# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/) # See the file 'LICENSE' for copying permission # Reference: https://blog.talosintelligence.com/2018/06/my-little-formbook.html?m=1 drylipc.com handanzhize.info bddxpso.info atopgixn.info cretezzy.com casiinoeuros.info newraxz.com # Reference: https://twitter.com/avman1995/status/1038285919219068928 # Reference: https://pastebin.com/6MRD35Pq http://136.144.52.99 http://47.91.170.222 lotochain.com n01.tech ourcrazyveterans.com sy-adm.com yinuxw.info # Reference: https://twitter.com/dms1899/status/1038276577254146049 # Reference: https://pastebin.com/4pDsDuxn http://5.101.78.222 http://5.255.94.75 0day4today.com commercekorea.net magnagrecia.net npromo.eu southsidenewhomes.com # Reference: https://twitter.com/voidm4p/status/1037294325091250177 handanzhize.info # Reference: https://twitter.com/ps66uk/status/1036782703788605440 ghazicraft.com # Reference: https://twitter.com/ps66uk/status/1036773879321190400 truemusclesnow.com # Reference: https://twitter.com/ps66uk/status/1036773694243332096 sosmedplus.com # Reference: https://twitter.com/ps66uk/status/1036781260516061184 newd4y.com/sp/ # Reference: https://twitter.com/malware_traffic/status/957956818906632192 boosterfx.com cabel-ispoffers.market conditionalmachines.com derekblasberg.net exoticlocale.com idlevents.com fhsdjhfsdkj.com lynkieevents.com mansiobbok.com wshamg.com yougethosted.com # Reference: https://pastebin.com/bEqJKZfZ peliculainfantiles.com vanzundertconsulting.com # Reference: https://twitter.com/nullcookies/status/1046929109811630081 derwamanojaz.com # Reference: https://twitter.com/James_inthe_box/status/1046864076624646144 graimmer.com ww7.keygirl.site # Reference: https://twitter.com/pollo290987/status/1044947696451235840 high5fundraising.net lechevalierorange.com returnlostitem.com sftpcomponent.net # Reference: https://twitter.com/James_inthe_box/status/1044580953912266758 aldocompliance.com # Reference: https://twitter.com/James_inthe_box/status/1044324089714724870 graimmer.com # Reference: https://twitter.com/nullcookies/status/1046924081591988224 bharimatrasay.com # Reference: https://twitter.com/James_inthe_box/status/1047488230763913216 d.coka.la/ORg1ie.jpg d.coka.la/BI0asY.jpg jgc.com.mx/dat/heavy.jpg jgc.com.mx/dat/mila.jpg nothernpridecommunications.net mrawesomescloset.com # Reference: https://twitter.com/James_inthe_box/status/1047846258239401986 graimmer.com refractoriesdirectory.com # Reference: https://twitter.com/dvk01uk/status/1107851408269824000 higcaf.com # Reference: https://twitter.com/dvk01uk/status/1098070906029723649 symtual.com # Reference: https://twitter.com/dvk01uk/status/1091013599018000386 funguythings.com # Reference: https://twitter.com/dvk01uk/status/1089807824731947009 humanytc.com # Reference: https://twitter.com/dvk01uk/status/1089748801571700737 zinrop.com # Reference: https://twitter.com/James_inthe_box/status/1108064849651601408 melendyou.com/rm/ # Reference: https://twitter.com/James_inthe_box/status/1110579161884577792 liongrooming.com # Reference: https://twitter.com/makflwana/status/1068015579586453504 # Reference: https://pastebin.com/TurChwaE jeycop.com scubaarabia.com journeystudentcamp.com niger-online.com simplegreenhabits.net essayontime.science frankandmidori.com 525pwz.info check-or-wreck.com purdomlnc.com # Reference: https://twitter.com/dvk01uk/status/1118565721892634624 slideus.com # Reference: https://twitter.com/pancak3lullz/status/1092534221783158784 mitafa.com seajayssailing.com 327503788.com michkatravel.com recoil.world lianglinyiyou.com full-art.com despasito.net 23o95.com cultivatingimmaturity.win dtrchampions.com # Reference: https://twitter.com/pancak3lullz/status/1092434571889688576 w3c.ink idreamstartup.com tiaohuobuy.com droptxt.com demopex.com thebodyshelinglogic.com millcms.com artframephotography.com whitelodgingcollege.com # Reference: https://twitter.com/pancak3lullz/status/1083019107568619521 goodies.biz win603.com microbreweriesassociation.com xn--hck5aza9o8c.site orangefirestarter.com mmareligion.com elhomegifts.com mecharniser.com xinghuategang.com # Reference: https://twitter.com/pancak3lullz/status/1121108516637433859 /h383/?CneDl= # Reference: https://twitter.com/pancak3lullz/status/1034149890983641089 /eu/?Lh54A= # Reference: https://twitter.com/malware_traffic/status/1080623037471432704 /hx310/?JreXz= # Reference: https://twitter.com/pollo290987/status/1082400417370251268 /private/?Uv1x= # Reference: https://twitter.com/pollo290987/status/901090998343929859 click-ticke.site # Reference: https://twitter.com/Antelox/status/895299149284999168 wow-tracking.site # Reference: https://twitter.com/luc4m/status/1124220235656118272 arsimport.com iniwhmya.com molakalyva.com # Reference: https://twitter.com/dvk01uk/status/1125703826890199040 mecharniser.info/ni8/ # Reference: https://twitter.com/luc4m/status/1126043316305506304 alabamaseosolutions.com foodome.net humanytc.com shopnow1.com wealths.us zjydl.com # Reference: https://app.any.run/tasks/5582d288-8fef-456e-be79-a8d80d1df829 rachelkinseyforcongress.com # Reference: https://twitter.com/dvk01uk/status/1120628599793553408 tiboxe.com # Reference: https://twitter.com/JAMESWT_MHT/status/1128996781054996480 # Reference: https://app.any.run/tasks/c0094589-70db-4cbe-a7de-f1a08b79168f/ /ca/?U4kp= # Reference: https://twitter.com/malware_traffic/status/1130450003422351360 /ha/?1b= # Reference: https://twitter.com/dms1899/status/1138414720199864320 mypeeps.ninja yuchuanjz.com tasmanuka.online perryleycraftgin.com ttklyn.com pipiguan.com kw7ob.com # Reference: https://twitter.com/James_inthe_box/status/1138478169755754496 explorenoblesvillehomes.com prytherchforcouncil.com # Reference: https://twitter.com/luc4m/status/1140979690758262784 tlkcloudem.com # Reference: https://twitter.com/JayTHL/status/1141056334244253698 promotionzynovawillzerodacontinuegood.duckdns.org # Reference: https://twitter.com/Racco42/status/1141672784357146624 desklink.duckdns.org # Reference: https://twitter.com/killamjr/status/1131368397617475584 joeing.duckdns.org # Reference: https://twitter.com/luc4m/status/1143815529079156738 srcalci.com paxfulk.com ajexin.com gmcpr.net shots.golf artnfoods.guru biocombustiveis.com phpcoding.life ncfgmm.com # Reference: https://twitter.com/James_inthe_box/status/1146183202467303424 virtuoussnowball.com # Reference: https://twitter.com/reecdeep/status/1149224578532741120 hsctsu.com srilankika.com westernenergymedicine.info xn--5nq67dt91acob217ad91b.com xn--fhqv52e1ueg8n.com # Reference: https://twitter.com/1ZRR4H/status/1149282913751617536 vfxwarrior.com protocol.life 15churchroad.com djcreview07.com # Reference: https://twitter.com/hexlax/status/1150113306545467393 regular123.com # Reference: https://twitter.com/hexlax/status/1150744858132451328 mecharniser.com shaxob.com shaxob.com # Reference: https://twitter.com/James_inthe_box/status/1154398293524271104 24648040.ngrok.io # Reference: https://twitter.com/dms1899/status/1165009802470277120 241369.com apachedrone.com beziehungswerk.net regular123.com sadathetoure.com telnyc.com the-brand-nursery.com trendteasindia.com # Reference: https://twitter.com/dms1899/status/1165762759738437632 aagangirlshostal.com bbo6331.com crossfitktresrios.com darts-bar-nova.com dclogisticsbrasli.com fanfantxt.com haiju365.com longlifebaba.com sixfiguresuccessmastery.com somosvip365.com starfleetcartography.com sukfat.com yj.ink # Reference: https://twitter.com/dms1899/status/1165742047539662850 americangypsealife.com andareavela.online dpthkee.com espritmoteur.com fawazalhokairfashions.com get-housesecurity.sale jeyucite81.win kzxuqf8w7.biz mbk.partners olivianaphotography.com woodlandsdogretreat.com # Reference: https://twitter.com/reecdeep/status/1166255171200004100 alptraumaclinic.com amobad.com artilary.com artistsandcreatives.com beyhanbilisim.com hunde-betreuung.com mecharniser.com pixelorlando.com ronicooper.com scjieniu.com superbotany.com khosravanigroup.net tc521.net pen6.net # Reference: https://twitter.com/reecdeep/status/1168937433171484676 eprivacyguards.com nimble.report shinrigaku-riron.com xn--gdka3eubcx5ge.com sukfat.com # Reference: https://twitter.com/smica83/status/1169553710999060481 joyhoundinc.com margaretminguy.com racooncity.net seastarways.com szahjw.com tp-hostel.com travelersintheworld.com # Reference: https://twitter.com/JAMESWT_MHT/status/1172122495652155392 selforall.info haddadunited.com # Reference: https://twitter.com/coderippers/status/1156857536026484736 burkwp.com # Reference: https://twitter.com/James_inthe_box/status/1173953038098128896 starttoto.com # Reference: https://twitter.com/malwaremustd1e/status/1175779000687325186 beautyzonebyheidi.com ristorantepagus.com sensingbridge-platform.com # Reference: https://twitter.com/dvk01uk/status/1178696483522191360 # Reference: https://app.any.run/tasks/3b84770f-b06e-47c8-b193-9be3c4c7a6bf/ dealskabaap.com drrichardorlandi.com ferienwohnung-dodel.com geohoof.com identityapparelonline.com kxmphs.com romanoimoveis.com superadminapp.com termesahiltaksi.com veroxin.com # Reference: https://twitter.com/luc4m/status/1179413765147807744 7thgenerationrabble.com # Reference: https://twitter.com/luc4m/status/1181880797399326721 cvasajhsjkls00pro.co.uk # Reference: https://app.any.run/tasks/d933e54f-4a1b-431d-ac1a-46b1f7dbe792/ alphlinic.com atlantisads.com apps-tv.com cheapmonclerjacketsoutlets.com edmov.com eurodisfraz.com hhtdhg.com nieuwtij.com pelvicheartspiritalchemy.com skylod.com xiaolinjia.com xn--dll-8n0e103b.com # Reference: https://twitter.com/JAMESWT_MHT/status/1186906425836081153 100rupeeeliquid.com allixanes.com cattybcreative.com fastbatterysystems.com lokmazel.com moonchildenterprises.com pi2023.com # Reference: https://twitter.com/wwp96/status/1187064601327919104 guzelkaybettik.com podwath.com dairobby.com danielemenchetti.com # Reference: https://twitter.com/wwp96/status/1189234871291564035 cartedevisitegratuite.net palsgraphor.com veroxin.com ferreiralove.com # Reference: https://pastebin.com/29uSdMAk cancertreatmenttransport.com chuangshunchem.com garthhassel.com golaminators.com hairminders.com kovaxy.com mizorl.com moraxy.com rwinzresearch.com # Reference: https://twitter.com/wwp96/status/1191014781911736321 camexpertangkor.com # Reference: https://app.any.run/tasks/c0597f3d-f31a-40f8-85e1-b0a8eb3af899/ 926cb.com molestuk.com shabbirinstruments.com # Reference: https://app.any.run/tasks/aa6bc7f8-a986-4a33-9595-fff5ac5a0c62 cmioffices.com # Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Formbook) emizard.com hoscury.com monkalef.com oyishu.com pursemtb.com scaker.com shaxob.com # Reference: https://pastebin.com/xwT2gAgE 3hilltopstudio.com bgtr.cymru facetheday.net gmopets.com hottennisjp.win imizin.review mnuvmg.info regiusgames.com tweakboxapp.info xn--oru96d1wax98e.net # Reference: https://twitter.com/58_158_177_102/status/1192332316917432321 bagelandcheese.com # Reference: https://twitter.com/reecdeep/status/1161233442337697793 # Reference: https://app.any.run/tasks/4a4785fe-5b8c-4a36-83ef-ea6500a72df1/ 2750tinsleydr.com # Reference: https://twitter.com/wwp96/status/1193993959074402304 # Reference: https://app.any.run/tasks/35861fd2-8962-404d-a03a-6b90f2a83dad/ chungcuhanoihay.com cubeandwater.com deltavisiontv.com flycoz.com lateliercreatifdemarie.com # Reference: https://app.any.run/tasks/954e589c-6906-4e99-9459-65a5770327ab hitechhomepaintnyc.com luxogloppeliving.com balajiphotogallery.com prlncess-hotels.com # Reference: https://twitter.com/0xCARNAGE/status/1201194262093807616 beartraditionalkayaks.com d55consulting.com my-kit.net nitsannthit.com quickful.com samperd.com wk616.com ympublishing.com # Reference: https://twitter.com/ANeilan/status/1201346143155822592 # Reference: https://www.hybrid-analysis.com/sample/945c63a512d9d62583783329cd83d2872e250fba3c40d5fe0e36483a5a831a9a/5de484aa3f6a1d32720f2eee norvicshippnig.com # Reference: https://any.run/malware-trends/formbook (Note: as seen on 2019-12-04) beauty-fullbox.com idmicoffee.com skylod.com gazoly.com gridadvisorsllc.com corvinuscrypto.com spillthegreens.com bees11congress.com atlantisads.com # Reference: https://twitter.com/ViriBack/status/1202305799445504000 allixanes.com casineuros.info # Reference: https://app.any.run/tasks/5ded2851-08b2-4fe1-a34c-45daf448e8e2/ artgrowth.fund fixref4.com hotrugged.com insidereaganmanx.com institutdebeautechablis.com jscheide.com jevmod.com presence-digitale.net shopforbabys.com sluas.com # Reference: https://pastebin.com/7Ak2nP2T domferz.com emmajcoombe.com ido-expo.com italianato.com nwsouthroad.com thankslotto.com wasserschaden-hero.com wellmadecostumes.com xosuno.com # Reference: https://www.virustotal.com/gui/file/78377897d8c6ccd0f4e59ddf94db67b2489a4010fe404659f61ebeb91a037a49/detection fisciapp.com pinkiavenue.com 061man.com nongda.group kuotacell.com clinica-financiera.com wellmadecostumes.com # Reference: https://twitter.com/James_inthe_box/status/1206944999499108353 millerjeanne.com # Reference: https://twitter.com/wwp96/status/1207739801002291200 # Reference: https://app.any.run/tasks/0e337885-db1f-412b-aa9b-1c6f75eefe17/ meinvcaita.com mipscenter.com # Reference: https://twitter.com/wwp96/status/1210228386687279115 find-a-job-online.info hextor.win middlemalta.win otomarco.net sabyestreetfoods.com # Reference: https://twitter.com/wwp96/status/1210602703279276032 earlymorningmama.com hjlh888.com thexfactorfoundation.com # Reference: https://app.any.run/tasks/fe87d214-5fab-400a-ae93-7319483ea313/ covzin.com 2220027.com jxck1688.net www139706.com # Reference: https://app.any.run/tasks/5d2b1a42-3931-4381-8f18-17b089100399/ ibelieveinbrazil.com communityhealthypharmacy.com raveltalent.com lapuphealth.com pornurlz.com t4z4f7p34y.com 0g6fivegive.men bemaaultosport.com # Reference: https://pastebin.com/E6yzi5hz adventuredogs.tours brokerofficial-fraud.com darkwhitechocolate.com liuhongli.com yashodankalpataru.com yummymornings.com # Reference: https://app.any.run/tasks/15ee6c31-b975-4f9f-ba1d-2f950f82e468/ bazmeadab.com # Reference: https://twitter.com/James_inthe_box/status/1214176338040410112 # Reference: https://pastebin.com/XMTxaQ02 creativeheadfirst.com kabsolug.com stopczynski.com # Reference: https://app.any.run/tasks/230ffb09-b135-4144-86a7-595110c4786d/ 635bifa.com amoorematrix.com chemmaths.com greatsavingsandmore.com mizorl.com pinksuper.net # Reference: https://app.any.run/tasks/de247fe2-7b3a-4c45-b0b1-0be67319bcae/ swfltropicaladventures.com sindomac.com jingxiu188.com # Reference: https://twitter.com/wwp96/status/1214936414749646849 chinabaumatic.com dealermerchantaccounts.com mizorl.com xoso168.com # Reference: https://twitter.com/wwp96/status/1214935400445358080 chinaplandexpo.com nuestrojacalito.com southerntexastitle.com # Reference: https://pastebin.com/piCYtiS8 beattheburnout.com harryhdesign.com integralhome.net kabsolug.com mocowhalo.com stage5klinger.info # Reference: https://twitter.com/wwp96/status/1216790704007065600 mizorl.com nymsf.com promptpayplus.com # Reference: https://app.any.run/tasks/1f46c9ed-e5d5-421b-8965-39d1536f02bf/ crosswalkclo.com mydnrip.com # Reference: https://app.any.run/tasks/4ef08030-7831-4eff-aa3e-7d151ccc231e/ nrojano.com luckyluxuryhomes.com quidoz.com videntesmadrid.com