https://www.virustotal.com/gui/file/e97f3ad278b659df4d30bf8181f0698562342e7c03a5a1d41bc601856b2b725c/detection claddingsheets.info/m01/ coinpon.biz/m01/ kervax.com/m01/ listingclose.com/m01/ ructious.com/m01/ rustedcrate.com/m01/ yczpsh.com/m01/ zeroabuseproject.info/m01/ # Reference: https://www.virustotal.com/gui/file/627b93e8da6daaee1b32bc527ca60f79c501ecd0a3a820fc2a7dea588a795f24/detection 2enablehealth.com/jw/ amindfulearth.com/jw/ janainaerobson.com/jw/ kervax.com/jw/ spaceteamentertainment.com/jw/ sweetsenbake.com/jw/ twz1982.com/jw/ xyi876.com/jw/ # Reference: https://twitter.com/James_inthe_box/status/1249767134269304835 masionlex.info # Reference: https://twitter.com/James_inthe_box/status/1250077975803916288 thamxop.net # Reference: https://twitter.com/FewAtoms/status/1252947093171441665 systemintergrafileexchangeserverprotocol.duckdns.org # Reference: https://twitter.com/petrovic082/status/1255122599354552323 thesecuritysoftwarescannerindustrgreat.duckdns.org # Reference: https://www.virustotal.com/gui/file/9dce0e1dfbf676137ce1e57f626ad4911056a18c8bdc76f8c3d9b6eaff117092/detection blkdotconnect.com/t8a/ cufusionevents.com/t8a/ guojizk.com/t8a/ jakedfinkel.lawyer/t8a/ pikio24.com/t8a/ radioncr.com/t8a/ spenbulk.com/t8a/ # Reference: https://app.any.run/tasks/8c381564-3161-42e7-8e91-142990fe4717/ # Reference: https://app.any.run/tasks/6a7d9731-d5de-42ed-85d7-84bc2866196d/ # Reference: https://app.any.run/tasks/ee7b9409-b311-4152-bcea-885e2f055215/ 1l4m-5qeh0cgx9a.com amazingthunderworks.com badnoordzee.com cosmemia.com cryptofinance.services devereaux.us empety.com garden-scope.com godhep.com hamptonandjones.com hulebang.com jiudianhuixun.com keeperofthebeesnwnj.com mangaromance.com myplusha.com odjmusica.com portsel.com quantumreapers.com schoolofintrovertship.com sippingnpaintingcolorado.net storeketo.com studio815.salon supremeondemand.com vannuysland.com wyalusingbeverage.com # Reference: https://twitter.com/DynamicAnalysis/status/1260721412773380096 russchine2specia21plumbingsndymaterialjp.duckdns.org # Reference: https://unit42.paloaltonetworks.com/silverterrier-covid-19-themed-business-email-compromise/ 12kungwsdyducationaldeveloperinvestmenty.duckdns.org 6uniteddefenceforstdygorvermentsocialeme.duckdns.org americanmicrosoftclouddepartment.duckdns.org antipiracydetectorganisationforwsdy3film.duckdns.org bbchenkotsdywoolandpappercompanybnhs5.duckdns.org chinoex2onlineantibullyandgeneralxpstdy5.duckdns.org chnes9wealthandstdyorganisationsumit.duckdns.org chneswealstdy8thandorganisationjokbo.duckdns.org chneswealthandorganisationstdy7joppl.duckdns.org chneswsdy13wealthandmoduleorganisationrn.duckdns.org chneswsdy8wealthandorganisationjokbo.duckdns.org chnfrndsecurityandgorvermentstdy1socialf.duckdns.org chnfrndsub1inteligentangencysndy4project.duckdns.org chnfrndtsdysecurityandgorvermentsocialjf.duckdns.org chnfrndwsdy1securityandgorvermentsocialf.duckdns.org cloudfilesharingdomainurllinksys.duckdns.org crimedetectivefor1stdygorvermentndsocial.duckdns.org empowermentorganisationstday1government.duckdns.org engin3worldstdydevelopmentandtechnology.duckdns.org engintsdy3worlddevelopmentandtechnology.duckdns.org fileexchangeserverprotocolsystemintergra.duckdns.org filegotosecureothers.duckdns.org frndgreen1frdycreamcostmeticsladiesshop.duckdns.org frndgreen3creamwsdycostmeticsbabystored.duckdns.org globaltransfersecurefilethroughcloud.duckdns.org green9wsdyelectronicsandkitchenappliance.duckdns.org investmenteducationkungykmtsdy8agender.duckdns.org kung11ducationalstdydeveloperinvestmenty.duckdns.org kung13eduationalstdydeveloperinvestmenty.duckdns.org kungeducationalinvestment8tusdyagender.duckdns.org kungfrdyeducationalinvestment8agender.duckdns.org kungglobalinvestmenteductgpmstdy8addres.duckdns.org kungglobalinvestmentjpjeductaddres5stdy.duckdns.org kungglobalinvestmentjpjwsdy6eductaddres.duckdns.org kungstdy7globalinvestmentjmpeductaddres.duckdns.org kungwsdy7globalinvestmentjmpeductaddres.duckdns.org livevideoremoteconference.duckdns.org mastervisacloudesystemprtomicrosftwareus.duckdns.org msofficeinternatiinalfilecloudtransfer.duckdns.org msofficewordfiletransfertotheadmintrue.duckdns.org office365securefilegatewaytransfer.duckdns.org omentradinginternationalprivateltd.duckdns.org prodigtsdy5organizationalcompanygroupin.duckdns.org russchine2specialstdy1plumbingmaterialsv.duckdns.org russchine2specialstdy2plumbingmaterialgh.duckdns.org russchine2wsdy1specialplumbingmaterialsv.duckdns.org russchine2wsdyspecial6plumbingjkmaterial.duckdns.org shgshg13nationalwsdyobjindustrialatempt.duckdns.org shgshg9nationalobjwsdyindustrialgoogler.duckdns.org shgshgnationalindustrialwsdy8googleklm.duckdns.org shgshgnationalobjindustrialstdy10atempt.duckdns.org shgshgnstdy7ationalindustrialgoogleklm.duckdns.org shgshgstdy9nationalobjindustrialgoogle.duckdns.org silentexploitfileexchangerzeroday.duckdns.org tescogroseryand1wsdayelectronicstorehome.duckdns.org tescohomegroseryandelectronicstday2store.duckdns.org tescostday1groseryandelectronicstorehome.duckdns.org webxpostdytechnologyhardsoftware5buyers.duckdns.org wewewewewesesesesasbacwederffggffddsss.duckdns.org windowsdefenderwithfiewallprotocolsecure.duckdns.org windowsfirewallprotcolsecuritysystem.duckdns.org worldengindevelopnw7stdymenttechnology.duckdns.org # Reference: https://twitter.com/luc4m/status/1261260538870366210 6wsdychinese2profesionalandhealthanalpn.duckdns.org # Reference: https://news.sophos.com/en-us/2020/05/14/raticate/ ef-oh.com/c208/ odoyo.net/c208/ hearee.com/c208/ binzom.com/c208/ pizzans.com/c208/ phochain.com/sa/ rdrfi.com/sa/ skylod.com/sa/ hsctsu.com/sa/ cbespania.info/c206/ conrak.net/c206/ coxemen.com/c206/ dachfix.com/c206/ hypnose-beziers.com/c206/ jevmod.com/c206/ lighthouse-campus24.com/c206/ miscov.com/p0x/ oleum.gmbh/c206/ pupilfy.com/c206/ ratokasutka.com/p0x/ tellpizzqhut.com/c206/ terenium.com/c206/ vibe.restaurant/c206/ yamatobb.com/c206/ yncits89.com/p0x/ czxpkj.com/c206/ cbespania.info/c206/ jevmod.com/c206/ slashoff.com/c208/ sofisleep.com/c208/ jinshasoft.com/c208/ binzom.com/c208/ bywebhost.com/c208/ jinshasoft.com/c208/ # Reference: https://app.any.run/tasks/fe1f56d5-b4ac-401f-abcf-2e25957c13da/ methvenonthemove.com 3lmktgsvc.com hylg6.com 100fwq.com laperamordidablog.com gtitdunproductions.com glamotd.com www.azasianow.com/gm1/ # Reference: https://app.any.run/tasks/58333b8b-3488-492e-a1e2-f61bec0a1cca/ teampositiongurus.com zulfahly.net capterium.com # Reference: https://twitter.com/DynamicAnalysis/status/1263680114476191744 webxpoadukejumokeadejokeabolanleholagg.duckdns.org # Reference: https://www.virustotal.com/gui/domain/creatonetwothreefourfivesexsevenmansgg.duckdns.org/relations creatonetwothreefourfivesexsevenmansgg.duckdns.org # Reference: https://www.virustotal.com/gui/domain/metadefenderinternationalsolutionfor.duckdns.org/relations metadefenderinternationalsolutionfor.duckdns.org # Reference: https://twitter.com/malwrhunterteam/status/1264882811141488641 aviraantivirussecuritysystempro.duckdns.org # Reference: https://twitter.com/JAMESWT_MHT/status/1265553518049492992 chinese3lowncomeiscausedbythepandemic.duckdns.org russchine2loganxmenischangedtonewperson.duckdns.org # Reference: https://twitter.com/JAMESWT_MHT/status/1268827911722799104 22kungcommunicationtariffsuplierlimthdy.duckdns.org # Reference: https://app.any.run/tasks/947a591b-200c-4409-8a71-7888da9c93fa/ beautyqueenstores.com/k0f/ chataan.com/k0f/ fattireflights.com/k0f/ moviesfan.net/k0f/ printpeacock.biz/k0f/ sptor.net/k0f/ superwebox.com/k0f/ # Reference: https://twitter.com/JAMESWT_MHT/status/1271356489341558785 # Reference: https://app.any.run/tasks/d85e6f91-5369-454c-ae9f-996dea6743c8/ s-immotanger.com/n7ak/ moodandmystery.com/n7ak/ kangen-international.com/n7ak/ joomlas123.info/n7ak/ runzexd.com/n7ak/ belviderewrestling.com/n7ak/ # Reference: https://twitter.com/MaelSecurity/status/1274414782645506049 # Reference: https://app.any.run/tasks/ad5f5540-df5d-4f7d-853d-9ae4a97be620/ officedocumentfilesharingcloudbaseservi.duckdns.org # Reference: https://app.any.run/tasks/e6dbb7aa-2d2b-4031-be25-0a86c263a6f6/ asmreekasounds.com arhiereus.com oxagp.loan handyngoods.com simoneisaaclifestyle-1.com akbank-mobil-giris.com wrrsh.com # Reference: https://app.any.run/tasks/ec7fd1c0-e975-44b1-8719-b0d2b7dfa568/ abiligo.net/kkb/ glamotd.com/kkb/ iscompetition.net/kkb/ renkoto.net/kkb/ 2nfq.com adsars.com aretocloud.com dentalonline.info myvelvetcollection.com theluxuryindustry.com # Reference: https://twitter.com/FewAtoms/status/1275473977885024261 firewallinternationalgatewayforoffcefile.duckdns.org # Reference: https://twitter.com/FewAtoms/status/1276181803712167936 americanfirewallsecuritysystemprotocolfi.duckdns.org # Reference: https://www.virustotal.com/gui/domain/wsdychnesqudusisabadassniggainthe30wmg.duckdns.org/detection wsdychnesqudusisabadassniggainthe30wmg.duckdns.org # Reference: https://urlhaus.abuse.ch/downloads/text_recent/ 22chnesqudusisabadassniggainthehudolat.duckdns.org 22kungcommunicationtariffsuplierlimthdy.duckdns.org 23chnesqudusisabadassniggainthehudokgd.duckdns.org 2morcmmytalententertamentforwsdyshampn.duckdns.org 4sndychinese2onlyywalkaloneinlifea1ptc.duckdns.org americanfirewallsecuritysystemprotocolfi.duckdns.org chinese2stdyonlyywalkaloneinlifeagfd10.duckdns.org chinese2thdy9onlyywalkaloneinlifeanre.duckdns.org chinese2wsdyonlyywalkaloneinlifea13klm.duckdns.org chinese3higncomeiscausedbythepandempv.duckdns.org chinese4higncomeiscausedbythepandevop.duckdns.org chinese5higncomeiscausedbythepandekjp.duckdns.org chinese7higncomeiscausedbystdythepandybv.duckdns.org chnes29sndyqudusisabadassniggainthebba.duckdns.org cprvstd4upcomingtalentanimationauditnyc.duckdns.org cprvtsdy2upcomingtalentanimationauditics.duckdns.org firewallinternationalgatewayforoffcefile.duckdns.org green13kegheedahatakankeadeshnaastdyjlp.duckdns.org green14kegheedahatakankeadeshnaawsdycxz.duckdns.org greenkegheedahatakankeadeshnaajaotawqsz.duckdns.org greenkegheedahatakankeadeshnaajaotawsut.duckdns.org honeysposecurityfileexchangeservice.duckdns.org internationalantivirussmartscreensecur.duckdns.org irequestyoutopleaseadviseonthepayment.duckdns.org kung20communicationtariffsuplierlimited.duckdns.org kungsndycommunicationtariffsuplier27abj.duckdns.org livelifewithnocoronafearforcountry.duckdns.org microsfotinternetsecurefiletransferserve.duckdns.org microsoftvirutalmachinefilesafetytransf.duckdns.org mkpksb1behindcloseddoormatchisnotgoods.duckdns.org morcmmystnewtalententertamentfor1winner.duckdns.org officedocumentfilesharingcloudbaseservi.duckdns.org ppkpsureksub2mondaynightgraceofalmighy.duckdns.org ppkpsuresub1intercontinentalsuitishere.duckdns.org russchine2mapanxmenischangedonewpethdy9.duckdns.org russchine2mapanxmenischangedtonewperkkg.duckdns.org russchine2mapanxmenischangedtonewperpvc.duckdns.org russchine2mapanxmenischangestdy10donewcx.duckdns.org russchine2mapanxmenischangestdy12donexaz.duckdns.org russchine2sndymapanxmenischangedone14ajb.duckdns.org sharefildecenterforsecurefiletransferwin.duckdns.org sndychnesprvallanouthegreatsoustraofour.duckdns.org sndychnesprvlandofglorylandoflifeforle.duckdns.org sndychnesprvwaybackmaybachholdbageverl.duckdns.org sndykrlssnp4curruptgovernmentagencytlki.duckdns.org transferwisefirewallsystemupdatedinfo.duckdns.org united17sndyfokesokoriorimistreetsjxzw.duckdns.org united31stdyfrkesokoriorimistreetsjmng.duckdns.org webxpopunlariscostlyinthemarketsevelmk.duckdns.org webxstdy18popunlariscostlyinthemarketzq.duckdns.org workfine12stdyanotherrainbowlomoyentfkw.duckdns.org workfine15wsdyanotherrainbowlomoyenttdf.duckdns.org workfine7alogorainbowlomoyentonloyevpn.duckdns.org wsdy6pksnpcoperategovernmenttgpdagentx.duckdns.org wsdychnesqudusisabadassniggainthe30wmg.duckdns.org # Reference: https://twitter.com/Bl4ng3l/status/1276446227928924160 # Reference: https://app.any.run/tasks/d8c16703-53bb-47f3-8ecb-4414bc42451a/ 3or8mwa-ynq.com betokem.com freamsahub.online irmcentral.com porcber.com # Reference: https://app.any.run/tasks/a998e908-7e78-4c69-aa4a-0fb899669078/ selfdrivingpractice.com sh-feiye888.com doneym.com s-t-a-r-b-u-c-k-s.com bowrivarenergy.com akgulsa.com # Reference: https://twitter.com/Bl4ng3l/status/1277882548098609157 glpfundraising.com goodfatco.com aliyahbrack.com omgpu.com glamotd.com mc-davo.com planningforsurvival.net aretocloud.com cheffrais.com helenhotfm.com tv17403.info bushfriends.com aretocloud.com renforts7.com calciobalillaroma.com hxjmzc.com dynamicmusiq.com iscompetition.net nidaot.link lechefchile.com glamotd.com aliyahbrack.com halal.exchange glpfundraising.com goodfatco.com envydesignhouse.com dentalonline.info # Reference: https://twitter.com/Dr_N0b0dyh/status/1277872993650331650 sndykung29communicationtariffsupliergfd.duckdns.org # Reference: https://twitter.com/reecdeep/status/1278948869531930624 kungwsdycommunicationtariffsuplier30mgh.duckdns.org # Reference: https://www.virustotal.com/gui/domain/chnfwsdytwomanglobalbusinessexyandjps.duckdns.org/relations chnfwsdytwomanglobalbusinessexyandjps.duckdns.org # Reference: https://app.any.run/tasks/160c15e2-65a2-4a4a-9e4c-c48dda841e90/ # Reference: https://app.any.run/tasks/2cc7e325-5d33-4cbb-bcd6-fc873b336167/ regulars7.info gographics.promo lsalik.com onlinekharisma.com tt1558.com stylishbeans.com wireformationtechnologies.com # Reference: https://www.virustotal.com/gui/file/2edc612812919760be42de00fde052d6808281cd5009fb6050b21b67cc6db93f/detection healthclubpdx.com/gw8/ sandrxy.com/gw8/ healthclubpdx.com/gw8/ bennettfoamaustralia.com/gw8/ robertdebartolo.com/gw8/ robertdebartolo.com/gw8/ healthclubpdx.com/gw8/ sandrxy.com/gw8/ bennettfoamaustralia.com/gw8/ sandrxy.com/gw8/ bennettfoamaustralia.com/gw8/ cheekywebhosting.com/gw8/ # Reference: https://www.virustotal.com/gui/file/9dae9325edf14a042013558bf5d564a8c67491813b63fa66a3eb79aec59ed4b5/detection amaliagris.com/r86/ dna-cancertest.com/r86/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1281592784407990273 19workfineanotherrainbowlomoyentwsdywrk.duckdns.org # Reference: https://www.virustotal.com/gui/file/ebbbbbd6f76c1d7557568bb7aeac9f66e3bdfdfdd6acc5546fbca31041ff9c05/detection labresa.com/s4w/ marketingkonzept.com/s4w/ pakietbioasekuracyjny.com/s4w/ qelwah2.com/s4w/ susuzluapp.com/s4w/ yenihayatgreencard.com/s4w/ # Reference: https://www.virustotal.com/gui/file/d120c2d090953fec810563847c2ba5cdcbff3dc4715949e5ef7531e71c5c560e/detection fromahighschoolgraduate.com/dum/ rochesterlocalseo.com/dum/ # Reference: https://www.virustotal.com/gui/file/aad021f8bd11f8e9195e4954b1269db584dd838026f3d73e751d69b142ced6c4/detection igametalent.com/3nop/ joomlas123.info/3nop/ potashdragon.com/3nop/ shenglisuoye.com/3nop/ sixpenceworkshop.com/3nop/ sunflowermoonstudio.com/3nop/ # Reference: https://www.virustotal.com/gui/file/ad36c93aff3c5ad262be5608200b1d583624dd29cfb2a78fd4dfab034282bde6/detection 16sf.info/63j/ 1h0threeout.loan/63j/ 1k3onecould.men/63j/ 5526693.com/63j/ abarkforhelp.com/63j/ ago-merch.com/63j/ autistics.info/63j/ empowermyv.com/63j/ escuchamp3gratis.com/63j/ fabriekuniek.com/63j/ govaj.com/63j/ hollydoe.com/63j/ inboundmag.com/63j/ jiejinrihua.com/63j/ mabinhura.com/63j/ mahroofbuilders.com/63j/ meehanmindset.com/63j/ mprigweld.com/63j/ royalgiyim.com/63j/ shopfor.toys/63j/ tacostuzo.com/63j/ thedeadgoddescendants.com/63j/ traumafutbol.com/63j/ unblockrun.com/63j/ wen8.info/63j/ wineanddine.online/63j/ wwwswty7733.com/63j/ xn--ydst0c036adla.com/63j/ zhongzousijichuang.com/63j/ # Reference: https://www.virustotal.com/gui/file/e95f01bbde0fbd70670b820b972768e7fc5f23509495c805ddbc3271030f443c/detection # Reference: https://www.virustotal.com/gui/file/e1763e78b22d20c2185170aeb03f138accbfce6f6d55cad6fefb9b632ff6e685/detection accident-law-yer.info/3nop/ ajikrentcarsurabaya.com/3nop/ beepot.tech/3nop/ chinapopfactory.com/3nop/ cloudmorning.com/3nop/ dealsforyou.tech/3nop/ divorcerefinance.guru/3nop/ foresteryt01.com/3nop/ frseyb.info/3nop/ hotsmail.today/3nop/ igametalent.com/3nop/ incrediblefavorcoaching.com/3nop/ jialingjiangpubu.com/3nop/ joomlas123.info/3nop/ koohshoping.com/3nop/ leyu91.com/3nop/ liqourforyou.com/3nop/ maximscrapbooking.com/3nop/ meccafon.com/3nop/ mindfulinthemadness.com/3nop/ naehascloud.com/3nop/ online-marketing-strategie.biz/3nop/ paintpartyblueprint.com/3nop/ potashdragon.com/3nop/ rockerdwe.com/3nop/ shadowlandswitchery.com/3nop/ shoppingdrift.online/3nop/ sixpenceworkshop.com/3nop/ smokvape.faith/3nop/ vandergardetuinmeubelshop.com/3nop/ yellowbrickwedding.com/3nop/ ynlrhd.com/3nop/ # Reference: https://www.virustotal.com/gui/file/a6e77007716111b244339e9cb1a0b0f2f09b7f313f73e03b136e1a228755438d/detection 514ope.com/tgqh/ collectivekc.com/tgqh/ empty-gallery.com/tgqh/ h2poland.com/tgqh/ hair-pharmacy.com/tgqh/ harisnurmansyah.com/tgqh/ hoyosintegrity.com/tgqh/ luxurylifeaccess.com/tgqh/ minnanwulong.com/tgqh/ nova-sb.com/tgqh/ regulars7.info/tgqh/ shouyangshanchem.com/tgqh/ showin-horikawa-oike.com/tgqh/ slingshotcycle.com/tgqh/ sopchain.com/tgqh/ squire-inigma.com/tgqh/ stratusontimemerchtrans.com/tgqh/ suncitybulldogpuppies.com/tgqh/ tablespoon.ltd/tgqh/ tooyet.com/tgqh/ tuoi96.com/tgqh/ zabikmusic.com/tgqh/ zeboxtee.com/tgqh/ # Reference: bpassport.com/boa/ camping-equipment.site/boa/ clavepr.com/boa/ david-kley.com/boa/ floridapostpartum.net/boa/ flpnidhi.com/boa/ hudsonhotspots.com/boa/ jiashimt.com/boa/ nhangiaivn79.com/boa/ reachidyllic.com/boa/ rebr.net/boa/ resumebanc.com/boa/ sulicet.com/boa/ v19sv.top/boa/ # Reference: https://twitter.com/_re_fox/status/1283491541236035584 sandiego-garagedoor.com/bll/ tomhufford.com/bll/ doneym.com/bll/ kalbarnews.com/bll/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1283740160476184576 39unitedfrkesokoriorimiwsdystreetsmghg.duckdns.org # Reference: https://app.any.run/tasks/097bbd0b-74c4-47b4-9f4d-201ee4c38a4a/ dfb.cymru/ei9s/ leaderarena.com/ei9s/ lostdistrict.com/ei9s/ mansiobok3.info/ei9s/ ryytrip.com/ei9s/ student-circuit.info/ei9s/ theshadows.online/ei9s/ # Reference: https://app.any.run/tasks/4fa18ccb-ea1b-44e3-a818-d803155a9e29/ regular8.info/2cur/ tingo66.net/2cur/ towerofcards.com/2cur/ # Reference: https://www.virustotal.com/gui/file/794e7cb14496ddd13a5ce6e540822deb5cec4ca43fd0174d98e4209beda66eaa/detection catalyseur-de-vivant.com/jjk/ qqwnet.com/jjk/ ksplaza.com/jjk/ porcber.com/jjk/ gadget13.com/jjk/ 520tsbaby.com/jjk/ cjplogger.com/jjk/ fotomataio.com/jjk/ joepolifroni.net/jjk/ femalebagvip.online/jjk/ sccinvestmentnet.com/jjk/ waldenfitnesshop.com/jjk/ xn--4oq39cm25azjf.com/jjk/ karmawatersonline.com/jjk/ michiganbusinesshub.com/jjk/ gclsteelsiteservicesltd.com/jjk/ # Reference: https://blog.talosintelligence.com/2020/07/threat-roundup-0717-0724.html (# Win.Dropper.Formbook-8866958-0) annualtransmission.technology astonfly.info azasianow.com cloudyans.com fristcreditunion.com gtitdunproductions.com intera-canada.com joshkaeding.com mannionexpertseniorcare.com methvenonthemove.com mysticadventuresails.com myweddingbeautiful.com novaeramotoboysportoalegre.com pepper.guide q83pfq.biz startboostcapital.com stoxcrypto.com theclippersofficial.com theedgebizconnect.com www750456.com xnyppw.com # Reference: https://app.any.run/tasks/393ffa82-d780-4bdc-b47f-456c458201da/ bewheybetter.com qhlkzl.com cpwy8c.com finesewingservices.com 5dollaralluringstyles.com izfyb.win regular8.info # Reference: https://www.virustotal.com/gui/domain/bsskillwsdyemmulatorsdevelovercommunity.duckdns.org/relations bsskillwsdyemmulatorsdevelovercommunity.duckdns.org # Reference: https://app.any.run/tasks/989b1b9e-b3b5-435a-ba14-a5f5f9fc1b7c/ insidemarinacity.net jeddahresources.com mugtravel.com onstagenewage.com vitosophy.com xianzhonghe666.com # Reference: https://twitter.com/reecdeep/status/1290967132562501639 # Reference: https://pastebin.com/4H24JFGS accident-law-yer.info bakecakesandmore.com duftkerzen.info janewagtus.com joomlas123.info koohshoping.com maximscrapbooking.com mindfulinthemadness.com online-marketing-strategie.biz pmbnc.info potashdragon.com rockerdwe.com shoppingdrift.online sixpenceworkshop.com stepgentertainment.com tawbj.info vandergardetuinmeubelshop.com yoghurtberry.com yoyodvd.com # Reference: https://app.any.run/tasks/60d821e5-4221-4f92-9871-2f34d4493704/ cocoding.net kokoandkiki.com laurelcanyonmusicroom.com mansiobbok.info produkdigitalstore.com schuster-partner.net # Reference: https://www.virustotal.com/gui/file/99623ab781dc923aa8fc80c49845845705c5e95ecd15bc3c22dae3dd6979aca8/detection myblogforyou.is # Reference: https://www.virustotal.com/gui/file/e229bf532a101dc01cea0f119eddfa6de309a6af68743b7a5d6ca63df110573c/detection 315px.com/kvsz/ fex-tracks.com/kvsz/ jiqing3.com/kvsz/ marijuanadogbone.com/kvsz/ okashyns.com/kvsz/ priestvedic.com/kvsz/ sif.email/kvsz/ taylorsandbek.com/kvsz/ # Reference: https://www.virustotal.com/gui/file/a327d63bea241fd175c5dda029f2cf997e13565393c5d0bf0f7ce4df5c7a7bb1/detection asktarifleri.site/kdz/ bbetmoose.com/kdz/ blockchaincso.com/kdz/ chacharen.com/kdz/ christmasjumpersireland.com/kdz/ doggygreatpet.com/kdz/ funpexw.com/kdz/ herolander.com/kdz/ keragramam9.com/kdz/ kxqsw.com/kdz/ niulunbi.com/kdz/ punkrockpeppers.com/kdz/ taylortao.com/kdz/ wwwclarion.com/kdz/ xxwzsw.info/kdz/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1297850974833451008 santhoshibitcoinlocalmarketdropdownand.duckdns.org # Reference: https://www.virustotal.com/gui/file/7167c1835bc0c219b5bd2df7d529bc063482af7362b6d9c0f4eb8de0d90e1587/detection finalwireboxtransferthesessioncookienorm.duckdns.org # Reference: https://twitter.com/VirITeXplorer/status/1298549793137086464 savetheverse.com # Reference: https://www.virustotal.com/gui/file/73f93e83e8452ee5a80a098908e627fd315fc7d7886e42a20952614f01ccf27f/detection # Reference: https://www.virustotal.com/gui/file/07bca888b32f2b57d4dc7c80504b425b8a764e90c3879e45363aa017e86ba254/detection 00307r.com 51gayporn.com academiefutsal.com alejandrajazo.com ashleetaylor.net beautifulbridesandbeyond.com bodypiercingblog.com brainpowersound.com ceptenmuzikindirelim.com corki.site g3391.com holdingeggs.com idefoto.com jordanthedev.com kiacraft.com libertarian.site lushe12121.com maiscash.online mansiobok2.info mesathean.com minlisc.com newuniverse.net northwestclassicfirearms.com pnwminiacs.com postmortemrecycled.com pranaavgroup.com prosolutionsgroups.com shkafko.com story-learning.info tastyafrecipes.com thetangleiota.info usainshape.com vaguidelines-updated.com valueaddedindustries.com venicecast.com wellsnextthesealife.com # Reference: https://www.virustotal.com/gui/file/12bf313b477f06f8732fcb79b706b0bd6534948959f5c6017acaa534e52ec43e/detection 842cedar.info ausu96.com capitalrealestateservices.com ernestospaccesi.com flekcht.com hezehzxx0530.com incubatorplatform.com kymsusujinsha.com perocreations.com pizzazucca.com reparmaxpro.com thecyclingvegan.com uscawm.com vehiclenotes.com xn--vs2b19v.com zds9999.com # Reference: https://www.virustotal.com/gui/file/1d752833612c96dff4dbd5cad8342b2d82cc62f76be376eabdf4e5a7e6d8001c/detection 763bifa.com cerecaustin.com coinpatent.com discoverfrenchtown.com ecomobilecarspa.com howcuty.com huntsvilleguru.com idbcc.com in4rac-acc3es-re7unds1.com iznjreb.com mining-journal-30.com njzscy.com retireinyourstyle.com topnotchhardwoodflooring.com xarkz.info zepi.ltd # Reference: https://www.virustotal.com/gui/file/79f09ef70447edc02b3ab24259050de6ea4da4b4c26391798ae238b9c42cb56a/detection 553349.top balikesirmasajsalonuu.com ceptenmuzikindirelim.com chepinclub.com everfileit.info holdingeggs.com jordanthedev.com kiacraft.com maiscash.online manilagogo.com mansiobok2.info minlisc.com northwestclassicfirearms.com usainshape.com wellsnextthesealife.com # Reference: https://www.virustotal.com/gui/file/32cb38541ca29d629b4d411191023bbd67887b099ff5f5b71067998eddb7d678/detection asif.services austinjdugger.com burikinochabudai.com carlymccrayblog.com cct-happy.com happychicks.exposed joyfinaclinics.com latrovadorabarbersupply.com liquidtreecbd-sleepaid.com reliablemedspharmacy.com surensoy.com trancus.com # Reference: https://www.virustotal.com/gui/file/9d45fa3a16cf0a0f8ff071a745ca85e67fc23a6da3072d77854c0bb56b79ee7e/detection 7122-info.com aqadelics.com arescsg.com baldinimakeup.com champcarfanatics.com cifmyanmar.com decentralizedfinanceguide.com euroruyane.com fuyucoffee.com houstongrowmyairway.net igiddevelopment.com jacketgraffiti.com kobfrin.info kocerstudio.com libbythrifts.com meowusaurus.com nevertravelled.com nyfirewatch.com operadorapacientesmexico.com projectholos.com sharkcoastline.com stashboxcombos.com tampabaytrash.com thermalsmartglass.com transinta.com wherethebestplay.com ynkshengfa.com # Reference: https://www.virustotal.com/gui/file/dca8e5059018aa3f1aeeee14511d9e57cc4268a8aed1584110c0fbb4822839f2/detection # Reference: https://www.virustotal.com/gui/file/3a1465485ed94bbfde14f2b538153a0a007bb8aa82b75d8cbf84bbcb483c4db9/detection 10valemont.com 24mane.com 7955t.com a1services.one adondeva.com advisorsoncall.pro casestudyinabox.com cgkvnt.com emirativisitalaqsa.com essentialcarementalhealth.com foxvegapunk.com frecoy.com futurepoweruk.com hocakoisanvuon.com joerow.xyz macrocpas.com neuroticbuffet.com pmqvodka.com presisiontestprep.com primeautocars.com rapornzel.com registergamers.com sharonschmith.com shopcamacci.com steripowerbank.com thaihicaregloves.com tradebrochure.com trelbikes.com whtybw.com womenme.com xiongmao-g.com xmlmobilepulsa.com zaibatsucoins.com # Reference: https://www.virustotal.com/gui/file/17a8084c74f8cc58490b8698860b482de514164362640d00116c61e81a95934b/detection book-london.com bzyzk86uzj.men champcarfanatics.com coachdrj.com day1transportation.info decentralizedfinanceguide.com kobfrin.info nevertravelled.com nevooptimum.info newtsboneyard.com orkneyelements.com qizasoluciones.net role013.com skandalist.info theuniformpages.com thisdadflips.com # Reference: https://www.virustotal.com/gui/file/46604ca23348020b3ba4a772be141fb9a1a6d9bf263ab04453e37aa3449307b3/detection 1-edogawa-one.net angelmedics.net blackbaycooler.com cexo.ltd deepcallsmusic.com ehoulby.com f0aw9u.com fizzwagon.com frontgames.info gentlemanism.com intensivprogramme.com iskovlay.com j9d9.com jnjmqzzl.com larympei.com longdu665.com mlabsassociates.com multonin.reisen qww13.com recetasinstantpot.com rilke.photography saludcomplementariaintegral.com serviceiqinternational.com silvfly.com skyhomeshn.com smokinginc.com strikermillion.net thatmountainbiking.com theflamingorealtygroup.info unieekly.net vieclam-jobs.net wesk.tech wwwstrikeout.com yimifanghua.com # Reference: https://www.virustotal.com/gui/file/36ae1f2db02a8deb4ae22d4d81be0c69ce30f471b0822405b56ffb2faaf304b0/detection armandonieto.com banknotesync.com bet365c.win dmoneylife.com drb77.com edgaralanbro.com fex-tracks.com freespin-support.com funippon.com getawomantodoit.com goldencanaries.com h0jt1y.accountant hotair.wales jiqing3.com lahistoriade.com landbank.site levelretail.com okashyns.com priestvedic.com rticlubs.com savetheverse.com specificpcshop.online upbeatnewyork.com vedattelekom.com weeip.com xn--oorv2aj6bj7cds0d6p4b.com yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/ac196db28c1b5e6d0772f61f5ba55824d6e6de820621b9a2485ee78fe7b553e0/detection 1tmm11ou.biz 2lsuxxk7.site 3-333i000000f04-virus.net atlantisads.com civx.love coinpuma.com dollaryearbook.com hhtdhg.com jonstats.com mpmts.com origamiformal.win pczfk.com rdrfi.com silverstone-pharmas.com skylod.com xn--5nq67dt91acob217ad91b.com # Reference: https://www.virustotal.com/gui/file/55356d3c2e71b6221d8590c9733cc45d09661f0210ef12aad830afca3653c5fa/detection 315px.com alexandre-boissard.com chaiseloungereviews.com funippon.com getawomantodoit.com goldencanaries.com grouptulip.win jeaniney.com jessandjeff.net ldmeili.com levelretail.com loulancaster.com magic-desktop.com marijuanadogbone.com okashyns.com rticlubs.com # Reference: https://www.virustotal.com/gui/file/e0db3294cbab3b55595d396941434b9bc7a82ce2f87d6819ff3c17936d559fe7/detection 557023.top banknotesync.com bocapvang.net chaiseloungereviews.com dmoneylife.com eugeniobarros.tech fex-tracks.com freespin-support.com jatinangorcity.com jiqing3.com lahistoriade.com landbank.site ldmeili.com loulancaster.com magic-desktop.com marijuanadogbone.com okashyns.com outofthepark.today polychips.com savetheverse.com taylorsandbek.com valorartetattoo.com vecteur-u-shop.com vedattelekom.com xiaoxiong365.com yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/8005ecbb424af2a2504693bdf4550825855b1036a049e6c81852f5be0f435f02/detection alfaranakle.com banknotesync.com chaiseloungereviews.com fex-tracks.com h0jt1y.accountant hotair.wales ldmeili.com motoreselectricoschihuahua.com okashyns.com specificpcshop.online yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/f3a30108ab40b7f31ad7ad191bb41bd3ad148d09597705c1ec0bc0352d18c29e/detection bbetmoose.com blockchaincso.com chacharen.com christmasjumpersireland.com cryptoassettrust.com datemere.online efamu.com fintopix.com flexwireless.net funpexw.com grinn.company heritage-japan.com herolander.com iskratrip.com keragramam9.com latinosinpolitics.info lauraandjose.com makrobet909.com mariannevaatstra.com niulunbi.com nsqpg.com nutri-bulletmania.com punkrockpeppers.com queenpiececustoms.com shanxiu360.com sharegrills.com tecnologiaconcalle.com weltricom.net xxwzsw.info zljrlm.com # Reference: https://app.any.run/tasks/a676d29f-57bd-4aa6-ad6c-99c60fb99d01/ ridi.ltd # Reference: https://www.virustotal.com/gui/file/1a85e9979700746c2e7cfff81ac8308d723ffbbc94fd62dd5450bfb511b0eb8e/detection # Reference: https://www.virustotal.com/gui/file/cf87ae81ce49eafc69bed54e2ce2051cb2e56a47d6b9d2d18f1eafdecec5794b/detection hdfcbankprivateltdinternationalfirewallf.duckdns.org # Reference: https://www.virustotal.com/gui/domain/timestableforjuniorsecondaryschoolsdone.duckdns.org/relations timestableforjuniorsecondaryschoolsdone.duckdns.org # Reference: https://www.virustotal.com/gui/domain/ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org/relations ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org # Reference: https://www.virustotal.com/gui/domain/12chnesstdywealthandmoduleorganisationrn.duckdns.org/relations 12chnesstdywealthandmoduleorganisationrn.duckdns.org # Reference: https://www.virustotal.com/gui/file/b7c19faebbb9a0539f3ce80d25be908f44a078ccdfac440ad9ed1484b3f546c5/behavior/C2AE # Reference: https://app.any.run/tasks/3263eddc-12e0-43c4-8916-f7b4ee7c8d07 agraindustry.xyz/xczm/ aupeiedu.com/xczm/ blackhillsgazette.com/xczm/ crowgangrecords.com/xczm/ cyypmy.com/xczm/ digitalmarketingsinc.com/xczm/ gigs-list.com/xczm/ jhpaolilo.com/xczm/ johnjacksonutahhouse44.com/xczm/ karenchartanowicz.com/xczm/ partiesandprettythings.com/xczm/ qrocodile.com/xczm/ restauretsens.com/xczm/ robertwebsiteworkshop.com/xczm/ sebuildingcontractors.info/xczm/ shaymika.com/xczm/ solomoncrane.com/xczm/ supereasythings.com/xczm/ talentos-sa.com/xczm/ thenextbigbang.com/xczm/ # Reference: https://www.virustotal.com/gui/file/4458df211fccf5c1d24b96ebb7b4191cc94edc0b0e13bbb80ae3919f015297d9/detection 3j120.com/uts2/ blissbureau.com/uts2/ dannystar.online/uts2/ farmtractorpartstam.xyz/uts2/ finanzleiter.com/uts2/ iprintdrivers.com/uts2/ jonaskold.com/uts2/ richfun9.com/uts2/ sinseek.com/uts2/ stutinney.com/uts2/ top-dex.com/uts2/ v-imagery.com/uts2/ # Reference: https://www.virustotal.com/gui/file/ab2134e4b74317f5de2f265e46d73c4bb6593cdbfc795d84acc5ac92694fcfd8/detection cyberrome.com/evcy/ phytphysios.com/evcy/ roofingscontractors.com/evcy/ w662017.com/evcy/ # Reference: https://www.virustotal.com/gui/file/3918933694be0d073cbbf212787b2645ff55f13d0465068c07bfba9429c592c9/detection 766ht.com/wc2/ 911respondernews.info/wc2/ arikagroexporter.com/wc2/ balaji-industries.com/wc2/ bishopberrian.net/wc2/ boopdedo.com/wc2/ bsmw.net/wc2/ crsmrtns.com/wc2/ ethihadhub.com/wc2/ huaxing888.com/wc2/ imkollection.com/wc2/ learnitanywhereskills.com/wc2/ lexafit.com/wc2/ lisajohnsva.com/wc2/ ludo999.com/wc2/ majahada.com/wc2/ originaleprezzo.com/wc2/ proglove-news.com/wc2/ range-view.online/wc2/ shotsbyshari.com/wc2/ silver-marketing.com/wc2/ szcstl.com/wc2/ theyolarbi.com/wc2/ thomasallmer.net/wc2/ tyres-n-services.com/wc2/ zxnhyc.com/wc2/ # Reference: https://www.virustotal.com/gui/file/a8dab0706fcde32079548def807a0970b9ea1777e191a4de545b286b21e37d28/detection americasbestpw.com/r690/ china-harmonica.com/r690/ chiomydiary.com/r690/ cluehut.com/r690/ grabareelfishing.com/r690/ graveltravel.company/r690/ gromomedia.com/r690/ haciendadecuacos.com/r690/ highchikadns.com/r690/ kikinico.com/r690/ livein.space/r690/ qrudghana12.xyz/r690/ sagivfoods.com/r690/ shinelightofgod.com/r690/ thesibrand.com/r690/ # Reference: https://www.virustotal.com/gui/domain/moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org/relations moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org # Reference: https://www.virustotal.com/gui/domain/dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org/relations dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org # Reference: https://app.any.run/tasks/a2d97909-68ca-49f3-9c8c-20eba5681fb5/ wsdychinese2onlyywalkaloneinlifev26mba.duckdns.org # Reference: https://www.virustotal.com/gui/file/8fc21c2279038625176289496bc8f34b0cb2404b064edb3fb2da8d3ca43dc5b1/detection azwertfgdshbvcgyujmlpokjhgfxzaewqsdrfgh.duckdns.org # Reference: https://www.virustotal.com/gui/file/a4c9cd227e58728c221e9001d28f166143980f893d45a2b7757b73ce5fd903ce/detection acessorios-nerd-app.com eldesvan-sinlimites.com gokdaginsaat.com healthcbn.com hippainyoga.com inveplor.xyz investstoneycreek.com mayasign.com pitandplate.com schokogirls.com sillymillie.today teamreddragoninternational.info thelastwordapp.com theme7.com trakfin.com zhonglinsd.com # Reference: https://twitter.com/JAMESWT_MHT/status/1303601913364180992 # Reference: https://pastebin.com/KzJT43TM bl2clear.com boujeegoddezz.com bringfilmes.com coffeeandproductivity.com covidbreathrehab.com domdlyabolona.art gameingalaxy.com ghtrive.info mammal-immunity.com molianggong.com moreupdates.info roselandcompany.com selfloveonlineshop.com vissist.com wccs.school zjbeidou.com # Reference: https://otx.alienvault.com/pulse/5f58c504cc7ae467f9d3355c bogrollbandit.com jramfox.info moskvaoptom.net naomiatlibrary.com vegoutlv.com # Reference: https://www.virustotal.com/gui/file/a715a6693137085afaf486b54cac1653b19685bc5f79ed03afbbe818a4df2dc7/detection scmtonhumanrightandjusticeorganization.duckdns.org # Reference: https://twitter.com/jorgemieres/status/1310669976156676099 20greenkegheedahatakankeadeshnaastdyhma.duckdns.org 2morcmmytalententertamentforwsdyshampn.duckdns.org stdyworkfineanotherrainbowlomoyentwkgls.duckdns.org # Reference: https://www.virustotal.com/gui/file/aa173d61945504c96ede4e050072747bce9747b05ba64ad7e63c931988fd5afa/detection # Reference: https://www.virustotal.com/gui/file/2bd70691b602c8a94d298de4a1d629eb4e6eee5640f73ae4f323939334cadef8/detection affiliatedinsbrokerage.com/lmh/ avantgardeperde.com/lmh/ chidehdesign.com/lmh/ covertextensions.com/lmh/ electronic20200818.com/lmh/ finanzbildunghartmann.com/lmh/ goodmol.com/lmh/ gzjxrg.com/lmh/ kaboom-stores.com/lmh/ onelivenews.com/lmh/ properope.com/lmh/ resfebertrip.com/lmh/ spinthewheelof.com/lmh/ stopthecull.info/lmh/ supng.com/lmh/ testaker.com/lmh/ testcitestdpp03.com/lmh/ thefamilybrew.com/lmh/ thisshowistheworst.com/lmh/ uyenty.xyz/lmh/ zainiicandle.com/lmh/ zaxesoutdoor.com/lmh/ # Reference: https://twitter.com/reecdeep/status/1311677288384262145 # Reference: https://app.any.run/tasks/9ec07b95-db5c-4a6d-9ce8-7b2b4803f9e5/ # Reference: https://pastebin.com/1Uax6brn adventurewhisky.com carrollbusinesspath.com chuansongm.com dcurvezone.com ezecustomprints.com futureheadcoin.com home-orchestre.com hotelkewal.com leggiies-es.com reallygood.toys regular-list.info shopatman.com thekindnanny.com vqxxmrxhpsho.mobi warnddd.com zhizaotuan.com # Reference: https://twitter.com/jorgemieres/status/1311775076501651458 newhdconnectionforfiletransfernetworkwit.duckdns.org # Reference: https://twitter.com/jorgemieres/status/1314554323389550593 kungthdycommunicationtarisupliermgthbzm.duckdns.org privatethdycloudshareandfileprotecthmbw.duckdns.org unitedthdyfrkesokoriorimistreetsmthbdx.duckdns.org # Reference: https://twitter.com/Unit42_Intel/status/1312126230309740544 717cary.com anunaysrivastava.com armstrongramps.com bootlegmask.com cgv-so.com claricitywealthplanning.net csbaoxing.com dannisconfessions.com easyloop.email ehrbar2012.com elevatedqueensnc.com entrepreneur-de-demain.com firestarterelectronics.com firewoodlogsbristol.com janet-lorenz.com kayarihats.com misspinkk.com myworldgay.com piao.mobi pricemanmmi.com psm-gen.com readingbythewindow.com sporkedmissoula.com tapchiotoxemay.net tdhudsonfarms.com theduneco.net usarmedforcesforbiden.com virtualinspectiontraining.com # Reference: https://twitter.com/luc4m/status/1313805772992765953 purebodyrecovery.com/rhk/ # Reference: https://twitter.com/theDark3d/status/1313834137992794112 hydreol.com/gc9/ # Reference: https://www.virustotal.com/gui/file/2914b28edc11e8032a43789a1fd6a897cad41494ea0657ce15933b5825e922f0/detection amaee.art/bti/ get-s14.com/bti/ roket.store/bti/ hotelsyd.com/bti/ pressd4you.com/bti/ intimkyliya.club/bti/ theobsidianlounge.com/bti/ bestcostaricacars.com/bti/ orthodonticoffices.com/bti/ genericpharmacyshop.com/bti/ asheville-pestcontrol.com/bti/ pureandtotalrelaxation.com/bti/ brmstatpack.com/bti/ mygametour.com/bti/ # Reference: https://www.virustotal.com/gui/file/55b4c44664dbfe9d51bd386d7b88779555b8c7681147a0dc8b049a252a093b61/detection beulig.com/mi8/ quorahr.com/mi8/ tensedu.com/mi8/ bolly4me.xyz/mi8/ beaverhat.com/mi8/ dacho-pri.com/mi8/ khanhthieu.com/mi8/ mperrinauthor.com/mi8/ honeyandpapaya.com/mi8/ lonelyleadership.com/mi8/ partialdeveloper.com/mi8/ mariagrossbaumart.com/mi8/ courrierhautrichelieu.com/mi8/ # Reference: https://app.any.run/tasks/f76cb393-c9b7-4965-b69e-19c8b9b85c2e/ chikachinwe.com/fs8/ gabipareras.net/fs8/ hpg.computer/fs8/ kumcal.com/fs8/ mohinisystem.com/fs8/ muellervieh.net/fs8/ setsomegoals.com/fs8/ shestakova.info/fs8/ thelincolntondentist.net/fs8/ # Reference: https://app.any.run/tasks/49d6e478-698c-4afb-8a2d-b217e9e85a70/ chollotiza.com elevatehour.com en-bmwbasvuru.com justiceforproject.com lojapetsz.com thenursingstudysystem.com xn--vf4b17jiew40b.com zgxjgw.com # Reference: https://app.any.run/tasks/f171064f-893c-4957-b3ce-8b3fac487eee/ bitechanalytics.com/3iw/ creditoefectivo.info/3iw/ fairpayva.com/3iw/ regulars6.com/3iw/ thelifewaykefir.com/3iw/ valodokan.com/3iw/ # Reference: https://www.virustotal.com/gui/file/980b25031efc6ab322f08a66a098f51a7e55ae8926eeed299b8ae0176a7c71a5/detection abishadesigners.com/ec14/ acikonline.com/ec14/ akulelaki.com/ec14/ apqtkj.men/ec14/ atecommarkk.com/ec14/ bellaboutiquetime.com/ec14/ boobl.net/ec14/ catalystbizconsulting.com/ec14/ contactista.com/ec14/ dundeeplanninglawyer.com/ec14/ fooorest.com/ec14/ gardhome.com/ec14/ gzfeidengxian.com/ec14/ harbourridge.info/ec14/ ishop121.com/ec14/ ivalens.com/ec14/ jetcat.studio/ec14/ luxdermatology.net/ec14/ mingjianjiankang.com/ec14/ myhjzl.com/ec14/ perrogenial.com/ec14/ qhdrzblg.com/ec14/ radinkauto.com/ec14/ unitetoken.com/ec14/ violence.ltd/ec14/ yeserenkalem.site/ec14/ # Reference: https://www.virustotal.com/gui/file/70ec010c74c2d3f440eee4a882f842f1b04d3c1ac11ae54817e2985497cbf737/detection bastblossoz.info/uc/ goodpva.com/uc/ hampshiremotorgroup.com/uc/ highlandsdayschool.net/uc/ kmpqeaqap.download/uc/ lillyvalley.info/uc/ mandarin-cazinod2.com/uc/ okxaw.com/uc/ smeemail.com/uc/ yuppieshome.com/uc/ # Reference: https://www.virustotal.com/gui/file/70f0bd1b2a180d7aa965bc907c3367b1a34445bdb1a3882be040e22f04c1e300/detection governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu # Reference: https://www.virustotal.com/gui/file/96f40ff0c9306eff1e9321d47fd97a7a62a737815b6964109b335b8e3d48bce2/detection 344bifa.com lodipytu.com # Reference: https://www.virustotal.com/gui/file/d45a4b45fce191e47e64aeb48cbba1477b58ad991bb1e4409d97f29de86c69d6/detection 2637426264.duckdns.org aksesblog.com/sl7/ antskipper.com sarah-pinhancos.com theflawlessstore.com totalitymedicine.net # Reference: https://www.virustotal.com/gui/file/6950ffcd5d6cf9bd7338614623baf23baa58236e7603e74f2360ea60add802b0/detection 10wsdyanaekppyinitalymedicalconsultafr.duckdns.org # Reference: https://www.virustotal.com/gui/domain/368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org/detection 368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org # Reference: https://www.virustotal.com/gui/file/c76eefb96b1a6360727130cc86aa039d19b1f6eb7ec2e49d40989bcb3a820f5c/detection 31kungcommunicationtaristdysupliermgjky.duckdns.org # Reference: https://www.virustotal.com/gui/domain/240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org/detection 240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org # Reference: https://twitter.com/InQuest/status/1321030052709126147 fsdfjkhiuwehxcyvuiyiuwefocshsduihfnabhsghfghewfjpiouyiyuixcvxuv.ydns.eu # Reference: https://twitter.com/InQuest/status/1321339394335428608 tsdyprivatecloudshareandfileprotectsyta.ydns.eu # Reference: https://twitter.com/Marco_Ramilli/status/1322075988851859457 greenthdykegheedahatakankeadeshnaathfgh.ydns.eu # Reference: https://www.virustotal.com/gui/file/e44aed73ae9a363d854c16f430af1e93f58409d2f4bbf3ae90e2164cb60cdb81/detection 30atgkmss2m0fc3rjc926qag09d60tz44zwi0kv6.duckdns.org deliverynotificationmessagesuccessfullys.duckdns.org # Reference: https://www.virustotal.com/gui/file/0920951a2739c975661a70c9a7532d65a0abe3d8cee5d476af53b2b60cb63bd3/detection # Reference: https://www.virustotal.com/gui/file/899f6e35cd5d54ccc7c6dadd6fa35a719a1ec6a1a19a6df0e49b252491d03fd6/detection abiodunanimashaun.com/gcvp/ angelofcfashion.com/gcvp/ applespanyc.com/gcvp/ digestspot.net/gcvp/ habibistech.com/gcvp/ herbandflorealty.com/gcvp/ missouricitymagazine.com/gcvp/ murder2is.com/gcvp/ osusume-erodouga.com/gcvp/ rayznrosez.com/gcvp/ registrosbonouniversal.xyz sabaifund.com/gcvp/ solarlightsuk.com/gcvp/ southpacificconglomerate.com/gcvp/ stevebana.xyz surgecrete.com/gcvp/ syshxg.com/gcvp/ tars.network/gcvp/ tjtftc.com/gcvp/ wlc958.com/gcvp/ worldbeyondfaith.com/gcvp/ youriptv.online/gcvp/ zjxdw.com/gcvp/ # Reference: https://www.virustotal.com/gui/file/15e93e945f92f31af20aa93a04a4b437e2e77799b045c31f36ef24c0d8b962b2/detection calebdavidsmith.com/sg03/ foodie-jp.com/sg03/ jiralabs.com/sg03/ lynnsbeautylab.com/sg03/ topambebi.com/sg03/ xietuwen.com/sg03/ # Reference: https://gist.github.com/silence-is-best/0aa844b003c62c6ce491e91e168ac662 aarthiramamurthy.com atmebenessere.com auctionpros.club/glt/ baddietraphour.com brighteclass.com/nko/ brologan.com/pna/ comeongetreal.com/nko/ emythaccelerators.com/ga4/ everychildnisanartist.com/glt/ eyepointph.com foodrenewal.com/ga4/ gfltransports.com/nm8/ locallygrownmedia.com/pna/ merhomeimprovement.com mingchi168.com/ga4/ qihuo119.com/ga4/ sarahkim.world/cmd/ shisang.xyz/k8b/ st883.com/ga4/ straightaheadflixgroup.com/glt/ terrycareerconsulting.com/pna/ theloveofliving.com/ga4/ tonainy.com/cmd/ traumaremedies.com/cmd/ trendycollectionz.com vestingfacts.com/ga4/ # Reference: https://twitter.com/Racco42/status/1323404190962618371 # Reference: https://app.any.run/tasks/7d9de5ff-9695-47c2-8108-6b6a3bcdb1c9/ 3907allendale.com/nt8e/ brandonprattdrums.com/nt8e/ donotwasteyourvote.com/nt8e/ eneralysis.com/nt8e/ feeneylaminate.com/nt8e/ gomashio-taste.com/nt8e/ highfashionexchange.com/nt8e/ jobheap.com/nt8e/ lostintraveland.com/nt8e/ mohdnaved.com/nt8e/ mostposh.com/nt8e/ radiosteel.com/nt8e/ rescuedpetsarewonderful.com/nt8e/ simplicty-in-life.com/nt8e/ whereistheherb.store/nt8e/ # Reference: https://www.virustotal.com/gui/file/867250c0cf9bf77af6af0886d701bb1ce4045a49a1e8be964b8e5f00de241c20/detection animalcare.today/unx5/ best-three.com/unx5/ britishchildrenslottery.com/unx5/ horizon-hydraulics.com/unx5/ indumaqservicios.com/unx5/ liquancai.com/unx5/ porncamslivechat.com/unx5/ ronspizzapalace.com/unx5/ site-oficial.tech/unx5/ stevebana.xyz/unx5/ thewriteux.com/unx5/ tkor.city/unx5/ waaaghstore.com/unx5/ # Reference: https://app.any.run/tasks/4fe61081-2e84-4544-a275-0665bea7b2cc/ grg679.xyz 5855a.com/9d1o/ aceditors.com/9d1o/ dekoratuvida.xyz/9d1o/ emergingtrendify.com/9d1o/ entepeedia.com/9d1o/ eventoslafete.com/9d1o/ gmleetkd.com/9d1o/ goldenoilproducts.com/9d1o/ mw88slot.net/9d1o/ smartcontracttraders.com/9d1o/ solucionescbi.com/9d1o/ unusualdag.com/9d1o/ unusualdawg.com/9d1o/ # Reference: https://twitter.com/58_158_177_102/status/1326293293878059009 # Reference: https://tria.ge/201110-az5cp1fxde/behavioral1 ozsmarthomes.com screaminyourcarday.com nbhindustriesptyltd.com ntgmfublb.icu bombayracks.com phoenixlights.net rachelamosphotography.com leapforwards.net sendai-salt.com shabbychicflipsbyangelina.com core-ol.com canalysis.net tybeeprohibitiontour.com influencedarts.com italivpn.com newborn.today garagedoorroundrocktx.com participi.com thegoddessnow.com invesito.com surfingnaked.com sunsetsalesforce.com revolution4kids.net kingbookvn.com realsteelpocatello.com ubitem.com forretningsfilm.com liberationcreation.com jfaudiovisual.com fashinnovation.institute 4628ridgemont.info advocatenunie.com sheilaalvarado.com gun-barons.com muyupin.com nolanshotsauce.com chile-commerce.com alekhyasarees.com digitalcollectionservices.com rhwlc.com dondeestanlospacientes.com haxb33.xyz sageolegoats.com strongpowerlive.com allianceofamericanlawyers.com applywithrand.com wwdyson.com rivertigerresources.com njbjjt.com lemarcel.online unetgallery.com zajedyne.com aodiq3.com profitcart.xyz mrnord.com melisaweb.com picskicks.com ubiquiti.lat long0321.com mediherz-shop.com digitizersfriend.com ford17tv.com seawalker.art serum.mobi weblst.com # Reference: https://otx.alienvault.com/pulse/5fabd3703c6e86ab3329c124 myrqh.com superbbeautysecrets.com techyde.com knt60345blog.com cryptocurrency.wiki kumcal.com # Reference: https://www.virustotal.com/gui/file/63c7a80a5750e4f804f26a4252aa8a6efb959e1e6f6f763451e18703594fa51a/detection ghsinternationalconferencewithinternationalfilesecureserviceglo.ydns.eu # Reference: https://www.virustotal.com/gui/file/e3def2d5d83257eb416a4b3f5a89afd85dbedb1d68d95e871d804c9bfb225ec3/detection igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu # Reference: https://www.virustotal.com/gui/file/725f65d305b7295680484b3c813ebcbc8cd2ed273943ce439fa658ac5e265db5/detection vegaconferencegloballywihtinternatioanlwellwareteamwordglobalin.ydns.eu # Reference: https://www.virustotal.com/gui/file/918b404d124504e3f5a654b0839f9c002831bba6eff56e870f4f20ab11fd2cca/detection hoodsboysuccessmanwizzsonbrightdayblesng.ydns.eu # Reference: https://www.virustotal.com/gui/file/64bf2f00c276d63d79f1fc5a1140ecd77a0bc2e3106d4298bddb6d149fcfef82/detection wsdyshgshgnationalobjindustrialatwsgqp.ydns.eu # Reference: https://www.virustotal.com/gui/file/96d593ee0b035af385bf74f834c980c44389f00560b31f8825b8b7b796fe2e45/detection neverwsdywalkachinese2loneinlifekwsfdw.ydns.eu 8khutpn8g3x9iy.net depoarkasi.com rakutenlle.xyz segredosdocopywriting.com # Reference: https://www.virustotal.com/gui/file/0e31eca3da35e95b666df1705113d75bc81936a879b55fdf1bc2c6150df296c4/detection bsskillwsdyemmulatorsdevelovercommwsdpg.ydns.eu # Reference: https://www.virustotal.com/gui/file/13a9ba492c2a5ee332477af324aee8b2bc7d74847b1330308cf04ad8f9b0a6ec/detection telecomoperatinggoodnewserverfortransfersecurefileinternatioanl.ydns.eu # Reference: https://www.virustotal.com/gui/domain/ydns.eu/relations actionforfiletransferthroughcloudbusinessinternationalglobalsys.ydns.eu antivirtualmachinecleanserctigifateforthisfilewithgoodsecurityp.ydns.eu antoinesauvagesqcomcomantoinesauvagesqcomcom.ydns.eu asdfghjklzxcvbnmmnbvcxzlkjhgfdsapoiuytre.ydns.eu bhngvfcdswqwertyuiopasdfghjkllkjhgfdsapo.ydns.eu brinallgoodjobandworkintoseehowblessings.ydns.eu bsskillstdyemmulatorsdevelovercommsthaw.ydns.eu domniforworkinsidegoodohmarcywitmeohjah.ydns.eu easygoldwithgoldenindustryinternationalinternationalfiletransfe.ydns.eu eewssghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu endsarsendpolicebrutalityendsarsendpolic.ydns.eu ertyuioplkjhgfdsazxcvbnmmnbvcxzasdfghjkl.ydns.eu fghjklmnbvcxzasdewqrtyuioplkjhgfdsazxcvb.ydns.eu firewallsecurityscandocumenttransferwithonlinesharingtransfergb.ydns.eu fsfhuiohwenljiofnnfnlasdlkjflkjioxcoivjndfnkljflsdjlfjwjejsdflk.ydns.eu gbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2y.ydns.eu ghkiwuydmklopjdbcyuavxbnmsheyrhdgcvbzgyu.ydns.eu governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu greenstdykegheedahatakankeadeshnaastxqm.ydns.eu greentsdykegheedahatakankeadeshnaatshah.ydns.eu gyeuiojndhbvmaoiwnnchauwo28vnj8mjmvnwhk.ydns.eu lkjhgfdsaopoiuytrewqmnbvcxzasdfghjklqwer.ydns.eu microsoftsecurityverificationscannerrunningforsecurefiletransfe.ydns.eu mknjbhvgcfxdzsallpkojihugyftdrseawqzaxsc.ydns.eu mndyneverwalkachinese2loneinlifemnkngr.ydns.eu plugwsdytransportationalexpertsywsfmq.ydns.eu privatestdycloudshareandfileprotecstlka.ydns.eu privatetsdycloudshareandfileprotectsgas.ydns.eu qwertghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu qwertyuiopmnbvcxzasdghuytrewqasdcvbnmlkj.ydns.eu shgshgstdynationalobjindustrialatstqmd.ydns.eu shgshgtsdynationalobjindustrialattsgpx.ydns.eu softsystemworkforgoodthingstotransferwordfileinternationallywih.ydns.eu stdybsskillemmulatorsdevelovercommstdlp.ydns.eu stdygreenkegheedahatakankeadeshnaastfaw.ydns.eu stdyplugtransportationalexpertsystywq.ydns.eu systemscantheipwithadvancefirewalltechnologyandinternaitonaldns.ydns.eu systemsecuritycheckingwithallprotectionofinternetwithfirewallpr.ydns.eu thdyprivatecloudshareandfileprotecthfqm.ydns.eu thdyworkfinesanotherrainbowlomoyentthflx.ydns.eu theverifiedclouddatatransfersystemforsecurefirewallprotocolente.ydns.eu trijgrscviomnbvdewacvioplmjytrewwqazxcvty.ydns.eu truesystemadvicetotransferwordfileinternatioanllywithsecurechan.ydns.eu tsdybsskillemmulatorsdevelovercommtshrc.ydns.eu twitterlevelsecuritycheckingforwordfiletransferthroughfirewalls.ydns.eu tyuioplkjhgfdsaqwertyuiopmnbvcxzasdfghjk.ydns.eu unitedfrstdykesokoriorimistreetsmstjsm.ydns.eu unitedfrtsdykesokoriorimistreetsmtsfma.ydns.eu wejsdjfhjwehjhjdbdfghieidsjdfhgjhjfdhgjhjhasjhfjdfjhjhdjshjshdj.ydns.eu whythereasonbitcointransactionisveryhighwithanothercountryloook.ydns.eu workfinestdysanotherrainbowlomoyentstlsw.ydns.eu workfinetsdysanotherrainbowlomoyenttsghq.ydns.eu wsdyprivatecloudshareandfileprotecwsfkl.ydns.eu wsdyunitedfrkesokoriorimistreetsmwsgqp.ydns.eu wsdyworkfinesanotherrainbowlomoyentwsgqm.ydns.eu yerertpiytrrtrtyiuyuioiiouyuiuiopoipufresaaasdtyyyiiuyrterwrtrt.ydns.eu yhrbgnderfsacdewpojgtredcvbnmkiolphgfdsq.ydns.eu zoominfoisagoodmnetworkoftheallinternationalcompaniesforfilesha.ydns.eu # Reference: https://www.virustotal.com/gui/file/20b0c29fcdbe79a78d0fd5303369b1057653195d537bd2f25bafb79dbffdde88/detection 66pct.xyz bestdealu.com frankscustomdraperies.com iamkerala.com ihandreg.com individualanalysis.com kadoshfinancial.com kykyryky.art quoteforthebest.com richboxer.com shnyty.com skinxbaron.club stainlesshydraulic.com tadbirsanat.com xxxindian.info # Reference: https://www.virustotal.com/gui/file/51deb79da8be65d5b393887e933cfcf693ce38c2b34cba2749d84bed130d3dfd/detection brushforbetter2020.com crystuneshop.com daylow.site dlacf.com fenhedaqujiuchang.com flandersmd.com floridalicorice.com freencertsolution.com lzzrcg.com marcohoffman.com ourhavenco.com outbondgoapindul.com paypalchanger.com sunnyhomecleaning.com # Reference: https://twitter.com/jstrosch/status/1329100921469546497 ghost00710.ddns.net w91pk.com/ggh/ # Reference: https://twitter.com/Racco42/status/1329525723829309440 # Reference: https://app.any.run/tasks/1817b308-7c96-46a9-89cb-31aba1fde41d/ 1020waterviewdrive.com/fs8/ 5927399.com/fs8/ 70skinstore.com/fs8/ gabipareras.net/fs8/ highlandcelticart.com/fs8/ hobbyhousekennels.com/fs8/ hpg.computer/fs8/ kumcal.com/fs8/ lashvash.com/fs8/ setsomegoals.com/fs8/ skillsme.school/fs8/ thelincolntondentist.net/fs8/ # Reference: https://www.virustotal.com/gui/file/640e2fcfe7efdf8edb2780afb1fdc2954bc3c8fdec183fc768eca0eee14d6f19/detection # Reference: https://www.virustotal.com/gui/file/ee562a08154b7e12f3133019ad584e533e9162176e03b243854f67cb34c04eb9/detection brejoin.com/yx/ farmeragro.com/yx/ first-class-travel.com/yx/ foxannewigs.com/yx/ hoterswimming.com/yx/ informatin-frid.com/yx/ ironcloudpublishing.com/yx/ joanne.email/yx/ jperraultpaintings.com/yx/ littlefiggies.com/yx/ musicsp.com/yx/ nurtureground.com/yx/ original-ginjer.com/yx/ ruprogressive.com/yx/ samperd.com/yx/ topdecortips.com/yx/ # Reference: https://www.virustotal.com/gui/file/8328ae28430dbd148eabb432ccc424329da00fead9404102c59559fc02e2ec11/detection bestmixer.pro/pth/ capture-boutique.com/pth/ higwayharry.com/pth/ jbgsmith5g.com/pth/ lfmh888.com/pth/ nerdtoysuk.info/pth/ newboxmall.com/pth/ pros2311.com/pth/ queguayperu.com/pth/ recoveratsolidrockranch.com/pth/ rosaouroo.com/pth/ sing-easy.com/pth/ suppoortingvictory.net/pth/ teealiens.com/pth/ websitenomor.com/pth/ # Reference: https://twitter.com/wwp96/status/1335674912539897858 # Reference: https://app.any.run/tasks/136812b9-9106-49ca-9c56-9eeb756159e6/ dl-aikenuo.com festivalbd-ambierle.com # Reference: https://tria.ge/201207-jsgz9hl5ex 168199151.com/p2he/ 7as.money/p2he/ aide-vacances.com/p2he/ alphajagd.com/p2he/ amionyoutube.com/p2he/ asianpathfinders.com/p2he/ betterbeautymemphis.com/p2he/ bgl.ink/p2he/ blackcatsgk.com/p2he/ blogluster.com/p2he/ bohokim.com/p2he/ brookingsjet.com/p2he/ carwrapsorlando.com/p2he/ chaisalsa.com/p2he/ cookies-x.info/p2he/ drkilat.com/p2he/ elevateathleticcenter.com/p2he/ esseninnovation.net/p2he/ event-moscow.com/p2he/ fd4747.com/p2he/ flagpolesforourfallenheroes.net/p2he/ fuckbitchesgetlaid.com/p2he/ getvonline.com/p2he/ goldandbrown-pizza.com/p2he/ heretangier.com/p2he/ hicotxselfstorage.com/p2he/ homebounties.com/p2he/ humbleangel.com/p2he/ internetempresaschile.com/p2he/ interxioneurope.com/p2he/ itvillagetvm.com/p2he/ jytyhlw.com/p2he/ lentiacontattoeshop.com/p2he/ linuxquebec.net/p2he/ lottoplays.com/p2he/ lzjmqx.com/p2he/ mdmbijouterie.com/p2he/ metallobaza-tlt.site/p2he/ miniaturearmsdealers.com/p2he/ modelplanepartseff.xyz/p2he/ motherdaughter.club/p2he/ outdoordiningtents.com/p2he/ outdoors4junkies.com/p2he/ parasailer.com/p2he/ peruvianautoauction.com/p2he/ phaniesart.com/p2he/ phoenixandthetardigrade.com/p2he/ plugandplaylab.com/p2he/ proudseas.com/p2he/ pugbonnets.com/p2he/ randomua.host/p2he/ residencialcasalinda.net/p2he/ roomforabear.com/p2he/ sharmilawifestories.com/p2he/ sirisombut.com/p2he/ solangerichard.com/p2he/ stranger-partner.net/p2he/ thomasreany.com/p2he/ tsm-m.tech/p2he/ turismoelite.com/p2he/ unk-page.com/p2he/ web-panda.com/p2he/ wegwerphandschoenen.online/p2he/ ykteknik.com/p2he/ # Reference: https://tria.ge/201214-kc1ck6vg7x fundamentaliemef.com gallerybrows.com leadeligey.com octoberx2.online climaxnovels.com gdsjgf.com curateherstories.com blacksailus.com yjpps.com gmobilet.com fcoins.club foreverlive2027.com healthyfifties.com wmarquezy.com housebulb.com thebabyfriendly.com primajayaintiperkasa.com learnplaychess.com chrisbubser.digital xn--avenr-wsa.com exlineinsurance.com thrivezi.com tuvandadayvitos24h.online illfingers.com usmedicarenow.com pandabutik.com engageautism.info magnabeautystyle.com texasdryroof.com woodlandpizzahartford.com dameadamea.com sedaskincare.com ruaysatu99.com mybestaide.com nikolaichan.com mrcabinetkitchenandbath.com ondemandbarbering.com activagebenefits.net srcsvcs.com cbrealvitalize.com ismaelworks.com medkomp.online ninasangtani.com h2oturkiye.com kolamart.com acdfr.com twistedtailgatesweeps1.com ramjamdee.com thedancehalo.com joeisono.com glasshouseroadtrip.com okcpp.com riggsfarmfenceservices.com mgg360.com xn--oi2b190cymc.com ctfocbdwholesale.com openspiers.com rumblingrambles.com thepoetrictedstudio.com magiclabs.media wellnesssensation.com lakegastonautoparts.com dealsonwheeeles.com semenboostplus.com # Reference: https://www.virustotal.com/gui/file/24721ddd6082f6418d5b22a1b9703bc3e38c8b5725798b62110a170b41eac6ce/detection 1429callealtura.com bytyt.com flickfaced.com forenvid.com sanangelostory.com ssgsaia.com strawberrystreet.net westpalmbeachvacationhomes.com wilsonelitecleaning.com wwwwg2020.net xyft595.com yrxcorrecf.xyz # Reference: https://www.virustotal.com/gui/file/e59d9d9ca9e0c7dddea9a94f0dab0ae137b6a762999bade26db35b1ca35e1f72/detection alltrendsbrands.com camsplaces.com helpmeiminmytwenties.com icknw.com kart-im.com mokrie-pizdi.site mstaffingagency.com neothecode.com nutritionlives.com point1properties.com prospervine.net sexmomsonsister.cloud thefeelgoodsisters.com veteranmadecontent.com wineenthusiasms.com # Reference: https://twitter.com/JAMESWT_MHT/status/1341997180664557568 deuxus.com/t052/ # Reference: https://www.virustotal.com/gui/file/31777f81a8d806fcb50d954f3ac48c8aca7f340929f8cf784d740a079892a587/detection ampsports.digital craftsman.sucks dabrownzone.com grromedandgrand.com harriettubmanu.com kapatoken.com mamentos.info maximizefit.net nanfangguniang.show northernfloorco.com plotrunner.com radicalisland.com tarotit.site theawfulliar.com xn--mdecinemotionnelle-bwbg.com # Reference: https://www.virustotal.com/gui/file/f535ff7416a31c3f067b61aea08aab08006eaf2dd790dcfc89c05a1f6343f17b/community stdychnesqudusisabst.dns.navy # Reference: https://twitter.com/reecdeep/status/1351444312672923648 chfourmndyanotherwak.dns.navy learnhour.net # Reference: https://www.virustotal.com/gui/file/ad03ca16b05c593894d3cf90ea6ebe56f3ce6dc94dc0675234f357893f3aadfa/detection anillanyaralo.com/e3eb/ bimtracks.com/e3eb/ eastindiaclub.media/e3eb/ exm-droneops.one/e3eb/ keystonemedicalwellness.com/e3eb/ made-in-wonderland.com/e3eb/ manconnectr.services/e3eb/ maquettree.com/e3eb/ medijobsonline.com/e3eb/ milkafrias.com/e3eb/ offencebzo.space/e3eb/ overdoza.com/e3eb/ racevx.xyz/e3eb/ stocktonweeddelivery.com/e3eb/ tmtbikes.com/e3eb/ winnicapolska.com/e3eb/ # Reference: https://twitter.com/VirITeXplorer/status/1353992650148503552 # Reference: https://tria.ge/210126-vgsyrq49hs 11sxsx.com/jqc/ 5hnjy.com/jqc/ asacal.com/jqc/ avia-sales.xyz/jqc/ baculatechie.online/jqc/ bebywye.site/jqc/ brotherhoodoffathers.com/jqc/ cositasdepachecos.com/jqc/ definity.finance/jqc/ dgdoughnuts.net/jqc/ dividupe.com/jqc/ dl888.net/jqc/ droriginals.com/jqc/ eaglesnestpropheticministry.com/jqc/ ecandkllc.com/jqc/ fitdramas.com/jqc/ gabriellagullberg.com/jqc/ hareland.info/jqc/ hongreng.xyz/jqc/ hotvidzhub.download/jqc/ incomecontent.com/jqc/ internetmarkaching.com/jqc/ ip-freight.com/jqc/ kathymusic.com/jqc/ kenniscourtureconsignments.com/jqc/ kimberlygoedhart.net/jqc/ kornteengoods.com/jqc/ lhc965.com/jqc/ lokalised.com/jqc/ ludisenofloral.com/jqc/ luxusgrotte.com/jqc/ mad54.art/jqc/ margosbest.com/jqc/ miamiwaterworld.com/jqc/ mybestme.store/jqc/ mywillandmylife.com/jqc/ neosolutionsllc.com/jqc/ novergi.com/jqc/ quintred.com/jqc/ ravenlewis.com/jqc/ screwtaped.com/jqc/ shakahats.com/jqc/ simplification.business/jqc/ singledynamics.com/jqc/ sistertravelalliance.com/jqc/ solidconstruct.site/jqc/ soterppe.com/jqc/ sqatzx.com/jqc/ st-reet.com/jqc/ sterlworldshop.com/jqc/ strahlenschutz.digital/jqc/ systemedalarmebe.com/jqc/ szyulics.com/jqc/ the343radio.com/jqc/ theorangepearl.com/jqc/ tiendazoom.com/jqc/ topheadlinetowitness-today.info/jqc/ toweroflifeinc.com/jqc/ vigilantdis.com/jqc/ vivethk.com/jqc/ weddingmustgoon.com/jqc/ wlw-hnlt.com/jqc/ xaustock.com/jqc/ zoommedicaremeetings.com/jqc/ # Reference: https://www.virustotal.com/gui/file/ec8b3d104a7fc416aab07329a5f0ecab1b7fd181ffbd2d7ac31af51e532add07/detection 88779599.com/09rb/ airfast-express.com/09rb/ aizimov.com/09rb/ alessandrabortolussi.net/09rb/ artois-plomberie-ambar.com/09rb/ edgehairandbeauty.com/09rb/ efoh27.com/09rb/ emuprising.com/09rb/ expandtherapy.com/09rb/ iregentos.info/09rb/ legendtrailcommunity.com/09rb/ myraklereleafcannaclinic.com/09rb/ nesilyilmaz.com/09rb/ prendimiconcept.com/09rb/ unitedbythebucket.com/09rb/ watereminder.com/09rb/ # Reference: https://www.virustotal.com/gui/file/629c7e301816de498d8a784935bd1a4aa21331a1520275c48b30c0ac4aa18285/detection abstract-elearning.com/gqx2/ bonus189.space/gqx2/ dbsadv.com/gqx2/ enlightenedsoil.com/gqx2/ housvest.com/gqx2/ inreachpt.com/gqx2/ libraspeed.com/gqx2/ microwgreens.net/gqx2/ podborauto.pro/gqx2/ scionoflewisville.com/gqx2/ shaffglowing.com/gqx2/ tu4343.com/gqx2/ # Reference: https://www.virustotal.com/gui/file/841ce55c5a583e5674e1fcde05347c3ad07dec6e0f38298bb4fc2566ca5aa746/detection # Reference: https://www.virustotal.com/gui/file/d27174550c627e2ae425db9dc83ed7cb1856034184c6ce333efcf383506abd88/detection acdfr.com/bw82/ activagebenefits.net/bw82/ cbrealvitalize.com/bw82/ ctfocbdwholesale.com/bw82/ dealsonwheeeles.com/bw82/ engageautism.info/bw82/ exlineinsurance.com/bw82/ gallerybrows.com/bw82/ gdsjgf.com/bw82/ glasshouseroadtrip.com/bw82/ h2oturkiye.com/bw82/ housebulb.com/bw82/ illfingers.com/bw82/ ismaelworks.com/bw82/ learnplaychess.com/bw82/ magiclabs.media/bw82/ magnabeautystyle.com/bw82/ mgg360.com/bw82/ mybestaide.com/bw82/ ninasangtani.com/bw82/ okcpp.com/bw82/ pandabutik.com/bw82/ primajayaintiperkasa.com/bw82/ ramjamdee.com/bw82/ rizrvd.com/bw82/ ruaysatu99.com/bw82/ thepoetrictedstudio.com/bw82/ tuvandadayvitos24h.online/bw82/ twistedtailgatesweeps1.com/bw82/ usmedicarenow.com/bw82/ xn--avenr-wsa.com/bw82/ # Reference: https://app.any.run/tasks/07819c4b-dffc-4c56-8f83-eee38a01b188/ littlefreecherokeelibrary.com/xle/ localeastbay.com/xle/ loyaloneconstruction.com/xle/ prestiticadalanu.com/xle/ ricardoinman.com/xle/ theatomicshots.com/xle/ tknbr.com/xle/ www7456.com/xle/ # Reference: https://tria.ge/210203-nhqf45a196 1317efoxchasedrive.info/kio8/ 56ohdc2016.com/kio8/ 73gardinerdrive.com/kio8/ airpromaskaccessories.com/kio8/ allinoncrypto.site/kio8/ angermgmtathome.com/kio8/ asosbira.com/kio8/ audiencetrust.sucks/kio8/ awesome-veganism.com/kio8/ bingent.info/kio8/ cbluedotlivewdmall.com/kio8/ chinhphucphaidep.online/kio8/ domentemenegi20.com/kio8/ dream-case.com/kio8/ drizzerstr.com/kio8/ dubojx.com/kio8/ envirocare-ss.com/kio8/ erniesimms.com/kio8/ estedindustries.com/kio8/ facestaj.com/kio8/ fantasticsgelato.com/kio8/ ffhcompany.com/kio8/ fireworkstycoons.com/kio8/ fixedpriceelectrician.com/kio8/ ghar.pro/kio8/ ghorowaseba.com/kio8/ globalcrime24.com/kio8/ greeaircondition.com/kio8/ gropedais.club/kio8/ heightsplace.com/kio8/ helmihendrahasilbumi.com/kio8/ hnqym888.com/kio8/ jennaloren.com/kio8/ jtkqmz.com/kio8/ lauratoots.com/kio8/ legamedary.com/kio8/ magmaplant.net/kio8/ masdimensiones.com/kio8/ melolandia.com/kio8/ newyorkcityhemorrhoidclinic.com/kio8/ noimagreece.com/kio8/ nutbullet.com/kio8/ ocleanwholesaler.com/kio8/ opera-historica.com/kio8/ pastormariorondon.com/kio8/ perteprampram01.net/kio8/ pizzaterry.com/kio8/ plantationrevival.com/kio8/ porntvh.com/kio8/ sanrenzong.com/kio8/ stjudetroop623.com/kio8/ systizen.com/kio8/ tf-iot.com/kio8/ thaibizgermany.com/kio8/ the-aviate.com/kio8/ thedesigneryshop.com/kio8/ thespiritualabolitionist.com/kio8/ thewilmingtonguide.com/kio8/ tsunrp.net/kio8/ utopicvibes.net/kio8/ velactun.com/kio8/ wolfetailors.com/kio8/ yogabizhelp.com/kio8/ youremsys.com/kio8/ # Reference: https://tria.ge/210205-vge381amz2 4vrlwi.site/dyt/ admoney.info/dyt/ ajreality.com/dyt/ alejandrobrand.com/dyt/ bakldx.com/dyt/ bkdn.xyz/dyt/ blushinglips.wine/dyt/ bradfordsahm.com/dyt/ caprichodigital20.com/dyt/ casinobigbank.com/dyt/ cezede.com/dyt/ codedlock.com/dyt/ connecting4fun.com/dyt/ contenttoincome.com/dyt/ coolartgallery.com/dyt/ designed4youevents.com/dyt/ dijitak.com/dyt/ dongzhenwl.com/dyt/ dopefuse.com/dyt/ drsineadbeirne.com/dyt/ eacvea.com/dyt/ enecaa.com/dyt/ eseskalierteh.com/dyt/ evokealpha.com/dyt/ fessucesesee.com/dyt/ fhehsjeh.com/dyt/ greyboxautomations.com/dyt/ hoslergroup.com/dyt/ humanitera.international/dyt/ innocentandnaive.com/dyt/ jasminesecretshop.com/dyt/ keller-bec.com/dyt/ lesavonbyannvictoria.com/dyt/ longwoodlife.com/dyt/ luckyvertical.com/dyt/ manifester.guru/dyt/ marvitrans.net/dyt/ mediclyft.com/dyt/ mosella.online/dyt/ naturally-toned.com/dyt/ njcfpnetwork.com/dyt/ nomadroams.com/dyt/ norsk-medisin.com/dyt/ pinkopalboutique.com/dyt/ plus1joinersandbuilders.com/dyt/ quatormi.site/dyt/ reianswers.net/dyt/ royalpetcanvas.com/dyt/ scattershotgames.com/dyt/ sensvia25.com/dyt/ shreeshyamexporters.com/dyt/ so0551.com/dyt/ socksofcolors.com/dyt/ spleafpro.com/dyt/ sportscircleindy.com/dyt/ sptrading.company/dyt/ sulukozukremi.com/dyt/ summerlively.com/dyt/ surkentkuruyemis.com/dyt/ susanenglert.net/dyt/ tg0913.com/dyt/ theholinesshousewife.com/dyt/ thepreventivemedicine.net/dyt/ zhongwu.tech/dyt/ # Reference: https://twitter.com/reecdeep/status/1359854987623464969 # Reference: https://tria.ge/210211-ynsg9khthj # Reference: https://app.any.run/tasks/0e97831e-b9b3-455b-b688-05a38d4fd8f5/ 360afs.com/sfd8/ accountablereagent.com/sfd8/ anaisandmichaelwedding.com/sfd8/ battlecreekenquirer.sucks/sfd8/ behintejaratpourasa.com/sfd8/ blockchaininfo.online/sfd8/ bottom.golf/sfd8/ bringbackbeer.com/sfd8/ brothersarmy.com/sfd8/ cafeconstantino.com/sfd8/ caregiveronestopshop.com/sfd8/ colombeboncenne.net/sfd8/ csc-traffic.city/sfd8/ domentemenegi17.net/sfd8/ duoyiboard.com/sfd8/ ecofarmtr.com/sfd8/ frequence-movies.com/sfd8/ haxb33.xyz/sfd8/ houstoncoupleswhocycle.com/sfd8/ howongbrewing.com/sfd8/ ianac.info/sfd8/ immunologi.world/sfd8/ intuitionkeys.com/sfd8/ joekurtz.com/sfd8/ lingring.party/sfd8/ lon-dox.com/sfd8/ menteinformativo.com/sfd8/ miapetito.com/sfd8/ mompreneurista.com/sfd8/ mrrecordinc.info/sfd8/ myworkingportfolio.network/sfd8/ njprestructures.com/sfd8/ northstarpmg.com/sfd8/ pamelathomas2020.com/sfd8/ paulsplumbingllc.com/sfd8/ pazzionteez.com/sfd8/ pinoyko.com/sfd8/ plantenaturelle.com/sfd8/ plumbfinders.net/sfd8/ pmanigeria.com/sfd8/ purelycoastal.com/sfd8/ roovepages.com/sfd8/ royalcradle.com/sfd8/ sachinlog.com/sfd8/ schmuckhof.com/sfd8/ secondnatur3.com/sfd8/ silmarinternational.com/sfd8/ splashleadsdigital.com/sfd8/ strilok.com/sfd8/ subastaelectronics.com/sfd8/ sunwavescreative.com/sfd8/ superhumanworkout.com/sfd8/ swapbanks.info/sfd8/ thaipasal.com/sfd8/ theambivnce.com/sfd8/ themowerdoc.com/sfd8/ turnerswindowstylings.com/sfd8/ uasaerialsolutions.com/sfd8/ vyloanshop.club/sfd8/ wellnessbamboo.com/sfd8/ xn--hef-1la.com/sfd8/ young-oldtimer.com/sfd8/ yxw897.com/sfd8/ zeravern.com/sfd8/ # Reference: https://www.virustotal.com/gui/file/a9d7dbb160330978fb1b5cbd40a4bf2c0aede509905de5d792e45aa5ca876095/detection blackownedtea.net/yce/ domvy.xyz/yce/ erchomesellers.com/yce/ extreamx.space/yce/ fiaincomeforlife.com/yce/ fjtweb.com/yce/ myconqering.com/yce/ readydesignz.com/yce/ shaamfilm.com/yce/ sitesuperapido.com/yce/ technnatural.com/yce/ thebuttonfriends.com/yce/ yyewdq.com/yce/ # Reference: https://urlhaus.abuse.ch/url/987827/ # Reference: https://www.virustotal.com/gui/file/2d311b197e07b4149d8eb422ac2b5aa5c24b10cc8131e53df65ca32986b1556a/behavior # Reference: https://www.virustotal.com/gui/ip-address/103.147.184.10/relations rmtcntlthdyenverthdb.dns.army stdyrmtcntlenverstgv.dns.army stdyrmtcntlenverstoq.dns.army rmtcntlwsdyenverwsbt.dns.army mndyrmtcntlenverstpo.dns.army hangtv3xyz.myddns.me hangthai3z.myddns.me hanglady3xyz.myddns.me # Reference: https://twitter.com/reecdeep/status/1364129913511510018 kungsb2stdygotchtsty.dns.army # Reference: https://twitter.com/reecdeep/status/1367101184289492999 necght.xyz # Reference: https://twitter.com/reecdeep/status/1367445802096984064 tws-rr.xyz # Reference: https://twitter.com/pmmkowalczyk/status/1367503173200543747 # Reference: https://www.virustotal.com/gui/file/92f656d44d38fbc5e7964e36634bf95d18e157228624d1b38ea933633579ddc4/detection disciplinemonkey.com/njo/ rnlasermedspasolutions.com/njo/ # Reference: https://twitter.com/reecdeep/status/1367089557884272649 merifalls.com # Reference: https://twitter.com/reecdeep/status/1369191905880379394 joomlas123.info # Reference: https://twitter.com/sS55752750/status/1369792848816660483 olenfex.com/mdi/ # Reference: https://twitter.com/pmmkowalczyk/status/1369746549593538574 fessuseyyesseee.com/mdi/ # Reference: https://twitter.com/pmmkowalczyk/status/1369748045097820162 # Reference: https://twitter.com/sS55752750/status/1369791347029327882 rizrvd.com octoberx2.online # Reference: https://otx.alienvault.com/pulse/604b58f6a54ab9919d92768f 41230793.net capricorn1967.com rbfxi.com ziruixu.com # Reference: https://www.virustotal.com/gui/file/474cef321f60037058b0180b83d4db805792822762f071d3bdebc3fb8dd66c33/detection digi-plates.com oogilab.com atrocity.xyz 400city.com yummicrabva.com vivaceactivewear.com/grv/ supinapp.com ycmath.com lindustrieetleca.com xn--k1abtc6be.xn--p1acf bessgarments.com hengetelt.com vz473.com # Reference: https://twitter.com/reecdeep/status/1371403258200211458 # Reference: https://app.any.run/tasks/3c55db66-435a-4a40-a2d8-08db5c6aa891/ # Reference: https://www.virustotal.com/gui/file/6da50c6b31b4125631987f40d7bd3dacab22c961ca9ba60dfdfa45120d5ec17a/detection commagx4.info stdykungsb2gotmenlop.dns.army 555lucky.net/g832/ rentmy.place/g832/ manorblue.com/g832/ swifter.tech/g832/ layoutsbox.com/g832/ greatstape.com/g832/ rayhanrony.com/g832/ taxicabairports.com/g832/ aispokenhere.com/g832/ roomrain.com/g832/ layoutsbox.com/g832/ mi-tipofthemitt.com/g832/ mima-tech.com/g832/ personaljie.tech/g832/ skxrxxf7j87.com/g832/ manorblue.com/g832/ taxicabairports.com/g832/ hkyda-uk.com/g832/ ghjkl456.com/g832/ mlpsdigital.com/g832/ beiser-sa.com/g832/ layoutsbox.com/g832/ # Reference: https://www.virustotal.com/gui/file/2cb8983bbf7860e8861f601dc1c9fd36a21aecca6a81831e74f9b2c098635f50/detection americanwoodgrain.com bigmikecon.com lidandocomsuaansiedade.com mysticparka.com nnllnn.com odromex.net optimizedperson.com originalsportsas.com poppykuroki.com skyrocketyoursuccesstoday.com solarcellefficiency.com stadtaugsburg.com vip72.club vturalcycles.com yinaosw.com # Reference: https://app.any.run/tasks/decdf523-61a8-487f-94db-7be2eec7cba4/ # Reference: https://www.virustotal.com/gui/file/f8196e6009ed055bd7e2021a629cb903a530650ed36505b296c177fab320180e/detection 4676sabalkey.com 5bo5j.com 856380692.xyz babyhopeful.com bkhlep.xyz bukaino.net caresring.com creationsbyjamie.com dccheavydutydiv.net explorerthecity.com icepolo.com jyxxfy.com mauriciozarate.com maurobenetti.com myfeezinc.com oryanomer.com polling.asia robertbeauford.net siyezim.com thefamilyorchard.net thevistadrinksco.com usopencoverage.com wholesalerbargains.com worldsourcecloud.com # Reference: https://twitter.com/MBThreatIntel/status/1372965574666375174 4africa.cloud alaleste.com bannerberries.com beyondtheweeds.net bilozir.agency bradfordbarbell.com ecoconsciousart.com gabrieleanajulia.com insightccnw.com lashnetix.com leelegantflower.com littlegreekgrocery.com manconnectr.services mintmobikeplus.com njzycj.com novergi.com partyoftres.com veriezy.com your-masterclass.online yxjks.com zubaobei.net # Reference: https://www.virustotal.com/gui/file/8fb2a899e6622a2ddc7989121174bea2b7756f3f56f64f42dc6ef875d19ce919/detection 3cheer.com/p2io/ adultpeace.com/p2io/ brunoecatarina.com/p2io/ carmelodesign.com/p2io/ cleanxcare.com/p2io/ hazard-protection.com/p2io/ hiddenwholesale.com/p2io/ liminaltechnology.com/p2io/ magetu.info/p2io/ painhut.com/p2io/ shopihy.com/p2io/ thriveglucose.com/p2io/ trendbold.com/p2io/ # Reference: https://tria.ge/210408-9h7wsybb7e 7985699.com acernoxsas.com americanscreentest.com az-pcp.com blackmantech.fitness bongwater.life buyeverythingforbaby.com clonegrandma.com cwcellar.com domentemenegi47.com dream-e-mail.com ekolucky.com elpis-catering.com elticrecruit.com finalexam-thegame.com fjsibao.com foodates.com gatewaygaurdians.com goldenvalueable.com gujaratmba.com gyanankuram.com hcr.services ikoyisland.net israeldigitalblog.net krphp.com l2zmamzoin.xyz lawsoftwareteam.com likehowto.com mex33.info my-weight-loss-blog.net nevertraveled.com nevomo.group papofabri.com partapprintercare.com phillydroneservices.com pjsgsc.com privateselights.com quehaydecenarhoy.com raison-sociale.com ranguanglian.club regalparkllc.com samanthataylordesigns.com sinisviaggi.com sorelaxedmassage.com suns-brothers.com syduit.com taniakarina.com thechilldrengang.com topmejoresproductos.com ueoxx.com ufa2345.com v6b9.com valid8.network vegrebel.com verochfotografa.com vinegret.com vr-club.site vt999app.net winnijermaynezigmund.site xn--80aaxkmix.xn--p1acf xn--kck4cd0r.net xn--v1bmo9dufsb.com xpddwrfj.icu yetbor.com # Reference: https://tria.ge/210407-ywnnjr2vve 18082020.com 3559044.com 911salesrescue.com anadelalastra.art azure-vs-google.cloud bardototonho.com bricksli.com camperlifeclub.com carobbella.com carritogastronomico.com cenconsulting.com charmdalat.com clavunica.com crosswhiteconsulting.com dailyhyundaihanoi.net decoviewer.com ecomcourse.online edwardjonescredticard.com entohops.com esl-materials.com familymedicalurgentcare.com fenuadiscovery.com flcpyl.com ggapp.run godseyepiece.com greenesgoodies.com herbalbooze.com heritagelcc.com home-sou.com huongdandidong.com hvacservicecoldwater.com inlandempiresublease.com jimmysga.com josiahtreatenglishportfolio.com kaashir.com karizcustomizeme.com kellnetworks.com launchtutor.com legalhelp.black lewishackney.com lumpkinforless.com luxel01.com magenx2.info marfrigs.com merrypopinnannies.com metort.com miss-windy.com muzhskoy-eskort.site myboardinghome.com mysfmp.com ndrossignol.com opusleaf.com orchidandiris.com runwithbe.com seymor-law.com shangbinjieneng.com shopthen2.site sniffai.com socialunified.com szameitat.net thedorkweb.com unityprawn.com wegawk.com zx765.com # Reference: https://tria.ge/210407-wf3kcrqtj2 5667e.com 7030130.com 7667120.com aelnetwork.pro appalachianrepublic.com assessoriaesmero.com blackdisclaimer.com calendarioslen2021.com citestaccnt1598439710.com com623036210300.com congbaohiem.net creditccu.com curativestemcells.com curiget.xyz derasource.online dexcci.com drtprd.club ennewine.com findinghonor.com floridasoapworks.com fourcanal.com fuhaisky.com genesisdrumco.com guideingword.com gustobolivia.com heatgemini.com humanareachrewads.com icygods.com johnniemaepantry.com k2132.com kardiadance.com kathyscrabhouse.com kemermaxx.com laurindogalante.com lindaheart.com loupcreation.net lubbocksbdc.com mathilde-et-vincent.com moonboyspa.com mototasima.com mv857c3fqfppyd.xyz myrightdoctor.info neuroeka.digital pupa.one purecraftoils.com rightgetup.com sashahung.com se009.icu serv7-wells.com shopcurbsideanddelivery.com skorokvartira.online sleepy-boy.com sohadmorales.com speaktoava.com sundayframing.com talons-hauts.com teoslu.com theinterviewtechnique.site thoomkuzhy.net townietreats.com vandmc.com webtourlive.com xinke518.com zamar.online # Reference: https://www.virustotal.com/gui/file/0cec69e7857e687c0352812a4206e68f57008ea07d34b51bb9b1fc44ef042ff6/detection adeleycar.com bobwhiteknives.com carbeloy.com cash4homesutah.com customkreation.com fotosdepueblo.com funbrushstrokes.com ghoshtechno.com goldstespresso.com greenlightsmokables.com latravesia.net lukmanmalik.xyz marymoorridgecondo.com mymoxypets.com new123movies.pro officehoursonly.com parkviee.com shipu143.com shopvibeup.com sussage.com talllensphotography.com thedrata.com theemperorbrand.com yaanpay.com # Reference: https://www.virustotal.com/gui/file/94235ec4fec92239bf53cbe18e6b698f30ca30d07602cc123dcf76d728bff41e/detection abzarnovin.com atlantadomain.com curiget.xyz currenibtc.com homartist.net koedk.com paraiso.info retro-e-scooter.com riseses.com tenxtimes.net upliftgrp.com xuji68.com xyxrprt.com # Reference: https://twitter.com/reecdeep/status/1380479709016948740 # Reference: https://app.any.run/tasks/121b953c-a8b9-4f68-98dc-8531a2a77fd7/ cndzysw.com contactodirectoseguros.com cotillionclubsmv.com haarbal.com hdsmyyz.com hireblkcreatives.com innovativeiclass.com myriamward.com netacradle.com specnazshow.com sumantrabasu.com # Reference: https://www.virustotal.com/gui/file/190af94fad72bc8e19a07ab5dd60af939e5216565f8efd92aa1aa561a38281be/detection 0075544.info 349vsz.info anamikapandey.com dropin-frog.com elmatech-impianti.com milliemilliemillie.com naprawalaptopow.services smallbizhacklondon.com sobolev.design theoknoester.com # Reference: https://www.virustotal.com/gui/file/43a2069e57baacb53de658addca8950b570ce19334cd6c617c4c1060f9296fb7/detection abelprocess.com allincursive.com daghidelivery.com doctors4change.net hxc28.com ichaugames.com ienvoices.com kingdavidtiferetshop.com kuppers.info mchglobe.com puntopymeschile.com quickshop.xyz roleta.site sagemenerji.com siguelacorriente.com stevenemily.com trendyheld.com verificationpays.com worldofannabel.com # Reference: https://tria.ge/210414-318g36c5xn 19come.com/goei/ 247carkeyslondon.com addthat.xyz akindousa.com armanrugservice.com baldosasanjose.com bet365o2.com breathharbour.net caross-china.com casalomasymphonyorchestra.com cluskmusk.com covidtracksb.com creativem2.com csgo-roll.net digitalmarketingmoves.com/goei/ distributorfocuson.com/goei/ epicfriend.club evecrude.xyz foodsystemsjusticeproject.com fwgkdhg.icu generalflix.com/goei/ gulf-landlord.info her2mymeme.com imbravura.com italianrealestateagents.com karyapertama.com kelasipo.com kevinrsamuels.network lcjzjt.com legendsalliance.net leverhump.store libreo.club limonproduce.com looneytunesrun.com ltsbinge.com lxpvccard.com ly-iot.com mapadequito.com maquinaclub.com mariebiernacki.com massaponaxhighschool.com mediaworkhouse.com mex33.info mindflexlab.com niggeruprising.com nolimitsynthetics.net office-tourism-tirana.com onlinecollegetherapy.com ourmonaca.com ourmunera.net pimpmyrecipe.com randalldavisauthor.com reutbergcapital.com ronwongart.com rsw3313.com seaworldminecraft.com shopflyonline.com sportwillwin.com theexpatweightcoach.com ushealthvisa.com vbkulkarni.com win-back.online xn--ga-c9a.com zanzan8.com # Reference: https://www.virustotal.com/gui/file/0b2bfb69c51b7adaeedec010a02983eee856559b71ecbc4ecb61c7e929b1f165/detection 33ofbalranaldavenuelargsbay.com bulbulators.com cmsphotography.net freshair--uk.com hempexchange.biz kfuos.info mujereshoyonline.com newsoc.com nylonsilk.com phillimore.mobi pritap.net rtve.online skyroott.info techforcefoundation.biz theflightcalculator.com xadserve.com # Reference: https://www.virustotal.com/gui/file/5b19c5b2854cf7d4ed344ff7539b38caec397d6a3002a7219b2fbe0b7c73f455/detection 3cheer.com adultpeace.com aideliveryrobot.com biztekno.com carmelodesign.com fuhaitongxin.com hiddenwholesale.com liminaltechnology.com lucytime.com m678.xyz magetu.info malcorinmobiliaria.com mercuryaid.net micheldrake.com tricqr.com untylservice.com # Reference: https://www.virustotal.com/gui/file/70f35721eb13022a6ae320055bf74d8c3bf688d5cd04c3bea37f6c2e4886d1b3/detection project99x.com ruhuxue.com shupaishuiban.com top-endstrollers.com xn--onegcio-o0a.com # Reference: https://www.virustotal.com/gui/file/6cdd13858c80732f5bcae5a998b2cc4402ee5c549b7042594b0edec313671a6f/detection allindiatrust.com biyahetours.com cinmax.xyz count230.com fakingslatino.com hamrocity.com landerauto.com lodosmimarlik.com marriedtwomusic.com marshylime.com mindtattooed.com nundmshop.com prosperedfreelancing.com shopqls.com thenicolehernandez.com xn--caasymas-e3a.com # Reference: https://tria.ge/210420-5hgfnhdfq2 20190606.com 2020uselectionresult.com afasyah.com amarak-uniform.com apgfinancing.com ballparksportscards.com britishretailawards.com centaurme.com craftbrewllc.com cruzealmeidaarquitetura.com crystalwiththecrystalz.com devarajantraders.com dijcan.com dineztheunique.com esveb.com fairerfinancehackathon.net floryi.com gadgetsdesi.com ghallagherstudent.com hidbatteries.com idtiam.com instantpeindia.com interprediction.com jocelynlopez.com joyeveryminute.com launcheffecthouston.com localiser.site lookupgeorgina.com mamapacho.com marolamusic.com milehighcitygames.com myfreezic.com nmrconsultants.com opolclothing.com pawtyparcels.com photograph-gallery.com plataforyou.com print12580.com programme-zeste.com raphacall.com realmartagent.com rednetmarketing.com retailhutbd.net rftjrsrv.net ronerasanjuan.com samytango.com sewingtherose.com shoprodeovegas.com shuairui.net singlelookin.com siyuanshe.com slicktechgadgets.com sophieberiault.com spyforu.com styleket.com syuan.xyz thegoldenwork.com thehmnshop.com thesmartshareholder.com topgradetutors.net tpsmg.com travellpod.com wangrenkai.com wellemade.com wpcfences.com # Reference: https://www.virustotal.com/gui/file/8ad095b5f3cbe5651719b70347c94f489a4a14d72a4535c68f9829fe8d0ec738/detection aksessories.com carolyngowercoaching.com cavanvanrental.com china-xinkai.com greenbarmiami.com jobs-preparation.com maniakea.com minksywinks.com modernhub.info nchuangyi.com sonoraquwat.com stepsaudio.com therealnotary.com trickvv.com tyrkietspecialisten.com xcusehrreje.com # Reference: https://github.com/MBThreatIntel/malspam/blob/master/AgentTesla/AgentTesla_2021-04-27.txt bornforbetterthings.com crossfut.net dajiangzhibo12.com deltaeleveight.com draftsofsilence.com droplites.com futebolfitness.com.br highsiddityminks.com profoundai.net prulib.com pwjol.com saturnkorp.net thehealthierdonut.com unmanglement.com vtz6whu5254xb1.xyz weatherdekniagara.com # Reference: https://www.virustotal.com/gui/file/1f108a10b866def65686fcb0e0c10612152288ea1f7a6158e5ada37f26d03265/detection alignedenergetics.info craftsman-vail.com downloadhs.com fortwayneduiattorney.com gmworldservice.com lowcarblovefnp.com salahdinortho.com sim201.com twincitieshousingmarket.com xiang-life.net # Reference: https://tria.ge/210429-tmvpzvp3tj 12hourchallenge.com 890281.com airfieldelectric.com alleyesonegipt.com amu2020.com antalyasml.com asudprr.com berlins-cuban.com burmester.email businessfundingtodayscam.com byteidolon.com chiraaag.tech coinbutter.com commercestudy.online contorig2.com czech-lang.space designlyticsuk.com embarkjourney.party formulasimracing.com goldtraderassociates.com greedysafely.com gunsareworthmorethanlives.com hiltonbomontieforeaspa.com hzlingfa.com jetsurf-versicherung.com joshimaria.com kevinton.com kreuzbags.com kungfuglobalfamily.com loriinibrand.com mcclearytrucking.com medicareschoolcommunity.com metalservicesn.com ministernarf.com miusc.com nailsnhang.com newhopeadultos.com patrickleahydescendants.com pceasyreview.com pharmacistshoko.com plumaroja.com poseidonbeauty.com poshspotaccessories.com powersandprospects.net prevenirelcoronavirus-co.com rdifatra.com reasonswhyletter.com romicore.com shangmai.plus stelbertrose.com swallow-express.com tankmaniac.net ticoverde.com tiga-roda.com tirmastermind.com trselfstorage.com uswanews.com vbetcostarica.com venturabankruptcyattorney.com wdnanshan.com wordsinprogressthegame.com ww-homes.com yanmq.com yellushnesme.info yipinsutui.com # Reference: https://gist.github.com/silence-is-best/852a1c7c7dcf29fdc8d5df73433e7676 2739kingsroad.com 2k20-aide.com 5865145.com abarroteslacanasta.com active-label.com adjustedhuman.com alexander-hof.xyz anclaseadfoodmarket.com aperfectbrow.com aperocart.com areyssg.com bawakamus.online bono73clothing.com buildingdigitalmind.com campoyabolivia.com clientcentre.net cnhremandealerservice.com/maw9/ findinghonor.com fotografialove.com gofourd.com ienvoices.com import-union.com/uv34/ inajmer.com jieliangcaifu.com kenkelconsulting.com kingdavidtiferetshop.com/edbs/ landbirdevehicals.com lazyfears.com mobcitylabs.com newportbeachswim.com onlytwod.xyz paobuyingxiong.com phillhutt.com q8ah.net rva80s.com ssc018.com symbolofsafety.com/uv34/ thecoolprojector.com theswatidiaries.com thetempustrader.com wokeinteractive.com wyshio.com xsites-dev.xyz yogina.life # Reference: https://twitter.com/James_inthe_box/status/1389959476376006657 kayandbernard.com/8u3b/ # Reference: https://twitter.com/MBThreatIntel/status/1390022224497700867 wwwnptpool.com # Reference: https://app.any.run/tasks/01f8e582-fc44-41a0-a6d3-c85ffd3f9311/ stepgentertainment.com # Reference: https://www.virustotal.com/gui/domain/officewindowssecurityfirewallopen.duckdns.org/relations officewindowssecurityfirewallopen.duckdns.org # Reference: https://www.virustotal.com/gui/file/c46f6d72a258354c5267436ea0db9cd3f12cc1595a0d9072d904b0b15731f092/detection ayaksotocikmayedekparca.com buypartagascigars.com dieselfarm.wine fone.info gudengdc.com interviewat.com kandsaccounting.com regulars7.info thearcane.world valleysprings1.com withloveboutiques.com xhtd531.com # Reference: https://tria.ge/210511-ndh4plydgx 7brochasmagicas.com albertsonsolutions.com alphabrainbalancing.com astrologicsolutions.com axolc-upoc.xyz bastiontools.net beautiful.tours beautyblvdca.com bloodtypealpha.com candidanddevout.com chefbenhk.com codeproper.com constructionjadams.com contorig2.com customessayjojo.com dgyzgs8.com diurr.com dogscanstay.com dotgz.com eastboundanddowntrucking.com ebmulla.com emotist.com ethyi.com everythingcornea.com farrellforcouncil.com foxparanormal.com fsmxmc.com graniterealestategroup.net haichuanxin.com healtybenenfitsplus.com inov8digital.com investmentfocused.com jkskylights.com kladki.com labkitsforstudents.com lifehakershagirl.online magistv.info medvows.com melaniesalascosmetics.com namastecarrier.com online-securegov.com onyxcomputing.com organicwellnessfarm.com paragoncraftevents.com pensje.net plgmap.com qgi1.com rafbar.com reservesunbeds.com revolutiontourselsalvador.com sanacolitademarijuana.com sensationalcleaningservices.net shotsbynox.com stacyleets.com turkeyvisa-government.com ultimatepoolwater.com valuedmind.com vavadadoa3.com vissito.com xn--6j1bs50berk.com xn--demirelik-u3a.com xn--z4qm188e645c.com xtrator.com yourstoryplace.com zioninfosystems.net # Reference: https://tria.ge/210511-xpz6qx1ffn 0055game.com 959tremont.com ansel-homebakery.com artinmemory.com asapdecor.com barkinlot.com birzulova.com bnctly.com bullishsoftware.com buyruon.com chaytel.com cosmicmtn.com desyrnan.com drunkpoetsociety.com enpointe.online essentiallygaia.com ferienschweden.com fps2020dkasphotoop.com fptplaybox.website fuerzaagavera.com hostbison.com houseofsisson.com ixiangzu.com joysupermarket.com kerneis.net kissanime.press kkkc5.com lacompagniadelfardello.com lagrangewildliferemoval.com ljd.xyz makemyroom.design mentalfreedom.guru moderndatingcoach.com mondaysmatters.com mujahidservice.online myaustraliarewards.com northsytyle.com nugeneraonline.com omsamedic.com onlinehoortoestel.online outletyana.com paulpoirier.com peninsulamatchmakers.net philreid4cc.com poweringprogress.today prestiged.net privat-livecam.net radioconexaoubermusic.com redlightlegal.com relocatingrealtor.com rokitreach.com royalpropertiesgurugram.com rvvikings.com sarasvati-yoga.com sardarfarm.com sectorulb.com shitarpa.net sopplugin.com soukid.com spiritsoundart.net stylezbykay.com theanimehat.com umlausa.com union-green.com # Reference: https://www.joesandbox.com/analysis/415767/0/html 7brochasmagicas.com albertsonsolutions.com alphabrainbalancing.com astrologicsolutions.com axolc-upoc.xyz bastiontools.net beautiful.tours beautyblvdca.com bloodtypealpha.com candidanddevout.com chefbenhk.com codeproper.com constructionjadams.com contorig2.com customessayjojo.com dgyzgs8.com diurr.com dogscanstay.com dotgz.com eastboundanddowntrucking.com ebmulla.com emotist.com ethyi.com everythingcornea.com farrellforcouncil.com foxparanormal.com fsmxmc.com graniterealestategroup.net haichuanxin.com healtybenenfitsplus.com inov8digital.com investmentfocused.com jkskylights.com kladki.com labkitsforstudents.com lifehakershagirl.online magistv.info medvows.com melaniesalascosmetics.com namastecarrier.com online-securegov.com onyxcomputing.com organicwellnessfarm.com paragoncraftevents.com pensje.net plgmap.com qgi1.com rafbar.com reservesunbeds.com revolutiontourselsalvador.com sanacolitademarijuana.com sensationalcleaningservices.net shotsbynox.com stacyleets.com turkeyvisa-government.com ultimatepoolwater.com valuedmind.com vavadadoa3.com vissito.com xn--6j1bs50berk.com xn--demirelik-u3a.com xn--z4qm188e645c.com xtrator.com yourstoryplace.com zioninfosystems.net # Reference: https://tria.ge/210518-mahaj6148j aadiventura.com alexrabus.com alibbv.com artistssupportpledge.com barnettmt5.com businesspartner360.com campustore.net cdaboozecruise.com dubai-tlv.com education618.com elisabethchin.com essentials19.com ethereumlp.com fefffisce.info financesdigital.com fragrancecollector.com freightlogins.com getblackops2hack.com gosanispire.com hg62988.com hymingfeng.com iyogyl.com jawwal.xyz jphomedecor-01.com kickitfashion.com konbeca.com laurartproductions.com legalmktexas.net linkitmexico.com lovenfys.com mack-soldenfx.com madcord.net moveincyprus.com mytinyhometips.com nelivo.com nerdtoysuk.xyz northernirelandcustoms.academy oculensweb.com opinetree.com pigpigworld.com prideglobalholdings.com propointcleaning.com psychedelicsnail.com radicallymessy.church retiredalsolovingit.com rigwelllifetimeonline.com rjroof.com sacpanel.com shaunmdurrantbooks.com skip3-akjsdn.com statiajewels.com thejadedopal.com tu-aviso.com ufdzbhrxk.icu ultraletefit.com uncontenido.com upthehilldogwalking.com videoadprofits.com wellness-sense.com wellsleyarts.com weretheshepards.com wester.zone wirebeevehicles.com xywedding.com # Reference: https://twitter.com/whitehoodie4/status/1395266325547819010 # Reference: https://pastebin.com/DBKKAdtE astrokhushbooshokeen.com buymobilia.com gabrielaaa.com talbotserver.com # Reference: https://www.virustotal.com/gui/file/a47861eb94370a48bc6b4d99117b88c991fb199e300bd0cc24aa812c0ea2b3cb/detection edlexacademy.com # Reference: https://twitter.com/MBThreatIntel/status/1400533314696515586 artinmemory.com birzulova.com fptplaybox.website ixiangzu.com knighttechinca.com lacompagniadelfardello.com mentalfreedom.guru northsytyle.com peninsulamatchmakers.net privat-livecam.net relocatingrealtor.com rokitreach.com royalpropertiesgurugram.com soukid.com theanimehat.com # Reference: https://www.virustotal.com/gui/file/c16b38ae42a9c32ba01ccd93bd90efceb4df05adb997b179758844e2d7d9b8c1/detection doctor.hopto.org # Reference: https://www.virustotal.com/gui/file/cf32bf794461f1286ddf604e1aa6022cd4eef1b05020c01efd2c682db865106e/detection 351215.com finoblog.com startersattorney.info e-lohas.info onixtours.com alfenafootwear.com misstenazas.com lookupnanor.mbplc.xyz kkkwhitepride.com restondefencejobs.com returpen.net lvn.xyz thedonationcard.com neutralogics.com dnhsxm.com police-baton.com # Reference: https://otx.alienvault.com/pulse/60bf5cefa96120d4cf00fa53 fullmoonrestlessco.com wttfiber.com # Reference: https://tria.ge/210609-d1n5l5g5kn 0755hk.site 7sportslive.com 856380295.xyz 91jpjob.net 9yyabewxz6ifs.net abirepeh.com acheiumabrecha.com alencamera.store alicekoller.com alkawtherabudhabi.com andresmiralles.com askmikewatson.com beyondhill.info casadobeco.com cfprcapital.com clickoakland.com cloudsecurity.pizza devcosmetic.com dmcvc.com dufortridge.com egh.xyz esvastickers.com gardentips.tips green-bark.com grupovalmik.com hairandhairs.com halalmessages.com in-a-best-world.com itxas.com julianakarlagalettus.com kafengunjuq.com kounier.com liveincareau.space mardegrises.net martobe.com masterofrisk-rj.com megadap.com mightycaller.com moatme.com modasserjasim.com onlinemovies.one opsixpack.com otelmesut.net paydayloanr.com pogiandi.com pointbrite.com prithe.club racevx.xyz ravstyle.com roofers-hartford.com ruyinoodlehousenv.com saitamasocieties.net saneplantlady.com shanxibank.ltd shinehindi.com sistershantex.com siteshapers.info sm3ly.com startersdentalimplants.info thesoftmarketing.digital thesophieashton.com tranceoptic.com twizitter.com wisdomleatherworks.com wwwbarefootrvresort.com # Reference: https://tria.ge/210603-35ggm2vmxa 568215.com 67657780.com 691jxy.com alizamcandrew.com alwaysincerely.com asahizushi.info bermudefcrasettlement.com cdpp.net chrispricellc.com copinginfula.trade corporaterecruitertraining.com cortopepperfest.com cunerier.com desertcamelhq.com dinemuch.com doratemizlikurunleri.com electrumsystem.network fsjcfrozenfood.com fundwise.pro germinatebio.com gksfhzuhi.icu gp4458.com heartoflofall.com highspnhxm.trade hzzamy.com ihsangazisiyez.com jamaicanrestate.com kalptarucentrino.com kaqitoy.com kieler-hof.com koladintechnologies.com laurabarstowart.com lcpcap.com leetranscreations.com lessismorebeautiful.com ligaeuropea.com machinerycomfortable.com macusix.com merchasylum.net mescopro.com mymathstest.com pbzb94.com pheki.com radansaisortagim.com recreationanddevelopment.com richelitesingles.com sagesse-courtage-credit.com sdyuancang.com securenetflixapp.com shipbuildersforgolden.com stallionsilver.com tennisopenit.com texas956.com themallvideo.com theopendata.exchange traditionalmehandi.com weknownorthgower.com whirlpool-repair.site x-izm.net xn--2z1bq6efxj2gp2o9xd.com xn--anibalderedao-7eb3d.com yangpaair.com ycshop.net yds-inc.com zseasyfishin.com # Reference: https://app.any.run/tasks/f06bb2ed-fede-4404-8291-2b744ebd1bce/ bf-swiss.com cddcsw.com cpzgzcw.com findholmesinlaurelmaryland.com kleinrugcleaning.com mcluxuryrentals.com mss52.com ontarioboatcharters.com priyadubai.com skip1-dndasasd.com suderstr.com tfjxw.com unmeasured-grace.com updatesz.com wierzewzwierze.com # Reference: https://twitter.com/MBThreatIntel/status/1406973188828024837 magnoliamaycandleco.com zhf2883.com 2811152641.com jxsaigonanhvu.store reciperoast.com sallah-kw.com tigerk2.com sahnakz.com xn--vkc6b6baa6ac1jbwc6l.com # Reference: https://tria.ge/210624-gp1c67p5ra 592215.com academicplumbing.com alnooncars-kw.com aztecnort.com babbageacademy.com bestveganbook.com brussels-cafe.com ca3construction.com cursosaprovados.com dbrulhart.com debbiewilsondesigns.com delta-wing.com dkku88.com dottproject.net drainthe.com floor-space.investments forummondialdelamerbizerte.com garnier.red genotecinc.com girlfriendsgarb.com gon2580.com homebrim.com inclusiocg.com infinitilamp.com influenzerr.com informationside.com ip2c.net jakesplacebarbers.com jam-nins.com keeponsports.com kensyu-kan.com leelegantflower.com luckytwo.agency mdwovzrrm.icu ministry-of-barbers.com msmenders.com nazarickdeveloper.xyz packapp.net panache-rose.com pjcavaliere.info pursemore.com rbcoq.com scootgotti.com sezyz11.com smartswitchhomeloan.net snakby.com spacecoasthondaevent.com stagingsolutionsgroup.com sumaholesson.com tempestchs.com theapiarystudios.com thebusinessfitclub.com thehealthyimmunereset.com theservantleader.com tikhyper.com trebdurham.com trueblue2u.com vidasustentavel.online videohm.com vipandeep.com whachupichu.com wholehearteddaughters.com zhixintonghe.com zpxinxi.com zzful.com # Reference: https://twitter.com/MBThreatIntel/status/1408090816229351426 bebek-store.com jagrit.codes platinumforsale.net pornrog.com sneakygear.com thisislandonbraverman.com # Reference: https://tria.ge/210625-faspqe4qyx a2calf.com aimuseums.com andreatessler.com angiepologie.com bestivfcenterpune.com bloodsweatnskills.com bsankavl.com chocolatejerky.com classifoods.com creaturescreate.com currogpheasantshoot.com cyberzenith.com dwlrr.com dynamicfitnesslife.store edem-agency.com efrainspura.xyz emotionsmanifest.com employeerelationships.com extaseestreaming.com festeringuncle.com flirt-girls.icu freetimecleaningservices.com futureadb.com gadgetwoods.com icankid.net innerpeaceactivist.com izakayajun.com knektr.online kuromugi-blog.com lilaccityacupuncture.com lodgespringseniorliving.com lopsenetwork.com mafalda.cloud melaninswagger.com melissadishes.com mkc.xyz ohiocommunitynewsnetwork.com onshore-energy.com oohdough.com oxbstwnm.icu pemeroth.com pennygailpottery.com platinumortho.net pyantx.us quyetstar.site resumes2impress.com rulrr.info shuji-ogawa.com smacey.com smartchoice.education sofiaalva.com southerncloseouts.com stainedglasshockessinde.com thankyouforthemoments.com thefuntheboringtheinbetween.com theindependentwings.com tusinschoology.com ulinzigear.com uxlunexpectedlawyer.com vinh-heritage.net wefanthedead.com womanwithacode.com xn--tr-trkiye-t9a.com ycxlst.com zhaigoo.com # Reference: https://tria.ge/210624-wprc4elcza 4860p.com abundando.com airlinesfm.com alpha-psych.com aridham.com azaza.store boldae.com borwoo-packaging.com bringcovidhome.com buyersmeetsellers.net calfwag.com crewe-tech.com dmarc.press dronerealestate.net eagle-rock-real-estate.com emmonsfororegon.com excellencepi.com farmacykauai.com fbrblog.com ffpgv.top filledbasket.com findmyiphone.services glaseye.com gwokath.com handbagsbreeze.com hoodhippy.com hyperhostns.info infomediosdigital.com iopsms.xyz laive.chat leorisingcreative.com leverj.exchange loty-hd.com manchesterflowerwalls.com mayberrycommunities.com natalieball.com novitadelgiorno.com paysamba.com prophunting.com purple.gifts pussyfarts69.com radiosta.com registergamers.com richmondpistolpermit.com sans35studios.com sarahhariri.com scrippshealthprivacynotice.com seekingyours.com step1clean.com teach.wine templabels.com testcomp8260.com top10musicmarketing.com toughershop.com townsendcomics.net utikejt.com valengz.com wildeliving.net wyattwillgetbetter.com xn--kipinpaja-z2a.com xn--sllskapsdjur-gcb.com yange03.com yenisarkisi.com yourgafflettings.com zimmerkauf.com # Reference: https://tria.ge/210615-5h25azl6tn aapliweb.com accordinera.com alakhi.com arie09.com askfine.com asserghorab.com associationtechnologyblog.com aurummobilestore.com biologicaldeception.com bonap56.com bonus328.online cbgmasters.com cookingwithyourkid.com coolsgames.com copiaequipmentfinance.com dspinsure.com easypanservice.com efiesonestifanos.com elearchsearch.com eveaquila.com fireball15.com firstlinkk.com fuelofsmokenvape.com gangelich.com grand-dental.com grassysigns.com greatdomainsales.com gslge.com idealwindowmfg.com irc-helper.space jadepalance.com kcdyhbv.icu keys2successfulliving.net kidsclothing.center liveatrivernorth.com lucky5tarstudios.com macarthursflowers.com motor-lamp.com mounaquedecampan.com mumbaibusinesscentre.com napaluxurypicnic.com nastybestinteriors.com nataschabruder.com nusantarataniagung.com overthewaterfront.com paradigmtechnicalsolutions.com pub-g-free-uc.com raphaellacroix.com riseplc.com sawsome.icu sedlmeierbestattungen.com selllasheswithtonya.com studiopeer.com taksykw.com thebutterflylifers.com thebutterflyme.com thedigitalmarketerslounge.com thelewalla.com transferable-value.com unbaluns.com veracars.com wordhospice.com wpmaintenanceteam.com wtxpfoundation.com yourebridgeplan.com # Reference: https://twitter.com/reecdeep/status/1409451122511814657 cunix88.com # Reference: https://tria.ge/210630-qtfmtaaprn 29752ellendale.com 88q858.com allpurposepaintingservices.com allterdsmatter.com angelademarco.com awkwardpeachfitness.com balancerestoreomaha.com bestcoastwellness.com bidatauction.net blogafonte.com cjcgraphics.info cleaner-solar.com cloudservices.technology cnhy0769.com connecteddots.digital couia.com covidcustomdesigns.com e-srot.com eaornti.com eclorui.com enrgsystems.com fimco.net flaxx.life gezirapharma-sd.com gmb-marketing.com hardrock.site holowide.com hotelcastellgye.com irondoorsnearme.net jeilaslimefactory.com jimeipifa.com jukeboxjeffdj.com kate.chat kujtimet.com lolly-bops.com myzoomroomz.com navyugitsolutions.com notimpersonating.com pantheoncases.com parossunbed.com pohanc.net pontacols.com putortifashions.com rapidexpressshipping.com ravexim3.com red-studios.com remoteandnice.com renetyson.com rhexlux.com saltairbeer.com savignies.com schnarr-online.com shlokus.info simplysummerdawn.com soulpowerlive.com specialforcesofindia.com sutransformacion.com talsworldwide.com taspate.com thecode.community thepassiveincomecreator.com uluapokehouse.com vascularsurgery.club veristasolutions.com wwwgraciescottage.com # Reference: https://tria.ge/210630-yg8jjxplla 568215.com 67657780.com 691jxy.com alizamcandrew.com alwaysincerely.com asahizushi.info bermudefcrasettlement.com cdpp.net chrispricellc.com copinginfula.trade corporaterecruitertraining.com cortopepperfest.com cunerier.com desertcamelhq.com dinemuch.com doratemizlikurunleri.com electrumsystem.network fsjcfrozenfood.com fundwise.pro germinatebio.com gksfhzuhi.icu gp4458.com heartoflofall.com highspnhxm.trade hzzamy.com ihsangazisiyez.com jamaicanrestate.com kalptarucentrino.com kaqitoy.com kieler-hof.com koladintechnologies.com laurabarstowart.com lcpcap.com leetranscreations.com lessismorebeautiful.com ligaeuropea.com machinerycomfortable.com macusix.com merchasylum.net mescopro.com mymathstest.com pbzb94.com pheki.com radansaisortagim.com recreationanddevelopment.com richelitesingles.com sagesse-courtage-credit.com sdyuancang.com securenetflixapp.com shipbuildersforgolden.com stallionsilver.com tennisopenit.com texas956.com themallvideo.com theopendata.exchange traditionalmehandi.com weknownorthgower.com whirlpool-repair.site x-izm.net xn--2z1bq6efxj2gp2o9xd.com xn--anibalderedao-7eb3d.com yangpaair.com ycshop.net yds-inc.com zseasyfishin.com # Reference: https://pastebin.com/njbLBACM # Reference: https://app.any.run/tasks/94dda737-87d6-498b-bf3f-7f445abeea13 bhartiyabrand.com dataxamarin.com futeboplayhd.com guktree.com hondausedcarswestpalm.com htwengenharia.com mondaymindsets.com nxwatson.com politica.group shoppinkksugar.com sofiedeneef.com yadouganggou.com # Reference: https://otx.alienvault.com/pulse/60db0c73a92b92b79741d921 tvdajiang14.com # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0625-0702.html (# Win.Dropper.Formbook-9875089-1) 1e9sevenrainy.loan actu-occitanie.com aldareps.com amigurumibyamanda.com barkintheparkli.com bikby.com ebvdcxw.com empireremgmt.com jesusinme.net juxiangjidian.com keeenterprise.com liveonthehill-festival.com mansiobok2.info matthewelliotties.com mlyouxian.com mmssgg.com myshoppingchic.com qualitycarpetcleaningcal.com selectsb.com theadventurecurators.com tiangongqiaoduo.com tntcityinc.com vabomerewaste.info wxfkyyw.com xuse.info # Reference: https://twitter.com/ps66uk/status/1412126527593107465 newrichwealth.com # Reference: https://twitter.com/Racco42/status/1413401048132227072 szglkt.net # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0702-0709.html (# Win.Packed.Formbook-9875217-1) atlutes.com bjlmzk.com cybep.com dawnanddusted.com fifanie.com hmlifi.com itdui.com jlxkqg.men learningtolaughintherain.com lifesciencescareers.com photos4lyfe.net spiritualwisdominindia.com thunderwatches.com winhealthalert.info xn--qrq721bqkkzt3b.net # Reference: https://www.virustotal.com/gui/file/a449b2bf7415c385f7841bdd6f41f8f16dff16e4c77ef6c7865b457071011de3/detection 91ruitue.com aaronlemmon.net blestgroup.com bs-team.cloud chuchupaimai.com deltawinery.net doxagram.date godoil.net hust-today.info ideagazebo.com mattel.cloud portugalprivatetour.com serviciosconfia.com topratedshowerheads.com xn--droitdeladonne-nkb.com ytxfchina.com # Reference: https://twitter.com/pollo290987/status/1415213931375865858 # Reference: https://www.virustotal.com/gui/file/24c47f2838399f16001e5166458e1875494b118005ce354a4069d8fc82a20265/detection cyotie.com # Reference: https://www.virustotal.com/gui/file/63c9562ee89e1308b5be90e55ac0334e5bbdee69142741dd3e057d270f407106/detection 1groupinsurance.site collegium-lmi.com concordarabuluculuk.xyz incontrol-co.com makzmanagement.com royalesalon.com royareign.com ukcougarforum.com zozchat.com # Reference: https://www.virustotal.com/gui/file/9b4bcf870a79699cea2ef0add03b741bf14296f50b089a648f57903519eb8e7e/detection brackishcompany.com jpleasure444.com keilube.com mycashcat.com mylearningplaylists.com newmillenniumgaming.com pillar-gymnast.com printedcactus.com smartquintessential.com # Reference: https://tria.ge/210720-l5gncsb3fj 012997.com 966938.com adaptiveclick.com ampsportshouston.com angelacontreras.design ankergreen.com artisticdancecompanyct.com auntiebsbread.com clarkson-craik-wedding.com clubfit24virtual.com czflsp.com damselindior.site dwkjkvsa.icu dwysll.com elestampado.com erotikazdarma-na-seznamu.online erxia29.com fcknloveit.com gallucciowineries.com grocerygurunicole.com hypo-realitni-servis.online insuranceservicesfl.com isaandfriendsfoundationcorp.com itsgrind30.com jacobmantle.com katsworlds.com kristinaandmatt2021.com lagboni.com manayi-matnayen.com monekigames.com motionmediamail.com mybirthpillow.com nicholasvilleguttercleaning.com ourparentsaspartners.net paksfjphkqpfgoldenhpaksfpnh.net papagle.com portaldoinvocador.com psm-gen.com punebites.com quisiweb.com qyaswryhk.icu redeftco.com risingstrenghtscounseling.com rogerzhou.com ruiyiknit.com scootersfornewbies.com silversteel-ye.com stagdotenerife.com sunlightjoinery.com teamwork256.com the694.com thearticclaw.com thedemocratads.com thelogicsticks.com tomslandscaping.net torontoescortlist.com tramomed.com uni-star-cn.com venti50.com veranev.com weskunmgrf.com wetechy.com wonderancientswiftvibrancy.com zidesign.xyz zsesfw.com # Reference: https://tria.ge/210720-s2elczaedn 332xyx.com 5v5r3gf3lhvgvy.xyz abrosnm3.com adweb.menu airluxo.com arsenalization.com beiyingcp.com bgpproxy.com bows-n-bars.com bumble.sucks caracern.com coachsoley.com corkstandard.com created4love.com crezcayemprenda.com damoyan-ep.com drivethrupolitics.com electric-sauna.com energiafloral.com evidyadigital.com fecunditytechnologies.com fengyikang.xyz flyingpig-farms.com fresnovape.com glasgowmobilediscos.com guitaraerobics.com heatpumpgrant.com imploidtalentservices.com insurancewithus.com kejgan.com lu14444.com markdownme.com marleyssoiree.com mexx-lighting.com neptuneservicesltd.com nitinravi.com palmgables.com partyun.com personalizedyardsigns.com pghissofastighet.info pinmaomao.com propelai.net registeraccountants.amsterdam restauranteelrinconderosa.com ryapelsartwork.com shnasu.com sitad.online sjredlineclothing.com smarttennessee.com songnguyenkim.com survingcorona.com sxzycxxwlw.com tavarter.com textingjournal.com theoneitemstore.com three-ukalerts.com travelseri.com unstoppabl.com vinfast-mienbac.com winharadesigns.com wordpressaffiliatepro.com wpdesigntips.com wxxyh.xyz yardenfaragian.com yerlitestkiti.com # Reference: https://www.virustotal.com/gui/file/50878d11e846ea18fa1a83208091a237a32d941414b917ac2ca738762f7dc4ae/detection gerisapp.com jesselynnjewelry.com qaci.ltd # Reference: https://tria.ge/210726-cb97ggxx7x abrosnm3.com apipacking.com approvednursingdegreeca.com arknmhsc.com augeware.com bestskiboat.com bfosterbeauty.com bhakti.exchange bhoomifoodsdaily.com bim3dstudio.com blackmarkethn.com cedeaccount.com christcarriers.com comingintopower.com coolsoftware.xyz cooperseyewear.com creditfitbootcamp.com cyberfamilydesignagency.com dbd-cs.com digitalaage.com dinhgianhadatdanang.com easternshoreautobody.com eglobaldirect.com electricvehiclesdetroit.com expowe.icu hamrharddrive.com hawrang.com healthyvibrantandbeautiful.com hqs.xyz in-homeaccountants.com indiarmc.com janinefowler.com kolpath.com kvperryman.com lacarerx.com largshomebuyers.com larkfam.com maildeskserv.com mdroc.com mrleyos.com msd.rest mtdivas.com ngdnwgtsf.club oxystudio1.com peppershare.net pickenshomesforless.com rollingrevenueroadmap.com roshanrajas.com rostig-brennend.com shopchampagnetoast.com stormvalleysoapco.com supremeleas.com surfacesupplierscanada.com targetstudio.net techbotsoftware.com testjaycypes015.com the-level.net thinbluelion.com vbetmalaysia.com watdomenren48.com woofreelance.online worldambedkarsociety.com xn--qbt233i.xn--hxt814e yourchanceisnow.com yz-wsly.com # Reference: https://tria.ge/210726-nar5mm8hee 388384.com 62qtz2.com aanmelding-desk.info adoptahamster.com alternet.today ardecentro.com aussieenjoyment.today brisbanemagicians.com caddyys.com cbgmanhattan-hub.com channelarmor.info citrixfile.com coonier.com creativehuesdesigns.com democratscancelled.com drmetalpublishing.com ecorarte.com edicionesvita.com elaraberentcar.com endonelatrading.com espace22.com fabrezeairpurifiers.com gallopshoes.com gameshowsatwork.com ganjegirls.com givanon.com go-rillathebrand.com hiphopeconomicdevelopment.com innocox.com jacardcapital.com jrvinganimalexterminator.com lindsaynathan2021.com lowdosemortgage.com matdcg.com mencg.com mitgrim.com nftsexy.com nogodbeforeme.net pastiindonesia.com piebuilder.com po1c3.com political.singles renewalbyheather.com ricosdulcesmexicanos.com riseswift.com rjkcrafts.com roiskylands.com roorisor.com rugpat.com smallsyalls.com tasaciona.com thecarbonbox.store thechicthirty.com themesthatyoulike.com tioniis11.com tvglanz.com variceselite.com vinhomes-phamhung.info virtualppo.com wellness-sense.com winstonsalemathleticclub.com yjhlgg.com ytzhubao.com zamlgroup.com ztsj10086.com # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0723-0730.html (# Win.Packed.Formbook-9881913-1) 1e9sevenrainy.loan actu-occitanie.com aldareps.com amigurumibyamanda.com barkintheparkli.com costes-viager-metz.com ebvdcxw.com empireremgmt.com fixandflipit.com jesusinme.net juxiangjidian.com kiefchronicles.com liveonthehill-festival.com mansiobok2.info matthewelliotties.com mlyouxian.com mmssgg.com myshoppingchic.com selectsb.com theadventurecurators.com tntcityinc.com vabomerewaste.info wxfkyyw.com xuse.info # Reference: https://www.virustotal.com/gui/file/3fff5f3adf822fb5aa359a0585afaa385ab8671ea4ae37b6f35030542d6bbc03/detection 2manyguru.com amputaterevival.com fapndazo.com goodgospeltz.com hauntmafia.com herthamed.net iahawaii.com labhoster.com lki.life minimalgent.com myleadscreator.com profitablebrandfactory.com/heye/ sieauthentica.com thecreatorsbooks.com theneekynaykye.com # Reference: https://twitter.com/MBThreatIntel/status/1423347759797522432 # Reference: https://www.virustotal.com/gui/file/04e127c5bdf94f075639d7f44badd25223f3ebeede44258367413d8463505020/detection simplebox.world # Reference: https://twitter.com/unidentified0xc/status/1423696442359787520 # Reference: https://www.virustotal.com/gui/file/72320946e28ee9117b85cb1a83e5e122c3938e4a79c9be1551595103cb2c311a/detection travelscappadocia.com # Reference: https://twitter.com/reecdeep/status/1438135771974836235 gentciu.com # Reference: https://twitter.com/pr0xylife/status/1450413394050363393 # Reference: https://twitter.com/reecdeep/status/1450423446031249408 filecrev.com lilcrox.xyz uploadingpanel.xyz # Reference: https://twitter.com/reecdeep/status/1457992469400915969 # Reference: https://app.any.run/tasks/7beef4c8-16f0-4347-aa39-ed0d9d1c6065/ minismi2.com # Reference: https://twitter.com/reecdeep/status/1464173848245551130 lopsrental.lease # Reference: https://twitter.com/MBThreatIntel/status/1464329992486141955 tgfdj.com colesfax.com traicayphuongnam.com bloominunity.net buycitratesildenafil.com insularrofioa.xyz # Reference: https://www.virustotal.com/gui/file/accbe536ead9e57b36410e8769aeb211ec32419a0e92cf6282d74c0ed53175cb/detection wsdysuresb1interwsmo.dns.army # Reference: https://twitter.com/reecdeep/status/1465603269905035264 # Reference: https://app.any.run/tasks/6461fe1c-7d2c-4918-8421-fb33cc7c9b59/ saftcos.com # Reference: https://www.virustotal.com/gui/file/f0f020c489ae8bad33cee5f66c276f1a40dd9aff5eff55648922de36da0e233c/detection amzgroupsales.com arffinanacial.com bansity.com buyidh.xyz carpetbaggerehasz.com deliveryship.site discountchristmas.com eaujeunetuesunique.com effektivpeople.com elainelancelot.top elenapapernaya.com gayko.info gazalvet.com glow49.com gopro30.com happy99.club heynowbrowncow.com insurancewineappraisals.com ivoireshoping.com jtdroofing.com kgresale.com khnfcl.net kpfoundationinc.com lostdevice.xyz metanewyork.digital ministrymattersmagazine.com mooncloud.cloud myadventures.online nnw.photography pnsp3.xyz powerupnurses.com raisinglittlejoeys.com sendpit.com social-sound.net staffslearn.com suddennnnnnnnnnnn44.xyz weddingsbyiceberg.com xchair36.com xrzthd.com yavstore.com # Reference: https://twitter.com/JAMESWT_MHT/status/1460569876930703361 didimthebestkuafor.com kizitox.ga # Reference: https://www.virustotal.com/gui/file/0123fdb2e8de200e6fa07cd5c254771143b7d9fea4f6895077b4f609fc5ae1cf/detection 427521.com amaturz.info approveprvqsx.xyz clairewashere.site createacarepack.com cristinamadara.com diamond-beauties.com fronterapost.house khojcity.com ponto-bras.space qiantangguoji.com rthearts.com savannah.biz semapisus.xyz storyofsol.com xianshucai.net # Reference: https://www.virustotal.com/gui/file/4253f88eb5e931720c16e56f49babfbf8db93eaa8b6f85146cc2d690aee2b9d2/detection affexion-web.xyz antlersinternational.biz aspirastic.com babehairboutique.com confled.online digitalpathologytodayuk.com duoceshi.info educacaosemdistancia.net emaratishayclub.com giridharsweb.com jamesobrien.school kj4senate.com korhuay.info lineupfacts.com miramar.press nihonkoryu.site riversidebest.com scnbzx.xyz shengyuan1.com shoework.xyz showin-juku.net sucurina.com velostats.com wokite.net # Reference: https://www.virustotal.com/gui/file/59ec21c2cbea8337c61be946ea039cce2316085c64f83aff71e2fa2c72517104/detection binatonezx.tk lilcrox.xyz # Reference: https://www.virustotal.com/gui/ip-address/176.99.5.38/relations binatonezx.cf binatonezx.tk kiwar.cf # Reference: https://www.virustotal.com/gui/ip-address/2.56.59.211/relations nestlex.tk # Reference: https://www.virustotal.com/gui/ip-address/37.0.11.232/relations aqaumad.com # Reference: https://www.virustotal.com/gui/file/39ad43c4148cafd9463c874b9201bb1b6253d3c6b4984351647c1e7d4d88c2ab/detection 1kingbet.com 666b20.xyz apseymarine.com babeshotnud.com baila.madrid charsantosart.com dossierinc.com futurodr.com homesofchaparralcountryclub.com iktbn-c01.com immerseinagro.com limiteditionft.com mingwotech.com nailsestetic.space newhollandpurpose.com nudesalon.digital overlandshare.com parsvivid.com patrickandmaxine.com pondokbali.store rap8b55d.com searchengineeye.com sehatbersama.store snackithalal.com socialenterprisestudio.com thenewtocsin.com thevillageplumbers.com toptaxxi.store vapkey.net voiceyupcom.com # Reference: https://twitter.com/reecdeep/status/1470416422983585797 fastye.link # Reference: https://twitter.com/reecdeep/status/1470708891004637194 thimelic.online # Reference: https://twitter.com/MalGamy12/status/1470797891002421251 kizitox.cf # Reference: https://twitter.com/reecdeep/status/1473657263915216898 # Reference: https://app.any.run/tasks/67888005-1133-40d9-a7ae-190814e6d091/ daxvly.xyz # Reference: https://twitter.com/JAMESWT_MHT/status/1469240481007771654 tidylazy.com # Reference: https://www.virustotal.com/gui/domain/hsiens.xyz/relations hsiens.xyz # Reference: https://www.virustotal.com/gui/file/307a069ecd59369e9825b9e24d84d5a92f6e4273c7d1d463d03cad06497dbe09/detection mooorni.xyz # Reference: https://gist.github.com/silence-is-best/e2af8aa61000e4b740934331291c619b allnestek.com asiapubz-hk.com eyecandy-s.com filecrev.com fis.photos goldenentnefetis.com kumrualpaydinfikirler.com love-austria.com madlyrics.net nshocam.com scion-go-getter.com shzldx.com tejpalmeet.com tttk8.site tutoucheonest9.com w8sf.com xn--diegovariados-zeb.online # Reference: https://blog.talosintelligence.com/2021/11/threat-roundup-1029-1105.html (# Win.Dropper.Formbook-9905387-0) anjanaonline.com blakedroberts.com briankingfineart.com cabinetra.com cataractmeds.com dongtaykethop.cloud fsoinc.com glocp9.com gun-stores.net healthchu.com jqxfinance.com listertarot.com mbc-lucky.com mylife25.com obersrock.com sexting-sites.com studiodates.com ue3uue.com whereistheherb.store xn--v4q8fq9ps1clx5d774b.com # Reference: https://twitter.com/reecdeep/status/1463424870285459456 # Reference: https://tria.ge/211124-j31sdafdd8/static1 # Reference: https://app.any.run/tasks/bf25a335-870d-4159-ae8e-70b85197c7f9/ 018seo.com 39mpt.xyz 5gongvo.xyz 8nst.com 946aaw.net allmanac.info ambosholmzoril.com angeleyesevents.com app-demo.xyz arabatas.com astrielle.com bakosaoje.xyz canlioyuncuyuz.online clubfohl.com completefuid.com crktinc.com cspro-lb.com davidruperezdorao.com divinebaking.online eclox-btp.com ectax.online eleditorplatense.com feierabendshop.com fountainspringscapemay.com fuckingmom89.xyz game-band.com gcioral.xyz geradsss.com getjoyce.net heartfeltgiftery.com heritzlab.com icobrothers.media invertirenstartup.com karo-tasty.com latest-football.pro longshengfz.com luosenhuagong.com luxerlegends.com mayyaramedical.com medicinaoralbarcelona.com missjones.info mushukids.com ngaviations.com nigeriasecurityexpo.com nsureagent.com oldstjoe.com pellecorentin.com productzon.net rayganesh.com resortonannamariais.land resourcesassitance.com sarasotaexterminator.com sideroyalpalacehotel.website spiveyvillage.online suddennnnnnnnnnnn37.xyz toituresante.com tollesonhouses.com trans-mall.com trendytechtreats.com ttportalbham2.com usedhondacar.com xiluoxtmcwj.com zhbhhj.com zjef.top # Reference: https://www.virustotal.com/gui/file/3abbf47a610912e6c574899d0ad87529e16f6d3616806dfee02b8a4c2e171541/detection 25081mammoth.com 657haber.com a687t.xyz adhek-internacional.com andrew222651.com arsels.info artdirectorfff.com bglmart.com claggs.com clinicadeconsultanta.com currency01.com eqsadvisors.com erkesen.net espressence.com giangsontaikhoi.com hanfines.com happy-smail.com katesbotanicals.com lg-tv.tk orzcy.top qingqingtianyuan.com rogde1998.com sportspellz.com suddennnnnnnnnnnn28.xyz the-social-hub.com topitreviews.com whooshfriends.com # Reference: https://twitter.com/reecdeep/status/1480498723859976193 # Reference: https://tria.ge/220110-m4qkksebf2/static1 # Reference: https://app.any.run/tasks/6b49092a-42ee-4d03-a540-4210922f8d1a/ 2thpolis.com 360e.group 4338agnes.com 58lif.com 927291.com aloebiotics.com atlasgrpltdgh.com bookinggroningen.com branchwallet.com buysubarus.com carriewilliamsinc.com cevichiles.com cuanquotex.online damusalama.com danielleefelipe.net dreamschools.online ehaszthecarpetbagger.com ennitec.com evodoge.com farmacymerchants.com faydergayremezdayener.net finanes.xyz freelance-rse.com frentags.art gaboshoes.com gabtomenice.com ggsega.xyz gooooooo.xyz hempgotas.com hillsncreeks.com inkland-tattoo.com inslidr.com inventors.community ir-hasnol.com jiazheng369.com lexingtonprochoice.com libes.asia markham.condos mediafyagency.com micorgas.com mnselfservice.com mollyagee.com nbjcgl.com pastodwes.com pentest.ink pinkandgrey.info postmoon.xyz quickmovecourierservices.com rampi6.com rvmservices.com seebuehnegoerlitz.com sjljtzsls.com standardcrypro.com streets4suites.com teentykarm.quest tipslowclever.rest trulyrun.com uvywah.com viperiastudios.com wildberryhair.com wilkinsutotint.com wohn-union.info yixuan5.com youngliving1.com zoharfine.com # Reference: https://www.virustotal.com/gui/file/345dc5575dcbd4433aa5bbae510cdc259f898bfc23646c46ced2d154b0a7e3e6/detection /..W.w.........WWww.---wW--W-Ww--.w---wW...............Wbk-Wbk........wWWw/ /...-W--------wwwWw........Wnk...---WBK.----WwwW...wBkW-----w-w---Ww.wW..wbk # Reference: https://app.any.run/tasks/8802a5e4-88a7-4aab-8ec8-1d87bd25e4ba/ casino-pharaon-play.xyz harsors.com mackworx.net tedsefa.xyz # Reference: https://tria.ge/220111-ttnfssgear archdeylemmergay.com babypasal.com balaga-vacances.com beyerenterprisestreeservice.com billstrasse24.com boliden-ab.com bredaslo.com bspcanadaconnects.com buddymerrillmusic.com buychryslers.com connect01.com counterpokemon.com dartsearchengine.com dimcreadev.tech disfagiaresidencias.com duyol.com ecobook.club egregore.club ethereumpets.com excellentdefence.com falcongroupmanagement.com faxedfumnook.com feetlover.online ff4c75x4e.xyz foundergomwef.xyz gb2022-club.com gconsultingfirm.com grantopwincup.website hermespros.com hotgurlmarket.com islandresiliency.com jaynelsonphotog.com jlvip1066.com lab-design.online mgav26.xyz mlikew.com monascake.xyz mskindi.com nekomediphile.com newelectricways.com nomarcapital.com nuhive.net padelthiene.com pandawan.club particulares-es.icu phillystore.net phorganicfoods.com prill.quest princessbuilt.com purifybrush.com ragworkhouse.com rapibest.com ritebet388.com securewalletvalidate.com security-paiemet.com slayfearlessly.com smplkindness.com soflovrlnd.com spendbrasiltimebest.com taquerialoteria.com theeppunday.com thoughtultracruel.quest waysgaming.com writerpilotpublishing.store zenholisticstores.com # Reference: https://www.virustotal.com/gui/file/d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72/detection # Reference: https://otx.alienvault.com/pulse/61d81f95eecd468222f85464 http://104.244.78.177 # Reference: https://twitter.com/reecdeep/status/1483048507149803521 # Reference: https://tria.ge/220117-m8cvaahfg3/static1 534wcc.com adverse-afield.com agbaparapa.digital artmuseummatch.com asiavest.partners atlantapressurewashingco.com axtaihe.com bestbabyreviews.com bolosdavovoeliana.com borduurstudioijmuiden.com bupis44.info cabot.center castlemainefarmersmarket.online cimpisa.info clinique-voyageur.com complynt.store creatsafe.com cruiseportscheduler.com dailygossiping.com dotieudung.online drsfurtimann.com fatbellytonic.com geloradomino.win gladinternational.com goodcallhvac.com gortansar.club gunpowderbrahmans.com hellodba.net houstonnaturalrasources.com hunterfineart.net idealseg.net iwholesalestore.com judwx.com maripremazzi.com marykorpi.com mencuci.online midwestcentertherapy.net moms-gone-mental.com mrcrypto.store msjj002.com multiheadac.com n-sport.xyz naggerswithaltitude.com nchh43.xyz netflix-regularisation.com neuro-ai-web-ru.club nodescamp.com phasernet.net prioryfinconsulting.com pulsecdn.com q1g2.com rayofdesign.online reviewkiliszekteam.com scottybhomeimprovementllc.com shalesmedia.com stanislauslabs.com tametaverse.com tankheadmuaythai.com tanya-kevin-coelho.com terrificlowdowntoskimtoday.info terrybridie.com thesoapcottage.com vue-update.com windowfilmspecialists.com zuinigerijder.com # Reference: https://twitter.com/reecdeep/status/1483348720120967171 tangodo9.info # Reference: https://tria.ge/220118-rflzpsbfak 14gjm.xyz 365xeber.info 8we46.net 961115694.xyz adoratv.net advancedbenifits.net aprenda-sg-sst.com avanproekt.com becu84ts.com birinciplastik.com briskism.com cajunrecovery.com cameraip.digital caringhandsofwyoming.com centogrisolia.com clagpr.net codyparkerlpc.com coremaxcorps.com dishtagena.com dominictrott.net doverace.com enjoyzh.com fixedratehub.com francegravures.com generationimpactmasterclass.com greenwoodok.com hairuno.com hauheung.xyz hopeforlifefoundationbd.com huntingtheeclipse.com iegco.group ipservicesaggregator.com ko4tei.com masoomalearn.online michellemall.com myfantasymodels.com mystrangedog.com norosunda.com northlakepoa.com originalsalywhale.com ovsshop.online paisakamaao.com permitaser.club poradniabioetyczna.com pra-accessibility.com ptalojamento.website punksparrow.com qardho.net rentunk.com research-center.xyz royalproxymarketing.com santablahblah.com sdsdvip.com secretgardensanctuart.com spatialmapmaker.com stupidcreature.com stwconnections.com subsistqlxxmf.online sumai.tech timyaa.com vitamincfood.com wiza-investment.com wzks.xyz yoloyoho.com yongincit.com # Reference: https://tria.ge/220120-kp5pvahbbm/static1 52economics.com alcmjd.xyz alraedest.com anaccommodation.com annual-journals.com anthropophony.com asiafinances.com bitherders.com buxledger.com cryptolux.store dlapi.xyz dp-yszxwbhc.com dragonflyessence.com dreamsinbloomphotography.com dualamaquinaria.com dunespro.com duocaterers.com eleynworld.com firebreathingpenguin.com foodgw.com fullharvestfundraising.com fykori.xyz globalyuncang.com gracing-up.com greenlightiim.com howtomakearesume.space ialife.info immovableproperty.online jacqueson-autocars.com jcrealtydesigns.com kennascookies.com massagecon.com mbbfocean.xyz meetjaykinder.com meta-medical.info modernwarfaresecrets.com momubeauty.com mydemosite0.com nautic-experts-hageboelling.com neurochirurgie-eisner.com nicoletian.com nillprive.com noaoka.com prizebuddy.club ramziflowers.com rapslearning.online royalfountainlogistics.com rxd-ereecd.com sallyandterry.com sexcommittee.com slingactivt.com southaustinmarket.com strelingcollectibles.com theamalfiswim.com thedefinitionteam.store thrili.com uncle.finance undershieldz.com wicked-smokes.com wy-bride.com xbdsm.club yogamat-turban.com youcarboneutral.com yourtechyadda.com # Reference: https://twitter.com/pmmkowalczyk/status/1485591842494238732 # Reference: https://www.virustotal.com/gui/file/fbfcc39fb2e03d204a83cb9dceaa90e692ddb28367457586fdace8ff27b11d88/detection belindahulett.com fikretbayrakdar.com kamchatka-agency.com mytrainermatrix.online personas1web.com # Reference: https://twitter.com/reecdeep/status/1486634645265567744 2ab0.com 9681627.com ashleighevan.com ativaragora.site bancogmacsa.com botpg.com brocoser.com bs-pipe.com campusmoneytree.com chuangshihuoban.com coastmortgageloans.com cubana-pablo.com cxyzjsrc.com dutrax.online eshaalgilliamslbui.com facecapades.com fistoffraggers.xyz forthesaltysouls.com francescabaldi.coach gophastr.com greywearimpex.com halloween-ready.com haxable.com idahofloat.com infoavatarslot88.com katsuyatoken.com klmywmux.com krisandmeigeni.com localemergencies.com metainstagram.faith metanovibrand.design metawhatsapp.insure netpug.com nipahvax.com ordinaryborrow.xyz otl-logistik-gmbh.com ourdogdream.com paddyscaddy.com personalbias.com portalzy.com quantumcapital.technology realdolls.website rejykio.site revtiredirect.com sbyidn.net sejt.xyz sheinfluenceschange.com superbstix.com tarinalintu.net theahmadis.com thebestmediaguy.com thefomorprophecy.com themarketplace.digital thepowerofdtk.com trttanks.com trustminingfx.trade umoveebikes.com unpeg.xyz weldonswestern.com writesco.com xsightvideos.online xxyipay.com yoko-by.com zaphysio.com zfld1.com # Reference: https://tria.ge/220127-nzvjeacdb8/static1 599qu.com 77hub.cloud albanybestbuyers.com amazingfactsabouteverything.com antonavt.com bedplot.xyz cdamanagementservices.com chefjeffrecipes.com cloudymellows.com colorbells.com connectedmk.com cowboychannellpus.com cryptopal.xyz dreamyhousewife.com explainersadvids.team groovyrelease-toknowtoday.info hainanmizhi.xyz hypedrize.com infostate.store javacodecafe.com kezorup.online liquidministry.store m7ssucx.xyz manoncollinet.com metaheaven.global miclanka.com mohaisen.xyz mwm-security.com my12127.com parcel-alert-redelivery.com phxpowdercoating.com ponpesihsaniyah.com propelcolor.com qterps.com riskfreeenergy.com s-h-a-h.com sdfvlog.xyz smithstores.net soakedindelight.online southernfreelancersph.com spineklinik.com supershhhbros.com synjive.com szabossteakandseafood.com tampanazareno.com tgogziae.com thefirstgroupscam.biz thenftlotterys.com threegalasdesigns.com tradecardsbtz.com trinksaifenradiodocumentary.com uniqueclsssiccars.com unitedwii.com ventadesillasymesas.com vozeestore.com wakilin.com walltage.com willtuckfinancial.com wofdex.com woshinidie1990.com wu8jvohkp12w.xyz xk8abxci6ogf.xyz xn--arbetslivsaktren-ywb.com xu7d7mfh6fht.xyz yfsallegiance.com # Reference: https://tria.ge/220124-slq2aafcbm 5gwirelesszone.com a9d7c19f0282.com babyvv.com besrbee.com bhalawat.com bodevolidu.quest boraviajar.website browsealto.com cbd-cannabis-store.com certidaoja.com chahuima.com chatteusa.com cletechsolutions.com cryptointelcenter.com cyberitconsultingz.com dairatwsl.com drmichaelirvine.com dtsddcpj.com fairytalesinc.com fly-crypto.com genrage.com hevenorfeed.com hf59184.com hominyprintingmuseum.com hostedexchangemaintainces.com jingguanfm.com jkbswj.com kadinisigi.com kovogueshop.com kymyra.com laqueenbeautybar.supplies lendsoar.com lewismiddleton.com lovebydarius.store loversscout.com m2momshealth.com mes-dents-blanches.com minjia56.com mintnft.tours nba2klocker.team nethunsleather.com nxn-n.com oded.top onlinesindh.com ordermws-brands.com perfectionbyinjection.com picturebookoriginals.com redsigndesign.com scgxjp.com semejnyjochag.com servicesitcy.com shinepatio.com shopvintageallure.com skin4trade.com smplkindness.com snowjamproductiosmedia.com taksimbet13.com trist-n.tech uptimisedmc.com vacoveco.com virginialandsforsale.com waltersswholesale.com wayfinderacu.com workerscompfl1.com xrgoods.com # Reference: https://twitter.com/reecdeep/status/1488086128603406336 # Reference: https://app.any.run/tasks/5e09730c-56c9-46d3-b299-90cabc735603/ # Reference: https://tria.ge/220131-la8zdsghdn/static1 0003271.win accessiodoc.com accurbizlist.com acingthesat.com amelntl.net ammarus.com ankaraninbaglari.xyz aprilrehrig.com barkleysbettermints.com bestinvestments.pro blissfulcreativework.store boogey.xyz bundleandpreloved.com cedacventures.com chattelsmore.com chengxinyuan.online chuckmitchel.com crochetbycare.com cryptoandshirt.com diesva.online evesfashion.online explorelacrescent.com f2fcomunicacion.com fedelini.online focalberth.com furnitureqchina.com gloriamcarter.com griffin-intl-ltd.com gstfranchisecenter.com hbsckj.net hospedajeteques.com hothess.com imagepixo.com jdmnn.com jimoshopping.com juliadeantravelworkshops.com ksssz.com kusiwara.com magnificpets.com manimani1225.com marinayouth.com medyasmmpanel.net mkpackersandmovers.com modernleadersacademy.com newbalancebestsale.xyz nwzjr.com oceanic-sauna.online passiverewardssystems.net popierwszezdrowie.net pressonnailsie.com rajuulabels.com relyoncarlos.com selberherrlab.com sycochic.com szkoleniapolskilad.online taiwanlongyu.com techsonworld.com the-pumps.com thebestcloudcomputing.info theebook.cloud timdixonpreferredadvisors.com unicornbourbon.com unitedstatesarmyfieldband.com webpassion.club yuanyuzhougame.net # Reference: https://twitter.com/reecdeep/status/1488821892387647488 # Reference: https://tria.ge/220202-mcjyqaaae6/static1 1w3.space absolutenuisance.com airtogether.com ak8flfqzm8.com arrow-electronics-corps.net balanzaseconomicas.com baysidecanton.com bdelsaer.com best-eternal.com camaras.store chamaaibrasil.com cryptoclits.club cyberews.net daliborkokic.com data-schwab.com datemyso.com directmail411.com doctorsby.com fruittys.com gamiteisnowjoyned.com gelsinpremium.com glistonshop.com global-forbes.biz hightings.com hkkbags.com honeyroux.com iot-vn.com itsajinkyaraj.xyz maktabarasheedia.online mburmtdvccti.mobi mpu-vermittlung.com mrk-9.com naclepin2a.xyz needscooters.com nicethelab.com nnhhhhnn5.net nropes.com operationservefirst.com paijuluntan.com paprikaproduksiyon.com profitablemechanic.com pvu1863.com redenyl.com regitconference.com resilientbutterfly.com retellinn.com rodrigocoppa.com roofrepairnow.info schneex.store silverhavenfinance.com tanzibkarate.quest tdetesla.com temaksa.com thebritenseries.com thesuvidhastore.com thomas-wildlife-control.com thruzens.com timothykmyers.store tinawcounseling.com tipshalal.net townsvillelawnservice.com urnam.com whatsappstatus17.com xn--1lq90isray30ltdc.xn--czru2d ydbsy.com # Reference: https://www.virustotal.com/gui/file/daa049b15bb5c1d0aef06276f9940d2fea76242f1a01ebfe299a63b7c74f7ea0/detection http://185.238.168.187 /d_add # Reference: https://twitter.com/pmmkowalczyk/status/1493194105257607173 # Reference: https://tria.ge/220214-nr5peaafhj 636851.com air-watches.com airlesscondimentdispenser.com anentbottskeen.com annahve.xyz aracsozluk.com australishomes.com becu84ts.com birdy3000.com bitcointradel.com boxedwallconsepts.net bundesfinanzeministerium-de.com buongpuso.com campervan.love carbsupplements.com cngm7e.com common-criteria-isac.com domainsraj.com elaish.com epilepsycolorado.online executive-air.net eygtogel021.com fisioletsgo.com freeadakahamazon.com goldenconcept.art gpawidegroup.com hackensackfitness.com hanssuter.com healingandhealthy.com ilmarijuanadispensary.com iloveapple62.com kidskarateonline.com luckyfandom.com nightcanteen.com nutcrackernoww.com nvgso.com online-bolgar18.com petips.xyz potserve.com proceam.com qhwl2017.com qubtantoys.com rashil.digital rushpcbtest.info sahumeriosartesanales.com salonautostock.com savarsell.com sdunifiednursingcollege.com sehatherba.online sharifulmer.online skillga.com subritulandoando.com sumiyoshiku-inoitami.xyz tackle.tools thelukeliu.com tkspoboys.com tonghetaiye.com turmoilgomkww.xyz victoriajayde.com vyounglighting.com woodstor.com xiexingyu.top zaar.solutions zdbhl.com zj7aszamjwe3.biz # Reference: https://twitter.com/reecdeep/status/1493510598545526784 037yu.xyz 1ees.com 80cq926.top adelaideofficeinteriors.com alba-laser.com albayscofield.club arbiz.farm arrowelectronics-corp.net birchbayapartments.com brisbanecarcollectors.com cahc.info colorfulfluidchaos.com cwdestore.com daidalo.com dcfrc.com enjoy2m.xyz enrevologix.com goldenrhythm.com hnjst.net institutozavaleta.com internaturalestetik.com intricatepainting.com iwjvit.com jack-barbara-memorial.com kincsemto.net konjophotos.com libreriarenemoreno.com liveincare-online.com localmarketagents.com marianiartspace.online miamitaxes1040.com mimihin.com mintbox.pro mmnbm.com moonsonkashback.xyz mothersmilktn.com nahda92.com nordic-aesthetics.com northernlightdebtrelief.com oki-net.com omniahgames.com onboardaltdigitalavg.rest onlinedelivery.biz phpmv.com plickthepick.com poseidonvips.com primelinedistanc.ltd qhyingtu.com searingrofivt.xyz sentpostja.com sfheatpumps.com shabupaperpot.com shepinhang.net sixfigurefundamentals.com smartsew.online sogu.one someglimpses.com stoneprodirectory.com sugarkelly.com testimonial.direct toptraveltouch.com vanlifedubai.com watchonlineplay.xyz wildeblum.biz yun183.xyz # Reference: https://www.virustotal.com/gui/file/1155c0a3ed4fff855d7638989626d70a34a9cd35c943d5899fce5fa8fb2a47e2/detection pixi-url.herokuapp.com # Reference: https://twitter.com/James_inthe_box/status/1493995456434630656 # Reference: https://app.any.run/tasks/149afc40-954d-41f5-b32d-751651839d28/ czuj.info # Reference: https://twitter.com/reecdeep/status/1494613626958880768 # Reference: https://tria.ge/220218-lrwqdscda9/static1 # Reference: https://app.any.run/tasks/b5707b2a-5356-4659-8997-969193a1dbf7/ 1stuebc.com 77xy.xyz academiademujerespro.com alex-covalcova.space androidappprogrammierie.com anwisystems.com armbandtas.com autnvg.com benormxukraine.xyz buylowatlanta.com buytacpyshop.xyz cardinalsplayerstore.com catrionatowriss.com clarensis.com cruzinu.xyz drnicholasreid.com gbwpmz.com gents.style globalrockstar.xyz greenelectricmotors.com have4grand.com heathlytrim.com hilldoor.com hnart-child.com hongjunwuliu.com hopejustmade.com ilovesinglemoms.com interviewacomicnerd.com jitsystems.com jklhs7gl.xyz junicy.com kcebtaz.xyz kenmark-inc.com ksherill.com lagosian.store lesaventuresdecocomango.com libertymutualgrou.com lifuyao.com makciakla.com matercenter.com mcattoneys.com metaaiqr.com nameniboothac.com nexuslanka.com npwpkl.com oculos-ajustavel-br.xyz ollorhythm.com ozkonyalikebap.com pholoniex-an.xyz racingsilks-nft.com raverwren.net recuerdosoxidados.com relatingtohumans.com sidesofthenorth.com socialfiguild.com stocktonfingerprinting.com topbunkconsulting.com uidrp.com vegecru.com veuology.com wghakt016.xyz wu8d616yyt6z.xyz wu8ggqdv077p.xyz xn--kinsithrapeute-dkbe.xyz # Reference: https://tria.ge/220218-nlkgaadcfq 024labs.com 69xibao.xyz 979511.com aaronlala.store accountingsoftwaresusweb.com aleksandartaskov.com arcade24d.biz autobras.online balatonartcenter.com bctransporter.net bez-part-ufa.xyz bitsgifts.com blantontransport.com braktonem.quest certipsy.com chrisdaughtryfans.com cindercapacitacion.com cpybc.com cq396.com curatedcraze.com deluxeinterior.design detentionart.com drivelingo.com dsp-energe.com equito.agency for2play.com fourcrestaurant.com futureoneafrica.tv garageair.agency gbnagkvr.xyz genyuandl.com hsa-attorneys.com jantfencingandsheds.com jasbellyfusion.com jlhvz.com jungleking.online liberatoreshepherds.com longlastingoil.com macadamangel.com metalcorpperu.com metaverseloot.club mokkaoffice.com moniqueroerdink.online mypartners-april-investors.com neurosise.com novregen.com nowosee.com oakiedokies.com organizedkay.com paghosting.net pysznepay.com salamdiab.com seculardata.com tecnophone.net thehelloloveshop.com tinturas-plantas.com trinsity-solsar.com uniquesi.com wakasenninshikirenaitechnic.com waltersswholesale.com weddingtowifepodcast.com xcybook.com xfdtiz.xyz xn--80ajy8a.xn--80asehdb z5jgazn.xyz # Reference: https://twitter.com/JAMESWT_MHT/status/1495449578556080136 apollorealtors.com # Reference: https://tria.ge/220222-rtv5jaback/static1 0396pp.com allscapeslandscapeinc.net aviabiletkassa.com bagour.com bfreemovement.com blue1hello.xyz bolerconcepts.com bucaescortbayan.xyz bzore.com camscouplelive.com carenowgroup.com carsvehiclesapps.pro chrishonbell.com cyber-attack-simulator.com detonix.xyz dikdikpics.com disbep.com effizienz.coach eleanorreardon.com fijnstraal.online fixedincomeauctions.com fourtradeghana.com fraudulenttransaction.com gabriellahall.com goodhandscare.net groeducation.com himalayanwanderwoods.com insu1con.com iphone13mini.onl isabellaeveapparel.com jedanetworks.com lashedsa.com lmhaglund.com lookyanychev.store luxurypartygirls.com lz-jaini1615-hw0916-bs.xyz maxicashprodif.xyz michael-ludwig.info mylavabo.com offer5u.com openseagames.com peaks-hub.com petinggiean.tech polebear.xyz professorrolandocaballero.com reidak.com remixedteez.com riologisticsinc.com rotorotos.com sddn55.xyz selezionemiccis.com signalscrossed.com sinceretour.com solutionsemissionsimplifiee.com stor-morathens.com tennesseelegendarycleaners.com thentn.com theshaheenos.com ttagoa.com w5gbaq.xyz whitedovepottery.com wychit.com xn--3h3b77jqteeykb4g.com yenerbelli.com zhchgx.com # Reference: https://twitter.com/James_inthe_box/status/1496566212649570305 nnpcoil.buzz # Reference: https://twitter.com/c_APT_ure/status/1498967728002060290 # Reference: https://www.virustotal.com/gui/file/587db04b7b6cfd24c9c33bb352bbb8a32f069a15853faffeec0d48baf82cad6a/detection http://156.96.154.210 amtechprinting.com/Ioqsvp.jpg # Reference: https://tria.ge/220303-jfcr2abdar/static1 76482.icu 79znw1ajsv.xyz ailanis.com allaboutthepatterns.com atalayagroups.com bmxpro.online cabrioletx.com cannabisseedreviews.com cheappricecompare.com chicagohomeremodel.com christian-lehrmann.com coppaitalia3d2022.com coreagency.net cryptopedagogy.money curibo.xyz deteccion.online dinox.tech exactgeneralcontractors.com fishgirlfeats.com glamourendorsedsquire.life greenlabdelivery.com gs385.com hapocun.link hashtagorg.com hc6ady6y837tn.xyz hc6dlm7febdpv.xyz hnkhackingdojo.xyz i-97eevvq.life installationart.online kinlin.net lamornewright.com lassopicinnovations.com laurapaganigarrastzu.online managedsupportia.com medicinehattowing.com mission15.com modernconstruction.company monimachine.com moonbeam33has.com oermap.xyz passyourlicence.com petir55.com promotion-atserviice.store quantumanite.com quickbodyslim.com razavi8.net renaltrials.com renmaitong365.com rumahmakanbutin.com saleswoodstock.com scottsdowntime.com speaktartar.com spoluprehlohovec.online testing12345678.com themodernmandiary.com tianbaolan.com tipo-bet365.net tydonyb.com tyhup.xyz unicus.company update-edv.cloud upper90sports.com vised.xyz yeswesing.com yucer.xyz # Reference: https://twitter.com/peterkruse/status/1499320398701342721 fastcredit.club jbelleandcompany.com letsfeaturemedia.com outerverse.estate panyuhao.online rasa.services xn--legande-rza.com # Reference: https://twitter.com/MBThreatIntel/status/1499435864035934212 czuj.info habitatsaludable.website maxxflush.com modhotels.store vzddc.com # Reference: https://tria.ge/220304-p2f98sgcdk/static1 1207rossmoyne.com 20dzwww.com 595531.com 68135.online 77777.store ahmadfaizlajis.com alert78.info alifdanismanlik.com allmnlenem.quest anniebapartments.com awp.email bendyourtongue.com berylgrote.top bestpleasure4u.com boardsandbeamsdecor.com bubu3cin.com byausorsm26-plala.xyz cielotherepy.com crux-at.com customapronsnow.com dandtglaziers.com deepootech.com drimev.com encludemedia.com fabio.tools game2plays.com gongwenbo.com gulfund.com hagenbicycles.com handejqr.com herbalist101.com hugsforbubbs.com jasabacklinkweb20.com kreativevisibility.net kuechenpruefer.com laidbackfurniture.store lankasirinspa.com launchclik.com leatherman-neal.com librairie-adrienne.com mddc.clinic mehfeels.com metavillagehub.com mobilpartes.com nathanmartinez.digital oecmgroup.com oprimanumerodos.com pkem.top protection-onepa.com rematedeldia.com segurofunerarioar.com seo-art.agency shristiprintingplaces.com silkyflawless.com southerncorrosion.net spbutoto.com t1uba.com tajniezdrzi.quest teamidc.com the-pumps.com thecuratedpour.com tracynicolalamond.com turkcuyuz.com uschargeport.com vulacils.com # Reference: https://tria.ge/220302-m7zyesgdak 567go.club 943991.com abiding-life.com abioduncleaningservices.com artistrytribute.com arvidaontour.online ashokeperception.com atisbeauty.com basepicks.com bujok.xyz chattelsandmore.net cindyrandband.com comhotfile.com deamorwineandoil.com diagnosiscovid.online diamond138.biz djcaponeofficial.com duikescollection.com ecoimpactnft.com elefantenverlag.online gafiber.com goldapp.info heystudiocr.com highanddrygardenworks.com i5yx.tech ibfsinc.com igorleonardo.com itdiver.com jackiesimon.photos jascroggins.com kyomaruheyblog.com lesulemetrin.quest lipsrv.com loyanto.com mazengr.com mcdonnellanalytics.store mein-amberg.com mengesleckst.quest missmayuri.com mlxezzvvxtuujipokez.biz moreosin.com my688.xyz myarsemychoice.com mydkabc.com native-shirt.com nernsnook.online nicolasreboledo.com papadeuxpointzero.com pfotenpower.net physiocare-ye.com pluggdicono.quest ppskse.com sientespa.com smith-command.com sponsorclient.com starzara.com stronghal.com tess-factor.net timberwolves365.com tolexinesansordonnance.space topshop4kids.com ttcolorz.com vertexwebdesign.us wtsam.com zaboctoatoa.quest # Reference: https://twitter.com/peterkruse/status/1501506590914056192 3cnew.com 4127raymondav.info 68132.online debriefenmif.club ecosystem.team switchyardcharlotte.com thesmokecircle.com ycjtwy.net # Reference: https://tria.ge/220309-lzhhqsgch3 567go.club 943991.com abiding-life.com abioduncleaningservices.com artistrytribute.com arvidaontour.online ashokeperception.com atisbeauty.com basepicks.com bujok.xyz chattelsandmore.net cindyrandband.com comhotfile.com deamorwineandoil.com diagnosiscovid.online diamond138.biz djcaponeofficial.com duikescollection.com ecoimpactnft.com elefantenverlag.online gafiber.com goldapp.info heystudiocr.com highanddrygardenworks.com i5yx.tech ibfsinc.com igorleonardo.com itdiver.com jackiesimon.photos jascroggins.com kyomaruheyblog.com lesulemetrin.quest lipsrv.com loyanto.com mazengr.com mcdonnellanalytics.store mein-amberg.com mengesleckst.quest missmayuri.com mlxezzvvxtuujipokez.biz moreosin.com my688.xyz myarsemychoice.com mydkabc.com native-shirt.com nernsnook.online nicolasreboledo.com papadeuxpointzero.com pfotenpower.net physiocare-ye.com pluggdicono.quest ppskse.com sientespa.com smith-command.com sponsorclient.com starzara.com stronghal.com tess-factor.net timberwolves365.com tolexinesansordonnance.space topshop4kids.com ttcolorz.com vertexwebdesign.us wtsam.com zaboctoatoa.quest # Reference: https://cert.gov.ua/article/37688 (Ukrainian) gobits3.com # Reference: https://www.virustotal.com/gui/file/f09d1a726e7cdc701ce9be7f0988b7751896140fa76d9db2c4b3189d8cf9e0b6/detection 185.244.31.132:1809 stonecold.ddns.net # Reference: https://twitter.com/reecdeep/status/1504365541502459908 pedorc.com # Reference: https://twitter.com/reecdeep/status/1504467051267575817 arches2.com # Reference: https://blog.talosintelligence.com/2022/03/threat-roundup-0311-0318.html (# Win.Dropper.Remcos-9941356-0) # Reference: https://www.virustotal.com/gui/file/26d19ab100f651d0a6c6b4f9d69a0fb3dc04ff6073bf852497f81be982996c74/detection 41230793.net besthappybuds.net hanaleedossmann.com hotsmail.today hypersarv.com igametalent.com jialingjiangpubu.com joomlas123.info liqourforyou.com midlandshomesolutionsltd.com moodandmystery.com rapport-happy-wedding.com sellingforcreators.com shadowlandswitchery.com shoupaizhao.com twoblazesartworks.com whatsnexttnd.com wwwswty6655.com yoursafetraffictoupdates.review ziruixu.com zoneshopemenowz.com # Reference: https://tria.ge/220321-vp2y3adce2 5okx.com affinitybuzz.com andro.finance budunkafunk.com canadazk.com ceonsolutions.info computevault.com coriliechty.com cryptwo.xyz dailyjointhealth.com ecolifeco.com fatflorida.com flawdogs.com freeloanseva.com gangsha2001.com green-stone.solutions happyhempbakery.com hilutv.xyz hizika.com idyijr28j.xyz infinitelifetransformations.com joansbestshop.xyz khenonline.com kingstreetlife.com kosaz.online liveexim.com lqctqtal.xyz luxefashionaire.com madamebet.com menzelengineering.com mydactil.online ndcqchc.com newdealny.com nfhotel.net nginspection.com njpropertyrecors.com non-transferabletokens.com noticejcb.xyz packingfairturkiye.com paypalverifie.com positionme.site rever-age.com ridgwayracing.com rommyarf.com room4rent.net rsvip13cvx.xyz ruscc.xyz securitenovo.com shalomsingapore.com shanaesbeauty.com societalsystemic.com steady.store successvideo.today sveshtivosak.com thetimewheel.com tuvanvaytien24h.site uc-usa.com unicryptdoge.com unityassetstock.com vacumeet.xyz westfieldswetlands.com wingonvacations.com wodev.biz xfcad20.icu yaxi868.com # Reference: https://tria.ge/220327-wct85abae2 3pxm.xyz 59208.xyz amongusleaks.com antiwardrobe.com athlonebiokinesiology.com avrecommendwiki.com boatsrentalcda.com carseg.site chayaelements.store clemons.tech colormusedesignco.com cricutonlinesales.store crowd-news.com dasenlin-jiaju.com demopanel.xyz forkidofukraine.com galabet472.com giftexpress15.xyz gtm-kalisumapa.com haotian9981.com hqdtgyl.com huangsanguai.com indianfood101.com invtips.com ipoyce.online iyraproperties.com jinwanlicai88.com jjshomefurniture.com jogo.tech kawuldim.com kelaikemc.com kompanko.com lonesomevalley.xyz lowdowntracks.com lvsebianzhidai.com melaniewieseler.com miaurora.net newgenelectronics.com nikahclub.com nuoim.com oa1xs.xyz okparking2013.com orino.info outletscheapjordans.com peaceandlovebhs.com pyttoin.xyz qewuy.biz raidencity.net reveplac.com ripper66.com rooplaza.com rowanmasonry.com scrubbinsisters.com storkbucket.online templerestleisure.com thecodealchemist.net tvpoy.xyz victoroverseas.com wecome.club wiggly.site xfmm9538.com xn--h6q362bj4mp5c.com xpertlockandsafe.com your-funds-available.com zhekou8.net # Reference: https://twitter.com/peterkruse/status/1510927735325175810 germanshepherdpupz.com jardindaime.com sextv18.com ulrichfab.com ykahap.xyz # Reference: https://www.virustotal.com/gui/domain/online-be.xyz/relations online-be.xyz # Reference: https://www.virustotal.com/gui/file/047ff786f8bdd92bcf070f006d07ee6ca9bf63bd08213ec6b8807486c8b3f016/detection domaky.com lauravitale.net rest-report.com # Reference: https://www.virustotal.com/gui/file/3c94599cada17b9fae62316e54a1d69db7c475223721a5a57abe8774a2b5da74/detection 09012345678.com alloneart.com antoniolopezmurillo.com beaconhillboston.net blakfri.com chicasgunsboutique.com contorig2.com digitaldownlinesecrets.com edenwholistichealth.com effectivevip.com homebuyerspa.com jasminespot.com joshjohnson.pro jumbkprivacy.com khoemanh.club kyyx666.com letscompile.com mythree-informationupdates.com pusatsopsubarashi.com storeralumni.com travelchina.store underpressurecare.com wantedtrek.com willysuefarms.com xvideoapps.com yuanyouwang.com # Reference: https://www.virustotal.com/gui/file/b84fdaf6b81dfa063bf018bb2ed589f5fe71e694ae86f7b2ca7e1554eb11563f/detection bakegeeks.com contorig2.com fontaine-escargots.com impactxnow.com khoemanh.club letscompile.com level60media.com lushlobes.net master.recipes mst-srv.net oryzeae.xyz pinkinomanbeauty.com stoneautoaces.com wantedtrek.com yuanyouwang.com zxywxmr.com # Reference: https://www.virustotal.com/gui/file/19f97cbe74d777797e6f6c5e323b8611dbf57811a7d8f58b9ba8ea8171c19188/detection 736141.com aater.space adampulpit.com benenopen.online bihada-news.space bit-eth.com bjyanqiao.com bssystemonline.com bybundy.net dallasdwiguy.com eduardoorosc.club erikakorma.com galabet0350.com irvid.info jackmeetjay.com keepitng.com kffreshfruit.com lscarlzk.com luokeseals.com mamamachi.com mivolts.com nemetgyakorlo.com nomadisen.com nutrioclinic.com orderinformantmailer.tech osmium-institute-paraguay.com payments-gate-325r.xyz rbmo.top rubberyrofqci.xyz sishedh.xyz stripmywalls.com tangoespasion.com theorigins.xyz thepopularboots.com wucaishisc.com # Reference: https://yoroi.company/research/office-documents-may-the-xll-technique-change-the-threat-landscape-in-2022/ # Reference: https://otx.alienvault.com/pulse/6193e3f5b119e561c52ed3ba art-space.xyz # Reference: https://tria.ge/220418-rbygyadhh9 21sq.xyz 2day-recv.info adforalums.com afromoorishfilms.com aleimanpaper.com algurg-living.com allmoves.net anatox-lab.fr ankaraogrenciescort.xyz bethesdaclinicllc.com chouwakarunewssokuhou.com coach2college.com creativeportraitstudios.com csfromsinai.com cumbrebomberos.com d72gmj3bpdhc.biz directionsettingpoint.xyz eludice.net emdestak.com feinquebrantabledoc.com fifihill.com findinvest.xyz gasandliquidcontrols.com generatorgmer.xyz geoplates.com gmcrjizppcx.mobi gorastionse.store greenft.xyz hobe.agency impqtantaou.com inmyhindi.com j3ebx4thyf5h.biz joinlegacyforge.com keepitng.com lamphuchai.xyz lianxiwan.xyz losangelescapainters.com lovawood.com medicinalweed.lat meenubhosale.com mgav23.xyz mintnft.fund nidoumenojinsei.online njjbds.com nomorewarnow.com nuhuo333.xyz onthemarket-smartboard.com plotniska.net powersforsupervillains.com ptmetaverse.com qywyfeo8.xyz r-souls.com scmce.com seacoasttractor.com seattlerealestateauction.com soulworkerrush.com sourcemycandles.com stealthcarrier.com sxuseon.com thephilangies.com upisout.com valgtrizoma.quest vendasaprovadaonline.com webwideoffers.com xiraji21.com # Reference: https://tria.ge/220414-j7arraagfq 4caminos.biz 5151vip51.com 701017.com aauni.academy aestheticpls.com allcityinterior.com apexautomationsales.com axelaguilar.com beritabolabo.com bestmodsforminecraft.com boostover.net buzzsaw.club carfik.com cattlecallphotography.com charbousisterofthemoon.com chaunceybarett.com cockgirls.com corporacionddt.com crypto-geniusworld.biz darkharborband.com dgmnsp.com eddemployments.com erodingbnustx.xyz gamblrapps.com gg168bj.com helpcloud.xyz hexedox.com icyreps.com jakubkokoszka.net jarrellmahusay.com jzwlhg.com kyukeimap.com laconsentidaseleccion.com lshdkj.com lu-dra.xyz mavrlabs.com mixcogroup.com munixc.info myesunlife.xyz onlinedownload.digital pavlovsbakery.online peternieboer.com prona.xyz recom-altaka.com researchers.company rewlec.com rodblur.com rtexbot.com rush-booking.com sewncurtainsandblinds.com silentpartner.plus stateofbiotech.com supraforward.com theeastendvoice.com thefliptruck.com thelindleyfamily.com tonysgourmetpizza.com tudoemvendas.com universityairexperts.com upnnett.com urbannft.xyz virtualofficesolutionspro.com warungdgital.com xn--g2xt1dp5qljo.com yudaria.com # Reference: http://blog.talosintelligence.com/2022/04/threat-roundup-0415-0422.html (# Win.Dropper.Formbook-9944286-0) 5151vip25.com aestheticpls.com amazonbrickandmortarretail.net amelntl.net awp.email beylikduzuhatunlar.com bucariito.com carfik.com cgbbqllc.com cherrythechickenandfriends.com dynwa.com fabio.tools fujistrek.quest hbsckj.net hdlypx.com ideastax.com jakubkokoszka.net lshdkj.com nbsze0.com positiontrader.club sauqenta.com stronyinternetower.com supraforward.com theeastendvoice.com # Reference: https://www.virustotal.com/gui/file/506c0eb3e46ed30251d48f7d39d0cfd14f3bf4c6a90a4ce37d7d76c3ab0e8fb5/detection bonbyk.xyz comfortshoppingmart.com divinacafeteria.com fieijfjie.xyz shopexstore.club xn--42cg2czax6ptae6a.com zhidaojy.com # Reference: https://www.virustotal.com/gui/file/2436139a182cd467b9669673ef9953bd25337fbb083995a7b69534bcfb75e9d5/detection bondihome.store excellglobus.com grasshopperswickedpickles.net mindgasma.com onlinechwilowka.info silyutin-invest.online sunnote.net voilathefamilyrecipeguide.com # Reference: https://www.virustotal.com/gui/file/02b2f3c02cfa488e665ff9e41233993dcfe8f2f02bf79536b1f9c88723ca7c32/detection baby-gene.com buketmert.com buzzlocate.com cbinventory.com clv-poc-dev.net drilling.world fmdllfdlfdfdf.com hottradebuzz.com houseofluxuryorganics.com jpystablecoin.com korupanorama.com naspartners.com onlineshopgr.com primehome-inspections.com verlan.guru # Reference: https://twitter.com/MBThreatIntel/status/1519696178543140864 # Reference: https://www.virustotal.com/gui/file/cde7a256a7b8de85acb73ab4697147fbc4c9a8cda56f594b20d278e26c177856/detection albawardl.com bizjust.xyz borntohealpodcast.com bsfs6.claims capshopnateasy.rest ceramicstrainers.com chrisfortner.com collie-langhaar.com countryharvestcrafts.com cuestiondeminutos.com focuspbc.com fountainspringscapemay.com free-spinner.com frontrunnr.com garygrahamnyc.com generarelead.com hoatuoithainguyen.net icotus.com ivaanvikram.com jinchanghe.com librairie-adrienne.com lightingreference.com monteiromt.com munixc.info omzast.com printables.digital smartboostmedia.com sujonpaul.com themakershands.com usbankofamerican.com whyasen.com # Reference: https://www.virustotal.com/gui/file/f5db253b6db31aaeab9068feea2d05436629b75e4602a7d2428299b1fa934184/detection # Reference: https://www.virustotal.com/gui/file/f0acca1bd8656cd5f75130a06f2df7abbd2bb234812234985de025b8af0a8573/detection # Reference: https://www.virustotal.com/gui/file/ee35a5464cc7b7d4fe9ca9fce5321e1f6e235447792678fb71d768f5d1e2d319/detection 172711.com 3a5hlv.icu 515pleasantvalleyway.com almanecermezcal.com alnileen.com ankaraescortvip.xyz azalearoseuk.com bitterbaybay.com casino-pharaon-play.xyz cg020.online cimpactinc.com cinemaocity.com civicinfluencers.net dayannalima.online douglas-enterprise.com eaglehospitality.biz eidmueller.email fbve.space goodgood.online greatnotleyeast.com groceriesbazaar.com gta6fuzhu.com gzhf8888.com hebergement-solidaire.com hempgotas.com holyhirschsprungs.com hopeitivity.com ioewur.xyz italianrofrow.xyz jaggllc.com johnfrenchart.com kastore.website kitcycle.com ksodl.com kuleallstar.com lovely-tics.com lovingtruebloodindallas.com maymakita.com mcrosfts-updata.digital mentalesteem.com mytemple.group palisadeslodgecondos.com plick-click.com punnyaseva.com quadrantforensics.com rainbowlampro.com ralfrassendnk-login.com richclubsite2001.xyz roofrepairnow.info savageequipment.biz sharaleesvintageflames.com sho-yururi-blog.com sincerefilm.com sirikhalsalaw.com sittlermd.com sport-newss.online stella-scrubs.com tghi.xyz theinteriorsfurniture.com tiny-wagen.com translate-now.online ukash-online.com wwwripostes.net # Reference: https://www.virustotal.com/gui/file/eafdcbea5a9544d87f8a7c03ee4eb6ab0d9c12bbbbc1d9705dc94d5fd983c5bd/detection 2thpolis.com 360e.group 4338agnes.com 58lif.com atlasgrpltdgh.com buysubarus.com carriewilliamsinc.com damusalama.com dreamschools.online evodoge.com faydergayremezdayener.net finanes.xyz freelance-rse.com gaboshoes.com gabtomenice.com hempgotas.com ir-hasnol.com libes.asia micorgas.com mollyagee.com nbjcgl.com pentest.ink rampi6.com rvmservices.com sjljtzsls.com standardcrypro.com teentykarm.quest tipslowclever.rest trulyrun.com uvywah.com viperiastudios.com wilkinsutotint.com wohn-union.info youngliving1.com zoharfine.com # Reference: https://www.virustotal.com/gui/file/00570adfd84d458743a5e951d58043e836043d01b0016e78928d2db9a724e730/detection albertaeatsfood.com autocalibre.com dac71047.com