britelens.com # Reference: https://pastebin.com/Tz5Kaup2 # Reference: https://twitter.com/FewAtoms/status/1221057533625819136 windowsdefendersecurefilesofficesnetwork.duckdns.org windowsdefenderserversecuresofficew.duckdns.org windowsdefenderserversecureserver.duckdns.org windowsdefenderserversecurity.duckdns.org windowsdefendersecuirtysystem.duckdns.org windowsdefendergatewayweb.duckdns.org windowsdefenderprotection.duckdns.org bbo7376.com lounge-fumi.com luminaryproductions.com msp29-05.com ahjqny.net aslihansaygili.com highvaluenames.com iambookworks.com josephinegreenz.com oscarwrong.com 47bh.com 51airuyi.com kapai360.com chengkeff.com cjproducts.biz differently.us jcbbi.com 3i-j-f6rr.com s8va.com couplesense.net kingdomofspace.com nnnhg.com openrprise.net pojokpas.com theexchangere.com werberoboter.com mccannproduction.com afjkz.com baodian.ink gridhopper.net howeitservices.com keralahills.com peufclothing.com pursemtb.com # Reference: https://twitter.com/b4rtik/status/1219924865643438080 # Reference: https://app.any.run/tasks/1b0fdc77-aa65-4b35-8d97-4f85d93d992f/ conorhennessy.com crowdedfuture.com ariestikto.com emergentfamily.com dhnfv.loan yourdreamhunter.com eb1579.com nercox.com prepareforyourretirement.com nextmobility.news ahcdentaled.com actigy.com hirexr.com chefkennethclay.com # Reference: https://twitter.com/James_inthe_box/status/1220381091988529153 # Reference: https://app.any.run/tasks/e26f7e65-482e-40fe-8423-38c1ba03b09d/ windowsdefenderserversecuresofficeiq.duckdns.org joeing.rapiddns.ru hd5088.com 13622days.com moz-cafe5thst.com # Reference: https://www.virustotal.com/gui/file/67bac2e45fce51b88afbf7215a1ea27fbbea871279b29d293e1e7423c297c134/detection frehan.com mutlulukicindahacokkadikoy.com # Reference: https://twitter.com/wwp96/status/1222229357181140992 healthyroot.net mp3kaka.com msdcong.com reloadexplode.com syslinctalk.com westsidewifi.com # Reference: https://twitter.com/James_inthe_box/status/1222544907358720000 windowsfirewallsecurityauthorise.duckdns.org # Reference: https://twitter.com/wwp96/status/1222625150438453250 mandat.online saseolocal.com cryptostrongbox.com nyoxibwer.com resistmagazine.com # Reference: https://twitter.com/wwp96/status/1222642415405871104 civilinspector.com dremtnw.com # Reference: https://twitter.com/wwp96/status/1223326386234044416 zdmania.com realcapemay.com joxiny.com qgptgj.com ridingpassion.com catbaoceancruises.com 374cb.com # Reference: https://twitter.com/wwp96/status/1223330896931106822 whatsonprimevideo.com whwgkj.com gztla.com liturgyofthebrokenhearted.com # Reference: https://twitter.com/wwp96/status/1224412305577869312 fabinx.com thevendredi.com americanmotorwerks.com iraqios.com verkaufsfunnel.com thebroadcastblueprint.com # Reference: https://twitter.com/wwp96/status/1224430085064753158 tcszht.com nyoxibwer.com lslhm.com changelly.store kang-120.com # Reference: https://twitter.com/wwp96/status/1224431371751325696 pinoconsulting.net trn-harbour.com # Reference: https://app.any.run/tasks/02addc72-ea33-443b-b3ae-f4d72ef11ee6/ skylerfarm.com # Reference: https://twitter.com/wwp96/status/1224707855116382210 petrankampaamo.com parknroll.biz nyoxibwer.com emtark.com hemingway.site # Reference: https://twitter.com/wwp96/status/1224785418991947781 pinoconsulting.net colonnashipwest.com trn-harbour.com # Reference: https://twitter.com/wwp96/status/1224784499294248966 fenglingad.com lux.institute tradingforexjourneys.com outsidegraphics-cs.com dottortech.com rfpartnernetwork.com # Reference: https://twitter.com/wwp96/status/1224781167615975424 ukraivin.net sachmoi.info allworxx.com ownbitcoin.net dremtnw.com theclyo.com cleanyourdesktop.com # Reference: https://twitter.com/wwp96/status/1225529957935390720 madisonroseholtze.com softlanders.com bluecottonhome.com apachedrone.com regular123.com divineandrefined.com # Reference: https://twitter.com/wwp96/status/1226920846255689730 hypochrome.com yansixiang.com skateroads.com benh-lau.com mansiobok.com thebeseenproject.com nationalcaretrust.com # Reference: https://app.any.run/tasks/ad0cfeed-aeb4-4757-bd46-db615025bf05/ qingxunmao.com rzjie.net softgelatobusiness.com morita-m.info lovelyfeed.com vanistihdam.com jjuecorp.com cvvpp.info befindnewcarhub.live xn--9d0bt6kvvhi2dq06a.com # Reference: https://app.any.run/tasks/9fafc927-138c-4dcd-978c-6e0d3cb4937e/ liexiaoyu.com gazoly.com ihrpro.info mycoins.online keautotech.com xiaoqiug.com tialpha.net ghostwood.coffee washingtonwarrior.com # Reference: https://app.any.run/tasks/57365b94-44cd-4994-b49b-95f6d9542ee1/ chnwsdyglobalwealthandreinforcementagenc.duckdns.org know-how-products.com smfinanse.com lost-cats.com greenpathconstructionllc.info livreslive.online seedsofgreen.net taoyishun.com tahoe777.com gzakyy.com # Reference: https://twitter.com/wwp96/status/1227989980724826114 nfocorpventures.com zhangshazngmingzhu.com josieandmichael.com ionamin-international.com blackgirlmagicschool.com # Reference: https://twitter.com/wwp96/status/1228050542238326788 dbprimery.com mamaheartandhomeblog.com slacktracks.info madkrazyworld.com salienttraining.com # Reference: https://app.any.run/tasks/18d33a1b-b272-4f3a-b1f8-7743b7282dd9/ 0g1ninefall.men 5799j.com 9660123.com acbce.com airpopgrip.com claimookup.com dinu.ltd downesbuildco.com heartpotatoes.com hpnairportinfo.com jackedsonadamsarts.info koozest.com minjian-edu.com mz779.com regular123.info the-littlemenu.com tnt-tunnel.com # Reference: https://twitter.com/Jouliok/status/1228271357995180033 # Reference: https://app.any.run/tasks/69ab10fe-4ddd-420a-8f8b-39b240c313d9/ 23oakgrove-malverneast.com 6oclocksupperclub.com dovfaq.com dynamicmovementmassage.com editionlevel.services fichamed.com gsjhzs.com humanityinneedcharity.net kel1erindia.com lostrabajosylosdias.com trybestinteligen.world valdezoktoberfest.com wildfolkcreations.com # Reference: https://otx.alienvault.com/pulse/5e468cf0019b4ecbc557f209 7565657.com 908763.com barrolahl.com bhjksc.com bowriverrustic.com canhocaocaplavidaplus.net chenyirail.com christopher-cloos.com discerningdomains.com goodsystem4updating.win josieandmichael.com manguifajas.com mjarvis247.com msdcong.com naturegang.com phoenixtalons.net tzxymygs.com unsdgs-ottawauniversity.com zhangshazngmingzhu.com # Reference: https://twitter.com/wwp96/status/1228366299048431618 ulxery.com jackhaworthmortgage.com stairsstickers.com flutterbags.com phaypro.com thermalguardfoam.com seniordaters.com # Reference: https://twitter.com/wwp96/status/1228355644547309573 594cb.com glamotr.com khanebazi.com saudirana.com siarelco.com # Reference: https://app.any.run/tasks/78ad3a12-6d82-46a8-9035-cecdf8b23e6f/ ribbonlogistics.com brighidreppertdesign.com szbestvision.com ungtekno.com produitsbio.net quidoz.com asdfcard.com huanglingmianfen.com thesalsakitchen.com marcelorey.com deadbeatcosmetics.com lucasws.com enesodaci.com haierjiebest.com # Reference: https://twitter.com/cyber_gato_malo/status/1227997377807691777 simonzjewelry.com naturegang.com bjhmsp.com moralloki.com # Reference: https://twitter.com/reecdeep/status/1229390645355261953 # Reference: https://app.any.run/tasks/c9bb2639-adbe-40b9-b066-8e39cf1f1522/ yuanzhitang.com aab1.top ldot.ltd lhdhwpc.com oneillfilms.com lwqkssdz.com nigi.ltd northbridgeweb.com pressurebattery.technology # Reference: https://twitter.com/wwp96/status/1229806436403830784 daditbetter.com glamotr.com rxqp1.com # Reference: https://twitter.com/wwp96/status/1229846047066927105 osplans.com mediconthemove.com iamkantha.com gpiventures.com flutterbags.com sandcherrystables.com ulxery.com # Reference: https://twitter.com/notajungman/status/1230210986554134528 # Reference: https://app.any.run/tasks/8b09a8cf-d3f8-4ffe-9b20-c35ba8622110/ 3i-lnfotech.com bmsay.xyz cmsay.xyz erasmus-france.com etliekmekkonya.net gnamall.com itisdue.com koukoudaikou.com laffsaturday.info mcats2379.com oku.world patientsportstips.com pervade.info rdllb.info samiceramic.com us1china.com xn--3e0bv81a2rhx9e.com zhejiangft.com # Reference: https://twitter.com/wwp96/status/1230224137534214144 dronv.com graememitchley.com mobileadscontrol.com # Reference: https://app.any.run/tasks/1909e9e2-6ac6-474a-8589-5a0051e662da/ michaelsdbablog.com # Reference: https://app.any.run/tasks/b4adadc1-a270-4da7-9882-fb66ce7e03ca/ vertikutierer24.info caryxo.com uniquecutters.com tatatusupports.com # Reference: https://twitter.com/JAMESWT_MHT/status/1230862696024858625 # Reference: https://app.any.run/tasks/b7bb5802-1357-4ec9-aeff-e023c9c5acb9/ njagongsik.com lytcjz.com radark.company iphonextrade.com ysitem.com gyeswu.info quanziplus.com # Reference: https://app.any.run/tasks/ed82b375-be11-4ecd-ab76-b86d11c9ed83/ based789.top ctrip.chat doingjobs.com # Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Formbook) emizard.com hoscury.com kabsolug.com monkalef.com oyishu.com pursemtb.com scaker.com shaxob.com # Reference: https://twitter.com/James_inthe_box/status/1231962545222647809 msofficeinternatiinalfilecloudtransfer.duckdns.org # Reference: https://app.any.run/tasks/098ba1ab-160a-4270-88f2-976134f289e1/ theking.kim kinakogohan.com testingtimes.info ulxery.com xn--gzra.com paintmywedding.net healtphere.net specialityhomes.com jacobgb24.info wqsfc.info hidrosalud.life ticketcerto.com # Reference: https://app.any.run/tasks/aa5e7383-71e7-450f-94e6-8fd7e1350c4b/ riverdalestandard.com cncsurplusparts.com estrellahuang.com 023yuechang.com ricard-sameofficeial.com ulxery.com genxewm.com hqygyg.com sachthudo.com kinakogohan.com zjvod.info pigeche.com # Reference: https://app.any.run/tasks/b80a84c7-35a1-4308-b688-2f85cfd29297/ thuyhoangcoto.com viwdfw.info anastasiasfantasy.com bdplaza.com athinasailing.com nyoxibwer.com js-no-tec.com kanglaotou.com focus-ecommerce.com cheap-clothes-for-women.site markmackoart.com # Reference: https://twitter.com/JAMESWT_MHT/status/1232295249306845185 allixanes.info apuestactiva.com boozebird.com crosbybowsercoleman.com cryptozia.com knowledgedrum.com mymandan.com shirtsformanagers.com silverhill.net sundogsupply.com sxmbh.co upstatecardprocessing.com # Reference: https://twitter.com/wwp96/status/1232410976147922944 homesecuritysystemsny.com medd.site czhyzy.com ulxery.com technologyspoon.com glasgowcourtslawyers.info # Reference: https://twitter.com/wwp96/status/1232409688110718977 affectcbd.com hzcmhm.com mscgrroup.com thumdyn.com wlmqmbwx.com # Reference: https://twitter.com/wwp96/status/1232395733900374017 canada49ac.com dev-ops.us onechere.com # Reference: https://app.any.run/tasks/f27ab2f5-f0d3-47e1-9081-5964e9a05b4e/ 477ope.com 150gpa.com shukastu.com caryxo.com 37collingwoodst.com xolcoin.com # Reference: https://app.any.run/tasks/448d9f9b-af58-4a95-a317-77e4f6d86dd3/ mudanyadaotel.com conmdemamen.com sgcpic.com caryxo.com 150gpa.com codeedge.net leletaovip.com zaco.top barrio-libro.com # Reference: https://app.any.run/tasks/cf45229c-410d-499a-8577-927c5c33bfa5/ carrotaller.com 1523sussextpke.info enpuntoni.com 830manbet.com alkcz.link republlcco.com worstig.com provinciaricaurte.com vwabo.info # Reference: https://twitter.com/1ZRR4H/status/1232441079837777920 snbnamibia.com # Reference: https://app.any.run/tasks/9b6cfba3-3edf-4044-b6d0-90690afa5cda fitgime.com allixanes.info ugot2b.com # Reference: https://twitter.com/killamjr/status/1233714210816704512 americancloudfiletransferprogramin.duckdns.org # Reference: https://twitter.com/wwp96/status/1234505353527689218 modernboot.com/h2o/ decormagz.com/h2o/ elomafus.com/h2o/ amitywomenspt.com/h2o/ agitatorfactory.com/h2o/ # Reference: https://twitter.com/wwp96/status/1234512894588575744 auroraexpres.com/m5g/ sluttychefs.com/m5g/ resplendentsoul.com/m5g/ jxpingji.com/m5g/ angryfatman.com/m5g/ singlechimp.com/m5g/ mainahao.com/m5g/ # Reference: https://twitter.com/wwp96/status/1234523991739596801 worstig.com/kx9/ carrotaller.com/kx9/ worstig.com/kx9/ christinamjkim.com/kx9/ guidaalluso.com/kx9/ # Reference: https://twitter.com/wwp96/status/1234511070146027527 quidoz.com/r30/ 9227kkk.com/r30/ sellanews.com/r30/ gominou.com/r30/ woodruna.com/r30/ andlynweb.com/r30/ tributenora.com/r30/ casaboquete.com/r30/ # Reference: https://twitter.com/wwp96/status/1234926865556606978 carrotaller.com/kx9/ showshow.club/kx9/ guidaalluso.com/kx9/ foodindia-bysial.com/kx9/ sebengriffin.com/kx9/ christinamjkim.com/kx9/ # Reference: https://twitter.com/wwp96/status/1234931238076657665 vinoblay.com/tx3/ sexualitymenshop.com/tx3/ healingherds.com/tx3/ ricsawproperties.com/tx3/ # Reference: https://twitter.com/wwp96/status/1235242516825415687 # Reference: https://app.any.run/tasks/081940ee-da4b-4466-bd9b-66a6aeb1268c/ psychesiren.com/j9t/ bigdickfuckgay.com/j9t/ 7565657.com/j9t/ zhangshazngmingzhu.com/j9t/ vulcan-mania.com/j9t/ momvibez.info/j9t/ ionamin-international.com/j9t/ # Reference: https://app.any.run/tasks/119740cc-d4b5-46b1-94dd-6090a2d07f6d/ americancloudfiletransferexcelfile.duckdns.org # Reference: https://app.any.run/tasks/ce4cc99b-3e9f-437d-bdc2-e15229b8ae73/ shgshgsndy6nationalindustrialgoogleklm.duckdns.org # Reference: https://twitter.com/wwp96/status/1235249891904978946 # Reference: https://app.any.run/tasks/41796c37-40c8-49a5-8581-66a24fdf2f5c/ fulltimepreschool.com/q0s/ trianting.com/q0s/ gpiventures.com/q0s/ shipinluoliao.com/q0s/ flutterbags.com/q0s/ lefongplaza.com/q0s/ ulxery.com/q0s/ # Reference: https://twitter.com/wwp96/status/1235585908637868032 proofresearch-germany.com/e8p/ import945.com/e8p/ 4lcoin.com/e8p/ combscollisioninc.com/e8p/ xn--s80b57jcsde6fcyau51f.com/e8p/ # Reference: https://twitter.com/wwp96/status/1235950654524448774 costabravadoctors.com/ot2/ eventierspace.com/ot2/ naturehealingshop.com/ot2/ asyule225.com/ot2/ lazydoona.com/ot2/ vlemi.com/ot2/ norjax.com/ot2/ triom.tech/ot2/ # Reference: https://twitter.com/wwp96/status/1235968366680117249 classiccurtainskent.co.uk/kx9/ enpuntoni.com/kx9/ breakapp-view.com/kx9/ worstig.com/kx9/ thepilltheplay.info/kx9/ myattendance.today/kx9/ # Reference: https://twitter.com/wwp96/status/1236013793290878976 amistadcristianairapuato.net/zy8/ sousvidemasters.com/zy8/ parosbet.com/zy8/ dronv.com/zy8/ dgsellsrealestate.com/zy8/ fjellburet.com/zy8/ prboatrentals.com/zy8/ # Reference: https://twitter.com/w3ndige/status/1237078724786479104 # Reference: https://app.any.run/tasks/9ee06ab6-2741-4547-bd64-3437c241b3cd/ officearchives.duckdns.org sommernph.com # Reference: https://twitter.com/wwp96/status/1237107769129553922 # Reference: https://app.any.run/tasks/7ec58842-7c33-4623-8c5a-6058074b45b9/ ssquid.net/mr02/ aoikyoutei.com/mr02/ cqyongs.com/mr02/ samuraisracing.com/mr02/ grievingly.com/mr02/ discountsclicks.info/mr02/ wanyaobxg.com/mr02/ 808korean.com/mr02/ # Reference: https://twitter.com/wwp96/status/1237460282647199745 # Reference: https://app.any.run/tasks/6b3c7009-01ec-4739-9d54-9d2d8320d6a1/ junhao12131.com/r30/ milar.farm/r30/ kalpnacaters.com/r30/ quidoz.com/r30/ lumencos.com/r30/ andlynweb.com/r30/ trekofpersia.com/r30/ ilyakids.com/r30/ # Reference: https://twitter.com/wwp96/status/1237458425287712768 # Reference: https://app.any.run/tasks/4b7ada4b-f96d-4516-b9e3-54ef9dc4bf33/ sidinstitute.org/ri01/ whatareyousoafraidof.com/ri01/ trumpcoin.online/ri01/ me-mart.com/ri01/ discountsclicks.info/ri01/ longrunohm.com/ri01/ 34lv.com/ri01/ # Reference: https://twitter.com/wwp96/status/1237466791322046464 # Reference: https://app.any.run/tasks/2b83d26c-b74f-4ed2-8929-5d9df254ddd0/ 5554975.com/l89/ nercox.com/l89/ unicigar.com/l89/ raztrans.com/l89/ drousehair.com/l89/ # Reference: https://twitter.com/wwp96/status/1237477304009240576 # Reference: https://app.any.run/tasks/bd661e9c-92a8-4508-b3b0-1f8ecd380e55/ 808korean.com/mr02/ discountsclicks.info/mr02/ ssquid.net/mr02/ planetmecharnical.com/mr02/ samuraisracing.com/mr02/ bulmmaf.com/mr02/ yibo.ltd/mr02/ # Reference: https://twitter.com/wwp96/status/1237485063366942722 # Reference: https://app.any.run/tasks/b0178458-4783-4cdc-bf95-0683c92e775f/ crokve.com mix2025.net midasrxpharmacy.info kreasidesain.com livelifeoutonalimb.com linkseepay.com # Reference: https://twitter.com/wwp96/status/1237487962566393858 # Reference: https://app.any.run/tasks/50b155ce-7d71-4f09-b3d6-6c6236722c9f/ aprils-website.info/r30/ sipenyuluh.com/r30/ buy-cyprus.com/r30/ appsdidi-secaccount.com/r30/ sellanews.com/r30/ fidem-consecuta.com/r30/ woodruna.com/r30/ # Reference: https://twitter.com/wwp96/status/1237802222991413258 # Reference: https://app.any.run/tasks/f4e1007c-482b-49b7-a972-abeabe34af29/ cutdream.com/kx9/ showshow.club/kx9/ christinamjkim.com/kx9/ myattendance.today/kx9/ guidaalluso.com/kx9/ # Reference: https://twitter.com/wwp96/status/1237794145940525057 # Reference: https://app.any.run/tasks/b3b3beef-bb19-4343-b078-7fb1e923873a/ leaseloveown.com/l0x/ bridalphotographystudio.com/l0x/ doverax.com/l0x/ ecomcollege.com/l0x/ teetailz.co.uk/l0x/ # Reference: https://twitter.com/JAMESWT_MHT/status/1238078045027794944 # Reference: https://app.any.run/tasks/69676e2c-6f89-463a-be79-1c26e03fc734/ ariafm.gr flammaart.com isome2018.com opebet199.com # Reference: https://twitter.com/malwrhunterteam/status/1239863667409276928 mastervisacloudesystemprtomicrosftwareus.duckdns.org # Reference: https://www.virustotal.com/gui/file/be3cfbf10a732af9965dab5b769ef622233eeca26dc1a3e541326e7ce6788bab/detection indexcalbromarisportallservices.duckdns.org # Reference: https://app.any.run/tasks/83bd9eb8-7e5a-43af-b131-361590b336b5/ freehobbysolutions.com moswanted.com votravo.info # Reference: https://twitter.com/FewAtoms/status/1240322356880576513 msofficewordfiletransfertotheadmintrue.duckdns.org # Reference: https://twitter.com/Jouliok/status/1242187207588405248 tescohomegroseryandelectronicstday2store.duckdns.org # Reference: https://github.com/silence-is-best/c2db#formbook liuhe127.com # Reference: https://twitter.com/JayTHL/status/1242196123848245248 # Reference: https://pastebin.com/raw/8qSuUVB4 1ameem.com 1billionhappy.com 1billionwell.com 5product.com 60apexchecks.com 60checks.com 6figurepayraise.com abillionhappy.com abillionwell.com acton.in actonlabs.in ahcprheumatology.com apexasset.io apextech.biz apextech.info apexworld.io apexworldlaunch.com apexworldlaunch.tv ashfaque.me atefehjewellers.in auracoolum.com.au awakencharlotte.com bellkrank.com beonbeauty.co.uk bestexoticdogs.com brandon--sellers.com bunkworks.co.uk cakesque.com caraconsulting.services careandcompanion.co.uk caribbeanwebfestival.com classysun.com classysun.info classysun.net clownpenis.solutions colwellandcolwell.com comfortzonemarketing.com coronadocobshop.com crystalindiainfra.com danandrobbie.com davidhareart.com dealerships-suck.com dianetyrrell.com diyajewel.com dotadois.com drkswrks.com dubaiexoticdogs.com earn60apexchecks.com earn60checks.com earn60techchecks.com epica.life epicassets.info epicassets.io exoticmicrobullydogs.com exoticmicrodogs.com expertsat.io fidatoo.in finalclear.com funerarianevarez.com get60checks.com getservices365.com globonovo.com gmshorses.com golitech.com goodygifter.com goteamdeveloper.com grandmascheesecakes.com griotplus.com harvestyourownhemp.com haula.net helo.life heloworld.us henready.co.uk hilaryreading.com houseprof.ca iamallin.com iamhappyandwell.com ilearner.com.tw incrediblykayla.com iowabaseballranch.com iqteamfreedom.com iqzoom.us isai4me.com islandspect.com isthisforme.com isyys.net janfitzpatrickhomes.com jeremyroma.com jointhecoinclub.com jonicablog.com kamanait.com kimmys.com kimmysrestaurant.com kinderism.org korling.de labaccidenttheband.com levatemediamarketing.com lifetech.io lilannie.com livecryptostatus.com magnabusinessconsulting.com martinidewinter.com matchmymatrimony.com memeingoflife.com middlewaremaniacs.com mil-leon-clothing.com milleonclothing.com millionairebootcamp.io mohanlakshmipathy.com moist-towelettes.com moneyiq.tech mortgageclaimscentre.co.uk mustbenyce.com mybtcdeposit.com mymoneyiq.io nanghtikeaung.com nashvilleeastrentals.com natureswebb.ca newchain.io neweuphoria.com newlotions.com nicegirl.nyc ninewestfinancial.com nitramax.in okayspark.com ollie-wood.com pennyfables.com perilli.com pharmdcareers.com pippingstudio.com primegusclub.shop psychotherapyandcounsellingmelbourne.com rashtraudhyog.com reliefcbg.com repdestroyer.com repdestroyers.com rerecall.com rhumboogie.ws richdeboer.com rollingwithjoe.com romasboutique.com rubell.nyc rubellmanagement.com ruhiz.fashion rushcode.in secautotransport.com shittlez.com simonmiminis.com solosugiero.com steelecreekpresby.com sunshinecoastmow.com.au switchuations.life taichibham.org td.world thaomoctrungdong.com thebrainworkacademy.com thebulldogpubgrille.com thecottagepiecompany.co.uk thedistractedwriter.com theellisgroupholdings.us therealworldchangers.com theroommom.com thesuccessalliance.in tmpist.com tnmedonline.xyz topexoticdogs.com totheranchandback.com transforselogistics.in trizle.com tylascountrygarden.com uberspace.co.in umidaroma.com urbnwarrior.com vagastophostels.com waldorfian.com wisconsinmicrogreens.com # Reference: https://app.any.run/tasks/847e1945-3b02-422f-8030-5722b20ffc44/ rogerssmarthealth.com ahzike.com sonnensteinwasser.com alxbrtn.com # Reference: https://www.virustotal.com/gui/file/6fe43863e02d4a6fb20cbb2c2ad39368abef81636f597da94f7234af2dea47e4/detection 0573sghp.com/sm02/ 44exex.com/sm02/ discountsclicks.info/sm02/ istikhara786.com/sm02/ labo10.com/sm02/ lifflander.net/sm02/ piczum.com/sm02/ piknus.com/sm02/ selfieblast.com/sm02/ sluas.com/sm02/ ventouse-carrosserie.com/sm02/ wulkan-mania.com/sm02/ # Reference: https://www.virustotal.com/gui/file/ec7d04da5408d773d949a47cdbbe102b5548ca7358b8d6bf677c3033df5bf04f/detection athlete50.com/cs2/ govaj.com/cs2/ htma.us/cs2/ jinshengintl.com/cs2/ movingtowardsmeaning.com/cs2/ shengdestone.com/cs2/ susapflug.com/cs2/ vaisnavalife.com/cs2/ yb77777.com/cs2/ # Reference: https://twitter.com/FewAtoms/status/1243249736662028288 systemserverrootmapforfiletrn.duckdns.org # Reference: https://www.virustotal.com/gui/file/bc000ae8600c8e6fadceb92af23b0f929ec90ea9184675428f88c01b61af6c63/detection 2070pe.com/te/ crisngrt.com/te/ jlzbtx.com/te/ kranche.com/te/ # Reference: https://app.any.run/tasks/cc60c746-1cf8-4adf-8055-4964111c1c9f/ catalinacustomcreations.com/y8r/ # Reference: https://twitter.com/58_158_177_102/status/1245619205833031683 # Reference: https://otx.alienvault.com/pulse/5e8618aa07d72250efbcc853 grabascoop.com/e8p/ # Reference: https://www.virustotal.com/gui/file/c07e2d84c2f5cef7c52c89516cddb219451e2ca0a9bc8c2c98a438cd16db351f/detection alarmaconhumo.com/zu/ episdenergy.com/zu/ kervax.com/zu/ lautrevision360.com/zu/ medialab-infos.com/zu/ nadirezeki.com/zu/ twfutures.com/zu/ viviselfie.com/zu/ xinheguoji.com/zu/ xinyanjiazheng.com/zu/ # Reference: https://www.virustotal.com/gui/file/616662d9be4b626c73d56cdd6ab4992dbe124de7ce8769630da99397087eea3f/detection kervax.com/nu/ networkmarketinghq.com/nu/ zswei.com/nu/ # Reference: https://www.virustotal.com/gui/file/d31f7974458508d491e0840db4385c5a38731195cae24a891abb24bb4699c9b3/detection cambridgehomeimprovements.com/nu/ # Reference: https://www.virustotal.com/gui/file/125a3d4bdb49a67bb4a9dfb6a7c3a09f82083392a76ea1b5cec87bb477ca6bda/detection bowerbirdnest.com/nu/ mauritiusurlaub.com/nu/ # Reference: https://www.virustotal.com/gui/file/24a1fd76b3daece9142d9ec00807f9bf1bb15831bf72646f013464c8dd94acd1/detection buildthemind.com/ej/ chuanyuemeili.com/ej/ goldmanjewelers.com/ej/ kervax.com/ej/ kevincurley.net/ej/ newconnectbiblestudy.com/ej/ # Reference: https://www.virustotal.com/gui/file/5d7a56e18e95592673a4c922d86375a168e695966502007cb6b67c1bcc0f16b8/detection kervax.com kervax.com/dy/ traumainformedlens.com/dy/ varolemlak.net/dy/ # Reference: https://www.virustotal.com/gui/file/7e756510a7ed412001857c371cafb5af3158eb0a73c9b51eb5823d9002c7d3a8/detection dalu.ltd/gh/ purespeech.net/gh/ # Reference: https://www.virustotal.com/gui/file/1c57ad28bc07997adeb829bda45513521d95fe2c6880736f69fa701828a30255/detection cricketxtreme.com/sk/ dikaiyun.com/sk/ hypno.solutions/sk/ kervax.com/sk/ playlanddaycare.biz/sk/ tunegeartech.com/sk/ ukholidayhome.com/sk/ ybsankeshu.com/sk/ # Reference: https://www.virustotal.com/gui/file/af14c1c7562021939f0a68e699a3ba28e26cb6d8d12e8df2c8ca4deba6ceacd7/detection dalu.ltd dalu.ltd/gh/ fangjiedaikuan.com/gh/ kervax.com/gh/ massimogirardi.com/gh/ shiweitian.net/gh/ vidolin.info/gh/ # Reference: https://www.virustotal.com/gui/file/fc9be600e3961102a93f5096cac156c1be7e875af98e12ab4f85698f8442475b/detection byhisgraceestate.com/sh/ comet-sunsun.com/sh/ honeyanda.com/sh/ kervax.com/sh/ maltafarmhouse.com/sh/ shciicoe.com/sh/ zpjrt.com/sh/ # Reference: https://www.virustotal.com/gui/file/3e85d65f5ea95309ad331f5c371449ae85bad3efd0e272b3983377f54a5dee32/detection fensier.com/sh/ kervax.com/sh/ lapanganpoker.com/sh/ lex-investigations.info/sh/ napshoes.com/sh/ sunbul-phone.com/sh/ umrah-visa.com/sh/ # Reference: https://www.virustotal.com/gui/file/47b251c6e857843db7f377471c90ec48d3ea0f0f5ced461aebf607644815f181/detection byhisgraceestate.com/sh/ cbd-innovation.com/sh/ eba-ecoenergy.com/sh/ sabetta.family/sh/ # Reference: https://www.virustotal.com/gui/file/b066282209652ab35d7f93ce103b33b06a10e9d4b74e1ea3263466e2789b422d/detection dharmaworksonline.com/gh/ dukabcn.net/gh/ fangjiedaikuan.com/gh/ gppz999.com/gh/ kervax.com/gh/ mirinavsgorgon.com/gh/ niyoufan.com/gh/ yinstkd.com/gh/ # Reference: https://www.virustotal.com/gui/file/bb8d0853cb0dad63c6098031f2166ba7171259efc5ce83968bdf121cfdff8763/detection # Reference: https://www.virustotal.com/gui/file/21deeba7640f04a0149d5bd890d8a638c1e126e82c49d0d04a5fcf42c3e5af75/detection 5injlq.com/wi/ 720wangzhan.com/wi/ adjointlab.com/wi/ adskitchen.com/wi/ ashishtank.com/wi/ backroomcoffee.com/wi/ cbelleza.com/wi/ chocoval.com/wi/ formattressesok.live/wi/ iron-rain.com/wi/ jamaltooley.com/wi/ janeadamwedding.com/wi/ kervax.com/wi/ lec88.com/wi/ lingnuoguanjia.com/wi/ mengxiangfengcai.com/wi/ musicbyrivals.com/wi/ nvwang41.com/wi/ pg5-formations.com/wi/ tinymarvels.com/wi/ understandingbitcoin.info/wi/ web-design.review/wi/ wm-sb.com/wi/ xyfps.com/wi/ zen507.com/wi/ # Reference: https://www.virustotal.com/gui/file/e97f3ad278b659df4d30bf8181f0698562342e7c03a5a1d41bc601856b2b725c/detection claddingsheets.info/m01/ coinpon.biz/m01/ kervax.com/m01/ listingclose.com/m01/ ructious.com/m01/ rustedcrate.com/m01/ yczpsh.com/m01/ zeroabuseproject.info/m01/ # Reference: https://www.virustotal.com/gui/file/627b93e8da6daaee1b32bc527ca60f79c501ecd0a3a820fc2a7dea588a795f24/detection 2enablehealth.com/jw/ amindfulearth.com/jw/ janainaerobson.com/jw/ kervax.com/jw/ spaceteamentertainment.com/jw/ sweetsenbake.com/jw/ twz1982.com/jw/ xyi876.com/jw/ # Reference: https://twitter.com/James_inthe_box/status/1249767134269304835 masionlex.info # Reference: https://twitter.com/James_inthe_box/status/1250077975803916288 thamxop.net # Reference: https://twitter.com/FewAtoms/status/1252947093171441665 systemintergrafileexchangeserverprotocol.duckdns.org # Reference: https://twitter.com/petrovic082/status/1255122599354552323 thesecuritysoftwarescannerindustrgreat.duckdns.org # Reference: https://www.virustotal.com/gui/file/9dce0e1dfbf676137ce1e57f626ad4911056a18c8bdc76f8c3d9b6eaff117092/detection blkdotconnect.com/t8a/ cufusionevents.com/t8a/ guojizk.com/t8a/ jakedfinkel.lawyer/t8a/ pikio24.com/t8a/ radioncr.com/t8a/ spenbulk.com/t8a/ # Reference: https://app.any.run/tasks/8c381564-3161-42e7-8e91-142990fe4717/ # Reference: https://app.any.run/tasks/6a7d9731-d5de-42ed-85d7-84bc2866196d/ # Reference: https://app.any.run/tasks/ee7b9409-b311-4152-bcea-885e2f055215/ 1l4m-5qeh0cgx9a.com amazingthunderworks.com badnoordzee.com cosmemia.com cryptofinance.services devereaux.us empety.com garden-scope.com godhep.com hamptonandjones.com hulebang.com jiudianhuixun.com keeperofthebeesnwnj.com mangaromance.com myplusha.com odjmusica.com portsel.com quantumreapers.com schoolofintrovertship.com sippingnpaintingcolorado.net storeketo.com studio815.salon supremeondemand.com vannuysland.com wyalusingbeverage.com # Reference: https://twitter.com/DynamicAnalysis/status/1260721412773380096 russchine2specia21plumbingsndymaterialjp.duckdns.org # Reference: https://unit42.paloaltonetworks.com/silverterrier-covid-19-themed-business-email-compromise/ 12kungwsdyducationaldeveloperinvestmenty.duckdns.org 6uniteddefenceforstdygorvermentsocialeme.duckdns.org americanmicrosoftclouddepartment.duckdns.org antipiracydetectorganisationforwsdy3film.duckdns.org bbchenkotsdywoolandpappercompanybnhs5.duckdns.org chinoex2onlineantibullyandgeneralxpstdy5.duckdns.org chnes9wealthandstdyorganisationsumit.duckdns.org chneswealstdy8thandorganisationjokbo.duckdns.org chneswealthandorganisationstdy7joppl.duckdns.org chneswsdy13wealthandmoduleorganisationrn.duckdns.org chneswsdy8wealthandorganisationjokbo.duckdns.org chnfrndsecurityandgorvermentstdy1socialf.duckdns.org chnfrndsub1inteligentangencysndy4project.duckdns.org chnfrndtsdysecurityandgorvermentsocialjf.duckdns.org chnfrndwsdy1securityandgorvermentsocialf.duckdns.org cloudfilesharingdomainurllinksys.duckdns.org crimedetectivefor1stdygorvermentndsocial.duckdns.org empowermentorganisationstday1government.duckdns.org engin3worldstdydevelopmentandtechnology.duckdns.org engintsdy3worlddevelopmentandtechnology.duckdns.org fileexchangeserverprotocolsystemintergra.duckdns.org filegotosecureothers.duckdns.org frndgreen1frdycreamcostmeticsladiesshop.duckdns.org frndgreen3creamwsdycostmeticsbabystored.duckdns.org globaltransfersecurefilethroughcloud.duckdns.org green9wsdyelectronicsandkitchenappliance.duckdns.org investmenteducationkungykmtsdy8agender.duckdns.org kung11ducationalstdydeveloperinvestmenty.duckdns.org kung13eduationalstdydeveloperinvestmenty.duckdns.org kungeducationalinvestment8tusdyagender.duckdns.org kungfrdyeducationalinvestment8agender.duckdns.org kungglobalinvestmenteductgpmstdy8addres.duckdns.org kungglobalinvestmentjpjeductaddres5stdy.duckdns.org kungglobalinvestmentjpjwsdy6eductaddres.duckdns.org kungstdy7globalinvestmentjmpeductaddres.duckdns.org kungwsdy7globalinvestmentjmpeductaddres.duckdns.org livevideoremoteconference.duckdns.org mastervisacloudesystemprtomicrosftwareus.duckdns.org msofficeinternatiinalfilecloudtransfer.duckdns.org msofficewordfiletransfertotheadmintrue.duckdns.org office365securefilegatewaytransfer.duckdns.org omentradinginternationalprivateltd.duckdns.org prodigtsdy5organizationalcompanygroupin.duckdns.org russchine2specialstdy1plumbingmaterialsv.duckdns.org russchine2specialstdy2plumbingmaterialgh.duckdns.org russchine2wsdy1specialplumbingmaterialsv.duckdns.org russchine2wsdyspecial6plumbingjkmaterial.duckdns.org shgshg13nationalwsdyobjindustrialatempt.duckdns.org shgshg9nationalobjwsdyindustrialgoogler.duckdns.org shgshgnationalindustrialwsdy8googleklm.duckdns.org shgshgnationalobjindustrialstdy10atempt.duckdns.org shgshgnstdy7ationalindustrialgoogleklm.duckdns.org shgshgstdy9nationalobjindustrialgoogle.duckdns.org silentexploitfileexchangerzeroday.duckdns.org tescogroseryand1wsdayelectronicstorehome.duckdns.org tescohomegroseryandelectronicstday2store.duckdns.org tescostday1groseryandelectronicstorehome.duckdns.org webxpostdytechnologyhardsoftware5buyers.duckdns.org wewewewewesesesesasbacwederffggffddsss.duckdns.org windowsdefenderwithfiewallprotocolsecure.duckdns.org windowsfirewallprotcolsecuritysystem.duckdns.org worldengindevelopnw7stdymenttechnology.duckdns.org # Reference: https://twitter.com/luc4m/status/1261260538870366210 6wsdychinese2profesionalandhealthanalpn.duckdns.org # Reference: https://news.sophos.com/en-us/2020/05/14/raticate/ ef-oh.com/c208/ odoyo.net/c208/ hearee.com/c208/ binzom.com/c208/ pizzans.com/c208/ phochain.com/sa/ rdrfi.com/sa/ skylod.com/sa/ hsctsu.com/sa/ cbespania.info/c206/ conrak.net/c206/ coxemen.com/c206/ dachfix.com/c206/ hypnose-beziers.com/c206/ jevmod.com/c206/ lighthouse-campus24.com/c206/ miscov.com/p0x/ oleum.gmbh/c206/ pupilfy.com/c206/ ratokasutka.com/p0x/ tellpizzqhut.com/c206/ terenium.com/c206/ vibe.restaurant/c206/ yamatobb.com/c206/ yncits89.com/p0x/ czxpkj.com/c206/ cbespania.info/c206/ jevmod.com/c206/ slashoff.com/c208/ sofisleep.com/c208/ jinshasoft.com/c208/ binzom.com/c208/ bywebhost.com/c208/ jinshasoft.com/c208/ # Reference: https://app.any.run/tasks/fe1f56d5-b4ac-401f-abcf-2e25957c13da/ methvenonthemove.com 3lmktgsvc.com hylg6.com 100fwq.com laperamordidablog.com gtitdunproductions.com glamotd.com www.azasianow.com/gm1/ # Reference: https://app.any.run/tasks/58333b8b-3488-492e-a1e2-f61bec0a1cca/ teampositiongurus.com zulfahly.net capterium.com # Reference: https://twitter.com/DynamicAnalysis/status/1263680114476191744 webxpoadukejumokeadejokeabolanleholagg.duckdns.org # Reference: https://www.virustotal.com/gui/domain/creatonetwothreefourfivesexsevenmansgg.duckdns.org/relations creatonetwothreefourfivesexsevenmansgg.duckdns.org # Reference: https://www.virustotal.com/gui/domain/metadefenderinternationalsolutionfor.duckdns.org/relations metadefenderinternationalsolutionfor.duckdns.org # Reference: https://twitter.com/malwrhunterteam/status/1264882811141488641 aviraantivirussecuritysystempro.duckdns.org # Reference: https://twitter.com/JAMESWT_MHT/status/1265553518049492992 chinese3lowncomeiscausedbythepandemic.duckdns.org russchine2loganxmenischangedtonewperson.duckdns.org # Reference: https://twitter.com/JAMESWT_MHT/status/1268827911722799104 22kungcommunicationtariffsuplierlimthdy.duckdns.org # Reference: https://app.any.run/tasks/947a591b-200c-4409-8a71-7888da9c93fa/ beautyqueenstores.com/k0f/ chataan.com/k0f/ fattireflights.com/k0f/ moviesfan.net/k0f/ printpeacock.biz/k0f/ sptor.net/k0f/ superwebox.com/k0f/ # Reference: https://twitter.com/JAMESWT_MHT/status/1271356489341558785 # Reference: https://app.any.run/tasks/d85e6f91-5369-454c-ae9f-996dea6743c8/ s-immotanger.com/n7ak/ moodandmystery.com/n7ak/ kangen-international.com/n7ak/ joomlas123.info/n7ak/ runzexd.com/n7ak/ belviderewrestling.com/n7ak/ # Reference: https://twitter.com/MaelSecurity/status/1274414782645506049 # Reference: https://app.any.run/tasks/ad5f5540-df5d-4f7d-853d-9ae4a97be620/ officedocumentfilesharingcloudbaseservi.duckdns.org # Reference: https://app.any.run/tasks/e6dbb7aa-2d2b-4031-be25-0a86c263a6f6/ asmreekasounds.com arhiereus.com oxagp.loan handyngoods.com simoneisaaclifestyle-1.com akbank-mobil-giris.com wrrsh.com # Reference: https://app.any.run/tasks/ec7fd1c0-e975-44b1-8719-b0d2b7dfa568/ abiligo.net/kkb/ glamotd.com/kkb/ iscompetition.net/kkb/ renkoto.net/kkb/ 2nfq.com adsars.com aretocloud.com dentalonline.info myvelvetcollection.com theluxuryindustry.com # Reference: https://twitter.com/FewAtoms/status/1275473977885024261 firewallinternationalgatewayforoffcefile.duckdns.org # Reference: https://twitter.com/FewAtoms/status/1276181803712167936 americanfirewallsecuritysystemprotocolfi.duckdns.org # Reference: https://www.virustotal.com/gui/domain/wsdychnesqudusisabadassniggainthe30wmg.duckdns.org/detection wsdychnesqudusisabadassniggainthe30wmg.duckdns.org # Reference: https://urlhaus.abuse.ch/downloads/text_recent/ 22chnesqudusisabadassniggainthehudolat.duckdns.org 22kungcommunicationtariffsuplierlimthdy.duckdns.org 23chnesqudusisabadassniggainthehudokgd.duckdns.org 2morcmmytalententertamentforwsdyshampn.duckdns.org 4sndychinese2onlyywalkaloneinlifea1ptc.duckdns.org americanfirewallsecuritysystemprotocolfi.duckdns.org chinese2stdyonlyywalkaloneinlifeagfd10.duckdns.org chinese2thdy9onlyywalkaloneinlifeanre.duckdns.org chinese2wsdyonlyywalkaloneinlifea13klm.duckdns.org chinese3higncomeiscausedbythepandempv.duckdns.org chinese4higncomeiscausedbythepandevop.duckdns.org chinese5higncomeiscausedbythepandekjp.duckdns.org chinese7higncomeiscausedbystdythepandybv.duckdns.org chnes29sndyqudusisabadassniggainthebba.duckdns.org cprvstd4upcomingtalentanimationauditnyc.duckdns.org cprvtsdy2upcomingtalentanimationauditics.duckdns.org firewallinternationalgatewayforoffcefile.duckdns.org green13kegheedahatakankeadeshnaastdyjlp.duckdns.org green14kegheedahatakankeadeshnaawsdycxz.duckdns.org greenkegheedahatakankeadeshnaajaotawqsz.duckdns.org greenkegheedahatakankeadeshnaajaotawsut.duckdns.org honeysposecurityfileexchangeservice.duckdns.org internationalantivirussmartscreensecur.duckdns.org irequestyoutopleaseadviseonthepayment.duckdns.org kung20communicationtariffsuplierlimited.duckdns.org kungsndycommunicationtariffsuplier27abj.duckdns.org livelifewithnocoronafearforcountry.duckdns.org microsfotinternetsecurefiletransferserve.duckdns.org microsoftvirutalmachinefilesafetytransf.duckdns.org mkpksb1behindcloseddoormatchisnotgoods.duckdns.org morcmmystnewtalententertamentfor1winner.duckdns.org officedocumentfilesharingcloudbaseservi.duckdns.org ppkpsureksub2mondaynightgraceofalmighy.duckdns.org ppkpsuresub1intercontinentalsuitishere.duckdns.org russchine2mapanxmenischangedonewpethdy9.duckdns.org russchine2mapanxmenischangedtonewperkkg.duckdns.org russchine2mapanxmenischangedtonewperpvc.duckdns.org russchine2mapanxmenischangestdy10donewcx.duckdns.org russchine2mapanxmenischangestdy12donexaz.duckdns.org russchine2sndymapanxmenischangedone14ajb.duckdns.org sharefildecenterforsecurefiletransferwin.duckdns.org sndychnesprvallanouthegreatsoustraofour.duckdns.org sndychnesprvlandofglorylandoflifeforle.duckdns.org sndychnesprvwaybackmaybachholdbageverl.duckdns.org sndykrlssnp4curruptgovernmentagencytlki.duckdns.org transferwisefirewallsystemupdatedinfo.duckdns.org united17sndyfokesokoriorimistreetsjxzw.duckdns.org united31stdyfrkesokoriorimistreetsjmng.duckdns.org webxpopunlariscostlyinthemarketsevelmk.duckdns.org webxstdy18popunlariscostlyinthemarketzq.duckdns.org workfine12stdyanotherrainbowlomoyentfkw.duckdns.org workfine15wsdyanotherrainbowlomoyenttdf.duckdns.org workfine7alogorainbowlomoyentonloyevpn.duckdns.org wsdy6pksnpcoperategovernmenttgpdagentx.duckdns.org wsdychnesqudusisabadassniggainthe30wmg.duckdns.org # Reference: https://twitter.com/Bl4ng3l/status/1276446227928924160 # Reference: https://app.any.run/tasks/d8c16703-53bb-47f3-8ecb-4414bc42451a/ 3or8mwa-ynq.com betokem.com freamsahub.online irmcentral.com porcber.com # Reference: https://app.any.run/tasks/a998e908-7e78-4c69-aa4a-0fb899669078/ selfdrivingpractice.com sh-feiye888.com doneym.com s-t-a-r-b-u-c-k-s.com bowrivarenergy.com akgulsa.com # Reference: https://twitter.com/Bl4ng3l/status/1277882548098609157 glpfundraising.com goodfatco.com aliyahbrack.com omgpu.com glamotd.com mc-davo.com planningforsurvival.net aretocloud.com cheffrais.com helenhotfm.com tv17403.info bushfriends.com aretocloud.com renforts7.com calciobalillaroma.com hxjmzc.com dynamicmusiq.com iscompetition.net nidaot.link lechefchile.com glamotd.com aliyahbrack.com halal.exchange glpfundraising.com goodfatco.com envydesignhouse.com dentalonline.info # Reference: https://twitter.com/Dr_N0b0dyh/status/1277872993650331650 sndykung29communicationtariffsupliergfd.duckdns.org # Reference: https://twitter.com/reecdeep/status/1278948869531930624 kungwsdycommunicationtariffsuplier30mgh.duckdns.org # Reference: https://www.virustotal.com/gui/domain/chnfwsdytwomanglobalbusinessexyandjps.duckdns.org/relations chnfwsdytwomanglobalbusinessexyandjps.duckdns.org # Reference: https://app.any.run/tasks/160c15e2-65a2-4a4a-9e4c-c48dda841e90/ # Reference: https://app.any.run/tasks/2cc7e325-5d33-4cbb-bcd6-fc873b336167/ regulars7.info gographics.promo lsalik.com onlinekharisma.com tt1558.com stylishbeans.com wireformationtechnologies.com # Reference: https://www.virustotal.com/gui/file/2edc612812919760be42de00fde052d6808281cd5009fb6050b21b67cc6db93f/detection healthclubpdx.com/gw8/ sandrxy.com/gw8/ healthclubpdx.com/gw8/ bennettfoamaustralia.com/gw8/ robertdebartolo.com/gw8/ robertdebartolo.com/gw8/ healthclubpdx.com/gw8/ sandrxy.com/gw8/ bennettfoamaustralia.com/gw8/ sandrxy.com/gw8/ bennettfoamaustralia.com/gw8/ cheekywebhosting.com/gw8/ # Reference: https://www.virustotal.com/gui/file/9dae9325edf14a042013558bf5d564a8c67491813b63fa66a3eb79aec59ed4b5/detection amaliagris.com/r86/ dna-cancertest.com/r86/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1281592784407990273 19workfineanotherrainbowlomoyentwsdywrk.duckdns.org # Reference: https://www.virustotal.com/gui/file/ebbbbbd6f76c1d7557568bb7aeac9f66e3bdfdfdd6acc5546fbca31041ff9c05/detection labresa.com/s4w/ marketingkonzept.com/s4w/ pakietbioasekuracyjny.com/s4w/ qelwah2.com/s4w/ susuzluapp.com/s4w/ yenihayatgreencard.com/s4w/ # Reference: https://www.virustotal.com/gui/file/d120c2d090953fec810563847c2ba5cdcbff3dc4715949e5ef7531e71c5c560e/detection fromahighschoolgraduate.com/dum/ rochesterlocalseo.com/dum/ # Reference: https://www.virustotal.com/gui/file/aad021f8bd11f8e9195e4954b1269db584dd838026f3d73e751d69b142ced6c4/detection igametalent.com/3nop/ joomlas123.info/3nop/ potashdragon.com/3nop/ shenglisuoye.com/3nop/ sixpenceworkshop.com/3nop/ sunflowermoonstudio.com/3nop/ # Reference: https://www.virustotal.com/gui/file/ad36c93aff3c5ad262be5608200b1d583624dd29cfb2a78fd4dfab034282bde6/detection 16sf.info/63j/ 1h0threeout.loan/63j/ 1k3onecould.men/63j/ 5526693.com/63j/ abarkforhelp.com/63j/ ago-merch.com/63j/ autistics.info/63j/ empowermyv.com/63j/ escuchamp3gratis.com/63j/ fabriekuniek.com/63j/ govaj.com/63j/ hollydoe.com/63j/ inboundmag.com/63j/ jiejinrihua.com/63j/ mabinhura.com/63j/ mahroofbuilders.com/63j/ meehanmindset.com/63j/ mprigweld.com/63j/ royalgiyim.com/63j/ shopfor.toys/63j/ tacostuzo.com/63j/ thedeadgoddescendants.com/63j/ traumafutbol.com/63j/ unblockrun.com/63j/ wen8.info/63j/ wineanddine.online/63j/ wwwswty7733.com/63j/ xn--ydst0c036adla.com/63j/ zhongzousijichuang.com/63j/ # Reference: https://www.virustotal.com/gui/file/e95f01bbde0fbd70670b820b972768e7fc5f23509495c805ddbc3271030f443c/detection # Reference: https://www.virustotal.com/gui/file/e1763e78b22d20c2185170aeb03f138accbfce6f6d55cad6fefb9b632ff6e685/detection accident-law-yer.info/3nop/ ajikrentcarsurabaya.com/3nop/ beepot.tech/3nop/ chinapopfactory.com/3nop/ cloudmorning.com/3nop/ dealsforyou.tech/3nop/ divorcerefinance.guru/3nop/ foresteryt01.com/3nop/ frseyb.info/3nop/ hotsmail.today/3nop/ igametalent.com/3nop/ incrediblefavorcoaching.com/3nop/ jialingjiangpubu.com/3nop/ joomlas123.info/3nop/ koohshoping.com/3nop/ leyu91.com/3nop/ liqourforyou.com/3nop/ maximscrapbooking.com/3nop/ meccafon.com/3nop/ mindfulinthemadness.com/3nop/ naehascloud.com/3nop/ online-marketing-strategie.biz/3nop/ paintpartyblueprint.com/3nop/ potashdragon.com/3nop/ rockerdwe.com/3nop/ shadowlandswitchery.com/3nop/ shoppingdrift.online/3nop/ sixpenceworkshop.com/3nop/ smokvape.faith/3nop/ vandergardetuinmeubelshop.com/3nop/ yellowbrickwedding.com/3nop/ ynlrhd.com/3nop/ # Reference: https://www.virustotal.com/gui/file/a6e77007716111b244339e9cb1a0b0f2f09b7f313f73e03b136e1a228755438d/detection 514ope.com/tgqh/ collectivekc.com/tgqh/ empty-gallery.com/tgqh/ h2poland.com/tgqh/ hair-pharmacy.com/tgqh/ harisnurmansyah.com/tgqh/ hoyosintegrity.com/tgqh/ luxurylifeaccess.com/tgqh/ minnanwulong.com/tgqh/ nova-sb.com/tgqh/ regulars7.info/tgqh/ shouyangshanchem.com/tgqh/ showin-horikawa-oike.com/tgqh/ slingshotcycle.com/tgqh/ sopchain.com/tgqh/ squire-inigma.com/tgqh/ stratusontimemerchtrans.com/tgqh/ suncitybulldogpuppies.com/tgqh/ tablespoon.ltd/tgqh/ tooyet.com/tgqh/ tuoi96.com/tgqh/ zabikmusic.com/tgqh/ zeboxtee.com/tgqh/ # Reference: bpassport.com/boa/ camping-equipment.site/boa/ clavepr.com/boa/ david-kley.com/boa/ floridapostpartum.net/boa/ flpnidhi.com/boa/ hudsonhotspots.com/boa/ jiashimt.com/boa/ nhangiaivn79.com/boa/ reachidyllic.com/boa/ rebr.net/boa/ resumebanc.com/boa/ sulicet.com/boa/ v19sv.top/boa/ # Reference: https://twitter.com/_re_fox/status/1283491541236035584 sandiego-garagedoor.com/bll/ tomhufford.com/bll/ doneym.com/bll/ kalbarnews.com/bll/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1283740160476184576 39unitedfrkesokoriorimiwsdystreetsmghg.duckdns.org # Reference: https://app.any.run/tasks/097bbd0b-74c4-47b4-9f4d-201ee4c38a4a/ dfb.cymru/ei9s/ leaderarena.com/ei9s/ lostdistrict.com/ei9s/ mansiobok3.info/ei9s/ ryytrip.com/ei9s/ student-circuit.info/ei9s/ theshadows.online/ei9s/ # Reference: https://app.any.run/tasks/4fa18ccb-ea1b-44e3-a818-d803155a9e29/ regular8.info/2cur/ tingo66.net/2cur/ towerofcards.com/2cur/ # Reference: https://www.virustotal.com/gui/file/794e7cb14496ddd13a5ce6e540822deb5cec4ca43fd0174d98e4209beda66eaa/detection catalyseur-de-vivant.com/jjk/ qqwnet.com/jjk/ ksplaza.com/jjk/ porcber.com/jjk/ gadget13.com/jjk/ 520tsbaby.com/jjk/ cjplogger.com/jjk/ fotomataio.com/jjk/ joepolifroni.net/jjk/ femalebagvip.online/jjk/ sccinvestmentnet.com/jjk/ waldenfitnesshop.com/jjk/ xn--4oq39cm25azjf.com/jjk/ karmawatersonline.com/jjk/ michiganbusinesshub.com/jjk/ gclsteelsiteservicesltd.com/jjk/ # Reference: https://blog.talosintelligence.com/2020/07/threat-roundup-0717-0724.html (# Win.Dropper.Formbook-8866958-0) annualtransmission.technology astonfly.info azasianow.com cloudyans.com fristcreditunion.com gtitdunproductions.com intera-canada.com joshkaeding.com mannionexpertseniorcare.com methvenonthemove.com mysticadventuresails.com myweddingbeautiful.com novaeramotoboysportoalegre.com pepper.guide q83pfq.biz startboostcapital.com stoxcrypto.com theclippersofficial.com theedgebizconnect.com www750456.com xnyppw.com # Reference: https://app.any.run/tasks/393ffa82-d780-4bdc-b47f-456c458201da/ bewheybetter.com qhlkzl.com cpwy8c.com finesewingservices.com 5dollaralluringstyles.com izfyb.win regular8.info # Reference: https://www.virustotal.com/gui/domain/bsskillwsdyemmulatorsdevelovercommunity.duckdns.org/relations bsskillwsdyemmulatorsdevelovercommunity.duckdns.org # Reference: https://app.any.run/tasks/989b1b9e-b3b5-435a-ba14-a5f5f9fc1b7c/ insidemarinacity.net jeddahresources.com mugtravel.com onstagenewage.com vitosophy.com xianzhonghe666.com # Reference: https://twitter.com/reecdeep/status/1290967132562501639 # Reference: https://pastebin.com/4H24JFGS accident-law-yer.info