espiaruncelular.net fem-iam.com fusiontech3d.com gmopst.com guncelekspres.com likekopi.com livehealthychoice.com morganjohnsondesign.online phigsa.com saharsaghi.com sargeworld.com talasoglufinans.com # Reference: https://tria.ge/220504-fw33dadah5/static1 48411.xyz 4sansquatre.holdings 8388cq.com advanceddataenterprise.net alsuwayeh.online amor-vincit.com arbitrum.party arresgroup.com aryocoding.com bighornholdingllc.com blockchainsmartsystem.com bmstore.uz boredones.com brasilseafish.com breweriana.online carnetdechef.online chiaraboffi.com cjlucmpt.com clonda.com conditionssuitable.net contohot.com ctsygzs.com cushionsandmorehn.com diduxi.com funhouse789.com gentlemanpig.com gurbuzsuaritma.com hakomas.one heshi54.com hitmanautomation.com homeautomationtexas.com hsgmaster.com kershoes.com lamborgrini.net le-fam.com leeracingteam.com lennoxalexandar.com loaparis.com lottoss.xyz memoirofanerd.com mentication.com metanum-solutions.com mgav57.xyz mrteez.club nationalmetalbuildings.net navarracomercial.com osvfbf.com phimlon.net pistachio.land quickest.website recalibratementoring.com romasonra.xyz santiyq.com sarojnimarket.online sbs68.com seaverde.com sebastianlouder.com sharkyslipper.com soodscan789.com stiff-pols.digital szum.company t2kenya.com tdmjsc.store xinnuosn.com xn--octr39apqo.xn--czru2d # Reference: https://www.virustotal.com/gui/file/ab609e7ec35be92d719b79706a8b32c8b173b33b2c0d1a2d0c378ae0ab24d503/detection 23icecream.com acastino.com catherineseher.com darkartgames.com detzag.online dvxgem.xyz evlovess.com gadolant.com gregorylongoria.com hemsbya.xyz kaplanstore.xyz movil-internet-fibra.site rathdrumproperty.com sr-ilustrado.com supplygrocery.com titcd.icu trafficdevils.xyz virginia592.com # Reference: https://tria.ge/220506-myw56shgc6/behavioral1 akabouumikaze.com aloin.net ambercline.com atercus.online atomlook.info awakeningworldplayers.com bcdm.xyz beezr7fizghz3n39.xyz bestcannabisbutiken.com camasline.com chlorinetcca.com clientfirstrcm.com coastventure.info copysouthbound.com croniesnft.com customerupdateservice.support dk3cs8pm8p08tm.xyz dogoodcamp.com dongchenyake.com dtef.xyz entprnhealth.com fixyourprocess.com g50999.com gavc.club gazekb.sbs generationsheating.net global-ec-group.com globalshowbiz.com gotiktokpro.com homeinprovments.com hrbggames.com infotechno.net jialiba.xyz kellyblusbook.com kriptobotu.xyz ksjiea.com lovellsautoglass.com luxnol.com magaluiza.site mxavsp577.com nikkiaugust.info nishiokayoshi.com peacedoge.club queimaagora.site randcorcoa.site rediwatt.com rlc.wtf sabrinabi.xyz simbacatering.com sirotti.xyz taxempires.com telstradiscount.net thenftexplorer.com tn8itwpe2hjrrfip.xyz top500dao.com trii-a.net trottadevelopmentgroup.com vacationtennishome.com viralindo18.com visionarysolution.info wedo.direct yakobylife.com yjswsd.com zhanl116.xyz zts-ic.com # Reference: https://twitter.com/b3ard3dav3ng3r/status/1522875454537216002 teamazmog.xyz # Reference: https://tria.ge/220512-knp8rseear 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://www.virustotal.com/gui/file/fa3d030c48ed99d3eabfcb7ce2a85cfca61dfe1d6185a99ea27f4687fba99601/detection 1420radiolider.com blinbins.com bodymoisturizer.online cambecare.com csec2011.com garagekuhn.com glsbuyer.com herr-nourimann.com lcmet.com loyalcollegeofart.com myfortniteskins.com nwaymyatthu-mm.com smartmirror.one teens2cash.com turmericbar.com warmwallsrecords.com # Reference: https://tria.ge/220523-lwgf9sgagr/static1 0shixa7u.xyz 10000wallets.xyz 360tekpartners.com 48962.xyz 99yy.info allrates.info anthonyveyssiere.com atillos.com banjaranews.com belezz.com bestahem.com blackfoodierecipe.com bronchia98pew.com bsdprint.com chateaubaro.com chpvl.icu d-paj.com digitalmarketinginspanish.com discoverourtours.com dizaynservis.com ekj7fn.xyz eotefashion.com eudeed.com fahrzeughero.online findingfocuspsych.com freebuy.today g-glawgroup.com gotskills.xyz handanshengtai.com hawkeseye.com house-lover.xyz hye07on11.com iassets.cloud imifone.com invest-quantum-ai.space itransformtraining.online jessicaerenato.online jieshundz.com lbzbtgg9.xyz leaguestocks.com livigno.travel maesonandcompany.com mastiba.com mbbpaymentplan.com monbjrd.com njhxkj.com particular-verificaciones.com phillyfitformula.com post4pay.com scramet.online seucredhope.xyz sixcache.com storegonline.com sxhengshan.com thg268.xyz web3connect.world web3jake.com welcia.online whereisonka.com winsy1015.xyz wlidrhino.com xhygsc.com ycmu520.com yurongshipin.com zhangnala.com # Reference: https://twitter.com/tosscoinwitcher/status/1529350646847008768 # Reference: https://tria.ge/220525-flexssccdn 012skz.xyz 14offresimportantes.com ageofcryptos.com american-atlantic.net anotherdegen.com attmleather.com bimcellerviss.com buggy4t.com candybox-eru.com ccav11.xyz chambaultfleurs.com china-eros.com christineenergy.com climatecheckin.com clime.email dabsavy.com dbcyebnveoyu.cloud dearpennyyouradviceblogspot.com demetbatmaz.com denalicanninglids.com dhslcy.com dialoneconstruction.com doxofcolor.com dreamonetnpasumo1.xyz drsanaclinic.com edisson-bd.com embedded-electronic.com engroconnect.net exceedrigging.online fairfieldgroupfw.com fjqsdz.com floridacaterpillar.com garglimited.com gofilmwizards.com gororidev.com hofwimmer.com huvao.com insurancewineappraisals.com kincsemto.net lotsimprovements.com mentalnayaarifmetika.online mftie.com modelahs.com muktobangla.xyz myamazonloan.net nagpurmandarin.com qhzhuhang.com salahov.info sandstonehosting.com seekbeforefind.com shiftmedicalstaffing.agency skb-cabinet.com societyalluredmcc.com souplant.com tahnforest.com tellgalpy.com tentacionescharlie.com tootko.com travisjbogard.com tubesing.com wallacehills.com xn--ekrt15fxyb2t2c.xn--czru2d xn--hj2bz6fwvan2be1g5tb.com yonatec.com zyaxious.website # Reference: https://www.virustotal.com/gui/file/53251bf08457a79fce96a4493d96082dd2ddcce3789d8132b1be249943d3f33e/detection http://3.124.188.36 blackcreekbarns.com bluechipblog.com cartogogh.com cerradoforte.com dach-loc.com echoesdesing.com elon-drop.net facts-r-friends.com luyensex.club nitsmm.site permitha.net sana-poratal.site sportsgross.com tiffanyrockdesign.com whneat.com # Reference: https://tria.ge/220531-hmrdbsdeap/static1 215totobo.com 316242.com 95623.maison abdi-kings.com airflatego.com amerikanewsu.com aroma-shop6.com audubonenv.com authentisign.xyz bonshengempire.com bursalokma.online cerdasycauchos.com cliverof.com commentn.com comyourlens.com dadsimprov.com daka489.com dl99931.com eldercarepas.com eroptik.online findhypeart.com georgiaqueenpageant.com getcampusnations.com glovesandprayers.com gma-seen.com healeyhero.info healthexpertfund.com hieghtsdriving.com hnsjxxzsw.com hobbling17urd.com hongsencraft.com hotelnikhilregency.com howtosavetheworld101.com iammohn.com kykn8sghjadg.com leesgun.parts mayrathecoach.com metformin100years.com mindhobbybox.com minhkhoiauto.com msontag.com mymelada.com p2pilive.com popupplus.store qings.online raldistrictgoingalon.cfd sacramentoproudboys.com samedayjeweler.com samscosandmssaad.com sergiozini.art spontazz.com stevewellsforcongress.com stmfl.com supportokta.com themrbeastgames.com thevirtualeventsheroes.com toplist.guru underthesunset.cloud uniquemarketingtool.com uniquemindtech.com weplyshop.com wrobeson.com yinchang99.com yinhuapiao.com zghy.tours # Reference: https://twitter.com/reecdeep/status/1531954945494228994 # Reference: https://tria.ge/220601-mtzqhagba7/static1 128dd.xyz 55byvi.com algofan.lease alirbad.com b1khcj.com beijingbluestar-tech.com bigtime-redeem.com bjshxxw.com bjtvapc.com bo426.com careerguru.net ccaboyyhhj.com cgem.today contradasantacaterina.com cryptobuyer.site daobox.art designmehndi.com energieat.com farmersdaughterdelivery.com fujlfilrn.com gettspot.com health-cvshealth.com ismaazamzico.com kjcftylrsm.com legalzoomcard.net lmtoken-pay.club longboardsguide.com lovelitee.com maizhuanji.com mariemikulsky.com medicarebooking.com medimarquelab.com mesagre.online milanjoojosang6.xyz mqsjw.com mrplugzsneaker.com mybazer.com myfloaty.com myndighed.info pcr-user.com poweredbyclem.com premalex.lundbeck qichev.com qzenfood.com radiosdepanama.net rebillionares.com sanbarts.com seafiw.com simplyemail.info solanverse-staking.com starkindus.com strymtvapp.net suabinhnonglanh365.com szxy188.com tafkcleaningservices.com tddbjxutvytm.com tiffanychilds.com tradingbot.fund ttmhkpzmz.com txualnor.com volcanoscenic.com webuybuildingscash.com xn--9db0anl.com xn--grupoamoreoxignio-6tb.com y1xml.com yolgecenhan.com # Reference: https://www.virustotal.com/gui/file/030567e6bf7a5ecf93389aa9fe1ecad8c93bbef64864816be50677a8f2c7b12c/detection ayudaten.online cashbet.pro enjoytravel1.com hugobos.site jindu56.com ketolin.store miningnotifications.com mpace.store mwe079.com paulysatelier.store sindmart.com thingsrisenewspapers.biz xynhealthy.com # Reference: https://research.checkpoint.com/2022/xloader-botnet-find-me-if-you-can/ abros88.com alpeshpate.com amenosu.com aminsfy.com ammarus.com arabatas.com arches2.com b8ceex.com ban-click.com bantasis.com becbares.com becu84ts.com bendisle.com beputis4.com berdisen.com besasin09.com binbin-ads.com blackbait6.com blendeqes.com bra866.com bracunis.com brasbux.com brass-tip.info breskizci.com bubu3cin.com budistx.com buge-link.com bumabagi.com bupis44.info buresdx.com busipe6.com busy-clicks.com butsins.com butuns.com cablinqee.com catdanos.com ceser33.com cesiesis.com ci-ohio.com cinasing.com click-tokens.com coalmanses.com cobere9.com cures8t.com cusio3c.com cusmose.com cutos2.com dain6544.com dashmints.com davinci65.info dempius.com ducer.info dugerits.com earches3.com erisibu85.com fellasies.com fendoremi.com finsith.com finsits.com fraiuhs.com funtabse.com gamusemenu.com gate334.com gesips.com gimbases.com gingure.com gogoma3.com gulebic.com gunnipes.com heinousas.com high-clicks.com high-clicks2.com highpacts.com hugefries3.com hughers3.com hype-clicks.com jervinse.com keepitng.com kraines3.com lopsrental.lease mecitiris.com mimihin.com minimi36.com minismi2.com moreosin.com motarasag.com motarase.com motometics.com moukse.com munixc.info n4sins.com nerosbin.info neurosise.com nifaji.com norllix.com noun-bug.com nropes.com nu865ci.com nutri6si.com ocvcoins.com pedorc.com piecebin.com plick-click.com pordges.com price-hype.com private-clicks.com probinns.com ranbix.com range4tis.com rap8b55d.com rapibest.com rastipponmkh.com recbi56ni.com redandseven.com sacremots.com saint444.com sanfireman.info sasanos.com seo-clicks6.com serenistin.com side-clicks.com tangodo9.info tes5ci.com travelsagas.com trc-clicks.com tumpiums.com wecuxs.com # Reference: https://twitter.com/1ZRR4H/status/1532305804266721281 # Reference: https://tria.ge/220602-jt1e9ahhel 03c3twpfee5estjovfu2655.com 104wn.com 123dianyingyuan.com 89qp52.com advanceresubeopene.biz aforeignexchangeblog.com akmeetech.com atelierelzaaidar.com autu.cfd azureconsults.com bam-bong.com barmagli.com bchmtn.net blackcreekwatershed.com bm65.xyz bolacorner.com boxberry-my.com clairvoyantbusinesscoach.com corporacioncymaz.com danta.ltd dawonderer.com defiguaranteebonds.com dronelink.xyz e3488.com erentekbilisim.com estudioenzetti.com euroglobalnews.info finance-employers.com gangqinqu123.net iampro-found.com informacion-numero-24-h.site jetskirentaldublin.com kc7.club krdz28.online lepakzaparket.com maisonretraiteprivee.com marumaru240.com matsuomatsuo.com metagwnics.com minioe.com mtzmx.icu mutantapeyachtclubtoken.store people-centeredhr.com pepeksquad2.host pixelkev.xyz primobellaquartz.com rodosmail.xyz sdwmkj.com server4uuss.net test-brew-inc.com theceditpalooza.com thegioigaubong97.site thegurlyboutique.com tj-assets.com tyma.club tzjisheng.com uixray.xyz usaservicedogregistratuon.com vaoiwin.info vcwholeness.com vote4menk.com withoutyoutube.com ycw2009.com yourpamlano.xyz yundtremark.com # Reference: https://www.virustotal.com/gui/file/765cf82aa101df797cecb2d850761713b62450619ec0bcf8e335573b21010104/detection http://103.153.77.138 blogging-news.com bojan-milenkovic.com dispectra.com dzpmzf.club engematec.com fortymall.com grocits.com jfcls.xyz jimsan.com ketoyjugyshop.xyz lexbbc.com milozzo.com polynerdle.com weddingsiteshop.com # Reference: https://tria.ge/220613-lycwvsfdfn 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://tria.ge/220616-ljvhcschdl 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://www.virustotal.com/gui/file/01b4a9e7c4479cf0e72a55af192c151b08f96b8244805711dc8980d05f850e56/detection aydenalice.com bodog-review.com chengdubangdao.com elitetoronto.net fashionrongo.com greks33.com humoradvocate.com leon-bet-uz.com marcelhladik.online mobilenotaryconnection.net rbtez7.store rkbet51.xyz shop4scrubs.com thedwordbydh.com worldsriot.com # Reference: https://app.any.run/tasks/11c557a3-87e5-4f70-9254-656cabc5c6f4/ xiaojiaowanwan.com # Reference: https://twitter.com/reecdeep/status/1538897538144690176 # Reference: https://app.any.run/tasks/23e9f82c-8ef4-469f-95e3-a2700ece36e7/ aydaajans.online bigabid.engineering cocopaintings.com comment2020.com ditiya.space fsids20.com gastreatmentinfo.site jzcrjyw.com oficiosdaterra.com plantonio.com propagandefilms.com rusvogue.com sb11w.xyz webdesigntezcan.com xn--rckenknacker-dlb.com yatida.com # Reference: https://tria.ge/220621-y3jlesehb4/behavioral1 2045479233.asia 337742.com a-prime-dogfood.zone allaboutwindow.com alwaysinvestor.com bar-clicks.com betmonde201.com chrisandrewcobo.com cratitonebank.com daftarslothoki.net dhongroom.com direitodigital.net elb-hohenau.com enieria.xyz enlyfist.site entrepreneurdeouf.com eurorecuperisrl.cloud exgps.net eyewearwiki.com financialgurus.net fitness4world.com fullbedroomset.com hausofelviradior.com implyeventos.com j3dqt.xyz julia-wallace.com landviews.art ldyss429a.xyz ledgelougners.com legoscene.com lemonsanver.com lzhaimany.com m5ocy.xyz milihz.xyz mrsxarbitragem.com myofficesoftware360.com nailvivify.com nuianfla.com onlinelab.site oovohealthcare.com picsyaphotography.com powergrand.site prettyfuckingprotected.xyz pth1688.com qinqinpf.com queenasharp.online ralestate.mobi sacredbond.agency satthepgiagoc.com sendi.xyz slotgembira.info squimbot.com stack9.cloud stone-conta-premium.com switchvr.xyz tigerglobal.direct trigenttechnologies.com vaapmi.com vestitiperneonato-online.beauty vikingworks.site wgtstyle.com xuwutv.com xy-evehicle.com yourjeepconcierge.com zychat37.xyz # Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook%20-%2025062022 176bwcx.com 67f5ead1a275.info amsordglobal.com au-techng.com awndka.xyz barq-id.com bhui7.com biznes-poznan24.xyz boscue.com bretholdings.com businedstrack.com cankaoao.com carings.net carrotshelter.com dailycuatudong.com derechoromano.com doca29.site emnopgroup.com energyecuador.net gcpropolis.com gektolicompany.xyz glitzye.com globalepic10x.com goodandperfectgift.com hardwarepicker.tech how-to-learn-languages.net jadacomercializadora.com joselynbaezs.com keiwaseitai.online kinsgtonbrass.com kitabisabelanja.com landliner.taxi lermontov.online liwoo.top mafleursam.com magictvshow.com mayipaimai.com minex-intl.com minijob-duesseldorf.net mybullion.net nasdaq-ex.store nonnydesigns.com perfectingnextstage.com primarole.com purchase614210.com rabeproject.com readoku.net releve.space roshmary.com ryzcn.com serengetifadhions.com shirtgse.online skyglowtech.com sticktogracestudio.com stripe-forecast.com thenextbigtech.net thethoughtgenius.com thevirtualcafe.net titantechmail.com wojiayouxuan.com wordsofweightandlevity.com yatirimtamam.com zjzcmy.net zorbaplus.com zzbb8899.xyz # Reference: https://tria.ge/220626-x3rrcseba7/behavioral1 abbigliamentomedici.com barbararomanow.finance bemo88.xn--6frz82g chisalan.com computercodingclasses.com csnfrs.com erosludi.net fsentimes.com gigiandnatemovie.com icqiangdan.com koincreditunion.com mysupport.space nicegames4u.com promedsecurity.com respectnelda.com sega55.net songlark.xyz theoctopuspress.com trybigbangpromos.com xusenyu.top # Reference: https://www.virustotal.com/gui/file/303bc30a830329084290c40b42cb9700852fd98712ceba40e99318e926658e03/detection accountppl.com adfbingo1971.net aerty.cloud becas-maestrias-ec.com dressusinc.com eternalflamez.com facefoot.net frontpagesweb.net heavydutydiva.com hschanglixj.com ios.run jayagunaaluminium.com klumpave.com lotonmyplate.com morganhertel.com njshoreanalytics.com osmond8421487.xyz tomrings.com weissburkelaw.com # Reference: https://twitter.com/reecdeep/status/1541735626915069954 # Reference: https://app.any.run/tasks/92fd7447-8f6a-41fb-a032-9df926fd49ad/ nxgills.com # Reference: https://www.virustotal.com/gui/ip-address/188.114.96.2/relations ccxqw.net dsjxc.net dwf77.net hbzkz.net hgb2b.net i19lo.net rcttc.net sdbus.net slzsb.net sxlxh.net sz-dz.net # Reference: https://www.virustotal.com/gui/file/5355e8a90f5f1c0499804a00e727e793c889999f7b70c658fdf8da29940a8a16/detection 42627thb203.com alligohorizonprivatelimited.com ankarabahcepeyzaj.com baincot3.com bellemooi.com btc2048.xyz citestaccnt1598424138.com coolcitygroup.com emojiunlocker.com exhibfilmbuying.com kaijoecolors.com kursatyaman.com mbbkulturyayinlari.com microqb.com staywellca.com thc8hemp.com # Reference: https://twitter.com/reecdeep/status/1545378651147042818 # Reference: https://app.any.run/tasks/1652e1ba-153f-4c1a-80fc-5928840ee8f3/ ninoxins.com # Reference: https://blog.talosintelligence.com/2022/07/threat-roundup-0701-0708.html (# Win.Dropper.Remcos-9954770-0) 100shortvideos.com assasa.net augustamobilenotary.net disintar.xyz duckholland.com elanagro.online ezhuilike.com gasurvivalgear.com hayatcevredanismanlik.com hubinvoice.com icarus-soft.com iden3s.com letbeautifyus.com sinibelanja.website takeka.com tematemazo.com timinis23.com unitedoceanlogistics.com vineabank.com waydiscount3.xyz # Reference: https://twitter.com/reecdeep/status/1546419589965389827 # Reference: https://app.any.run/tasks/1a135893-9e18-4a4d-9649-419157a88de6/ sunamiros.com # Reference: https://www.virustotal.com/gui/file/030f42b89811d4a8e5fae006983b4ec62a2f902a05758eec1ed062b1b5347054/detection destaqueregional.net fiat126.info finlandten.xyz fleaimmunity.com fuckjoebiden.info jessicaloewen.com josiemaran-supernatural.com latinfoodtunisia.com office-antenna.com papamamastoel.store statenislandferryhawks.com suddennnnnnnnnnnn11.xyz supremeantivirus.com thefoothold.store think-digital.info ttyk.net vollabi.com # Reference: https://twitter.com/reecdeep/status/1549064064760008704 # Reference: https://app.any.run/tasks/1b40b5cb-f2ca-4171-a749-30be751b317d/ bestselectrics.com # Reference: https://tria.ge/220723-j55jcaddap 94ei6mgy.com agentsheila.com almavivaranch.com andykaufmanisalive.com artbynadiaxel.com ashleyryannestreet.com aylagrey.com bangaloretomysoretaxi.com biaolingroup.com buymistnow.com casaspecialtycoffee.com celebrateocala.com chunqi888.top cie-revolver.com conservativesshop.com delicioushq.com dominiclis.com dongxijiangpin.com downloadmasters.net downtownfamilypharmacy.com dupreportablebuildings.com educaterealestatepodcast.com enjoyablestopnshop.com epiccaremedtraninc.com finanziariaruscelli.com foyfoy.ltd funakelo.com ghjan.com grandesfinanzas.com heygotrip.com hotelspacasino.com houtai12123.club imanicarton.com jimihoodie.com jinyida.xyz kedaimks.com ketoodavoqslim.xyz kiniecta.com koinslot888.tech langeculotte.com littycreationz.com lowesy.club luminousfadel.com maison-colette.com mavenpension.com mujid24s.com nhlove.net noyanlarinternational.com officialcaliyoga.com ownempire.net professionmessaging.com rockbettergear.com secretstation.xyz stairsuppllies.com stake-login.com stipclub.com thtoughthenight.com tilemarkng.com universalbumpkeys.com usreliacares.com wiworwe.xyz wwgge.com www69188q.com xinlanyuan.net yourinsuranceconnection.life # Reference: https://www.virustotal.com/gui/file/ed7cffa33cba2ae44d44f61137d598743a1e9a3c20a66d5a77381e39846ad3be/detection 1264skernave.com abutest.com agrisudparrella.store ayrenhoney.fitness barbacoalosmartinez.com bnmsas.xyz coothohh175-biglobe.xyz info-upgrade.com lartigue-demarbre.com marcaubry-photographe.com pankajkhairnar.com physiciansdigitalservices.com reventeresale.com sabrinasherman.com studiodraagvlak.com swifterrand.com sydneycream.com teeveeshop.com yaseenoliver.com # Reference: https://www.virustotal.com/gui/file/00851f75f4b3386811e5cc2fcbf67b918bd27ea7d71fd84314c46531635881f5/detection asdaservices.com benefitconsultantsny.com cloud-9.tech conticorporations.com cretefam.com dildilli.com discgolfgermany.com earches3.com ecoalgo.xyz educationsavingsaccounts.com freshdesk-japan.com hatteker-us.com itexange.com ktnaward.xyz liangyonxin.com livrosfotograficos.com lovelycontentandmarketing.com newjerseyglass.com pasoroblescahandyman.com picguess.com pilysc.com sapphiremanagment.com servingusveterans.com sketchnfts.com smallbusinessbebefits.com surerxpharmacy.com tacticalgamers.net testferresto.com trendcenter.tech trotapie.com vitale.email xn--zbs99xiw4azst.xn--55qx5d # Reference: https://twitter.com/reecdeep/status/1551888570016845832 dianna36.com # Reference: https://www.virustotal.com/gui/file/a2b73eed60ceba21bd55ef009b0677406e3b7af75fca15f83c9a2ce7082ef783/detection 1one2three.com absasha.com angeleah.online cqubit.com elixefx.com gratitudeimpactweek.com integrity-roofers.com jswzq.com jzjiayu.com personalloginuk.com petalpetal.net redsea-ksa.com successfulsoultionworks.com tcgfairy.com use-records.com wizardrozin.com # Reference: https://twitter.com/reecdeep/status/1554130081500598273 # Reference: https://app.any.run/tasks/5657e71e-32dc-44f1-a8b6-dc747bf4c531/ vinpilates.com # Reference: https://www.virustotal.com/gui/file/1e7e19ce21214b78b2c90a6d440db777bb3ce42bb68924d592678a6fc0fdd515/detection sinibelanja.website # Reference: https://twitter.com/JAMESWT_MHT/status/1555445680797270016 # Reference: https://www.virustotal.com/gui/file/c31b17eb7e69da771f0ee2230922622a94e1d27cfea1ff556615e4f27104340a/detection buggingin.com cocoaslimparati.store dohsrdmoney.com lendana.net preppdev.net stockdalecapital.us wiltongm.com # Reference: https://www.virustotal.com/gui/file/009e6b48b7d9b2a802d6e831138b1e55c4390861c123287e134bbc21f8a6e225/detection 3beadsbytj.com columbiaathleticboosters.com congtycoessentials.net dusubiqiqijem.xyz eroerofuck.com holoique.com independienteatleticclub.com iselotech.com lixinjishaiwang.com maisons-france-confort-mp.com mewydyrqd.xyz oceanprimesanfrancisco.com officialjoyslots.com rincondelvinologo.com rummypepper.com sem4seo.com spencersigmon.xyz # Reference: https://tria.ge/220809-pq62hsacfq 1to1vision.com 1weekweightloss.com 247homebet.com 883996.xyz accsforyou.com ahwconsultinggroup.com aisopus.com alakazam.wtf alberguedawebb.makeup amqzoqn.com arenaofdeath.xyz arinastepanova.site baicorsprayinsulation.com betpipo31.com coldonafridaynight.info decoratedpumpkins.com doiqualify.info donghwacos.com ducatilastvegas.com eye-catcher.site famedhelium.online gankotin.online gdgsjl.com gottagetting.com holyfamilysports.com juuwa777.com lastingketohealthtechdaily.com marleybrat.website metaverseworkshop.online milestoninternet.com myryanhair.com nelsonwldwide.com nftproperties.info ngshddq.com nikitasbarandbistro.com nobelpawtrait.com nonurseleftbehind.net novelty.mobi osakakansaiexpo2025.com peachbebe.com potosky.com pronodes.pro qhsjcn.com quadrants.site ragznmops.com ready4rishi.club recambiodeventanas.com reform-ookura.com roadday.sa.com rotate-mech.com saghiparhamdds.com saiyczx.com satserdova.com sigmaformacao.com subngon98.online sucrearret.pro textformattr.com thekagaz.com tipiministries.com uavhiring.com vo3t1n1pt.com weareplanetprotectors.com whoisjohnmoney.com wicklesschrista.online zhuokuosm.com # Reference: https://twitter.com/1ZRR4H/status/1557893313566588928 158187.com 659368.xyz 7553000.com amerchem.net esandcraic.com greenrosetarot.com ideardonot.top lilsdealsforreals.com loan072.ltd ninenct.store trecobat.net # Reference: https://twitter.com/reecdeep/status/1557380445758701570 gilalspence.com # Reference: https://twitter.com/reecdeep/status/1559483912249696256 # Reference: https://app.any.run/tasks/3f879881-5093-4f45-b8cd-3e8535782377/ firtoky.online # Reference: https://www.virustotal.com/gui/file/3500006bb33536ef2379f76afe8d70f57141c92025a0c6c14e80fba4a7a6bd9a/detection gbd.life 896851.com artovus.com bense003.xyz carpetlandcolortileflint.com cherie-clinique.com clinicadentalvelinta.com eventrewards.site evershedsutherlands.com filmproduction.management gdexc.com gshund.com invetnables.com mqttradar.xyz rettar.net solaranlagen-forum.com sussdmortgages.com teesta.xyz teklcin.online thecovefishcamp.com trainingmagazineme.com tvlido.com underneathstardoll.com usdcmeta.xyz zilinsky.taxi # Reference: https://www.joesandbox.com/analysis/691056?idtype=analysisid#iocs fabstaging.xyz jxhckt.com my1245.com # Reference: https://tria.ge/220825-d9hmgsgac5/behavioral1 0016.site aaa4bn.com aaateamcare.com akanay.site alg-maintenance-hub.com azino777club4.xyz blogthongthai.com caregram.biz circulodeltrastierro.com cyberstratosllc.com digitalshui.com enriquepimentel.site healthseg.com hostzones.co.uk ilkoyhareketi.net iuxinnian.com johnnellbragg.com karmashakti.com kotan1992.com mchacks.pro mensfitnesstalk.com modalsayabcde.xyz online-mommyhanamy.com phawaysafe.com piobellas.com reggaetonmusic-au.site rentalps4.com royalsprospects.com sleepcouncil.co.uk socialpigeon.co.uk sportask.org stake-dao.org stratonstake.com thecropok.com translationtools-au.site uswildfire.info # Reference: https://www.virustotal.com/gui/file/70c90f2d3d41ea0122bdfb814294e873c963621a093faefeedd2ce5e025b886a/detection alwrists.com baremaster.online cesarjunaro.com ebtl.wtf howdyart.com hunn.pro jam-nins.com kijangjantan.tech kuxita.xyz leslainesdumouchon.com mycto.today neatneighborncclean.com otnmp.cfd slot999.site tizzbizz.com wanligui.com xctech.world # Reference: https://tria.ge/220824-wgaehshacq 591easy.net 809dispatchlogllc.com aghype.site andm2022.com arlocalhost.online barrystanner.com bautrocknung.xyz blog-host.online bloghealthandbeauty.com blossomsjb.co.uk canlisohbetburada.xyz carpetcleaningmasterclass.co.uk chandu4u.com chukwuebukastanley.com cointwovte.com colibriads.com congcunggibng.net cosmeticsz.com crawfordcastle.com cynitic.co.uk cyuugakukyoushi.com czsaj.com dreamsmaking.com ecologistique.co.uk electricridesboise.com everyverse.net foodmie.com freshnhellish.com goodstaygetaway.co.uk heveany.com hikz.net hiro138.xyz in-vision.systems jantdeposu.online jeniusbank.co.uk kiaradininten.com kingalfredmotorservices.co.uk klmleisuretours.com kryptonapps.com kswautobot.com kuboshiori.net londonphotoworkshops.co.uk mdcsweb.com nickatkeson.com nilas.fr oilgascity.com onlineweed.xyz quique.website reno-easycash.com salamanderfire.co.uk salisburypride.co.uk savannapropertyservices.co.uk silverdropsofficial.com slboxing.co.uk stickybuttsbbq.com streetbriefs.com sussexaestheticdentist.co.uk sygbitpay.com teamen.tech thequeenclean.store vcel.co.uk viemon.online whitehawkproperties.com xuemanzi.net zgcjjy.com # Reference: https://twitter.com/reecdeep/status/1564556804213932035 # Reference: https://app.any.run/tasks/14ee6fed-74a4-4630-8710-75685bdb85b9/ baintsras.com # Reference: https://twitter.com/JAMESWT_MHT/status/1564500423792271361 # Reference: https://tria.ge/220829-qk3mkshgbp/behavioral1 digitalsaja.com elev8comms.com futurelightiq.com hicvxzaw.online imikimi.nl jeannadonavocat.com nortonfree.net oceanrealtygroup.com sagalana.info santiao123.xyz secureservice.app # Reference: https://www.virustotal.com/gui/file/6d0df288f02f7dad22fb9ea7ad1d07deeba5a37c540c552aa399da5eb7fe82e7/detection 272.group 6e1etxpnne5quxlnalk4226.com 7crownsco.com adetg.xyz anderson-spanien.com bedsruz.com chinabest-hp.com claria.ca frankasah-holdings.com jklaesch.com littlelantern.life myvfxpr.com redsuri.com therequisites.com transit1stbd.com warecomb.com worldking.xyz yiye10.xyz # Reference: https://twitter.com/ni_fi_70/status/1572534721091080192 cmnops.com # Reference: https://tria.ge/220907-hvyglsbcb9 0755aite.net 24casinoelit.com 4tlracing.com 552northvictoria.com 77herbs.com 909injured.com 9486.site 99vin.global abizar.xyz abtbank.online acmumzo.info adagihlina.xyz agendogliodoric.com aliceseagerfitness.com autoaccessoriesa-z.com aynmjy.com b7dd192.com baggreet.com bctugala.com blanket.sbs brazilianwives.com bybala.com cadismimil.xyz camperbuysell.com chicken-shack.com clanfuller.com danny-mickey.space echafa.com eevakoskela.info emprendeahora.pro enethome.info futureclosers.com giannamichaelsxxx.com hampyko.online hlcp5533.com ingspira.com itriyatci.com jacksoncafepaola.com jacobdrop.xyz johncaruso.online jollegratta.xyz kaamla.com lovecollective.church lsqcys.com manalapanhome.com marvpn.tech mtechvn.site ntscleaning.com okchurch.info orket.store pc-x.net pemdescijengkol.com pnc05secure.com radiovivaitalia.com sandboxwp.site sanoba.site se4.top teluguclips.com thedatingfunda.com tilastudios.biz toplinkstorage.app tradecontractortraining.com voicetall.com webteori.com # Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook-%2013072022 1ggn.com 778189.com abeylele.com abna.international acoinmintexpert.com americangaslighter.com app-youhodler.site appackle.com atom-ontherox.com baikhati777.xyz blountfirm.online boardinghouses.net boostmedia.agency brainwellnesssolutions.com canineconquest.com check-info-asked.com classicscase.com creatioconsultants.com cutiemind.com d1g1tal-loops.com dharvest24.biz dozivljajskigozdpohorje.com dx-ss.com edtechcreativity.com eleganse-home.online englishzones.com evergreeneq.com fbcpear.land fromvalleytosummit.com hayebenefits.com hollandmulchus.com jju21.com johndivine.com jouw-server.online kasirselasarbrbd.com kingoflogisticsgh.info libretypumps.com lovemya.xyz mhcbrokers.com moldshirt.net nailonika.online nationallrentacar.com nbaonlineus.com ofertascapital.com pacificoakllc.com parkwhiteplainss.com prerising.com printthisstudios.com roadsideassistanceillinois.info securitycamera-at-2022.life shiyoushuzhi.com szovegmuhely.com terrariaserverhosting.com theknightstemplar.global titansfitnessapparel.net tixdyweb.com tongkhodentrangtri.com trading-cracks.com troyleedesign.store turkiyedenalmanyayanakliyat.com worldwidedatazehn.net xn--9l4b93h4ub.com yeslom.xyz ywwpjqd.com # Reference: https://twitter.com/tosscoinwitcher/status/1546717291726794752 # Reference: https://tria.ge/220712-e41rjsdfb4/behavioral1 2620farragutave.com 304windmillcanyon.com acinstallationamc.services arielchristmann.com audiodobyps5.com baguasan.com bertusmabukyuks.xyz bijiuche.com businessdirectoryshopify.com cabolinansthingsandmore.com campkingind.com captainmun.com christinasharpe.com claraeygor.com clarencegresham.site cownedes.com craigbjones.com creencia.xyz dxcrmbase.com emeryhistory.com essay-forsale.com fantasydrift.net flashtte.com foodresorts.com fotografia360.agency freewinupdate.com geeminee.com glootlea.com godriver360.com governmentsscheme.com gsy56.com isaiahfunnelcakes.com justmakemoney.xyz jxdqyx.com krav61.xyz laononggushi.com le0hp8.xyz ligeria-production.net lovetreecafe.com lowcfs.online lowsugar.online luxxagency.com maitresalanomobikisi.com mcleansit.com morevisibilityagency.net nyhhz.com odulinsaat.com okhuk.com pherop.com piauipet.store platinumflooringaustralia.com poker-star-top-casino.net qrongsaid.com rabbids-party-of-legends.com rapiturs.com read4achange.com salinasresorts.com seattlebusinessconsultants.com studiohartdesign.com szqnbmrd.com thebestlifeapp.com wbs-ekkyo-ec.com web3sex.site weboughtavideostore.com yayasansetara.com # Reference: https://www.virustotal.com/gui/file/9599673090c496dffd6feb789338325421921d43579ace8a07acb3ea3ce6eb7a/detection advancedeventsystemsd.com anthonyeditedthis.com farcrysis.net imikimi.nl js088850.com lloyd.technology manruiwangd.com moralincense.directory nawyh.space nortonfree.net prunkvoll.com puredelataiga.xyz splnilud.xyz superiorsprayfoam.net tanaadd.info # Reference: https://tria.ge/220928-nq5m1sghaj anquyebt.com # Reference: https://tria.ge/220916-sgqjysbgdr fcektsy.top iyiqian.com uefhkice.xyz xxhufdc.top # Reference: https://twitter.com/pollo290987/status/1576940825585414144 mmakwakingjajasalmghandnaiojamixicolqadaraz.s3.sa-east-1.amazonaws.com # Reference: https://www.virustotal.com/gui/file/d19b7eea7766c49218f7335e263b5c8f7cbba26ac69118ff5f57de531238ce9f/detection 124767.com 3d085.com 5huae.com 6528876.com 68ceyoc0.com 79179.org amphionoy.com apkmodtex.com arcadecase.com arquitectosenzapopan.com aypakagit.com bestwomenclothing.xyz bibercik.xyz bridgerakefet.com bruceforceconsulting.com chaumontel.info cynaxa.xyz dgfunnyapparel.com diamondconsultingsxm.com francisartclub.com fuzzyvoting.online hellenwallpaper.site hogsmeade.online karismaoptikal.com katsuyadaisuko.com kgjft.com kuschelwinter.org lestoreadores.online marianaediogo2022.com martin-goebel.com mccartinconstruction.com naaririelnews.site oboybeygomlek.online payment5991350.xyz prayonfire.com salutevolutiva.com savinginflorida.com spreparadas.com supportpet.xyz thehotelnomads.com ufa1.info unitedlinguas.com village700.com yeymp.com ytaohao.com zen-shin.org zeron1autosoft.info zstwai.com # Reference: https://www.virustotal.com/gui/file/07febd49f76153c48a0a4f9803e4e62fa589413c99280f0838b73f3e0260e713/detection 2ndoss.info ace1inc.com babehou.com camwoobats.com coviders19.com ebay1111.com elclubswinger.com evargasdev.com qatib.com shareourjesus.com stanleywatches.com ttxxremote.icu wearetwo-a.com # Reference: https://twitter.com/reecdeep/status/1578299118761697280 negerbajs.info # Reference: https://www.virustotal.com/gui/file/00f848b905c8530564a150e1b824db06990f4dccd5cb65284967632e6f2b0660/detection 3sixtypano.com 915783.com alergiapediatrica.net bahrain-lottery.com blinkcommerce.tech bmstech.us desentupidorasuperhidro.com hipillrvacem.xyz isaidyes.online luontoretket.net mayorgabutler.com oort.tech orientdeliveryservices.com pirkanlattia.info slimscoop.com studiomia.store tesla-bags.com thenorthside.online tjwya.com ukuchic.com whatsonpaxos.com # Reference: https://app.any.run/tasks/c2a28d3b-0618-4d02-b82f-790b6518d656/ bbm55.com boatpile.com chemistryramasastry.com clevermarket.pro dubaidesertsafarihub.com e8a36zg.xyz fleetcsr.co.uk freerubuxnoscamlol.com grouppoprius.info jobsfv.com lips-one.top radioequipment-au.site relmusik.com testbank-textbook.com toialsat.online traccioncyl.com turkuazmaden.com # Reference: https://tria.ge/220926-nmebnabgfl/behavioral1 carflippingschool.com futurelightiq.com helpsquads.info kanallipim.com linknhacai11bet.xyz muellerit.net pimentdoc.com promociones-ec.com prunkvoll.com sagalana.info scienceonline-ca.site sindtserj.org stellarcivitasschool.com stocktecnovisioncr.com supportnummerbelgie.com # Reference: https://www.virustotal.com/gui/file/2e6b14e41b3f871355635c7427cb1531a9b61a37e137f90a590d21eab7648f2f/detection amssupermercados.com anastasiavekselis.com asda6.com centralpats.co.uk digitalsaja.com fridcentral.com halfpriceornothing.com imikimi.nl joynd.xyz kriptosit.com qrupeocajarual.com robotdienmayvt.com runthusiast.com sapancabungalovafra.xyz spekinkantaa.xyz traumaburn.com # Reference: https://twitter.com/pmmkowalczyk/status/1572532158543306758 # Reference: https://www.virustotal.com/gui/file/09e5f2f0a838ed840a20d428dd17517b8f9747a09774ecc0f2e3b6d0d9e5f7ac/detection adorantha.com banhmitayho.com errorsitsen.com fedefarmatour.online fofinhaslacos.com fromtheearth.net garzaroofing.com gogojackmin.com googleus.xyz hassankalip.com hghaofang.com htckasauli.com ideonaut.org liveasaveyshopper.com nft-mktg.com njclosingdocs.com palacewazyc.xyz partnermdg.com polevoyton.store rabokala.com sadaffstone.com tinybabyhooves.com tudodeliciareceitas.com vpnyjscloud.site vymenanemovitosti.store # Reference: https://app.any.run/tasks/77d590ec-4474-4962-915f-1a387d00b5da/ 37300.uk 8ug4as.icu 941zhe.com airbnbtransfers.com allprocleanouts.com bendcollegeadvisor.com bluebirdbuyers.com bookkeepingdeerfield.com casinorates.online classicmenstore.com diacute.com erenortopedi.com feelfeminineagain.com iaqieqq.com lunarportal.space meclishaber.xyz naruot.xyz nrnursery.com nurse-jobs-in-us-35896.com padelfaculty.com seedstockersthailand.com sipsterbyananeke.com skymagickey.com thaigeneratortg.com vixensgolfcarts.com xn--osmaniyeiek-t9ab.online # Reference: https://www.virustotal.com/gui/file/069b2c8f0b66e3e32f76b719ee0fbdef37a602ebbfcb0d36c9b51cc5e0516779/detection abakwsm.org capta-selecta.com cccoaa.com d5innovote.com enterprisetownship.org followyourbliss.xyz hunpinji.com illumihotti.com jillio.rest location-site.com monamjewelry.com nhacaiwanboviet.xyz reddassair.xyz sbarenecessities.info soill.jp splendidrelax.com tedxutsc.com tslender.com # Reference: https://tria.ge/220907-jgdqqabcg2/behavioral2 6vrueh.xyz atama.engineering centralpats.co.uk christalindberg.com minneapolisuniversity.com oplandtravels.com paym40.online unitedhollywoodtv.com # Reference: https://twitter.com/reecdeep/status/1582700811163160577 # Reference: https://app.any.run/tasks/fcb30d67-81de-47db-a70c-119ea74f8813/ artglass.shop carymel.xyz f1-ticket.com familykitchen.ch justremortgage.com kuvips77.click livinghopedoula.com mad-cyborgs.com patricklanding.com paulmontecalvo.com phootka.ru ranchomeg.com seatandfeel.com theron-resource-group.com westinotion.tech xn--brger-geld-9db.online # Reference: https://www.virustotal.com/gui/file/0ce34548a6c082e497ae568cec71b6425526e626c7211ba3d82e5c0c3c4def17/detection almihdar.com arzeshjoo.online bet365star.online c-ver-huawei.net cartieronline.club charlyanalytics.com chelanweddingvideographer.com circularsmart.city correoversoi.quest diet-delivered.com eastportapts.com fernandocarretero.com fourjmedia.com gabrieliglesiasorlando.com globalparavarfoundation.com hbwstg.com healthylifefit.com hkljq.com hoodratsforum.com intocaveis.bet khpet.xyz lvhomeinspectors.com lvlhomesolutions.com margondo.com namesaketransport.com networkporkwd.xyz onlinedelivery.biz persiantrips.travel rabenteec.com rebles45.com santiago-services.com scientistinbusiness.com sebasfernandezart.com sha1401100.com shojicorpadvisory.com takipdiyari.com tonaprawdeniesamowite.xyz tylesri.xyz unisifik.com web-devph.net wellspringwriter.com xn--kws549fp3p.com yakinototamir.com yanposta.com zooplus.info # Reference: https://www.virustotal.com/gui/file/3b5f6e720bd764199412694821748c78cc1197f33470921f173b745478e07523/detection sorbo-balance.xyz voques-tfr.xyz # Reference: https://www.virustotal.com/gui/file/cbf93093cf6fb13bbf0f47f896f5527e0de585923dfbc86f9a4a15e961183b6d/detection alvis.one carmana.store floridaindianrivergeoves.com growupmarketingservices.com gwnv.link infoepic.info jurgenremmerie.com lesyeuxdanslespoches.com magnoliabymr.com norbercik.online nuvidamedspa.com ogurecsbatvoi-7.online optitude.finance pingacx757.com suratdimond.com taiguszab.online # Reference: https://twitter.com/reecdeep/status/1584499004951302144 # Reference: https://app.any.run/tasks/da3eded9-e734-4d0a-ab91-9cf504e38f54/ 46iot.com ceraqr.com g5i9a0.cyou greekite.online kaibi20.work supremereiki.com # Reference: https://app.any.run/tasks/58b9cfe7-5322-4795-877c-04ba8dbb7435/ 16ardagh.com 3444zz.com coffeepayment.com innovativedbs.online masset.paris minkun.online nutrizionista.app qdmzx.com odr3wo.com picklewall.net scrumcopilot.com sequiratione.click shopswayze.com simplnergy.com soldadelivery.com # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-9-to-september-16/ (# Win.Dropper.LokiBot-9969312-0) 6298vip15.com 825766.com 998899.lc aceyourexams.org agenlexispkr.xyz awesomegih.net ct666666.com eminefendipsikoloji.xyz european-resilience.org famallcameroon.com goinuffies.com grupoprius.com gurilab.com jeuxjetx.fr kevinandboots.com mjmedia.online nineodesign.com randrconstruction.site solutionsdr.website strcktunkea.xyz tbwtaobao.org wettenunseam.xyz # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.NetWire-9970213-0) alpenfieber-events.com banchers.com beachloungespa.com bobijnvidit.xyz cacconsults.com drivemytrains.xyz fdupcoffee.com fitnesshubus.com homecrowds.net imbtucan.site intelsearchtech.com kettlekingz.co.uk kigif-indonesia.com leeanacosta.com meditgaming.store momotou.xyz northpierangling.info olympushotel.xyz searchnewsmax.com supera-digital.com thespecialtstore.com tricon.info wearestallions.com xn--agroisleos-09a.com # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.Formbook-9970817-0) fftblogs.com icishopping.com junaidsubhani.tech lanyuelou.com locallywhitstable.co.uk mail.boyyem.com.tr mooreandsonsak.net # Reference: https://blog.talosintelligence.com/threat-roundup-1021-1028-2/ (# Win.Dropper.Nanocore-9975783-0) halloweenoncentral2.com klodifiks.space msk-kadril.store thicmewtwopics.com threadandcotton.com xinhucj.com # Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.Nanocore-9976516-0) 3egcfl.cyou 8065yp.com azalpay.site bbobbo.one blast4me.com cacconsults.com co-gpco.com confurn.net duenorthrm.com duetpbr.com fabricsandfashion.com fbo.app fistfulofeuros.org ndppoc.info nyhedsbrev671.shop onlyonesolutions.com stjohnzone6.com thespecialtstore.com tigermedlagroup.com www1111cpw.com xn--agroisleos-09a.com # Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.NetWire-9976531-0) agencybuilderforum.com alfrednelson.com blkdenim.com blossomenterpriseuganda.com communityinsuranceut.com dotalogy.com elegancescent.com movementspecialistslv.com onurtel.com paintedinafrica.com qqbokep.com rainbowbanks.com rubenvdsande.com socia1security.net thegolfclubatcirclec.com tqiawy.xyz # Reference: https://www.virustotal.com/gui/file/673883ceb7adf30ad980e5e51b7515414becba3b5f6b96068dc4d35b092799fe/detection demixafrica.com fiscalfido.online hnsmhbkj.com ivcckx.hair lenderark.com m3in76.cyou sathunter.site snzbx.com # Reference: https://www.virustotal.com/gui/file/081bf8a1ffc276c44fdd2ee9ea841848324df601dfb8ea53ca7f614f5e39bb21/detection 209648.com 2594.faith 446owkhvtuad.xyz 8410506.com asatimes.com backiptv.com brewsolutions.net cowsupportcover.xyz desertcleanpro.com hived.xyz hopeisarainbow.xyz intellectuel-balance.xyz jackiekate.xyz jernieswritingcorner.com kingdomwarrior.xyz neorevolution.ltd onlyhamster.com proofmoonbird.xyz savage-street-shirts-843.com scoutsilverlake.com seekerblogs.com shlycl.com tiltedseven.com usnorthsideparts.com # Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection cafes-lyovel.com com-421.info cwtproject.com defireti.com delcostudiola.com dentalimplantspracticesbcan.com dometodd.com dothis.website genesisgomkch.xyz hantieluliao.com hokashoesingapore.com hotmanplayid.net iphone13.space ironweedaudio.com knapsack.graphics marina4bunbury.com maryhillsubdivision.com mashaalfashion.com metagforce.club nropes.com onestory-book.com rarityswap.com remembergary.com shoeloans.com sydneycarsales.net szqhkl.com thecalminglounge.com unionplusgiveaway.com vdcrnw.com viaggidafare.com vintagekatherine.biz # Reference: https://www.virustotal.com/gui/file/7e4c62f05f269c89ddba4bfbde605803406b779429bf9a1cd08ae57967edd2fa/detection 000006138.com 5092377.com a-snag-tokei-kaitori.com agcompanion.com aifconference.com ardtalscase.com bigrockhuntingpreserve.com campgreencove.com constructiongst.com designerinfotech.com efeturozemniyet.com electricsemiloans.com foremostbookkeeping.com ganitvigyan.com happinesssangha.com hcr.store hongyanwulei.com ihrorg.com kosodate-tiger.com l8e9gr.xyz loudbodies.info mariafonsecafreitas.com mayascleanservices.com micahlinacero.com microw0rker.com murata.life mysitetutorial.com norsgaard.net nusires.com penelope.team pertlines.com prmainey.com qxu0l1pgl9jm1.xyz renovacg.com skinbid.pro sodapins.com sofanemphuyen.com solfuls.com sophrologuemontevrain77.com syzbf32.xyz the-roel.com tur-advocates.com tuvistaing.com verdure720.com vistadocs.com vvv223.com wwwfreemovies2021.com yanpoake.com zamanscorner.com zaqv40.xyz # Reference: https://www.virustotal.com/gui/file/c17e80bdd62f9993e1894ffb7d0a47bacf1d720667935ed8468dcb87addaa76f/detection 845562.space 882668.xyz airshiftvr.com bzness.store clubfreak.net dmsbrand.com estherakademie.com excelbar.com fmnr.xyz gohamaru.com havexub.online houseofgibraltar.com likesalere.site little-verons.com livecams.quest majahfit.com marcanesas.com masterpieceofgongyi.top metavrse.events millennialpayments.com mint-saintxdmon.com my-loyola.com nnnn.company sharedknowledgehub.com shells-logistics.com shop-clock.online takebackourstreets.info thefoxsmith.com thekable.store unitedgroundworks.com ymgmt.xyz # Reference: https://twitter.com/reecdeep/status/1592113890241937408 # Reference: https://app.any.run/tasks/3ffb4e53-6523-4123-a968-cbded3882bc7/ 10555ff.com 52012f.com 882201.com 9j4.net aliatransandlogistics.com bidolupartner.xyz creatednow.com cremas.store dealsgolf.com drenkol.xyz esmemariang.com evanwoosley-reed.com ghv0656.com hrbyky.com kghbjx.xyz londonpapershop.com medbump.online omegabotics.com pho-enix.online scbjams.com shxmnykj.com valuemetamorphosis.com wlchsl.com # Reference: https://www.virustotal.com/gui/file/2ad6796c2512bf0ae919a777b01a7f160013b9f70023cdc02b362aed25b904ab/detection 1an2kdo.com agropecuaria-hsr.com besukhateens.com burpbrothers.com cocoone.club crossexpresslogistics.com davidmcquinn.net disctheart.com elkelaadessraghnainvest.com fibverse.com houm.design iskconmahipalpur.com jakubholesinsky.com joia-data.com kelxim.xyz mentorsforladies.com moonsandviewsbyemd.com nobletheories.com olga-link.com ourdailystories.com thesis-boosters.com wskshopping.site # Reference: https://www.virustotal.com/gui/file/009a9784dc899205aa987fdefee13129d223879d65903d82c2f3a6a4f144e0a8/detection 3533callegavanzo.com 3d-mod.com ahmedo.ch americahaseverything.com braintrainingcoaching.com cagadmin.com ccgszj.com houmenmarket.com iamme-label.com multimediapages.com primeworkspace.net puncvite.live saintmarychurchec.org senhongtea.online slebuild.com verywellcasino10.com # Reference: https://www.virustotal.com/gui/file/02099eff8c8367527b831448f397741f49f34ee22d581b7a7776755fe3479e94/detection 2326285.com aireandco.com betaber.store bronhr.com casinox-ki.xyz essentiaschool.com getceylon.com goldenagemininggroup.com gsolartech.com lawsonvineyards.com lzty188.com maccaverns.com mrbinbags.com newstz.online primacosta.com scienf.com simaanchalkhabar.press stampedzhane.com thepediatricianskitchen.com thundervetclinic.com tistinstitute.com vizeciyim.com www2823s.net # Reference: https://www.virustotal.com/gui/file/1ae4b15d714b9a62bb44d45e610cadacb50115b686c993ed650ff703452e8519/detection 7ccoffee.com 8499162.xyz bdcdamper.com cams.games cicelyvanstraten.com cosmoinfinity.com dakaliuxue.com gardenofeden.vip gustaupdd.com habusty.site interfacearea.com interschoolcarnival.com jellofnation.net meta-urbanvr.com nortonlily.com pariomemlak.com peastar.net stable-algorithm.com tomatolemonapple.fun unselfconsciousnes45s.sbs wzkazzis.site wzmylabel.com zippycoupon.com # Reference: https://www.virustotal.com/gui/file/002c72c9f9823d128c815a8f752a8fbcbd7f52bc94440988e8b70ca0491e171c/detection 6py.xyz barigoodlivingvsa.com bluedotair.com bxtrace.online cvelocity.com entourageaid.com forkmylifellc.com goldenknights.systems groundbreakcoalition.net guttercatmint.xyz iidoag.xyz ionclicks.com lemonshopee.com mariolagardner.com mbossefootballclubacademy.net mesinjilid-lempanas.com metavsarena.com rentsalot.com sungardcapital.com # Reference: https://twitter.com/reecdeep/status/1601194626089906177 # Reference: https://app.any.run/tasks/1aab9aa2-e07c-40a4-b7a6-46212efec881/ 700544.com amspustaka.com bookmygennie.com cscvlehelp.com dailyheraldresearch.com davidemarone.com frwqc.com gmrsnodes.com lee-perez.com new-thinking.digital newpublictransit.com oonrreward.xyz porggiret.site publickit.website spirituallyzen.com tobewell.store tommy57.shop ybkos.link # Reference: https://www.virustotal.com/gui/file/7857362e481c6630f18d052274a1ddd18ea1ed0d910f220ed50dca32f5960964/detection 41829.site abbyfaith.com belleriacortland.com blocksholding.net casa-gomez.com dorismart.online equus-creative.com farawayflessner.com faylike.com fisharinvastmnts.com kaity.site karengillen.com kungquer.com meda-services.com midtowndistrictsantafe.info nakamu.online nathansproperty.com nft-quantum.online niveaguide.com nstsuccess.com nthanisolutions.com oddsonor.com poweranalytics.site powerhandsbypowerfit.com riccardoolivier.com rmchomeloan.center sahityanepal.com scentsibleliving.com sensing.rest shotblastwearingparts.com streettreatsicecreamtruck.com suthworld.com the-bitindexprime.info tyfinck.com virginiavoyager.com xeome.co xn--72c9at8ec1l.com xn--v9s.club # Reference: https://www.virustotal.com/gui/ip-address/67.223.117.3/relations achivego.site ariseplay.store domight.live dorismart.online martfind.online netinseg.website notbokin.online paymallmart.info ringdrive.website wordybag.online # Reference: https://www.virustotal.com/gui/file/0da037449078eb28dffcd95733769019ee21831ac82b12d845fb051be22b33ec/detection 123387lx.com 1960lawn.com 8181yd.com aflambooks.com alexito.space allinfobd24.com aquaflor.online augustacrim.com bancopec.com batrainingstudio.com bestplant.xyz comptechs2000.com conationcrossing.com douvip303.com expressingunderst.store greatbayhme.com gskpop.com gunwicam.com hirevirtualexperts.com kilthiredirect.com kokofleks.store lesbianparadise.com livingessencewater.com longlakehomesales.com margaritavillemelbourne.com masterstouchautomotive.com mengabarkan.online mhw44.xyz mickeysmotors.com minifootball-promogive.com mischianti.com newtech25.com oandazx86.xyz originophthalmics.com podiatrybroker.com prolificgraph.com putnamob.com qiyepin.com referto-online.com rfzjsb.com tabvern.com undangannikahku.xyz unlimitedlyfestylez.com woningkeuren.com xn--arbetslivsaktren-ywb.com xn--unww24c.xn--czru2d xolegal.com # Reference: https://twitter.com/JAMESWT_MHT/status/1603068902367719424 # Reference: https://www.virustotal.com/gui/file/f263a1f2233076c952f5dd01e57b8b3942f24697745b1c19f52e2c97837f9f10/detection columbuscasino1.com fencemac.com loudesios.com microwebtfm.online nsowarning.site takedetails.com # Reference: https://www.virustotal.com/gui/file/18f31ac2d71ac144e713f11c2fdd14391962af4b0e77192d3e790a36aeae125d/detection 1404-123eglinton.com aimir66.com akashicrypto.com artisticintercessor.com bestnetworkcabling.com bow-navi.com coalmanses.com elections-development.net hollistergoodvibras.com libertadmadrid.com mmamixedmindsart.com olgalirabusiness.com radhakrishnavrindavan.com sososo168.com unfinibeats.com ushopnd.com watchonlineplay.xyz /xx_cloudprotect/winlogon.exe /xx_cloudprotect/ # Reference: https://www.virustotal.com/gui/file/02bdbd4777fc54081f239ce8936bb56d899ec58fe61437875f09227a55a74920/detection apartamentoslaencantada.com bingser.space blast4me.com co-gpco.com ddstennessee.com digigold.info dronebazar.com helfeb.online homedecorsuppliers.com magicgrowthproducts.com miamibeachwateradventures.com minimaddie.com qifengsuo.com rafiqsiregar.com ragnallhess.com restorecodes.website sunnyislesgardens.com tigermedlagroup.com tunneldutransit.com veirdmusic.com xixi-s-inc.club # Reference: https://www.virustotal.com/gui/file/e66a017fdb8d050f8497d367ce1c3cb02a5d6c6bcbf7f35ce11daf8969b8495d/detection afiliadosilva.com alrayangroups.com bigbet2298.com brkhot.top bsnguyenhuunam.com createdbybonk.com edison-press.com fiitnutr.com georgemanuel.com greendiamond.pw hoshikoblog1.com jtbfunnels.xyz killeendirectconnection.com kitsusimplex.com liaquatsibtian.com metalzj.quest millionaireproducers.academy paehdfdtrujdfhs.xyz pieko.net qatarstyleart.com ryanmurazik.icu straforkutu.online sz-videocom.com thankful.love vanillanoir.com xoarin.online yukselfirca.com # Misc. 111116138.com 222226138.com 444446138.com 555556138.com 613800000.com 613833333.com 613855555.com 613866666.com 613877777.com 6298vip17.com 6298vip18.com 666666138.com 777776138.com 8060yp.com 8062yp.com bincryr.space eeeee6138.com efeturonline.com efeturonline.net efeturozemniyet.net electricsemiloan.com fffff6138.com healthcarereport24.com hhhhh6138.com jetxslot.fr jokins-gos.space lislemusique.com lllll6138.com primarycontract.com rfdnewsnet.com wshvgazette.com wzfmnewsnet.com xn--efeturzemniyet-0pb.net xn--zemniyet-m4a.com yyyyy6138.com zoey.team # Reference: https://twitter.com/MalwarePotato/status/1612764382429351939 # Reference: https://www.virustotal.com/gui/file/065bfe7258ac4eb13d48c8db0da681c32448bbcb96a0e8a80a692a61ba25c18c/detection 19t221013d.tokyo 85188jx.com afterdarksocial.club ap2tsdaily.com automotiveparts-store.com brennancorps.info chicashentai.com courdak.info eufidelizo.com foxwhistle.com lojacoliseu.com lopezmodeling.com lyonfinancialusa.com ourstayaway.com patrickguarte.com seufi.com trueseller.one youandmegb136.shop # Reference: https://twitter.com/reecdeep/status/1613871217831809024 # Reference: https://app.any.run/tasks/8cbc1237-c999-4061-9a4c-f1768e7b3173/ 13615.vip 667fm.com adenium1000rose.store apisat2023.com bdtongbangkj.com biogenaacademy.com couteauxcreation.com cryptoinvestltd.online deaholid.online floss.software glb-mobility.com hediye-paketi.online homeresearch.ch k2aav.info loaddown.vip minilife.shop mynichemarket.co.uk naturalsalttheropy.co.uk newhard.ru uevj.win # Reference: https://www.virustotal.com/gui/file/00823e9ec8d00674fdd3d60d55a953536574435d1e0bb4a0333aff86dd6559ec/detection 3laaaldin.com 500-fortune.com arabiansanglers.com baileysepictravel.com buldrinox.com bureaubois.com carcanva.com congtyvyyen.com cuttacktop10.com dudetechy.website epowersportstechexpo.com equipoiseenergy.com etheriar.biz evc24.com felisblack.com goodmorningpaname.com hsshengri.com jieruicloud.com kedairatu.com kidsdrawingstolife.com marekpauli.com margie-s-sensational-scents.com matryoshkatechspec.online nulumelighting.com oasispaint-uae.net paypal-caseid194.com pepeglass.com slobird.com srmxcm.com truebelievers.info urbandbracelets.store ville-fogalmam.com vinhomeshungyentheempire.com voltchain.net web-solutiontnpasumo5.xyz wrestlingfancam.com # Reference: https://twitter.com/reecdeep/status/1615293924020461574 # Reference: https://app.any.run/tasks/128b9516-2c70-4a99-bf1f-6881103593fd/ 1688eet.com barrdsecurity.com brandsmania.net breaksetle.online canadapostd.net clickrapidoonline.com cwhalesart.com exeterseoexpert.co.uk foody-people.uk freydachsolution.com generaldatapolicy.online growbigg.online gvdxop.xyz lendike.ru nigex.uk oregonfirearmstraining.net rrshoumi.net saltirefireworks.co.uk scapegoatbooks.com # Reference: https://www.virustotal.com/gui/file/476d035ee5f31bea9c4c7560ff1625691d15ab8ca4b164de9ef8365ea09a5859/detection 15726.tel appcast-63.com atlantispharmagroup.com bayfuid.com carpetcleaner.guide celikturklojistik.com chosen-threads.com coadept.club danielfehrle.com drgrafic.com drunkenmumbler.net electra.clinic flexyfun.com fraughtpklodt.xyz frontiervalley8.com gigaspro.com grocebag.com guchi-log.com heiwork.xyz hokislot99login.com jxfae.com kzexclusive.com leftup.xyz legendssim.com madebygenz.com modernmpm.com moleculairscent.com nm-beauty.xyz northcoastcedrick.com oldwestproperty.com omnes-reunion-annuelle2021.com prestigeinventory.com radissontickets.com rs23.club ruiheaid.com santogin.com smiling-leaf.com spidrmusic.com thedanielrichard.com thermalsystems.net theuranus.net tnfcoupon.online toglobe.net truckdrivingjobsbr.icu uliicosmeticos.com vendingandco.services vitalreliefstore.com # Reference: https://app.any.run/tasks/ede574c5-d88a-4a3e-afe8-3db6c48353c4/ 23info.site 79355.vip alcomarxism.ru captoriot.com change-flow.com detail.tips dev2up.tech eco-rasy.com existo.site gospachile.com hhkk569.cfd laranium.net puiry.online techsupportfb.co.uk ufalive.ru vistavineyard.co.uk # Reference: https://www.virustotal.com/gui/file/e22dde0bf08c6cddafbc0f6630c2ca0185fdf929ca9239783bb7c17686c23122/detection celikvet.com chengyumeta.com clinicafresa20.com everstorelithium.com hapticvibe.com imqualife.com insulicstore.com new-unhide.com nftqueen.store proveedorampsxxi.com ropponme.com wahl.technology wingsandcurries.com youduoji.com zymiterial.com # Reference: https://www.virustotal.com/gui/file/03735650255866b1c2592bcb4567cbcb2b9d23eea5430d2e7d7c6315abadb5ad/detection racevx.xyz ubique.works # Reference: https://www.virustotal.com/gui/file/6f73d6879f3f916f05780e0d90b538cf6d01b976f21620a716e268c672906827/detection http://104.168.46.125 # Reference: https://www.virustotal.com/gui/file/6b37e659593f1240578829cdbb6f5b7ce92de4ec407a0819570725514af57ff2/detection cmaii.com visawe.online # Reference: https://twitter.com/TrackerC2Bot/status/1611984695683604481 efxety.top hbgents.top rsnzhy.com # Reference: https://www.virustotal.com/gui/file/001997f3e75c1e0e3857f79186bfc2af22a043a2e3bd9b640a22b9f59dbc9149/detection dietnow1.info digisoul.tech elite-cuts.com etchapad.com experienceanewtradition.com integrityinlending.com interaktifkitap.com itstimesd.com jays1fan.com jpegpartners.com listincode.com longforge.com missedyou.club noemiklein.com picmyrun.com resell-success.com thamost.store toysandguys.com unknown-consulting.com xbdckk.com zhuoqilong1688.com # Reference: https://www.virustotal.com/gui/file/04c559bb0be01415e957d3dafa1ed6730505e35736eaea8cb03b8b7d101998bb/detection 147731.com 6976pk.com adventuresegypttours.com alina-jewels.com arhehgap.com baiersy.com beachpawsmobilegrooming.com bergenyouthorchestra.com childrenseducationonline.com cloudy-fi.com coinchecke.com cryptodouble2x3x.online cyrptomag.com daringtolivebook.club darkwadlights.com dazzleflat.com dom-directory.xyz duiqz.icu erahuge.com gordonzak.com haulseattle.com itsallcharlie.com jordysangels.com lightcorporateb.com moonlit-raptor.com natural-vanilla.online newnasri.com nightpartner96.xyz pzz123.top rozhunt.com rticproduct.online sharebay.store shirleywong123.com supremepeak.net sva-pro.com t-shirt-cat.com thewealthwisdom.com tikibeachgraphics.com tokenomist.online topotostar.com tuoitrevietnam.club urgcity.com # Reference: https://www.virustotal.com/gui/file/02214be7a1ec20e21ab4209575618bb2a5090f15b53c4aaaac9490634d6aa48b/detection znsjis.top # Reference: https://app.any.run/tasks/0b6ee845-1b5a-4d0a-af37-c3a9d9045a19/ 4tx.ru 667fm.com apsocreto.online bookinbournemouth.co.uk byfuture.biz expertponto.com flippingfrenzy.com ituyiut.wang jourmoe.com loaddown.vip poweroffer.net seeword.site solutionsquik.net vowlashes.co.uk # Reference: https://twitter.com/wwp96/status/1627685160937463808 # Reference: https://app.any.run/tasks/a974d025-28f5-441c-bf04-d05a3317c051/ cardano-dogs.com # Reference: https://app.any.run/tasks/f18444ea-5f7c-4e1b-b27c-adba0ef1f09d/ campisi.website cmproutdoors.com dcorearts.com de-nagel.com fluxgreenn.space kenymart.online kokororo.tech proveedoresbeauty.com tonica.life # Reference: https://www.virustotal.com/gui/file/aefe5754459fbae160dc381c09ec8d3ad5484f527a1ea9accdb01b2d8f4c45e7/detection classified.network fiifuififnjfs.xyz grocerylord.com kostta.com yibobet3546.com # Reference: https://twitter.com/reecdeep/status/1625074510037762049 00360vip.com 24worldmarket.com 49138.net alende.cloud algient.com beegain.live beijingwudao.sbs bluesky67.com capersungai.shop cobolmaui.com cordesa.art dekogenc.xyz ellie-mae.click # Reference: https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ # Reference: https://otx.alienvault.com/pulse/63dbf90f5bcd0f8d91bec067 365heji.com allspaceinfo.com baldur-power.com carlosaranguiz.dev cistonewhobeliev.xyz femfirst.co.uk graciesvoice.info h3lpr3.store headzees.com heji88.hj-88.com huifeng-tech.com iidethakur.xyz in-snoqualmievalley.com kajainterior.com ohotechnologies.com popimart.xyz togsfortoads.com # Reference: https://www.virustotal.com/gui/file/8fb593875f0bf9a1ecf72114935267caa80e7f2b2a268c3570927e4138070dd0/detection 3658622bet.com allspaceinfo.com themssterofssuepnse.rest # Reference: https://www.virustotal.com/gui/file/04db053ddaf38c4d040e12c2ffdd19a98dbeb9cafb43e4ef397e95da97ba3036/detection achyutlifesciences.com amigasconesencia.com armmapp.com cantomarbait.com craftstockco.com edfnu.com elkerfly.com facetofacewith.com finlayo.com fundafes.com ganleychevybuyscars.com globalmarineserv.com goodoffice.online haerotechs.com hautlescoeurscollection.com high-clicks3.com hjku.xyz integritynotarial.com janesgalant.quest jcswkj.net medicaltrust-sd.com meggisiegert.com midatlanticbath.com minutemannetwork.net murrayforcongress.com novatel-network.com passivemen.com publicyazilim.com rukygua.xyz surfsolutions.info thevishantiverse.art tigerstarmatka.com unlimitedrehab.com worldwidecorumuk.com xc6811.com xn--schwche-8wa.com # Reference: https://tria.ge/230324-vy135aga88/behavioral2 # Reference: https://www.virustotal.com/gui/file/d2fec4950c622ad3d82ebca0d30e9c1ed8db03769aea9fe764d8efb16e335bd5/detection beavent.com heroclassicrally.co.uk redystedy.com seolutions.xyz wb293.com # Reference: https://www.zscaler.com/blogs/security-research/technical-analysis-xloaders-code-obfuscation-version-43 # Reference: https://otx.alienvault.com/pulse/642d3ab1a3264fd75e77f2d7 060jinbo.com 10086253.vip 117ygh9x.com 365-8119.com 991-touring.info abttt.win adacaranya.com allforfun.online allison2patrick.online applicationsdown.store avdeeva.info betfury-platform.net bilpoinsaat.net bocc.live botanica-online.ru canlicerrahi.xyz ceu84g.com chiyiqian.net christmatoy.com cinemamaxz.com coffeelectro.online dedmorozvidos.store difozaa.life dugebitv4.xyz eatgre.wiki farmanow.xyz g2fm.co.uk ginaandhipa.com guzmanmodels.com habka.online hal-skincare.com hiufouwnwk.shop hjiqa.com identowel.com inigrey.com jimtrosper.com mgconsultantlogistics.com myif471ok9ipidk2kkl.xyz najdlegend1.com nnhuigou.com realtxt.co.uk themas5erofssuepnse.cyou wanknumbers.co.uk wsavxrg.shop zzaen.com # Reference: https://www.virustotal.com/gui/file/f71defb8a1a7d2b0a39c1f0be1066c817190950d43120c0377fa13a2b0c126c0/detection # Reference: https://www.virustotal.com/gui/file/c98602331ae9aeafc78d2d0c4209632aad294c8cb214073c9fb016ac6bf8806d/detection 4c2r7z.cyou 8ai.ooo 95z.top alamsolutions.com aodagency.com bazaznanii.online blobsms.com com-walletconnect.com courtindones.com crystalclosetco.com datasciencewiki.net