bakecakesandmore.com duftkerzen.info janewagtus.com joomlas123.info koohshoping.com maximscrapbooking.com mindfulinthemadness.com online-marketing-strategie.biz pmbnc.info potashdragon.com rockerdwe.com shoppingdrift.online sixpenceworkshop.com stepgentertainment.com tawbj.info vandergardetuinmeubelshop.com yoghurtberry.com yoyodvd.com # Reference: https://app.any.run/tasks/60d821e5-4221-4f92-9871-2f34d4493704/ cocoding.net kokoandkiki.com laurelcanyonmusicroom.com mansiobbok.info produkdigitalstore.com schuster-partner.net # Reference: https://www.virustotal.com/gui/file/99623ab781dc923aa8fc80c49845845705c5e95ecd15bc3c22dae3dd6979aca8/detection myblogforyou.is # Reference: https://www.virustotal.com/gui/file/e229bf532a101dc01cea0f119eddfa6de309a6af68743b7a5d6ca63df110573c/detection 315px.com/kvsz/ fex-tracks.com/kvsz/ jiqing3.com/kvsz/ marijuanadogbone.com/kvsz/ okashyns.com/kvsz/ priestvedic.com/kvsz/ sif.email/kvsz/ taylorsandbek.com/kvsz/ # Reference: https://www.virustotal.com/gui/file/a327d63bea241fd175c5dda029f2cf997e13565393c5d0bf0f7ce4df5c7a7bb1/detection asktarifleri.site/kdz/ bbetmoose.com/kdz/ blockchaincso.com/kdz/ chacharen.com/kdz/ christmasjumpersireland.com/kdz/ doggygreatpet.com/kdz/ funpexw.com/kdz/ herolander.com/kdz/ keragramam9.com/kdz/ kxqsw.com/kdz/ niulunbi.com/kdz/ punkrockpeppers.com/kdz/ taylortao.com/kdz/ wwwclarion.com/kdz/ xxwzsw.info/kdz/ # Reference: https://twitter.com/Dr_N0b0dyh/status/1297850974833451008 santhoshibitcoinlocalmarketdropdownand.duckdns.org # Reference: https://www.virustotal.com/gui/file/7167c1835bc0c219b5bd2df7d529bc063482af7362b6d9c0f4eb8de0d90e1587/detection finalwireboxtransferthesessioncookienorm.duckdns.org # Reference: https://twitter.com/VirITeXplorer/status/1298549793137086464 savetheverse.com # Reference: https://www.virustotal.com/gui/file/73f93e83e8452ee5a80a098908e627fd315fc7d7886e42a20952614f01ccf27f/detection # Reference: https://www.virustotal.com/gui/file/07bca888b32f2b57d4dc7c80504b425b8a764e90c3879e45363aa017e86ba254/detection 00307r.com 51gayporn.com academiefutsal.com alejandrajazo.com ashleetaylor.net beautifulbridesandbeyond.com bodypiercingblog.com brainpowersound.com ceptenmuzikindirelim.com corki.site g3391.com holdingeggs.com idefoto.com jordanthedev.com kiacraft.com libertarian.site lushe12121.com maiscash.online mansiobok2.info mesathean.com minlisc.com newuniverse.net northwestclassicfirearms.com pnwminiacs.com postmortemrecycled.com pranaavgroup.com prosolutionsgroups.com shkafko.com story-learning.info tastyafrecipes.com thetangleiota.info usainshape.com vaguidelines-updated.com valueaddedindustries.com venicecast.com wellsnextthesealife.com # Reference: https://www.virustotal.com/gui/file/12bf313b477f06f8732fcb79b706b0bd6534948959f5c6017acaa534e52ec43e/detection 842cedar.info ausu96.com capitalrealestateservices.com ernestospaccesi.com flekcht.com hezehzxx0530.com incubatorplatform.com kymsusujinsha.com perocreations.com pizzazucca.com reparmaxpro.com thecyclingvegan.com uscawm.com vehiclenotes.com xn--vs2b19v.com zds9999.com # Reference: https://www.virustotal.com/gui/file/1d752833612c96dff4dbd5cad8342b2d82cc62f76be376eabdf4e5a7e6d8001c/detection 763bifa.com cerecaustin.com coinpatent.com discoverfrenchtown.com ecomobilecarspa.com howcuty.com huntsvilleguru.com idbcc.com in4rac-acc3es-re7unds1.com iznjreb.com mining-journal-30.com njzscy.com retireinyourstyle.com topnotchhardwoodflooring.com xarkz.info zepi.ltd # Reference: https://www.virustotal.com/gui/file/79f09ef70447edc02b3ab24259050de6ea4da4b4c26391798ae238b9c42cb56a/detection 553349.top balikesirmasajsalonuu.com ceptenmuzikindirelim.com chepinclub.com everfileit.info holdingeggs.com jordanthedev.com kiacraft.com maiscash.online manilagogo.com mansiobok2.info minlisc.com northwestclassicfirearms.com usainshape.com wellsnextthesealife.com # Reference: https://www.virustotal.com/gui/file/32cb38541ca29d629b4d411191023bbd67887b099ff5f5b71067998eddb7d678/detection asif.services austinjdugger.com burikinochabudai.com carlymccrayblog.com cct-happy.com happychicks.exposed joyfinaclinics.com latrovadorabarbersupply.com liquidtreecbd-sleepaid.com reliablemedspharmacy.com surensoy.com trancus.com # Reference: https://www.virustotal.com/gui/file/9d45fa3a16cf0a0f8ff071a745ca85e67fc23a6da3072d77854c0bb56b79ee7e/detection 7122-info.com aqadelics.com arescsg.com baldinimakeup.com champcarfanatics.com cifmyanmar.com decentralizedfinanceguide.com euroruyane.com fuyucoffee.com houstongrowmyairway.net igiddevelopment.com jacketgraffiti.com kobfrin.info kocerstudio.com libbythrifts.com meowusaurus.com nevertravelled.com nyfirewatch.com operadorapacientesmexico.com projectholos.com sharkcoastline.com stashboxcombos.com tampabaytrash.com thermalsmartglass.com transinta.com wherethebestplay.com ynkshengfa.com # Reference: https://www.virustotal.com/gui/file/dca8e5059018aa3f1aeeee14511d9e57cc4268a8aed1584110c0fbb4822839f2/detection # Reference: https://www.virustotal.com/gui/file/3a1465485ed94bbfde14f2b538153a0a007bb8aa82b75d8cbf84bbcb483c4db9/detection 10valemont.com 24mane.com 7955t.com a1services.one adondeva.com advisorsoncall.pro casestudyinabox.com cgkvnt.com emirativisitalaqsa.com essentialcarementalhealth.com foxvegapunk.com frecoy.com futurepoweruk.com hocakoisanvuon.com joerow.xyz macrocpas.com neuroticbuffet.com pmqvodka.com presisiontestprep.com primeautocars.com rapornzel.com registergamers.com sharonschmith.com shopcamacci.com steripowerbank.com thaihicaregloves.com tradebrochure.com trelbikes.com whtybw.com womenme.com xiongmao-g.com xmlmobilepulsa.com zaibatsucoins.com # Reference: https://www.virustotal.com/gui/file/17a8084c74f8cc58490b8698860b482de514164362640d00116c61e81a95934b/detection book-london.com bzyzk86uzj.men champcarfanatics.com coachdrj.com day1transportation.info decentralizedfinanceguide.com kobfrin.info nevertravelled.com nevooptimum.info newtsboneyard.com orkneyelements.com qizasoluciones.net role013.com skandalist.info theuniformpages.com thisdadflips.com # Reference: https://www.virustotal.com/gui/file/46604ca23348020b3ba4a772be141fb9a1a6d9bf263ab04453e37aa3449307b3/detection 1-edogawa-one.net angelmedics.net blackbaycooler.com cexo.ltd deepcallsmusic.com ehoulby.com f0aw9u.com fizzwagon.com frontgames.info gentlemanism.com intensivprogramme.com iskovlay.com j9d9.com jnjmqzzl.com larympei.com longdu665.com mlabsassociates.com multonin.reisen qww13.com recetasinstantpot.com rilke.photography saludcomplementariaintegral.com serviceiqinternational.com silvfly.com skyhomeshn.com smokinginc.com strikermillion.net thatmountainbiking.com theflamingorealtygroup.info unieekly.net vieclam-jobs.net wesk.tech wwwstrikeout.com yimifanghua.com # Reference: https://www.virustotal.com/gui/file/36ae1f2db02a8deb4ae22d4d81be0c69ce30f471b0822405b56ffb2faaf304b0/detection armandonieto.com banknotesync.com bet365c.win dmoneylife.com drb77.com edgaralanbro.com fex-tracks.com freespin-support.com funippon.com getawomantodoit.com goldencanaries.com h0jt1y.accountant hotair.wales jiqing3.com lahistoriade.com landbank.site levelretail.com okashyns.com priestvedic.com rticlubs.com savetheverse.com specificpcshop.online upbeatnewyork.com vedattelekom.com weeip.com xn--oorv2aj6bj7cds0d6p4b.com yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/ac196db28c1b5e6d0772f61f5ba55824d6e6de820621b9a2485ee78fe7b553e0/detection 1tmm11ou.biz 2lsuxxk7.site 3-333i000000f04-virus.net atlantisads.com civx.love coinpuma.com dollaryearbook.com hhtdhg.com jonstats.com mpmts.com origamiformal.win pczfk.com rdrfi.com silverstone-pharmas.com skylod.com xn--5nq67dt91acob217ad91b.com # Reference: https://www.virustotal.com/gui/file/55356d3c2e71b6221d8590c9733cc45d09661f0210ef12aad830afca3653c5fa/detection 315px.com alexandre-boissard.com chaiseloungereviews.com funippon.com getawomantodoit.com goldencanaries.com grouptulip.win jeaniney.com jessandjeff.net ldmeili.com levelretail.com loulancaster.com magic-desktop.com marijuanadogbone.com okashyns.com rticlubs.com # Reference: https://www.virustotal.com/gui/file/e0db3294cbab3b55595d396941434b9bc7a82ce2f87d6819ff3c17936d559fe7/detection 557023.top banknotesync.com bocapvang.net chaiseloungereviews.com dmoneylife.com eugeniobarros.tech fex-tracks.com freespin-support.com jatinangorcity.com jiqing3.com lahistoriade.com landbank.site ldmeili.com loulancaster.com magic-desktop.com marijuanadogbone.com okashyns.com outofthepark.today polychips.com savetheverse.com taylorsandbek.com valorartetattoo.com vecteur-u-shop.com vedattelekom.com xiaoxiong365.com yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/8005ecbb424af2a2504693bdf4550825855b1036a049e6c81852f5be0f435f02/detection alfaranakle.com banknotesync.com chaiseloungereviews.com fex-tracks.com h0jt1y.accountant hotair.wales ldmeili.com motoreselectricoschihuahua.com okashyns.com specificpcshop.online yuwanqingmy.com # Reference: https://www.virustotal.com/gui/file/f3a30108ab40b7f31ad7ad191bb41bd3ad148d09597705c1ec0bc0352d18c29e/detection bbetmoose.com blockchaincso.com chacharen.com christmasjumpersireland.com cryptoassettrust.com datemere.online efamu.com fintopix.com flexwireless.net funpexw.com grinn.company heritage-japan.com herolander.com iskratrip.com keragramam9.com latinosinpolitics.info lauraandjose.com makrobet909.com mariannevaatstra.com niulunbi.com nsqpg.com nutri-bulletmania.com punkrockpeppers.com queenpiececustoms.com shanxiu360.com sharegrills.com tecnologiaconcalle.com weltricom.net xxwzsw.info zljrlm.com # Reference: https://app.any.run/tasks/a676d29f-57bd-4aa6-ad6c-99c60fb99d01/ ridi.ltd # Reference: https://www.virustotal.com/gui/file/1a85e9979700746c2e7cfff81ac8308d723ffbbc94fd62dd5450bfb511b0eb8e/detection # Reference: https://www.virustotal.com/gui/file/cf87ae81ce49eafc69bed54e2ce2051cb2e56a47d6b9d2d18f1eafdecec5794b/detection hdfcbankprivateltdinternationalfirewallf.duckdns.org # Reference: https://www.virustotal.com/gui/domain/timestableforjuniorsecondaryschoolsdone.duckdns.org/relations timestableforjuniorsecondaryschoolsdone.duckdns.org # Reference: https://www.virustotal.com/gui/domain/ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org/relations ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org # Reference: https://www.virustotal.com/gui/domain/12chnesstdywealthandmoduleorganisationrn.duckdns.org/relations 12chnesstdywealthandmoduleorganisationrn.duckdns.org # Reference: https://www.virustotal.com/gui/file/b7c19faebbb9a0539f3ce80d25be908f44a078ccdfac440ad9ed1484b3f546c5/behavior/C2AE # Reference: https://app.any.run/tasks/3263eddc-12e0-43c4-8916-f7b4ee7c8d07 agraindustry.xyz/xczm/ aupeiedu.com/xczm/ blackhillsgazette.com/xczm/ crowgangrecords.com/xczm/ cyypmy.com/xczm/ digitalmarketingsinc.com/xczm/ gigs-list.com/xczm/ jhpaolilo.com/xczm/ johnjacksonutahhouse44.com/xczm/ karenchartanowicz.com/xczm/ partiesandprettythings.com/xczm/ qrocodile.com/xczm/ restauretsens.com/xczm/ robertwebsiteworkshop.com/xczm/ sebuildingcontractors.info/xczm/ shaymika.com/xczm/ solomoncrane.com/xczm/ supereasythings.com/xczm/ talentos-sa.com/xczm/ thenextbigbang.com/xczm/ # Reference: https://www.virustotal.com/gui/file/4458df211fccf5c1d24b96ebb7b4191cc94edc0b0e13bbb80ae3919f015297d9/detection 3j120.com/uts2/ blissbureau.com/uts2/ dannystar.online/uts2/ farmtractorpartstam.xyz/uts2/ finanzleiter.com/uts2/ iprintdrivers.com/uts2/ jonaskold.com/uts2/ richfun9.com/uts2/ sinseek.com/uts2/ stutinney.com/uts2/ top-dex.com/uts2/ v-imagery.com/uts2/ # Reference: https://www.virustotal.com/gui/file/ab2134e4b74317f5de2f265e46d73c4bb6593cdbfc795d84acc5ac92694fcfd8/detection cyberrome.com/evcy/ phytphysios.com/evcy/ roofingscontractors.com/evcy/ w662017.com/evcy/ # Reference: https://www.virustotal.com/gui/file/3918933694be0d073cbbf212787b2645ff55f13d0465068c07bfba9429c592c9/detection 766ht.com/wc2/ 911respondernews.info/wc2/ arikagroexporter.com/wc2/ balaji-industries.com/wc2/ bishopberrian.net/wc2/ boopdedo.com/wc2/ bsmw.net/wc2/ crsmrtns.com/wc2/ ethihadhub.com/wc2/ huaxing888.com/wc2/ imkollection.com/wc2/ learnitanywhereskills.com/wc2/ lexafit.com/wc2/ lisajohnsva.com/wc2/ ludo999.com/wc2/ majahada.com/wc2/ originaleprezzo.com/wc2/ proglove-news.com/wc2/ range-view.online/wc2/ shotsbyshari.com/wc2/ silver-marketing.com/wc2/ szcstl.com/wc2/ theyolarbi.com/wc2/ thomasallmer.net/wc2/ tyres-n-services.com/wc2/ zxnhyc.com/wc2/ # Reference: https://www.virustotal.com/gui/file/a8dab0706fcde32079548def807a0970b9ea1777e191a4de545b286b21e37d28/detection americasbestpw.com/r690/ china-harmonica.com/r690/ chiomydiary.com/r690/ cluehut.com/r690/ grabareelfishing.com/r690/ graveltravel.company/r690/ gromomedia.com/r690/ haciendadecuacos.com/r690/ highchikadns.com/r690/ kikinico.com/r690/ livein.space/r690/ qrudghana12.xyz/r690/ sagivfoods.com/r690/ shinelightofgod.com/r690/ thesibrand.com/r690/ # Reference: https://www.virustotal.com/gui/domain/moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org/relations moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org # Reference: https://www.virustotal.com/gui/domain/dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org/relations dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org # Reference: https://app.any.run/tasks/a2d97909-68ca-49f3-9c8c-20eba5681fb5/ wsdychinese2onlyywalkaloneinlifev26mba.duckdns.org # Reference: https://www.virustotal.com/gui/file/8fc21c2279038625176289496bc8f34b0cb2404b064edb3fb2da8d3ca43dc5b1/detection azwertfgdshbvcgyujmlpokjhgfxzaewqsdrfgh.duckdns.org # Reference: https://www.virustotal.com/gui/file/a4c9cd227e58728c221e9001d28f166143980f893d45a2b7757b73ce5fd903ce/detection acessorios-nerd-app.com eldesvan-sinlimites.com gokdaginsaat.com healthcbn.com hippainyoga.com inveplor.xyz investstoneycreek.com mayasign.com pitandplate.com schokogirls.com sillymillie.today teamreddragoninternational.info thelastwordapp.com theme7.com trakfin.com zhonglinsd.com # Reference: https://twitter.com/JAMESWT_MHT/status/1303601913364180992 # Reference: https://pastebin.com/KzJT43TM bl2clear.com boujeegoddezz.com bringfilmes.com coffeeandproductivity.com covidbreathrehab.com domdlyabolona.art gameingalaxy.com ghtrive.info mammal-immunity.com molianggong.com moreupdates.info roselandcompany.com selfloveonlineshop.com vissist.com wccs.school zjbeidou.com # Reference: https://otx.alienvault.com/pulse/5f58c504cc7ae467f9d3355c bogrollbandit.com jramfox.info moskvaoptom.net naomiatlibrary.com vegoutlv.com # Reference: https://www.virustotal.com/gui/file/a715a6693137085afaf486b54cac1653b19685bc5f79ed03afbbe818a4df2dc7/detection scmtonhumanrightandjusticeorganization.duckdns.org # Reference: https://twitter.com/jorgemieres/status/1310669976156676099 20greenkegheedahatakankeadeshnaastdyhma.duckdns.org 2morcmmytalententertamentforwsdyshampn.duckdns.org stdyworkfineanotherrainbowlomoyentwkgls.duckdns.org # Reference: https://www.virustotal.com/gui/file/aa173d61945504c96ede4e050072747bce9747b05ba64ad7e63c931988fd5afa/detection # Reference: https://www.virustotal.com/gui/file/2bd70691b602c8a94d298de4a1d629eb4e6eee5640f73ae4f323939334cadef8/detection affiliatedinsbrokerage.com/lmh/ avantgardeperde.com/lmh/ chidehdesign.com/lmh/ covertextensions.com/lmh/ electronic20200818.com/lmh/ finanzbildunghartmann.com/lmh/ goodmol.com/lmh/ gzjxrg.com/lmh/ kaboom-stores.com/lmh/ onelivenews.com/lmh/ properope.com/lmh/ resfebertrip.com/lmh/ spinthewheelof.com/lmh/ stopthecull.info/lmh/ supng.com/lmh/ testaker.com/lmh/ testcitestdpp03.com/lmh/ thefamilybrew.com/lmh/ thisshowistheworst.com/lmh/ uyenty.xyz/lmh/ zainiicandle.com/lmh/ zaxesoutdoor.com/lmh/ # Reference: https://twitter.com/reecdeep/status/1311677288384262145 # Reference: https://app.any.run/tasks/9ec07b95-db5c-4a6d-9ce8-7b2b4803f9e5/ # Reference: https://pastebin.com/1Uax6brn adventurewhisky.com carrollbusinesspath.com chuansongm.com dcurvezone.com ezecustomprints.com futureheadcoin.com home-orchestre.com hotelkewal.com leggiies-es.com reallygood.toys regular-list.info shopatman.com thekindnanny.com vqxxmrxhpsho.mobi warnddd.com zhizaotuan.com # Reference: https://twitter.com/jorgemieres/status/1311775076501651458 newhdconnectionforfiletransfernetworkwit.duckdns.org # Reference: https://twitter.com/jorgemieres/status/1314554323389550593 kungthdycommunicationtarisupliermgthbzm.duckdns.org privatethdycloudshareandfileprotecthmbw.duckdns.org unitedthdyfrkesokoriorimistreetsmthbdx.duckdns.org # Reference: https://twitter.com/Unit42_Intel/status/1312126230309740544 717cary.com anunaysrivastava.com armstrongramps.com bootlegmask.com cgv-so.com claricitywealthplanning.net csbaoxing.com dannisconfessions.com easyloop.email ehrbar2012.com elevatedqueensnc.com entrepreneur-de-demain.com firestarterelectronics.com firewoodlogsbristol.com janet-lorenz.com kayarihats.com misspinkk.com myworldgay.com piao.mobi pricemanmmi.com psm-gen.com readingbythewindow.com sporkedmissoula.com tapchiotoxemay.net tdhudsonfarms.com theduneco.net usarmedforcesforbiden.com virtualinspectiontraining.com # Reference: https://twitter.com/luc4m/status/1313805772992765953 purebodyrecovery.com/rhk/ # Reference: https://twitter.com/theDark3d/status/1313834137992794112 hydreol.com/gc9/ # Reference: https://www.virustotal.com/gui/file/2914b28edc11e8032a43789a1fd6a897cad41494ea0657ce15933b5825e922f0/detection amaee.art/bti/ get-s14.com/bti/ roket.store/bti/ hotelsyd.com/bti/ pressd4you.com/bti/ intimkyliya.club/bti/ theobsidianlounge.com/bti/ bestcostaricacars.com/bti/ orthodonticoffices.com/bti/ genericpharmacyshop.com/bti/ asheville-pestcontrol.com/bti/ pureandtotalrelaxation.com/bti/ brmstatpack.com/bti/ mygametour.com/bti/ # Reference: https://www.virustotal.com/gui/file/55b4c44664dbfe9d51bd386d7b88779555b8c7681147a0dc8b049a252a093b61/detection beulig.com/mi8/ quorahr.com/mi8/ tensedu.com/mi8/ bolly4me.xyz/mi8/ beaverhat.com/mi8/ dacho-pri.com/mi8/ khanhthieu.com/mi8/ mperrinauthor.com/mi8/ honeyandpapaya.com/mi8/ lonelyleadership.com/mi8/ partialdeveloper.com/mi8/ mariagrossbaumart.com/mi8/ courrierhautrichelieu.com/mi8/ # Reference: https://app.any.run/tasks/f76cb393-c9b7-4965-b69e-19c8b9b85c2e/ chikachinwe.com/fs8/ gabipareras.net/fs8/ hpg.computer/fs8/ kumcal.com/fs8/ mohinisystem.com/fs8/ muellervieh.net/fs8/ setsomegoals.com/fs8/ shestakova.info/fs8/ thelincolntondentist.net/fs8/ # Reference: https://app.any.run/tasks/49d6e478-698c-4afb-8a2d-b217e9e85a70/ chollotiza.com elevatehour.com en-bmwbasvuru.com justiceforproject.com lojapetsz.com thenursingstudysystem.com xn--vf4b17jiew40b.com zgxjgw.com # Reference: https://app.any.run/tasks/f171064f-893c-4957-b3ce-8b3fac487eee/ bitechanalytics.com/3iw/ creditoefectivo.info/3iw/ fairpayva.com/3iw/ regulars6.com/3iw/ thelifewaykefir.com/3iw/ valodokan.com/3iw/ # Reference: https://www.virustotal.com/gui/file/980b25031efc6ab322f08a66a098f51a7e55ae8926eeed299b8ae0176a7c71a5/detection abishadesigners.com/ec14/ acikonline.com/ec14/ akulelaki.com/ec14/ apqtkj.men/ec14/ atecommarkk.com/ec14/ bellaboutiquetime.com/ec14/ boobl.net/ec14/ catalystbizconsulting.com/ec14/ contactista.com/ec14/ dundeeplanninglawyer.com/ec14/ fooorest.com/ec14/ gardhome.com/ec14/ gzfeidengxian.com/ec14/ harbourridge.info/ec14/ ishop121.com/ec14/ ivalens.com/ec14/ jetcat.studio/ec14/ luxdermatology.net/ec14/ mingjianjiankang.com/ec14/ myhjzl.com/ec14/ perrogenial.com/ec14/ qhdrzblg.com/ec14/ radinkauto.com/ec14/ unitetoken.com/ec14/ violence.ltd/ec14/ yeserenkalem.site/ec14/ # Reference: https://www.virustotal.com/gui/file/70ec010c74c2d3f440eee4a882f842f1b04d3c1ac11ae54817e2985497cbf737/detection bastblossoz.info/uc/ goodpva.com/uc/ hampshiremotorgroup.com/uc/ highlandsdayschool.net/uc/ kmpqeaqap.download/uc/ lillyvalley.info/uc/ mandarin-cazinod2.com/uc/ okxaw.com/uc/ smeemail.com/uc/ yuppieshome.com/uc/ # Reference: https://www.virustotal.com/gui/file/70f0bd1b2a180d7aa965bc907c3367b1a34445bdb1a3882be040e22f04c1e300/detection governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu # Reference: https://www.virustotal.com/gui/file/96f40ff0c9306eff1e9321d47fd97a7a62a737815b6964109b335b8e3d48bce2/detection 344bifa.com lodipytu.com # Reference: https://www.virustotal.com/gui/file/d45a4b45fce191e47e64aeb48cbba1477b58ad991bb1e4409d97f29de86c69d6/detection 2637426264.duckdns.org aksesblog.com/sl7/ antskipper.com sarah-pinhancos.com theflawlessstore.com totalitymedicine.net # Reference: https://www.virustotal.com/gui/file/6950ffcd5d6cf9bd7338614623baf23baa58236e7603e74f2360ea60add802b0/detection 10wsdyanaekppyinitalymedicalconsultafr.duckdns.org # Reference: https://www.virustotal.com/gui/domain/368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org/detection 368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org # Reference: https://www.virustotal.com/gui/file/c76eefb96b1a6360727130cc86aa039d19b1f6eb7ec2e49d40989bcb3a820f5c/detection 31kungcommunicationtaristdysupliermgjky.duckdns.org # Reference: https://www.virustotal.com/gui/domain/240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org/detection 240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org # Reference: https://twitter.com/InQuest/status/1321030052709126147 fsdfjkhiuwehxcyvuiyiuwefocshsduihfnabhsghfghewfjpiouyiyuixcvxuv.ydns.eu # Reference: https://twitter.com/InQuest/status/1321339394335428608 tsdyprivatecloudshareandfileprotectsyta.ydns.eu # Reference: https://twitter.com/Marco_Ramilli/status/1322075988851859457 greenthdykegheedahatakankeadeshnaathfgh.ydns.eu # Reference: https://www.virustotal.com/gui/file/e44aed73ae9a363d854c16f430af1e93f58409d2f4bbf3ae90e2164cb60cdb81/detection 30atgkmss2m0fc3rjc926qag09d60tz44zwi0kv6.duckdns.org deliverynotificationmessagesuccessfullys.duckdns.org # Reference: https://www.virustotal.com/gui/file/0920951a2739c975661a70c9a7532d65a0abe3d8cee5d476af53b2b60cb63bd3/detection # Reference: https://www.virustotal.com/gui/file/899f6e35cd5d54ccc7c6dadd6fa35a719a1ec6a1a19a6df0e49b252491d03fd6/detection abiodunanimashaun.com/gcvp/ angelofcfashion.com/gcvp/ applespanyc.com/gcvp/ digestspot.net/gcvp/ habibistech.com/gcvp/ herbandflorealty.com/gcvp/ missouricitymagazine.com/gcvp/ murder2is.com/gcvp/ osusume-erodouga.com/gcvp/ rayznrosez.com/gcvp/ registrosbonouniversal.xyz sabaifund.com/gcvp/ solarlightsuk.com/gcvp/ southpacificconglomerate.com/gcvp/ stevebana.xyz surgecrete.com/gcvp/ syshxg.com/gcvp/ tars.network/gcvp/ tjtftc.com/gcvp/ wlc958.com/gcvp/ worldbeyondfaith.com/gcvp/ youriptv.online/gcvp/ zjxdw.com/gcvp/ # Reference: https://www.virustotal.com/gui/file/15e93e945f92f31af20aa93a04a4b437e2e77799b045c31f36ef24c0d8b962b2/detection calebdavidsmith.com/sg03/ foodie-jp.com/sg03/ jiralabs.com/sg03/ lynnsbeautylab.com/sg03/ topambebi.com/sg03/ xietuwen.com/sg03/ # Reference: https://gist.github.com/silence-is-best/0aa844b003c62c6ce491e91e168ac662 aarthiramamurthy.com atmebenessere.com auctionpros.club/glt/ baddietraphour.com brighteclass.com/nko/ brologan.com/pna/ comeongetreal.com/nko/ emythaccelerators.com/ga4/ everychildnisanartist.com/glt/ eyepointph.com foodrenewal.com/ga4/ gfltransports.com/nm8/ locallygrownmedia.com/pna/ merhomeimprovement.com mingchi168.com/ga4/ qihuo119.com/ga4/ sarahkim.world/cmd/ shisang.xyz/k8b/ st883.com/ga4/ straightaheadflixgroup.com/glt/ terrycareerconsulting.com/pna/ theloveofliving.com/ga4/ tonainy.com/cmd/ traumaremedies.com/cmd/ trendycollectionz.com vestingfacts.com/ga4/ # Reference: https://twitter.com/Racco42/status/1323404190962618371 # Reference: https://app.any.run/tasks/7d9de5ff-9695-47c2-8108-6b6a3bcdb1c9/ 3907allendale.com/nt8e/ brandonprattdrums.com/nt8e/ donotwasteyourvote.com/nt8e/ eneralysis.com/nt8e/ feeneylaminate.com/nt8e/ gomashio-taste.com/nt8e/ highfashionexchange.com/nt8e/ jobheap.com/nt8e/ lostintraveland.com/nt8e/ mohdnaved.com/nt8e/ mostposh.com/nt8e/ radiosteel.com/nt8e/ rescuedpetsarewonderful.com/nt8e/ simplicty-in-life.com/nt8e/ whereistheherb.store/nt8e/ # Reference: https://www.virustotal.com/gui/file/867250c0cf9bf77af6af0886d701bb1ce4045a49a1e8be964b8e5f00de241c20/detection animalcare.today/unx5/ best-three.com/unx5/ britishchildrenslottery.com/unx5/ horizon-hydraulics.com/unx5/ indumaqservicios.com/unx5/ liquancai.com/unx5/ porncamslivechat.com/unx5/ ronspizzapalace.com/unx5/ site-oficial.tech/unx5/ stevebana.xyz/unx5/ thewriteux.com/unx5/ tkor.city/unx5/ waaaghstore.com/unx5/ # Reference: https://app.any.run/tasks/4fe61081-2e84-4544-a275-0665bea7b2cc/ grg679.xyz 5855a.com/9d1o/ aceditors.com/9d1o/ dekoratuvida.xyz/9d1o/ emergingtrendify.com/9d1o/ entepeedia.com/9d1o/ eventoslafete.com/9d1o/ gmleetkd.com/9d1o/ goldenoilproducts.com/9d1o/ mw88slot.net/9d1o/ smartcontracttraders.com/9d1o/ solucionescbi.com/9d1o/ unusualdag.com/9d1o/ unusualdawg.com/9d1o/ # Reference: https://twitter.com/58_158_177_102/status/1326293293878059009 # Reference: https://tria.ge/201110-az5cp1fxde/behavioral1 ozsmarthomes.com screaminyourcarday.com nbhindustriesptyltd.com ntgmfublb.icu bombayracks.com phoenixlights.net rachelamosphotography.com leapforwards.net sendai-salt.com shabbychicflipsbyangelina.com core-ol.com canalysis.net tybeeprohibitiontour.com influencedarts.com italivpn.com newborn.today garagedoorroundrocktx.com participi.com thegoddessnow.com invesito.com surfingnaked.com sunsetsalesforce.com revolution4kids.net kingbookvn.com realsteelpocatello.com ubitem.com forretningsfilm.com liberationcreation.com jfaudiovisual.com fashinnovation.institute 4628ridgemont.info advocatenunie.com sheilaalvarado.com gun-barons.com muyupin.com nolanshotsauce.com chile-commerce.com alekhyasarees.com digitalcollectionservices.com rhwlc.com dondeestanlospacientes.com haxb33.xyz sageolegoats.com strongpowerlive.com allianceofamericanlawyers.com applywithrand.com wwdyson.com rivertigerresources.com njbjjt.com lemarcel.online unetgallery.com zajedyne.com aodiq3.com profitcart.xyz mrnord.com melisaweb.com picskicks.com ubiquiti.lat long0321.com mediherz-shop.com digitizersfriend.com ford17tv.com seawalker.art serum.mobi weblst.com # Reference: https://otx.alienvault.com/pulse/5fabd3703c6e86ab3329c124 myrqh.com superbbeautysecrets.com techyde.com knt60345blog.com cryptocurrency.wiki kumcal.com # Reference: https://www.virustotal.com/gui/file/63c7a80a5750e4f804f26a4252aa8a6efb959e1e6f6f763451e18703594fa51a/detection ghsinternationalconferencewithinternationalfilesecureserviceglo.ydns.eu # Reference: https://www.virustotal.com/gui/file/e3def2d5d83257eb416a4b3f5a89afd85dbedb1d68d95e871d804c9bfb225ec3/detection igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu # Reference: https://www.virustotal.com/gui/file/725f65d305b7295680484b3c813ebcbc8cd2ed273943ce439fa658ac5e265db5/detection vegaconferencegloballywihtinternatioanlwellwareteamwordglobalin.ydns.eu # Reference: https://www.virustotal.com/gui/file/918b404d124504e3f5a654b0839f9c002831bba6eff56e870f4f20ab11fd2cca/detection hoodsboysuccessmanwizzsonbrightdayblesng.ydns.eu # Reference: https://www.virustotal.com/gui/file/64bf2f00c276d63d79f1fc5a1140ecd77a0bc2e3106d4298bddb6d149fcfef82/detection wsdyshgshgnationalobjindustrialatwsgqp.ydns.eu # Reference: https://www.virustotal.com/gui/file/96d593ee0b035af385bf74f834c980c44389f00560b31f8825b8b7b796fe2e45/detection neverwsdywalkachinese2loneinlifekwsfdw.ydns.eu 8khutpn8g3x9iy.net depoarkasi.com rakutenlle.xyz segredosdocopywriting.com # Reference: https://www.virustotal.com/gui/file/0e31eca3da35e95b666df1705113d75bc81936a879b55fdf1bc2c6150df296c4/detection bsskillwsdyemmulatorsdevelovercommwsdpg.ydns.eu # Reference: https://www.virustotal.com/gui/file/13a9ba492c2a5ee332477af324aee8b2bc7d74847b1330308cf04ad8f9b0a6ec/detection telecomoperatinggoodnewserverfortransfersecurefileinternatioanl.ydns.eu # Reference: https://www.virustotal.com/gui/domain/ydns.eu/relations actionforfiletransferthroughcloudbusinessinternationalglobalsys.ydns.eu antivirtualmachinecleanserctigifateforthisfilewithgoodsecurityp.ydns.eu antoinesauvagesqcomcomantoinesauvagesqcomcom.ydns.eu asdfghjklzxcvbnmmnbvcxzlkjhgfdsapoiuytre.ydns.eu bhngvfcdswqwertyuiopasdfghjkllkjhgfdsapo.ydns.eu brinallgoodjobandworkintoseehowblessings.ydns.eu bsskillstdyemmulatorsdevelovercommsthaw.ydns.eu domniforworkinsidegoodohmarcywitmeohjah.ydns.eu easygoldwithgoldenindustryinternationalinternationalfiletransfe.ydns.eu eewssghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu endsarsendpolicebrutalityendsarsendpolic.ydns.eu ertyuioplkjhgfdsazxcvbnmmnbvcxzasdfghjkl.ydns.eu fghjklmnbvcxzasdewqrtyuioplkjhgfdsazxcvb.ydns.eu firewallsecurityscandocumenttransferwithonlinesharingtransfergb.ydns.eu fsfhuiohwenljiofnnfnlasdlkjflkjioxcoivjndfnkljflsdjlfjwjejsdflk.ydns.eu gbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2y.ydns.eu ghkiwuydmklopjdbcyuavxbnmsheyrhdgcvbzgyu.ydns.eu governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu greenstdykegheedahatakankeadeshnaastxqm.ydns.eu greentsdykegheedahatakankeadeshnaatshah.ydns.eu gyeuiojndhbvmaoiwnnchauwo28vnj8mjmvnwhk.ydns.eu lkjhgfdsaopoiuytrewqmnbvcxzasdfghjklqwer.ydns.eu microsoftsecurityverificationscannerrunningforsecurefiletransfe.ydns.eu mknjbhvgcfxdzsallpkojihugyftdrseawqzaxsc.ydns.eu mndyneverwalkachinese2loneinlifemnkngr.ydns.eu plugwsdytransportationalexpertsywsfmq.ydns.eu privatestdycloudshareandfileprotecstlka.ydns.eu privatetsdycloudshareandfileprotectsgas.ydns.eu qwertghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu qwertyuiopmnbvcxzasdghuytrewqasdcvbnmlkj.ydns.eu shgshgstdynationalobjindustrialatstqmd.ydns.eu shgshgtsdynationalobjindustrialattsgpx.ydns.eu softsystemworkforgoodthingstotransferwordfileinternationallywih.ydns.eu stdybsskillemmulatorsdevelovercommstdlp.ydns.eu stdygreenkegheedahatakankeadeshnaastfaw.ydns.eu stdyplugtransportationalexpertsystywq.ydns.eu systemscantheipwithadvancefirewalltechnologyandinternaitonaldns.ydns.eu systemsecuritycheckingwithallprotectionofinternetwithfirewallpr.ydns.eu thdyprivatecloudshareandfileprotecthfqm.ydns.eu thdyworkfinesanotherrainbowlomoyentthflx.ydns.eu theverifiedclouddatatransfersystemforsecurefirewallprotocolente.ydns.eu trijgrscviomnbvdewacvioplmjytrewwqazxcvty.ydns.eu truesystemadvicetotransferwordfileinternatioanllywithsecurechan.ydns.eu tsdybsskillemmulatorsdevelovercommtshrc.ydns.eu twitterlevelsecuritycheckingforwordfiletransferthroughfirewalls.ydns.eu tyuioplkjhgfdsaqwertyuiopmnbvcxzasdfghjk.ydns.eu unitedfrstdykesokoriorimistreetsmstjsm.ydns.eu unitedfrtsdykesokoriorimistreetsmtsfma.ydns.eu wejsdjfhjwehjhjdbdfghieidsjdfhgjhjfdhgjhjhasjhfjdfjhjhdjshjshdj.ydns.eu whythereasonbitcointransactionisveryhighwithanothercountryloook.ydns.eu workfinestdysanotherrainbowlomoyentstlsw.ydns.eu workfinetsdysanotherrainbowlomoyenttsghq.ydns.eu