digitaltrophycases.com dollyrosedelice.com donatirmobilya.com entityget.com expressfreight.online gamma-sa.net gastronomi-salatiga.com goehgy.store gulluri.online hardlock.click hermeticat.com iberianspecials.com kbtcoin.store kitchen-in-london.xyz kkqqzb.xyz lolisex77.top manessi.xyz moneyflowplant.com nekosapiens.com nrmaridodealuguel.link philanthropydmv.com primemart.life ptv825.com registemob.live royalcrestresidents.coop secure2connect.com seriums.com themasterfixer.com tqrt.com txtentertainmenack.org.uk unidosservicos.com wlkwinn.net xn--mobilyahavzas-gbc.com zedalphaquantex.com # Reference: https://www.virustotal.com/gui/file/11f78a6f1d2cc4587778143bdc8b011ca509978c26ba60bd41fe74bd6773444d/detection http://192.3.215.60 011965.com 1wwuwa.top 2348x.com alphametatek.online b708.com betterbeeclean.com braeunungsoel.ch coo1star.com cupandsaucybooks.com deathbeforedeceit.com delightkgrillw.top echadholisticbar.com freezeclosettoilet.com gemgamut.com goglucofort.com gt.sale hkshshoptw.shop jacksontcpassettlement.com kellnovaglobalfood.info kui693.com lightandstory.info mtevz.online sweetcariadgifts.co.uk # Reference: https://tria.ge/230429-a474eaha87 1wwoio.top 4152.uk 5777757777.com 622058.com 90adbazi.xyz acasascbcenter.com activ8brace.com aimappq.info aliciartiz.click alineacustomhomes.com amarresamorososperupactado.com ana-verie.com anpaijia.website anzpapimi.com appskul.com armormediia.com asos-boost.com asp150.com aus-anzhelp.com awoflo.club bacteriophage.asia bankoftama.com barbershoploft.ru brequx.online bwoywonderkids.com car-leasing-54007.com carspace.club ccpandashare.com celeratuslegal.com choac-2023.info chrisandfrances.com clintprow.com dart-z.com dististicks.com diy-alice.co.uk downhomecoastal.com elboshari-tradeinvestment.info fatimiyyaalawuyyatv.africa gewirgq1uw.xyz ghrevenues.com giuseppedematolasax.com goldenfestivals.com grainespotager.com grandcoeur2007.com grunge.mom guvenceoyunevi.com healthyliiving.com hewittstoneoutsourcing.com ipsmagen.com jessicamorimando.com jgaytfiz3.xyz jualan.email kfoto.online kings-health.com kjds11171.top lazersec.com leahdig.com liuyao168.com livingsouthshore.com modburyremembers.org.uk mookaitejasper.co.uk norske-jenta.ru themetropolispta.africa tylersphotovideo.com uniteddividinghands.net # Reference: https://gist.github.com/silence-is-best/d168f4c94f59e444a1081751e9dc79ca 8rr.xyz bebas88official.click bocahkota.xyz bookcom34567875373733744444.top chrestheryulelog.com gestionamostualquiler.org jamesdevereux.com rmaex.xyz toulouse.gold # Reference: https://twitter.com/tosscoinwitcher/status/1653477554249166848 # Reference: https://tria.ge/230503-ayr51adb44/behavioral1 161453.com 420ewaterside1201.info 7292dd.top 82651nud.skin accounting.capetown allloycorepro.com bidnpost.com bokymii5.site cashcraze.site conradi.fun extremepareidolia.com farklisanatkoyu.com grey-matter.life kj7004.com lgys174.top localvoicesproject.com nejdoulmail.xyz opioidrehabhighland.com proplo-ls.com pzlktwqqn.top ridilisusera.xyz saidamatrix.com shopluckyluxury.com sk676.com sociitopin.xyz su74.vip tenutaquarrata.com tqxpongee.xyz tungaformst.xyz vgr511.icu vinoforo.com vntropicalfruits.com vouchshow.xyz wagar.work wigletsmich.xyz wplescbocsai.xyz xpox.xyz y1119.vip yenisigortaaammm.net zaketn.online # Reference: https://twitter.com/reecdeep/status/1658408922410110977 globalaspect.life # Reference: https://www.virustotal.com/gui/file/c149b95c4ff79668ca124cb218bf2f2b5fc8bf90372848370450ca94644d876d/detection baotrang-jewelry.com date-store.info dinohoki85.online # Reference: https://www.virustotal.com/gui/file/2750db58bd94b97aa33fb563461c528c54eb3f08f3315b0648291842576e6857/detection fokusdongs89.click innerpeasnutrition.com ioddinemax.info jsmaiyou.com minsk-adstr.pro pzr9.com ready-sim.com subicpearlresorthotel.com touslesjeudis-test2.ovh unrushlagos.life wtwbenefitsapp.com # Reference: https://www.virustotal.com/gui/file/077c6e0a6a5df926dd7673d81f466faf5a11b8e04d3a5ecddf9d7951107e0026/detection altered-view.com arolo.site atstaxpro.com barefootrestaurantil.com calvingross.com cartvey.com clotheslist.com creatifroom.com daniil39.ru grandmakadescustomquilts.com hncovnyyra.best ilovethecraze.com ingeborgbleonard.icu m3mparagongurgaon.site mszsora.com nerdppc.com omdestinationweddings.com regularizeimoveispr.com resurrectedroastingco.com robertduffywoodturnings.com sepuluhgesit.shop silvermacpro.com somwear.xyz truevoicetea.com weareroamingexpert.com worsall.com zweei.com # Reference: https://www.virustotal.com/gui/file/8c305a8516089a9e811fbc9cf560b0e36a2494debe59c5677376638c7155a452/detection http://172.93.161.118 # Reference: https://twitter.com/Kostastsale/status/1688806753520308229 02omn1.cfd 595qdd.top alannamershon.lol amazing-s.com artkit.top czjhsklu.click dconnekt.com elodie-mace.com gt6yzx.cfd handdrawnpepe.com help-hair.info l0rh0q.cfd lei-apels.com lifeiextension.com mydesigneredge.com myvicesweats.com nomadcreative.biz nsu7aik18.xyz refreshbee.com ryjnfd.sbs superxwin.app triplemshipssupplies.com ui-un.com vevo-verify.com vusujhyf.click weinbrenner-stiftung.org # Reference: https://twitter.com/reecdeep/status/1689271098926325765 # Reference: https://app.any.run/tasks/0519a6a8-66f3-4a6f-b80f-659468d04566/ 1ijym8.cfd alansoly.com badbiche.shop donnavariedades.com dorama-feelings.com empowermedeco.com gampro.xyz headingforchange.net kepaoqin.top lloydsgroupco.com pianosugar.com supernaturalsuperstar.com therealmastercoach.com top-xixi444.top twinlogo.xyz zuanlansi.top # Reference: https://asec.ahnlab.com/ko/40556/ (Korean) aseopli.online asyimpo.xyz dwpato.xyz flayos.xyz gastries.info lastsummercog.com myvea.online shutro.online ziewip.xyz # Reference: https://app.any.run/tasks/296e8414-8ac2-4120-a9b4-546157ea14d7/ 12allchat.xyz 1ygds.com 8956kjw1.com bagisigorta.com buxmam.vip dhmkmam88.shop ginbaochip.com hiphabits.life iweb-sa.com lancele.com lazarus.team lifeworkfunnel.com pacomarquez.space rcarca.com recrutoalliance.com sanequeja.xyz shrinedao.org thewildmates.com trustv-team.com xn--939ay02cwla267bba.com # Reference: https://www.virustotal.com/gui/file/020a524c60cee4ed6ca0aa54a118a3b8db045ea43049f9851c3d809e07437bc0/detection 914762.com aurestia.com beatavergine.com blackhawkstickets.com e-fite.com eunicebarber.com fumart.info jshjyz.com mission2run.com moqainc.com pitmansupply.com texanbrisket.click u1uc86.shop # Reference: https://www.virustotal.com/gui/file/4246ac35e29b03cf4057457231abf222b88bf64cd65b59d7dc79d35b1953372b/detection alemania-paredes.com aryor.info danielcavalari.com denzaimivsem.buzz eewapay.com elperegrinocabo.com formulavsupplements.com gaoxiba150.com gkoders.com gstringtheory.com gsvaedpzugtdn.com hftroi.xyz holdmytracker.com iwantbundles.com kalendeargpt44.com kawitrack.com khoyr.com lodjireal.online lojinhaevelyn.com mic-reform.info naiol.com nlast.cyou nodesofty.com orlynyml.click proloop.work rainydayroofs.com realmpabq.com rfc234.top salesfactory.pro ssssne.com supportive-solutions.com thechaay.com thundershorts.com ultraflooringmore.com # Reference: https://www.virustotal.com/gui/file/0e32221577915aa8a0871d2e2f01cc558450d69a93b8276b46cd70a8fcf4d84a/detection big7041.com daagureport.com deseriohen.com dharanatural.com hfdkgm.com kozmikkix.com lepacificateur.com portonomics.com realmofencounters.com rigel-connect.com rksyss.com sandyssugarshack.com sfsadff203.com sgnanda.com tattooremovalwinnipeg.com ton1peru.com uvetcfm.com walk-over.com wisergiz.com wortalnet.com wyyxeeat0012.com yousbusports.com # Reference: https://isc.sans.edu/diary/rss/29958 # Reference: https://otx.alienvault.com/pulse/64907a0fed2b36310998d7ca 4thmainland.com abhisheksharma.life astudyinstories.com babyshoespromo.com bjhxtp.com chaintrt.com cleanskinshop.com cloudzon.world ctrivertravel.net dl-jmjg.com driversofficial.com eliteenduranceuk.com eperq.buzz firstonsiterestoration.com gameozo.com ganosignsandprinting.com hew9.xyz langlaufdavos.com livetcvety.ru martynasobczak.com nolinkoti.biz openseamonkeys.com porgy.online rtlsdepmpyv7.com sagewoodworkinginc.com simplepay.kitchen strattmanwedding.com thecharmingchimp.com theclockpeddler.com thewoodeniphonecase.com unbecomingsail.xyz valleyofbreath.com website-dolap.com yolcu360online.autos youhousedesign.com ytdxjt.com # Reference: https://www.virustotal.com/gui/file/042a79fca496efba98589c7115c620c116af2ef1e1308a9ab91f21026a5ccd43/detection 77121144.email aboutwean.site bawdydesignz.com dbszdjh.fun drops-of-awesome.com financialfashionista.com futuretechpros.space futuretechsolutions.site garderlafoi.com grav2.com illuminatonightlyrental.com mgn4.com moobileproctor.com mycravingscafe.com myhc360.com nuaar.com pinax.info recursiveinscription.com safeborderpetition.com sarjanateknik.com speakerbluetooth.com squallo.group stockprob.com tanglewoodbybci.com terapiavisualaeronautica.com u2sr03.shop weighing.xyz xvngitnsfbtjregw.xyz # Reference: https://www.virustotal.com/gui/file/553d2a3bc08b3ead2c4f13d0e9af86365ac4596697a60963685367d153ba0efd/detection 85343.top boatparty.online cardiopathy.online cz-handbags.life easylearn.click epistratagem.com hglx.bar inailshickorycreek.com jtfaqyxo.work ksecurityblog.online ky7437.com mejor-proteccion-es.click paintingsantaclarita.com pralniacms.online revyoume.com staemcommmunlty.online tcykv.site tintash-sg.net tophatlimitless.buzz trinidadrealestate.net zonazerogamescomar.link # Reference: https://isc.sans.edu/diary/rss/29978 # Reference: https://otx.alienvault.com/pulse/64a2e1b31615d5a3975beaf5 7523615.com atlas-management.tech espiaocelular.foundation harrisonfanilyvets.co.uk realt39.ru # Reference: https://www.virustotal.com/gui/file/4317a2e7e3a7570581a38000cc4f37c8cb9a53e522bfbd4bde00ea9d198db6b0/detection alcmcyu.com claudiaduverglas.com displayfridges.fun flowersinspace.tech fuhouse.link funwarsztat.com johnnystintshop.com kwamitikki.com oliwas.xyz omclaval.com ourrajasthan.com sarthaksrishticreation.com sofbks.top summitstracecolumbus.com sx15k.com uadmxqby.click zhperviepixie.com # Reference: https://www.virustotal.com/gui/file/0ece8fcce07dcda17dbb5cbf23b09f6bee6edc228a83f8721242eeceb3ec4550/detection azgu8c6s9.xyz # Reference: https://www.sentinelone.com/blog/xloaders-latest-trick-new-macos-variant-disguised-as-signed-officenote-app/ activ-ketodietakjsy620.cloud akrsnamchi.com brioche-amsterdam.com corkagenexus.com growind.info hatch.computer kiavisa.com lushespets.com mommachic.com nationalrecoveryllc.com pinksugarpopmontana.com qhsbobfv.top qq9122.com raveready.shop spv88.online switchmerge.com # Reference: https://isc.sans.edu/diary/rss/30020 # Reference: https://otx.alienvault.com/pulse/64aec959f8017dda53219cd6 6882b.com 730fk.xyz aamset-paris.com alanyatourism.xyz ambadisuites.com atlasmarketing.life bluhenhalfte.xyz collingswoodfd.com df8588.top fn29in.xyz hhfootball.com kalndarapp14.com kdu21.com latabledelepicier.com london168wallet.monster personifycoach.com printmyride.store r1381.xyz smartinnoventions.com tarolstroy.store terrenoscampestres.com test-kobewaterworks.com theartboxslidell.com uximini.com vidintros.shop windmarkdijital.xyz woman-86.com wyyxscc5856.com yahialocation.com zsys.tech # Reference: https://twitter.com/reecdeep/status/1694704918584848831 sonokmall.info # Reference: https://www.virustotal.com/gui/file/ec8c114e9c0bd6154bd58396c72fabe79e2ffe70dea761cabc98b35186723360/detection 8ppdy.xyz 91gag.com brightodhove.uk firstaidbank.com fortifiedfinancialsolutions.com gatorfunding.services ic0.computer inovakoni.com leatherpocketbooks.com libaslim.com medichiccenter.com rggamer.com stratst0ne.com tdpsampark.com www-66552.com # Reference: https://www.virustotal.com/gui/file/7af9cc5b2aade862d245026c370d0d4fd4d375426cd26357abba3ddb4c8a9824/detection 24eu-ru-startup.xyz 359brigham.com 4tvaccounting.com 678ap.com 6o20r.beauty adept-expert-comptable.net arsajib.com avaturre.biz b-store.shop bavrnimn.site bioprost.club botfolk.com canadiantrafficmanagement.net connectioncompass.store cpohlelaw.com cyberlegion.group cyg8wm3zfb.xyz dcmdot.com desire-dating.com dp77.shop dtslogs.com eletrobrasilvendas.com emsculptcenterofne.com epeople.store ezezn.com giuila.online guninfo.guru hfaer4.xyz hg08139.com jaehub.com kickassholdings.online lb92.tech lucasbrownviolinstudio.com mamaeconomics.net mathews.buzz matrix-promotions.com meet-friends.online mimi2023.monster misstamar.mobi mybet668.com myjbtest.net narcisme.coach oktravelhi.com out-boundlabs.net pagosmultired.online paintellensburg.com pf326.com pittalam.com qfs-capital.com redtopassociates.com ruixiangg.com saledotfate.live smokintires.net taylorranchtrail.com tempahwebsites.com theaustralianbrisketboard.com theoregondog.com totneshotdesk.com trongiv.xyz wealthjigsaw.xyz xn--groupe-gorg-lbb.com yuwangjing.com zamupoi.fun zekicharge.com # Reference: https://www.virustotal.com/gui/file/ed970f5692d7a2e1fcf63f57635b45304d047c2d0f3b854dae2a39bff7e9707a/detection 983xpj.com aboutmart.info bathandkitchendesigns.com benefit-america.com bet366b.com broadfield-party.com caballoyjinete.com cufit.net cyclevalue.net fannydarat67.shop ioioidev.com leadsbot.online mayday.media medicalodgesgardner.com mt031.top muffliquorcompany.com munzarabogados.com noumit.info pratticofscience.online rightbell.org sbads7.click stpro888.com switchjobz.com testuojamvazonai2.com thewandedtrader.com tonysthreads.com wakeup.services welder-prices.xyz # Reference: https://twitter.com/reecdeep/status/1699386670301294792 # Reference: https://www.virustotal.com/gui/ip-address/66.29.142.244/relations evernature.top framedart.top greenbolt.top mentuz.top onemall.life playboss.info renderity.xyz shutlleross.life tarcontrol.info tartar.life vinoz.xyz zeeluck.xyz # Reference: https://twitter.com/reecdeep/status/1699386670301294792 # Reference: https://www.virustotal.com/gui/ip-address/69.57.161.67/relations boscon.xyz cerajove.xyz cerave.top clovein.top foxixy.xyz gasseit.life payflows.xyz showpay.life starfox.life treadom.info # Reference: https://www.virustotal.com/gui/file/b2085baf71cd3b01505f42752e2024d360a6684b0eb0feaf11ccbfdf47c3f96a/detection # Reference: https://www.virustotal.com/gui/file/08db0d0c9d1d2ce767a17c4461b25fccdf2f9075be2a8fe45d4461d23e936f35/detection 311849tz3.xyz 3sqjrh.cfd 692122.com 93v0.com ashiuvn9562as.vip autoant.net bayhouse1701.com book2110.com devo-parts.online efscollectionswexinc.com f3dfym.cfd futuregainers.net grecanici.com hvzpw.com iran-uk.net mega-clay.com navigate-power.boats pagerwojogaes.com passportrenew.xyz revitive.org rigintech.info sugargz.com whiskeydecanterset.com zippochinhhang88.online # Reference: https://securityintelligence.com/posts/email-campaigns-leverage-updated-dbatloader-deliver-rats-stealers # Reference: https://otx.alienvault.com/pulse/6503fb29e81f4b7d817bfed2 660danm.top aconaus.org altralogos.com azurefd-paitohk.xyz bvgroupcos.com dunia138.info janus.news mattewigs.com mytraderstore.com oldironmetalworksllc.com playdoapp.online purelyunorthodox.com rva.info sinpercar.com totomata.com transportlogistcs.com undoables.com # Reference: https://research.checkpoint.com/2023/unveiling-the-shadows-the-dark-alliance-between-guloader-and-remcos/ vrezvrez.com # Reference: https://www.virustotal.com/gui/file/254420572478301187f36171b5b34d183c1ce78427041a205790e0dddb214133/detection 69573.xyz 81mof.top ainji3.space alessandrafausto.com alloneplace.top cjoks.top consumasa.net domainyabaik.click fabioostermann.org fb99vn.com gd001122.com give-b4.buzz guyix.com harikanarayan.com jasminewebco.com kilat.cloud messaggerienazionali.com p3pp.top pdfamazon.com poker495.com remoteyear.asia rewardtool.xyz shopshenn.com sixthsensehk.com smkmodelkhaschalok.com sorteosconttravel.com theclosets.world wecouriergoods.com # Reference: https://twitter.com/tosscoinwitcher/status/1706743409179082818 # Reference: https://tria.ge/230926-wks12adg53/behavioral2 1hxyut001.cfd 1weasw.top 2017m.com 62gru.com 920222d.com adrentek.com alphadiscount.buzz asrworldbridge.com bachblueten-center.com barbendersapparel.com biyou-club.com bizcapitalmanaged.net brainmedicine.net civinqagency.com cli-test.com ctygd.cfd ffnd-it.pro gogoeconomy.com grovehillgardens.com hm4kem.top holisticpetpals.com huayi17885.vip investorslabs.site irlandhouse.net jgkstore.com maingeem36.click mjn977.top msoftco.net ncc833.xyz povfilmfest.com rabota-promlit.store shahabatlas.com socialvideostream.com sportsstump.com staging121.online thewaterfallhouse.org titklive.top ushaibusmani.com zaimdream.online zaimonet.online # Reference: https://gist.github.com/silence-is-best/23738d87475d67d843bd79231b008e5a bbq011.top browser-privacy.xyz nasyoeastasia.org resenha10.bet thesoul.agency universaldoner.org # Reference: https://www.virustotal.com/gui/file/559efeb0d4c9e06127bcf12bc69d19c901fc7f723e076073506fdedb7c1a2117/detection admiralx-ksaa.buzz avanty-renovation.net bia.beauty gardag.com gxdclass.com heritage-pnc.com kalndrgpt01.com kotovape.com liith.org marcustheares.com montanasapphires.online rosefinch.xyz sti719.cfd tuckerfertilitylaw.com # Reference: https://www.virustotal.com/gui/file/4e52766fa90e1ffd16cba2eb039e5bdb2916f2c6d61d3f53461f44b4e9796907/detection http://5.181.80.156 capitalm3m113.com compoundforce.club cookchefs.top corteiz.org dazzlebeautybox.com fstrainingllc.com ilsge.club iviaggi.blog kai6.name kotovape.com leshka-toshka.online liith.org lojadivamais.store luxeconcept.net lyesmith.net muraveynik.online r-grenader-jackpot.lol rosifariasestetica.online softpro-qa.com tamique.com thebestforyoucom.life tisdale.bio ucrypt.pro winchespullers.store # Reference: https://twitter.com/reecdeep/status/1714268250048229495 nagtco.xyz # Reference: https://www.virustotal.com/gui/file/c502569c4e1000de90545d80b4f714c0549e64d78d4a9468f11dbdba2231e3c6/detection http://172.245.208.6 bradslinkard.com dulcestipicos.madrid hotelunivers84.com lesresort.shop mantap89.online viteview.com # Reference: https://tria.ge/231026-ezsv5sdc6z # Reference: https://www.virustotal.com/gui/file/1f30b513d1315b7a9432f9cf2937d5c4728455fbd7c681a552b94f57a849757c/detection http://141.98.10.13 03ss.vip 278809.com 91967.net alcmcyu.com apneabirmingham.info asgnelwin.com b2b-scaling.com cjk66.online claudiaduverglas.com completetip.com displayfridges.fun docomo-mobileconsulting.com drpenawaraircondhargarahmah.com dryadai.com emeeycarwash.com flowersinspace.tech fourseasonslb.com fuhouse.link funwarsztat.com fzturf.com giallozafferrano.com gk84.com gracefullytouchedartistry.com greatbaitusa.com gypseascuba.com hbiwhwr.shop hrmbrillianz.com jizihao1.com johnnystintshop.com kebobcapital.com kimgj.com kjnala.shop kwamitikki.com leontellez.com mercardosupltda.shop mfmz.net mosiacwall.com motorcycleglassesshop.com mysonisgaythemovie.com mysticheightstrail.com oliwas.xyz omclaval.com ourrajasthan.com podplugca.com polewithcandy.com qixservice.online rollesgraciejiujitsu.com sarthaksrishticreation.com sofbks.top summitstracecolumbus.com sunriseautostorellc.com sunspotplumbing.com sx15k.com thwmlohr.click travisline.pro trishpintar.com uadmxqby.click vandistreet.com vaskaworldairways.com vinteligencia.com vistcreative.com wb7mnp.com weoliveorder.com wilhouettteamerica.com zhperviepixie.com # Reference: https://www.virustotal.com/gui/file/6b90f7fe7abcb028f3f1ad8173f22d11b950714483ab6cdcb2f0a37961a30a51/detection abcya50.xyz addtr.online botani-don1.xyz carbonbeeagtech.com carmenceja.com cloudavde.net golgotaromanianchurch.com gonks.shop hollydays.online hopeaugust.com hstonme.xyz identcase.com jewlselegance.com jupefeeds.online klinkspremiumwildlife.com lah280.com lojasdna.com lyzhang.site mroadholdings.com myyacht.rentals planetmercury.info retaron.online secured-jobs.com slhstrategicsolutions.com smqzgy.com teto-store.com thecreativesoulart.com topskillsnow.com truthnotpolitics.net uinnou.com ymvip296.com zuqiu11.top # Reference: https://www.virustotal.com/gui/file/17d4054d9cb3dc8df10d4ca4bd4f201b087cb58716dab9c93390d3f35010c8e4/detection 9310harmony.com algogames.xyz annturner.space bumisriwijayalestari.com chemitronic-thai.com clauderuelle.com drone-majic.com easonshen.com flawlesspheno.com godoctordrywall.com gray.management headlineoutline.net highcaliberperformance.com hijabzone.online homedecor12.com hostedexchangeanalysis.com ihouse.love lovabledoodleshome.com lpsfhls.com maestrodelamarreefectivo.com myyntisofta.com nexria.com nowcleanran.top onespeeddriven.com photoimaging.center preorderpizzas.com rocketnow.club roofrevivenc.com senatortomcullerton.com slingerlanddrumcompany.com squawpalisades.com tcchiropractic.net thenorwegianbutler.com thethomasgrouphomes.com uh.immo vat-jp.com xgspw.com yn-wx.com # Reference: https://www.virustotal.com/gui/file/865c3d5398639b15b66ded5441836610bc82d3c996e707ff8741c8b7fce482d5/detection 91qds81ik.biz allixanes.info perfect10beautybar.com schwander-weine.com spaghettislice.com stl-rsvp.com xn--c1akodirg.com ylmby.com # Reference: https://www.virustotal.com/gui/file/97acc5c52513ead4ba018af7dd726edd3179f993099640681cd706db4d263f38/detection http://141.98.10.123 # Reference: https://threatfox.abuse.ch/browse/malware/win.formbook/ (# 2023-11-08) http://103.138.108.96 http://103.151.123.228 http://103.156.91.153 http://104.168.33.25 http://107.175.212.60 http://107.175.218.12 http://107.175.218.31 http://185.29.9.30 http://192.3.152.135 http://198.46.199.168 http://45.85.219.226 http://5.181.80.36 http://64.44.101.233 alienzouks.com bojz168.com keprom.works offtec.cf ryandeby.com wellcalls.com # Reference: https://www.virustotal.com/gui/file/00eefbbfef027c2641476d176e81f017cc9f27d91798c30cb47c2a5cb46b126a/detection 633922.com belaflorloja.online blessingstation.org cjjmobbbshhhu.shop fortunetravelsltd.com fwl0q2w.shop godhuman.org greenharbor.info hcfa-cis.com hillcresthealth.online hmoatl.com lets-room.online medical-loan24.live ozzventures.shop porousworld.com sorenad.com speedbikesglobal.com zbbqis.store # Reference: https://www.virustotal.com/gui/file/ea5a8efb33e85213a96baada2f0f330d2b065d8efac0dbabdacef44eed8ee34c/detection 3gresources.com aelgjf.cfd belasaudecom.com betongpumpningen.com digiscout24.com fam-scharf.net foodcos.xyz prostoptowing.com shenzhoucui.com # Reference: https://gist.github.com/silence-is-best/67adb7549211b3046f554044bcc5c151 australiavisaprocess.com coolermaster.xyz e-saleshub.quest echolinkevolve.xyz ikun720.xyz latechdz.com maxvoss.com mr-u-taste.com sell-home-fast-for-cash.xyz t5-1682468.xyz talknconvert.com vaultedjewelry.com vfhnyjgr.cyou viptop77.biz waterdropdilter.com # Reference: https://app.any.run/tasks/e448b261-f10f-4937-a999-cb7dd91d37d2/ 333vvs.com antsnav.com cmmug.asia finebb.net gdyanjiu.icu hreeremaeps.com ljwixsb.top mobdigim.com pdian.link shopbons-mall.com shortfall.net tecverse.xyz yf168vip.com # Reference: https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2023-11-29-IOCs-for-JinxLoader-to-Formbook-XLoader.txt 1214888.com 219855.xn--80aswg austintrafficlawyer.com autrevalevale.click e3iaibr.icu infinite-7.com julieannmirabel.online ldhqi4.fun ncdanmark.org ofupakoshi.com overthemoonphoto.com taxhwangeub.com terranovaservices.top worldlife.casino zkrbma.store # Reference: https://app.any.run/tasks/49f42b26-c220-4fe8-8181-cf9c1215ffb7/ collline.com functional-yarns.com jokergiftcard.bu # Reference: https://twitter.com/K_N1kolenko/status/1732660807316455743 giftjubilee.com ladyboyfaceswap.com wildenmann.shop # Reference: https://twitter.com/reecdeep/status/1737429448754954552 apexpion.club # Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection efasthosting.com emergencyprep4cast.com mu.network pancytopenias.com # Reference: https://www.virustotal.com/gui/file/19dc94108fa40fab39e63da6436a1925dc3bb5491c4b0d7fef94fd4f26e42a62/detection 297191.com 2minus2.com 530westley.info affordablyrefined.com amerika-grande.com artificial-pigment.wiki becomemoreamerican.com bella-pi.com bets-bc-aingz.xyz bettermtl.xyz by8115.com cannabis-entreprise.com certezza.academy christinevandenhove.com comicbookkitchenparty.com designssavelives.com digitalassetagency.xyz drredu.com egfintl.net emperorsoasis.com expartcomputer.com footpeel-tr.com grabsure.com hokkistar.com ideaevcharging.com idwalalodge.com imzztoken.xyz klvfklfdklciovfkldklvcdf.store litho.ltd mapogosmello.com mendazilima.quest moodylight.store ortakoyfirini.xyz palisadestahoe.net pjduffy.xyz quantatix.com quotexqatar.com qyornaturescare.com restorativeeducationllc.com scarpatostudiolegale.com stabisville.quest techtv.pro theendofmonth.com valentina-gil.com vtuos.com wenxuer.com zeuss.info # Reference: https://twitter.com/V3n0mStrike/status/1751246926824026314 # Reference: https://app.any.run/tasks/45c442c5-015f-44e1-a6b5-8998e5c6ad2f/ 104kwt.com collegeshirt-shop.com israelijewishwisdom.com kevinstephensdesign.com kklvyy.com nextlevelindependence.com octet.asia perfumariacheirobom.site produceoficeland.com projectsupdate.com pslsjy.cfd va8qsy9rwa.info # Reference: https://twitter.com/K_N1kolenko/status/1757639707922407857 infiniteiris.xyz servicemailteam.com thesleeperandco.com veikkausbonukset.guru yvz74e01q.sbs # Reference: https://www.virustotal.com/gui/file/3970ae4e6f0de1fcf790d6d65f4ab7cd348d5256a1293bc196a5906b38acf6a5/detection admiralx-um.top doctorscrummaster.com yjeqj3.cyou # Reference: https://www.virustotal.com/gui/file/832b6bc13d01a6a29ed594caf07462dbacc619b9be8b52a6ccd53efc2b19eb12/detection 97238.vip bwchosting.com bydglobal.online charee.shop goremtnbuilders.com hkkwmhwv.site klix.icu klsxofficial.com moony00tsnft.xyz nasigoreng.online nmckyiqsi.top pinupmeals.click qfaw.mom sec-28082672co.info tinchap-nganhang.biz tprgamesslot.com viberteacher.net xraytoys.online zabloudil.website # Generic trails /config.php?account= /09rb/?BL3= /0vh9/?A8= /2cur/?p0D= /3iw/?URfhe= /3nop/?zt= /3nop/?-Zd0qV80= /3nop/?BBZ4xph= /3nop/?oN6xjP= /63j/?RHD8= /66op/?8ptlzV= /68yb/?y4L0= /6hsc/?i88= /6ihh/?2d= /6qne/?bw99= /6rnk/?FFNTRl= /6tjv/?RsZHuW= /75gn/?3f4= /8mwu/?86Eqi= /8o3b/?Him= /8var/?Cr4TFn= /9d1o/?5j= /9d1o/?jDKt_= /ahc8/?Cfc= /ahc8/?dvx0q= /a8c/?r6= /agbz/?VpIXMZ= /aggq/?gPdL= /agjr/?d8fDs0= /ahc8/?9rIx= /ahc8/?ON9d9ZdP= /ahc8/?RJ= /ajr/?Jt78= /ajr/?oj= /ajr/?gzrP4xE= /aofk/?yPMl= /aofk/?XrxlCh= /aofk/?ZvlpdD3X= /aofk/?SfV= /aofk/?VXVxArBH= /aofk/?yp= /aq88/?0VKdcx= /ar73/?5jGTz= /ar73/?nndDe= /b2w3/?5jRDfl= /b4d/?mrj030Qx= /b5sf/?x2J8= /b62n/?B8CDV= /b62n/?efX0fHtP= /b80i/?9rF= /b80i/?K6AlwZ= /bg6/?Pds= /bjtd/?7nUt_4= /boa/?GDHDW= /boa/?CDH= /boa/?Ozud= /boa/?RDK0= /bqko/?3f= /bs5/?sBj8R= /bti/?CBLl4= /bu2n/?JR-PJ= /bu2n/?tXQLjb3p= /bw82/?7nU0_4= /bw82/?ixlp= /bw82/?kHQX_L= /bw82/?m2MpP03h= /bwk/?phbxg4sP= /bwk/?uRqHO= /c0a7/?DTJL= /c0in/?3UfGs01o= /c0wb/?rJ= /c1k0/?z6A= /c22b/?GPFPs= /c239/?NN= /cfn8/?2dqp= /cgc/?vR8XO= /cgf3/?jZHL8FV8= /cgf3/?kGQP_SL= /ckvl/?RF= /ct6s/?rF= /cx0u/?J0Dd= /cxbz/?a6Al= /cy88/?rF= /czqa/?2put= /czqa/?4yv_JF= /d10a/?AN= /d15n/?aBWDfHh= /d15n/?SfR= /d30y/?zPah= /dcn0/?fXV8y2ip= /dgrg/?Bf= /dmpz/?_0GxxfX= /dum/?NjBDlp= /dty/?Mv18= /dy/?7nRL= /dy47/?6lzd4R3= /e2au/?7nol2HT= /e2wa/?MDKtU= /e3eb/?3f5= /e3eb/?PBZ0= /eauu/?qZktM6= /ec14/?cdlpd= /ec14/?JxotnDq= /ee3s/?Pb= /ei9s/?5jfHZlY= /ei9s/?lnzH= /ej/?3fvH1nq= /ej/?5jxTV4Ux= /ej/?AnB= /ej/?d8FL= /ej/?mL30v= /ergs/?kPLL= /euv4/?VN6dNdgH= /evcy/?2dl= /f43e/?MDKxd= /f43e/?MRL0cd= /figc/?ITUTAN= /figc/?PBDlF= /flc/?lhud= /fqqa/?gKrAc= /fp58/?06= /fs44/?rB= /fs8/?0V= /fs8/?AX1= /fs8/?q6Q= /fth/?aBZPdF= /g25e/?-Z8p3nd= /g25e/?4h40= /g25e/?yL= /g2fg/?mvHpT= /g31s/?j80t= /g832/?OReXw= /g832/?Vzut_2= /gh/?9r= /gh/?pdfX= /gh/?wtzx= /g8kn/?1bIxl= /gkp9/?KvAtvL= /gkp9/?TB= /g2m3/?Cxo= /gnt/?Tzu= /gnt/?zPah= /gqx2/?UDK8jj= /gqvv/?UL3= /grh2/?JTRxBp= /grv/?LZv8= /gu5d/?ljF= /gut0/?PBZ0= /gvqa/?DBZlKP= /qwg6/?2do= /gy14/?lJBtHNX= /h26/?9rfx9hDX= /h96v/?2dLtNL= /h9t0/?QXg8-= /hdzz/?FnWTdB= /he2a/?4h_Tw= /he2a/?ytx= /henz/?MtxX= /heth/?CBLl4= /heye/?GZo8s= /hi5f/?LhJL= /htqs/?glqhT= /je14/?K48Lebx0= /jjk/?1bn4ip= /jr22/?KlD= /jy0b/?Qzr07t= /i6rb/?BFQLRT= /i19/?tzsDXFa= /i286/?lrjPuXF= /ih8i/?FH= /j0eu/?WB= /jy93/?3fo= /kfr/?0dnLRd= /y8r/?kFQl7b= /kdz/?axlP= /kdz/?cf= /kdz/?m2MpPNip= /kdz/?nH9= /kmge/?e81hyLsp= /kp1/?r6= /kqna/?LDHHu= /kt0/?Lh54A= /kvsz/?8peTw= /kvsz/?ajL= /kvsz/?an= /kvsz/?cd= /kvsz/?MvX4BN= /kvsz/?NlI46pq= /kvsz/?OlG= /kvsz/?OL34= /kvsz/?yzutZfsP= /kvsz/?zv= /l3ld/?2dup= /l3ld/?H4ElV2k8= /l3ld/?rDK4= /la1/?cf= /la1/?TB= /lmh/?BN6= /lmh/?MdItZ= /lmh/?OJEtdtiH= /lmh/?oPO4K6C= /lmh/?tDK= /m02u/?iJBl5DH= /m25m/?sH= /m6us/?XL3= /m858/?5eg5n= /m8a3/?CLZll= /m9ae/?Njx0rZ0= /mbx/?OL3D= /mcn/?_nD434I /mcn/?pL08= /mh04/?0duH= /mh04/?rHm= /mh04/?z6t4vf= /mqr7/?2dz= /mqr7/?8paxn= /mqr7/?bn= /mqr7/?erah= /mqr7/?LPW0d= /mqr7/?ZhUpphA0= /mqr7/?ZX50dDih= /mjl/?M2MpdRT= /mi8/?1bwhC= /moc/?0TG= /moc/?BL= /moc/?OrD= /moc/?_L30= /mt88/?LN9dL= /mzk6/?UPa= /mzu5/?ClsV= /n6i5/?d2MdxHVP= /n10i/?OP= /n10i/?qT= /n7ak/?lrDtuB= /n8ds/?tzr= /nahb/?axCY8= /nahb/?LLTod70y= /nahb/?YtSrkY= /nang/?YPxdA= /nbg/?K0Gd= /ni24/?HZHxy4b= /niku/?nV3TFh= /njo/?KPO4XxjH= /njo/?s2= /njhr/?-ZlDQ= /njhr/?NreTZ= /nk6l/?wN98br= /nnmd/?erah= /nqpg/?Yj8Yy= /nsag/?6lop4xQ8= /nt8e/?qNG= /nu/?n4= /nu/?8p= /nu/?rvKdSp48= /nu/?w2Kdbz9= /nurc/?9rF8b= /nwc9/?NreTZ= /nyk/?Gdj8= /odse/?CdL= /oecd/?LDHDp= /ogg/?3fk= /ogg/?F2= /ok6h/?L6J-8= /ok6h/?SR= /oncs/?SL= /onqm/?JJBtglX0= /os16/?JvK= /oiwu/?3WQJUZ= /oiwu/?6u6AyI= /oiwu/?aGv= /oiwu/?aRvcsIY= /oiwu/?H61Q= /oiwu/?lzI7= /oiwu/?PuVoB= /oiwu/?ZyFo4d= /oqhk/?AhS= /oy30/?yVlpidI= /p01e/?CJE= /p01e/?H4D4s8f0= /p2he/?1bz0Vl= /p2io/?1bUl= /p6ai/?Xrx4qlt= /p8ce/?y4L0= /pg21/?d484rJlH= /poub/?-ZF= /pth/?lL04m04= /qmek/?57wTk= /qmek/?psR= /qmek/?wd= /qmsj/?jzrDED= /qr26/?0rZli= /q3m8/?wYDJ= /q4kr/?CBZt8= /qjnt/?GDKPHRd0= /qmek/?9iBF= /qmek/?fU397= /qmek/?K8KRH-M5= /qtpn/?8p= /qtpn/?g0DlvJP= /r0bh/?3fD= /r3hg/?_jG4S= /r690/?9rId4= /r690/?aBZPMh= /r690/?0l8= /r690/?X6I8= /rb5e/?iIbtL= /rf5o/?cB= /rf5o/?3fl= /rgoe/?AN9= /rht6/?AN6= /rqth/?2d30m= /rrc/?CBr= /rrc/?MP= /rrc/?Rfd8= /rrc/?VZxTAfKP= /rse/?vDH8F= /rse/?VR-XC= /rv7/?CBZXp= /wdc8/?lf= /y88/?uZ-D= /s0iw/?z6A0I= /s0s2/?K6AliR= /s0v/?cdH= /s0v/?qR70f= /s3s3/?RF= /s48/?Yn= /s86o/?nZ= /s86o/?y33oDN5= /s8y/?zXq4AN= /sa/?HZaxUrJ= /sbjq/?oZotnV_= /sfd8/?jzuPNd= /sg03/?iN6h3= /sl7/?p0q= /sm3g/?Ml= /sm3g/?PbvtUt= /sn31/?UrjPbNmp= /st28/?-Z5= /st28/?uz= /stcf/?KnpM= /suiz/?bda= /sy22/?6lzpL= /sy22/?Axl4i4-= /sy22/?tfL0m= /sy22/?9rI8n8= /sy22/?UXL= /sy22/?vP= /sy22/?yP7Plp= /sy2h/?J6A0d4iP= /sy2h/?W4Q= /t0r3/?1bwhC= /t2p/?Ezg47B= /t36t/?00DpA= /t36t/?svm= /t36v/?jyu= /t65q/?M2JHn= /te/?9rmDEzj= /tgqh/?dh= /tmz/?2dul= /tmz/?APcP7D= /tmz/?YR-0= /tn73/?elHH= /tn73/?Yr= /tpd2/?kjm81= /txuu/?AX= /uar3/?B81062R= /uia2/?ARd46F= /uia2/?oL0xqXQH= /urde/?AN= /urde/?Ztxhw= /utg6/?PV40d8R= /u8nw/?Bzr8U4l= /u8nw/?LFQPH= /pjn/?yVcHTBN= /uszn/?3fUt= /uszn/?a2MtxLZ= /uu0p/?Up8l= /uv34/?2db= /uv34/?eBZl= /hx227/ /hx321/ /w88t/?_PAp= /w8n5/?KrO4XnMP= /w8t/ /wh23/?5ja0c8rh= /wh23/?azuxWju= /wnoa/?2dtl= /wszm/?BRQlPj= /tef/?Tj= /x0h/?MfPxb= /xczm/?ZVatuBj8= /xczm/?NN= /ymb8/?-rnjn4Q4= /xle/?OrpDKZ= /z7a/?pJEdPf_= /zzun/?tL= /?_DHxTPyP= /?flDhjrj=