wsdyprivatecloudshareandfileprotecwsfkl.ydns.eu wsdyunitedfrkesokoriorimistreetsmwsgqp.ydns.eu wsdyworkfinesanotherrainbowlomoyentwsgqm.ydns.eu yerertpiytrrtrtyiuyuioiiouyuiuiopoipufresaaasdtyyyiiuyrterwrtrt.ydns.eu yhrbgnderfsacdewpojgtredcvbnmkiolphgfdsq.ydns.eu zoominfoisagoodmnetworkoftheallinternationalcompaniesforfilesha.ydns.eu # Reference: https://www.virustotal.com/gui/file/20b0c29fcdbe79a78d0fd5303369b1057653195d537bd2f25bafb79dbffdde88/detection 66pct.xyz bestdealu.com frankscustomdraperies.com iamkerala.com ihandreg.com individualanalysis.com kadoshfinancial.com kykyryky.art quoteforthebest.com richboxer.com shnyty.com skinxbaron.club stainlesshydraulic.com tadbirsanat.com xxxindian.info # Reference: https://www.virustotal.com/gui/file/51deb79da8be65d5b393887e933cfcf693ce38c2b34cba2749d84bed130d3dfd/detection brushforbetter2020.com crystuneshop.com daylow.site dlacf.com fenhedaqujiuchang.com flandersmd.com floridalicorice.com freencertsolution.com lzzrcg.com marcohoffman.com ourhavenco.com outbondgoapindul.com paypalchanger.com sunnyhomecleaning.com # Reference: https://twitter.com/jstrosch/status/1329100921469546497 ghost00710.ddns.net w91pk.com/ggh/ # Reference: https://twitter.com/Racco42/status/1329525723829309440 # Reference: https://app.any.run/tasks/1817b308-7c96-46a9-89cb-31aba1fde41d/ 1020waterviewdrive.com/fs8/ 5927399.com/fs8/ 70skinstore.com/fs8/ gabipareras.net/fs8/ highlandcelticart.com/fs8/ hobbyhousekennels.com/fs8/ hpg.computer/fs8/ kumcal.com/fs8/ lashvash.com/fs8/ setsomegoals.com/fs8/ skillsme.school/fs8/ thelincolntondentist.net/fs8/ # Reference: https://www.virustotal.com/gui/file/640e2fcfe7efdf8edb2780afb1fdc2954bc3c8fdec183fc768eca0eee14d6f19/detection # Reference: https://www.virustotal.com/gui/file/ee562a08154b7e12f3133019ad584e533e9162176e03b243854f67cb34c04eb9/detection brejoin.com/yx/ farmeragro.com/yx/ first-class-travel.com/yx/ foxannewigs.com/yx/ hoterswimming.com/yx/ informatin-frid.com/yx/ ironcloudpublishing.com/yx/ joanne.email/yx/ jperraultpaintings.com/yx/ littlefiggies.com/yx/ musicsp.com/yx/ nurtureground.com/yx/ original-ginjer.com/yx/ ruprogressive.com/yx/ samperd.com/yx/ topdecortips.com/yx/ # Reference: https://www.virustotal.com/gui/file/8328ae28430dbd148eabb432ccc424329da00fead9404102c59559fc02e2ec11/detection bestmixer.pro/pth/ capture-boutique.com/pth/ higwayharry.com/pth/ jbgsmith5g.com/pth/ lfmh888.com/pth/ nerdtoysuk.info/pth/ newboxmall.com/pth/ pros2311.com/pth/ queguayperu.com/pth/ recoveratsolidrockranch.com/pth/ rosaouroo.com/pth/ sing-easy.com/pth/ suppoortingvictory.net/pth/ teealiens.com/pth/ websitenomor.com/pth/ # Reference: https://twitter.com/wwp96/status/1335674912539897858 # Reference: https://app.any.run/tasks/136812b9-9106-49ca-9c56-9eeb756159e6/ dl-aikenuo.com festivalbd-ambierle.com # Reference: https://tria.ge/201207-jsgz9hl5ex 168199151.com/p2he/ 7as.money/p2he/ aide-vacances.com/p2he/ alphajagd.com/p2he/ amionyoutube.com/p2he/ asianpathfinders.com/p2he/ betterbeautymemphis.com/p2he/ bgl.ink/p2he/ blackcatsgk.com/p2he/ blogluster.com/p2he/ bohokim.com/p2he/ brookingsjet.com/p2he/ carwrapsorlando.com/p2he/ chaisalsa.com/p2he/ cookies-x.info/p2he/ drkilat.com/p2he/ elevateathleticcenter.com/p2he/ esseninnovation.net/p2he/ event-moscow.com/p2he/ fd4747.com/p2he/ flagpolesforourfallenheroes.net/p2he/ fuckbitchesgetlaid.com/p2he/ getvonline.com/p2he/ goldandbrown-pizza.com/p2he/ heretangier.com/p2he/ hicotxselfstorage.com/p2he/ homebounties.com/p2he/ humbleangel.com/p2he/ internetempresaschile.com/p2he/ interxioneurope.com/p2he/ itvillagetvm.com/p2he/ jytyhlw.com/p2he/ lentiacontattoeshop.com/p2he/ linuxquebec.net/p2he/ lottoplays.com/p2he/ lzjmqx.com/p2he/ mdmbijouterie.com/p2he/ metallobaza-tlt.site/p2he/ miniaturearmsdealers.com/p2he/ modelplanepartseff.xyz/p2he/ motherdaughter.club/p2he/ outdoordiningtents.com/p2he/ outdoors4junkies.com/p2he/ parasailer.com/p2he/ peruvianautoauction.com/p2he/ phaniesart.com/p2he/ phoenixandthetardigrade.com/p2he/ plugandplaylab.com/p2he/ proudseas.com/p2he/ pugbonnets.com/p2he/ randomua.host/p2he/ residencialcasalinda.net/p2he/ roomforabear.com/p2he/ sharmilawifestories.com/p2he/ sirisombut.com/p2he/ solangerichard.com/p2he/ stranger-partner.net/p2he/ thomasreany.com/p2he/ tsm-m.tech/p2he/ turismoelite.com/p2he/ unk-page.com/p2he/ web-panda.com/p2he/ wegwerphandschoenen.online/p2he/ ykteknik.com/p2he/ # Reference: https://tria.ge/201214-kc1ck6vg7x fundamentaliemef.com gallerybrows.com leadeligey.com octoberx2.online climaxnovels.com gdsjgf.com curateherstories.com blacksailus.com yjpps.com gmobilet.com fcoins.club foreverlive2027.com healthyfifties.com wmarquezy.com housebulb.com thebabyfriendly.com primajayaintiperkasa.com learnplaychess.com chrisbubser.digital xn--avenr-wsa.com exlineinsurance.com thrivezi.com tuvandadayvitos24h.online illfingers.com usmedicarenow.com pandabutik.com engageautism.info magnabeautystyle.com texasdryroof.com woodlandpizzahartford.com dameadamea.com sedaskincare.com ruaysatu99.com mybestaide.com nikolaichan.com mrcabinetkitchenandbath.com ondemandbarbering.com activagebenefits.net srcsvcs.com cbrealvitalize.com ismaelworks.com medkomp.online ninasangtani.com h2oturkiye.com kolamart.com acdfr.com twistedtailgatesweeps1.com ramjamdee.com thedancehalo.com joeisono.com glasshouseroadtrip.com okcpp.com riggsfarmfenceservices.com mgg360.com xn--oi2b190cymc.com ctfocbdwholesale.com openspiers.com rumblingrambles.com thepoetrictedstudio.com magiclabs.media wellnesssensation.com lakegastonautoparts.com dealsonwheeeles.com semenboostplus.com # Reference: https://www.virustotal.com/gui/file/24721ddd6082f6418d5b22a1b9703bc3e38c8b5725798b62110a170b41eac6ce/detection 1429callealtura.com bytyt.com flickfaced.com forenvid.com sanangelostory.com ssgsaia.com strawberrystreet.net westpalmbeachvacationhomes.com wilsonelitecleaning.com wwwwg2020.net xyft595.com yrxcorrecf.xyz # Reference: https://www.virustotal.com/gui/file/e59d9d9ca9e0c7dddea9a94f0dab0ae137b6a762999bade26db35b1ca35e1f72/detection alltrendsbrands.com camsplaces.com helpmeiminmytwenties.com icknw.com kart-im.com mokrie-pizdi.site mstaffingagency.com neothecode.com nutritionlives.com point1properties.com prospervine.net sexmomsonsister.cloud thefeelgoodsisters.com veteranmadecontent.com wineenthusiasms.com # Reference: https://twitter.com/JAMESWT_MHT/status/1341997180664557568 deuxus.com/t052/ # Reference: https://www.virustotal.com/gui/file/31777f81a8d806fcb50d954f3ac48c8aca7f340929f8cf784d740a079892a587/detection ampsports.digital craftsman.sucks dabrownzone.com grromedandgrand.com harriettubmanu.com kapatoken.com mamentos.info maximizefit.net nanfangguniang.show northernfloorco.com plotrunner.com radicalisland.com tarotit.site theawfulliar.com xn--mdecinemotionnelle-bwbg.com # Reference: https://www.virustotal.com/gui/file/f535ff7416a31c3f067b61aea08aab08006eaf2dd790dcfc89c05a1f6343f17b/community stdychnesqudusisabst.dns.navy # Reference: https://twitter.com/reecdeep/status/1351444312672923648 chfourmndyanotherwak.dns.navy learnhour.net # Reference: https://www.virustotal.com/gui/file/ad03ca16b05c593894d3cf90ea6ebe56f3ce6dc94dc0675234f357893f3aadfa/detection anillanyaralo.com/e3eb/ bimtracks.com/e3eb/ eastindiaclub.media/e3eb/ exm-droneops.one/e3eb/ keystonemedicalwellness.com/e3eb/ made-in-wonderland.com/e3eb/ manconnectr.services/e3eb/ maquettree.com/e3eb/ medijobsonline.com/e3eb/ milkafrias.com/e3eb/ offencebzo.space/e3eb/ overdoza.com/e3eb/ racevx.xyz/e3eb/ stocktonweeddelivery.com/e3eb/ tmtbikes.com/e3eb/ winnicapolska.com/e3eb/ # Reference: https://twitter.com/VirITeXplorer/status/1353992650148503552 # Reference: https://tria.ge/210126-vgsyrq49hs 11sxsx.com/jqc/ 5hnjy.com/jqc/ asacal.com/jqc/ avia-sales.xyz/jqc/ baculatechie.online/jqc/ bebywye.site/jqc/ brotherhoodoffathers.com/jqc/ cositasdepachecos.com/jqc/ definity.finance/jqc/ dgdoughnuts.net/jqc/ dividupe.com/jqc/ dl888.net/jqc/ droriginals.com/jqc/ eaglesnestpropheticministry.com/jqc/ ecandkllc.com/jqc/ fitdramas.com/jqc/ gabriellagullberg.com/jqc/ hareland.info/jqc/ hongreng.xyz/jqc/ hotvidzhub.download/jqc/ incomecontent.com/jqc/ internetmarkaching.com/jqc/ ip-freight.com/jqc/ kathymusic.com/jqc/ kenniscourtureconsignments.com/jqc/ kimberlygoedhart.net/jqc/ kornteengoods.com/jqc/ lhc965.com/jqc/ lokalised.com/jqc/ ludisenofloral.com/jqc/ luxusgrotte.com/jqc/ mad54.art/jqc/ margosbest.com/jqc/ miamiwaterworld.com/jqc/ mybestme.store/jqc/ mywillandmylife.com/jqc/ neosolutionsllc.com/jqc/ novergi.com/jqc/ quintred.com/jqc/ ravenlewis.com/jqc/ screwtaped.com/jqc/ shakahats.com/jqc/ simplification.business/jqc/ singledynamics.com/jqc/ sistertravelalliance.com/jqc/ solidconstruct.site/jqc/ soterppe.com/jqc/ sqatzx.com/jqc/ st-reet.com/jqc/ sterlworldshop.com/jqc/ strahlenschutz.digital/jqc/ systemedalarmebe.com/jqc/ szyulics.com/jqc/ the343radio.com/jqc/ theorangepearl.com/jqc/ tiendazoom.com/jqc/ topheadlinetowitness-today.info/jqc/ toweroflifeinc.com/jqc/ vigilantdis.com/jqc/ vivethk.com/jqc/ weddingmustgoon.com/jqc/ wlw-hnlt.com/jqc/ xaustock.com/jqc/ zoommedicaremeetings.com/jqc/ # Reference: https://www.virustotal.com/gui/file/ec8b3d104a7fc416aab07329a5f0ecab1b7fd181ffbd2d7ac31af51e532add07/detection 88779599.com/09rb/ airfast-express.com/09rb/ aizimov.com/09rb/ alessandrabortolussi.net/09rb/ artois-plomberie-ambar.com/09rb/ edgehairandbeauty.com/09rb/ efoh27.com/09rb/ emuprising.com/09rb/ expandtherapy.com/09rb/ iregentos.info/09rb/ legendtrailcommunity.com/09rb/ myraklereleafcannaclinic.com/09rb/ nesilyilmaz.com/09rb/ prendimiconcept.com/09rb/ unitedbythebucket.com/09rb/ watereminder.com/09rb/ # Reference: https://www.virustotal.com/gui/file/629c7e301816de498d8a784935bd1a4aa21331a1520275c48b30c0ac4aa18285/detection abstract-elearning.com/gqx2/ bonus189.space/gqx2/ dbsadv.com/gqx2/ enlightenedsoil.com/gqx2/ housvest.com/gqx2/ inreachpt.com/gqx2/ libraspeed.com/gqx2/ microwgreens.net/gqx2/ podborauto.pro/gqx2/ scionoflewisville.com/gqx2/ shaffglowing.com/gqx2/ tu4343.com/gqx2/ # Reference: https://www.virustotal.com/gui/file/841ce55c5a583e5674e1fcde05347c3ad07dec6e0f38298bb4fc2566ca5aa746/detection # Reference: https://www.virustotal.com/gui/file/d27174550c627e2ae425db9dc83ed7cb1856034184c6ce333efcf383506abd88/detection acdfr.com/bw82/ activagebenefits.net/bw82/ cbrealvitalize.com/bw82/ ctfocbdwholesale.com/bw82/ dealsonwheeeles.com/bw82/ engageautism.info/bw82/ exlineinsurance.com/bw82/ gallerybrows.com/bw82/ gdsjgf.com/bw82/ glasshouseroadtrip.com/bw82/ h2oturkiye.com/bw82/ housebulb.com/bw82/ illfingers.com/bw82/ ismaelworks.com/bw82/ learnplaychess.com/bw82/ magiclabs.media/bw82/ magnabeautystyle.com/bw82/ mgg360.com/bw82/ mybestaide.com/bw82/ ninasangtani.com/bw82/ okcpp.com/bw82/ pandabutik.com/bw82/ primajayaintiperkasa.com/bw82/ ramjamdee.com/bw82/ rizrvd.com/bw82/ ruaysatu99.com/bw82/ thepoetrictedstudio.com/bw82/ tuvandadayvitos24h.online/bw82/ twistedtailgatesweeps1.com/bw82/ usmedicarenow.com/bw82/ xn--avenr-wsa.com/bw82/ # Reference: https://app.any.run/tasks/07819c4b-dffc-4c56-8f83-eee38a01b188/ littlefreecherokeelibrary.com/xle/ localeastbay.com/xle/ loyaloneconstruction.com/xle/ prestiticadalanu.com/xle/ ricardoinman.com/xle/ theatomicshots.com/xle/ tknbr.com/xle/ www7456.com/xle/ # Reference: https://tria.ge/210203-nhqf45a196 1317efoxchasedrive.info/kio8/ 56ohdc2016.com/kio8/ 73gardinerdrive.com/kio8/ airpromaskaccessories.com/kio8/ allinoncrypto.site/kio8/ angermgmtathome.com/kio8/ asosbira.com/kio8/ audiencetrust.sucks/kio8/ awesome-veganism.com/kio8/ bingent.info/kio8/ cbluedotlivewdmall.com/kio8/ chinhphucphaidep.online/kio8/ domentemenegi20.com/kio8/ dream-case.com/kio8/ drizzerstr.com/kio8/ dubojx.com/kio8/ envirocare-ss.com/kio8/ erniesimms.com/kio8/ estedindustries.com/kio8/ facestaj.com/kio8/ fantasticsgelato.com/kio8/ ffhcompany.com/kio8/ fireworkstycoons.com/kio8/ fixedpriceelectrician.com/kio8/ ghar.pro/kio8/ ghorowaseba.com/kio8/ globalcrime24.com/kio8/ greeaircondition.com/kio8/ gropedais.club/kio8/ heightsplace.com/kio8/ helmihendrahasilbumi.com/kio8/ hnqym888.com/kio8/ jennaloren.com/kio8/ jtkqmz.com/kio8/ lauratoots.com/kio8/ legamedary.com/kio8/ magmaplant.net/kio8/ masdimensiones.com/kio8/ melolandia.com/kio8/ newyorkcityhemorrhoidclinic.com/kio8/ noimagreece.com/kio8/ nutbullet.com/kio8/ ocleanwholesaler.com/kio8/ opera-historica.com/kio8/ pastormariorondon.com/kio8/ perteprampram01.net/kio8/ pizzaterry.com/kio8/ plantationrevival.com/kio8/ porntvh.com/kio8/ sanrenzong.com/kio8/ stjudetroop623.com/kio8/ systizen.com/kio8/ tf-iot.com/kio8/ thaibizgermany.com/kio8/ the-aviate.com/kio8/ thedesigneryshop.com/kio8/ thespiritualabolitionist.com/kio8/ thewilmingtonguide.com/kio8/ tsunrp.net/kio8/ utopicvibes.net/kio8/ velactun.com/kio8/ wolfetailors.com/kio8/ yogabizhelp.com/kio8/ youremsys.com/kio8/ # Reference: https://tria.ge/210205-vge381amz2 4vrlwi.site/dyt/ admoney.info/dyt/ ajreality.com/dyt/ alejandrobrand.com/dyt/ bakldx.com/dyt/ bkdn.xyz/dyt/ blushinglips.wine/dyt/ bradfordsahm.com/dyt/ caprichodigital20.com/dyt/ casinobigbank.com/dyt/ cezede.com/dyt/ codedlock.com/dyt/ connecting4fun.com/dyt/ contenttoincome.com/dyt/ coolartgallery.com/dyt/ designed4youevents.com/dyt/ dijitak.com/dyt/ dongzhenwl.com/dyt/ dopefuse.com/dyt/ drsineadbeirne.com/dyt/ eacvea.com/dyt/ enecaa.com/dyt/ eseskalierteh.com/dyt/ evokealpha.com/dyt/ fessucesesee.com/dyt/ fhehsjeh.com/dyt/ greyboxautomations.com/dyt/ hoslergroup.com/dyt/ humanitera.international/dyt/ innocentandnaive.com/dyt/ jasminesecretshop.com/dyt/ keller-bec.com/dyt/ lesavonbyannvictoria.com/dyt/ longwoodlife.com/dyt/ luckyvertical.com/dyt/ manifester.guru/dyt/ marvitrans.net/dyt/ mediclyft.com/dyt/ mosella.online/dyt/ naturally-toned.com/dyt/ njcfpnetwork.com/dyt/ nomadroams.com/dyt/ norsk-medisin.com/dyt/ pinkopalboutique.com/dyt/ plus1joinersandbuilders.com/dyt/ quatormi.site/dyt/ reianswers.net/dyt/ royalpetcanvas.com/dyt/ scattershotgames.com/dyt/ sensvia25.com/dyt/ shreeshyamexporters.com/dyt/ so0551.com/dyt/ socksofcolors.com/dyt/ spleafpro.com/dyt/ sportscircleindy.com/dyt/ sptrading.company/dyt/ sulukozukremi.com/dyt/ summerlively.com/dyt/ surkentkuruyemis.com/dyt/ susanenglert.net/dyt/ tg0913.com/dyt/ theholinesshousewife.com/dyt/ thepreventivemedicine.net/dyt/ zhongwu.tech/dyt/ # Reference: https://twitter.com/reecdeep/status/1359854987623464969 # Reference: https://tria.ge/210211-ynsg9khthj # Reference: https://app.any.run/tasks/0e97831e-b9b3-455b-b688-05a38d4fd8f5/ 360afs.com/sfd8/ accountablereagent.com/sfd8/ anaisandmichaelwedding.com/sfd8/ battlecreekenquirer.sucks/sfd8/ behintejaratpourasa.com/sfd8/ blockchaininfo.online/sfd8/ bottom.golf/sfd8/ bringbackbeer.com/sfd8/ brothersarmy.com/sfd8/ cafeconstantino.com/sfd8/ caregiveronestopshop.com/sfd8/ colombeboncenne.net/sfd8/ csc-traffic.city/sfd8/ domentemenegi17.net/sfd8/ duoyiboard.com/sfd8/ ecofarmtr.com/sfd8/ frequence-movies.com/sfd8/ haxb33.xyz/sfd8/ houstoncoupleswhocycle.com/sfd8/ howongbrewing.com/sfd8/ ianac.info/sfd8/ immunologi.world/sfd8/ intuitionkeys.com/sfd8/ joekurtz.com/sfd8/ lingring.party/sfd8/ lon-dox.com/sfd8/ menteinformativo.com/sfd8/ miapetito.com/sfd8/ mompreneurista.com/sfd8/ mrrecordinc.info/sfd8/ myworkingportfolio.network/sfd8/ njprestructures.com/sfd8/ northstarpmg.com/sfd8/ pamelathomas2020.com/sfd8/ paulsplumbingllc.com/sfd8/ pazzionteez.com/sfd8/ pinoyko.com/sfd8/ plantenaturelle.com/sfd8/ plumbfinders.net/sfd8/ pmanigeria.com/sfd8/ purelycoastal.com/sfd8/ roovepages.com/sfd8/ royalcradle.com/sfd8/ sachinlog.com/sfd8/ schmuckhof.com/sfd8/ secondnatur3.com/sfd8/ silmarinternational.com/sfd8/ splashleadsdigital.com/sfd8/ strilok.com/sfd8/ subastaelectronics.com/sfd8/ sunwavescreative.com/sfd8/ superhumanworkout.com/sfd8/ swapbanks.info/sfd8/ thaipasal.com/sfd8/ theambivnce.com/sfd8/ themowerdoc.com/sfd8/ turnerswindowstylings.com/sfd8/ uasaerialsolutions.com/sfd8/ vyloanshop.club/sfd8/ wellnessbamboo.com/sfd8/ xn--hef-1la.com/sfd8/ young-oldtimer.com/sfd8/ yxw897.com/sfd8/ zeravern.com/sfd8/ # Reference: https://www.virustotal.com/gui/file/a9d7dbb160330978fb1b5cbd40a4bf2c0aede509905de5d792e45aa5ca876095/detection blackownedtea.net/yce/ domvy.xyz/yce/ erchomesellers.com/yce/ extreamx.space/yce/ fiaincomeforlife.com/yce/ fjtweb.com/yce/ myconqering.com/yce/ readydesignz.com/yce/ shaamfilm.com/yce/ sitesuperapido.com/yce/ technnatural.com/yce/ thebuttonfriends.com/yce/ yyewdq.com/yce/ # Reference: https://urlhaus.abuse.ch/url/987827/ # Reference: https://www.virustotal.com/gui/file/2d311b197e07b4149d8eb422ac2b5aa5c24b10cc8131e53df65ca32986b1556a/behavior # Reference: https://www.virustotal.com/gui/ip-address/103.147.184.10/relations rmtcntlthdyenverthdb.dns.army stdyrmtcntlenverstgv.dns.army stdyrmtcntlenverstoq.dns.army rmtcntlwsdyenverwsbt.dns.army mndyrmtcntlenverstpo.dns.army hangtv3xyz.myddns.me hangthai3z.myddns.me hanglady3xyz.myddns.me # Reference: https://twitter.com/reecdeep/status/1364129913511510018 kungsb2stdygotchtsty.dns.army # Reference: https://twitter.com/reecdeep/status/1367101184289492999 necght.xyz # Reference: https://twitter.com/reecdeep/status/1367445802096984064 tws-rr.xyz # Reference: https://twitter.com/pmmkowalczyk/status/1367503173200543747 # Reference: https://www.virustotal.com/gui/file/92f656d44d38fbc5e7964e36634bf95d18e157228624d1b38ea933633579ddc4/detection disciplinemonkey.com/njo/ rnlasermedspasolutions.com/njo/ # Reference: https://twitter.com/reecdeep/status/1367089557884272649 merifalls.com # Reference: https://twitter.com/reecdeep/status/1369191905880379394 joomlas123.info # Reference: https://twitter.com/sS55752750/status/1369792848816660483 olenfex.com/mdi/ # Reference: https://twitter.com/pmmkowalczyk/status/1369746549593538574 fessuseyyesseee.com/mdi/ # Reference: https://twitter.com/pmmkowalczyk/status/1369748045097820162 # Reference: https://twitter.com/sS55752750/status/1369791347029327882 rizrvd.com octoberx2.online # Reference: https://otx.alienvault.com/pulse/604b58f6a54ab9919d92768f 41230793.net capricorn1967.com rbfxi.com ziruixu.com # Reference: https://www.virustotal.com/gui/file/474cef321f60037058b0180b83d4db805792822762f071d3bdebc3fb8dd66c33/detection digi-plates.com oogilab.com atrocity.xyz 400city.com yummicrabva.com vivaceactivewear.com/grv/ supinapp.com ycmath.com lindustrieetleca.com xn--k1abtc6be.xn--p1acf bessgarments.com hengetelt.com vz473.com # Reference: https://twitter.com/reecdeep/status/1371403258200211458 # Reference: https://app.any.run/tasks/3c55db66-435a-4a40-a2d8-08db5c6aa891/ # Reference: https://www.virustotal.com/gui/file/6da50c6b31b4125631987f40d7bd3dacab22c961ca9ba60dfdfa45120d5ec17a/detection commagx4.info stdykungsb2gotmenlop.dns.army 555lucky.net/g832/ rentmy.place/g832/ manorblue.com/g832/ swifter.tech/g832/ layoutsbox.com/g832/ greatstape.com/g832/ rayhanrony.com/g832/ taxicabairports.com/g832/ aispokenhere.com/g832/ roomrain.com/g832/ layoutsbox.com/g832/ mi-tipofthemitt.com/g832/ mima-tech.com/g832/ personaljie.tech/g832/ skxrxxf7j87.com/g832/ manorblue.com/g832/ taxicabairports.com/g832/ hkyda-uk.com/g832/ ghjkl456.com/g832/ mlpsdigital.com/g832/ beiser-sa.com/g832/ layoutsbox.com/g832/ # Reference: https://www.virustotal.com/gui/file/2cb8983bbf7860e8861f601dc1c9fd36a21aecca6a81831e74f9b2c098635f50/detection americanwoodgrain.com bigmikecon.com lidandocomsuaansiedade.com mysticparka.com nnllnn.com odromex.net optimizedperson.com originalsportsas.com poppykuroki.com skyrocketyoursuccesstoday.com solarcellefficiency.com stadtaugsburg.com vip72.club vturalcycles.com yinaosw.com # Reference: https://app.any.run/tasks/decdf523-61a8-487f-94db-7be2eec7cba4/ # Reference: https://www.virustotal.com/gui/file/f8196e6009ed055bd7e2021a629cb903a530650ed36505b296c177fab320180e/detection 4676sabalkey.com 5bo5j.com 856380692.xyz babyhopeful.com bkhlep.xyz bukaino.net caresring.com creationsbyjamie.com dccheavydutydiv.net explorerthecity.com icepolo.com jyxxfy.com mauriciozarate.com maurobenetti.com myfeezinc.com oryanomer.com polling.asia robertbeauford.net siyezim.com thefamilyorchard.net thevistadrinksco.com usopencoverage.com wholesalerbargains.com worldsourcecloud.com # Reference: https://twitter.com/MBThreatIntel/status/1372965574666375174 4africa.cloud alaleste.com bannerberries.com beyondtheweeds.net bilozir.agency bradfordbarbell.com ecoconsciousart.com gabrieleanajulia.com insightccnw.com lashnetix.com leelegantflower.com littlegreekgrocery.com manconnectr.services mintmobikeplus.com njzycj.com novergi.com partyoftres.com veriezy.com your-masterclass.online yxjks.com zubaobei.net # Reference: https://www.virustotal.com/gui/file/8fb2a899e6622a2ddc7989121174bea2b7756f3f56f64f42dc6ef875d19ce919/detection 3cheer.com/p2io/ adultpeace.com/p2io/ brunoecatarina.com/p2io/ carmelodesign.com/p2io/ cleanxcare.com/p2io/ hazard-protection.com/p2io/ hiddenwholesale.com/p2io/ liminaltechnology.com/p2io/ magetu.info/p2io/ painhut.com/p2io/ shopihy.com/p2io/ thriveglucose.com/p2io/ trendbold.com/p2io/ # Reference: https://tria.ge/210408-9h7wsybb7e 7985699.com acernoxsas.com americanscreentest.com az-pcp.com blackmantech.fitness bongwater.life buyeverythingforbaby.com clonegrandma.com cwcellar.com domentemenegi47.com dream-e-mail.com ekolucky.com elpis-catering.com elticrecruit.com finalexam-thegame.com fjsibao.com foodates.com gatewaygaurdians.com goldenvalueable.com gujaratmba.com gyanankuram.com hcr.services ikoyisland.net israeldigitalblog.net krphp.com l2zmamzoin.xyz lawsoftwareteam.com likehowto.com mex33.info my-weight-loss-blog.net nevertraveled.com nevomo.group papofabri.com partapprintercare.com phillydroneservices.com pjsgsc.com privateselights.com quehaydecenarhoy.com raison-sociale.com ranguanglian.club regalparkllc.com samanthataylordesigns.com sinisviaggi.com sorelaxedmassage.com suns-brothers.com syduit.com taniakarina.com thechilldrengang.com topmejoresproductos.com ueoxx.com ufa2345.com v6b9.com valid8.network vegrebel.com verochfotografa.com vinegret.com vr-club.site vt999app.net winnijermaynezigmund.site xn--80aaxkmix.xn--p1acf xn--kck4cd0r.net xn--v1bmo9dufsb.com xpddwrfj.icu yetbor.com # Reference: https://tria.ge/210407-ywnnjr2vve 18082020.com 3559044.com 911salesrescue.com anadelalastra.art azure-vs-google.cloud bardototonho.com bricksli.com camperlifeclub.com carobbella.com carritogastronomico.com cenconsulting.com charmdalat.com clavunica.com crosswhiteconsulting.com dailyhyundaihanoi.net decoviewer.com ecomcourse.online edwardjonescredticard.com entohops.com esl-materials.com familymedicalurgentcare.com fenuadiscovery.com flcpyl.com ggapp.run godseyepiece.com greenesgoodies.com herbalbooze.com heritagelcc.com home-sou.com huongdandidong.com hvacservicecoldwater.com inlandempiresublease.com jimmysga.com josiahtreatenglishportfolio.com kaashir.com karizcustomizeme.com kellnetworks.com launchtutor.com legalhelp.black lewishackney.com lumpkinforless.com luxel01.com magenx2.info marfrigs.com merrypopinnannies.com metort.com miss-windy.com muzhskoy-eskort.site myboardinghome.com mysfmp.com ndrossignol.com opusleaf.com orchidandiris.com runwithbe.com seymor-law.com shangbinjieneng.com shopthen2.site sniffai.com socialunified.com szameitat.net thedorkweb.com unityprawn.com wegawk.com zx765.com # Reference: https://tria.ge/210407-wf3kcrqtj2 5667e.com 7030130.com 7667120.com aelnetwork.pro appalachianrepublic.com assessoriaesmero.com blackdisclaimer.com calendarioslen2021.com citestaccnt1598439710.com com623036210300.com congbaohiem.net creditccu.com curativestemcells.com curiget.xyz derasource.online dexcci.com drtprd.club ennewine.com findinghonor.com floridasoapworks.com fourcanal.com fuhaisky.com genesisdrumco.com guideingword.com gustobolivia.com heatgemini.com humanareachrewads.com icygods.com johnniemaepantry.com k2132.com kardiadance.com kathyscrabhouse.com kemermaxx.com laurindogalante.com lindaheart.com loupcreation.net lubbocksbdc.com mathilde-et-vincent.com moonboyspa.com mototasima.com mv857c3fqfppyd.xyz myrightdoctor.info neuroeka.digital pupa.one purecraftoils.com rightgetup.com sashahung.com se009.icu serv7-wells.com shopcurbsideanddelivery.com skorokvartira.online sleepy-boy.com sohadmorales.com speaktoava.com sundayframing.com talons-hauts.com teoslu.com theinterviewtechnique.site thoomkuzhy.net townietreats.com vandmc.com webtourlive.com xinke518.com zamar.online # Reference: https://www.virustotal.com/gui/file/0cec69e7857e687c0352812a4206e68f57008ea07d34b51bb9b1fc44ef042ff6/detection adeleycar.com bobwhiteknives.com carbeloy.com cash4homesutah.com customkreation.com fotosdepueblo.com funbrushstrokes.com ghoshtechno.com goldstespresso.com greenlightsmokables.com latravesia.net lukmanmalik.xyz marymoorridgecondo.com mymoxypets.com new123movies.pro officehoursonly.com parkviee.com shipu143.com shopvibeup.com sussage.com talllensphotography.com thedrata.com theemperorbrand.com yaanpay.com # Reference: https://www.virustotal.com/gui/file/94235ec4fec92239bf53cbe18e6b698f30ca30d07602cc123dcf76d728bff41e/detection abzarnovin.com atlantadomain.com curiget.xyz currenibtc.com homartist.net koedk.com paraiso.info retro-e-scooter.com riseses.com tenxtimes.net upliftgrp.com xuji68.com xyxrprt.com # Reference: https://twitter.com/reecdeep/status/1380479709016948740 # Reference: https://app.any.run/tasks/121b953c-a8b9-4f68-98dc-8531a2a77fd7/ cndzysw.com contactodirectoseguros.com cotillionclubsmv.com haarbal.com hdsmyyz.com hireblkcreatives.com innovativeiclass.com myriamward.com netacradle.com specnazshow.com sumantrabasu.com # Reference: https://www.virustotal.com/gui/file/190af94fad72bc8e19a07ab5dd60af939e5216565f8efd92aa1aa561a38281be/detection 0075544.info 349vsz.info anamikapandey.com dropin-frog.com elmatech-impianti.com milliemilliemillie.com naprawalaptopow.services smallbizhacklondon.com sobolev.design theoknoester.com # Reference: https://www.virustotal.com/gui/file/43a2069e57baacb53de658addca8950b570ce19334cd6c617c4c1060f9296fb7/detection abelprocess.com allincursive.com daghidelivery.com doctors4change.net hxc28.com ichaugames.com ienvoices.com kingdavidtiferetshop.com kuppers.info mchglobe.com puntopymeschile.com quickshop.xyz roleta.site sagemenerji.com siguelacorriente.com stevenemily.com trendyheld.com verificationpays.com worldofannabel.com # Reference: https://tria.ge/210414-318g36c5xn 19come.com/goei/ 247carkeyslondon.com addthat.xyz akindousa.com armanrugservice.com baldosasanjose.com bet365o2.com breathharbour.net caross-china.com casalomasymphonyorchestra.com cluskmusk.com covidtracksb.com creativem2.com csgo-roll.net digitalmarketingmoves.com/goei/ distributorfocuson.com/goei/ epicfriend.club evecrude.xyz foodsystemsjusticeproject.com fwgkdhg.icu generalflix.com/goei/ gulf-landlord.info her2mymeme.com imbravura.com italianrealestateagents.com karyapertama.com kelasipo.com kevinrsamuels.network lcjzjt.com legendsalliance.net leverhump.store libreo.club limonproduce.com looneytunesrun.com ltsbinge.com lxpvccard.com ly-iot.com mapadequito.com maquinaclub.com mariebiernacki.com massaponaxhighschool.com mediaworkhouse.com mex33.info mindflexlab.com niggeruprising.com nolimitsynthetics.net office-tourism-tirana.com onlinecollegetherapy.com ourmonaca.com ourmunera.net pimpmyrecipe.com randalldavisauthor.com reutbergcapital.com ronwongart.com rsw3313.com seaworldminecraft.com shopflyonline.com sportwillwin.com theexpatweightcoach.com ushealthvisa.com vbkulkarni.com win-back.online xn--ga-c9a.com zanzan8.com # Reference: https://www.virustotal.com/gui/file/0b2bfb69c51b7adaeedec010a02983eee856559b71ecbc4ecb61c7e929b1f165/detection 33ofbalranaldavenuelargsbay.com bulbulators.com cmsphotography.net freshair--uk.com hempexchange.biz kfuos.info mujereshoyonline.com newsoc.com nylonsilk.com phillimore.mobi pritap.net rtve.online skyroott.info techforcefoundation.biz theflightcalculator.com xadserve.com # Reference: https://www.virustotal.com/gui/file/5b19c5b2854cf7d4ed344ff7539b38caec397d6a3002a7219b2fbe0b7c73f455/detection 3cheer.com adultpeace.com aideliveryrobot.com biztekno.com carmelodesign.com fuhaitongxin.com hiddenwholesale.com liminaltechnology.com lucytime.com m678.xyz magetu.info malcorinmobiliaria.com mercuryaid.net micheldrake.com tricqr.com untylservice.com # Reference: https://www.virustotal.com/gui/file/70f35721eb13022a6ae320055bf74d8c3bf688d5cd04c3bea37f6c2e4886d1b3/detection project99x.com ruhuxue.com shupaishuiban.com top-endstrollers.com xn--onegcio-o0a.com # Reference: https://www.virustotal.com/gui/file/6cdd13858c80732f5bcae5a998b2cc4402ee5c549b7042594b0edec313671a6f/detection allindiatrust.com biyahetours.com cinmax.xyz count230.com fakingslatino.com hamrocity.com landerauto.com lodosmimarlik.com marriedtwomusic.com marshylime.com mindtattooed.com nundmshop.com prosperedfreelancing.com shopqls.com thenicolehernandez.com xn--caasymas-e3a.com # Reference: https://tria.ge/210420-5hgfnhdfq2 20190606.com 2020uselectionresult.com afasyah.com amarak-uniform.com apgfinancing.com ballparksportscards.com britishretailawards.com centaurme.com craftbrewllc.com cruzealmeidaarquitetura.com crystalwiththecrystalz.com devarajantraders.com dijcan.com dineztheunique.com esveb.com fairerfinancehackathon.net floryi.com gadgetsdesi.com ghallagherstudent.com hidbatteries.com idtiam.com instantpeindia.com interprediction.com jocelynlopez.com joyeveryminute.com launcheffecthouston.com localiser.site lookupgeorgina.com mamapacho.com marolamusic.com milehighcitygames.com myfreezic.com nmrconsultants.com opolclothing.com pawtyparcels.com photograph-gallery.com plataforyou.com print12580.com programme-zeste.com raphacall.com realmartagent.com rednetmarketing.com retailhutbd.net rftjrsrv.net ronerasanjuan.com samytango.com sewingtherose.com shoprodeovegas.com shuairui.net singlelookin.com siyuanshe.com slicktechgadgets.com sophieberiault.com spyforu.com styleket.com syuan.xyz thegoldenwork.com thehmnshop.com thesmartshareholder.com topgradetutors.net tpsmg.com travellpod.com wangrenkai.com wellemade.com wpcfences.com # Reference: https://www.virustotal.com/gui/file/8ad095b5f3cbe5651719b70347c94f489a4a14d72a4535c68f9829fe8d0ec738/detection aksessories.com carolyngowercoaching.com cavanvanrental.com china-xinkai.com greenbarmiami.com jobs-preparation.com maniakea.com minksywinks.com modernhub.info nchuangyi.com sonoraquwat.com stepsaudio.com therealnotary.com trickvv.com tyrkietspecialisten.com xcusehrreje.com # Reference: https://github.com/MBThreatIntel/malspam/blob/master/AgentTesla/AgentTesla_2021-04-27.txt bornforbetterthings.com crossfut.net dajiangzhibo12.com deltaeleveight.com draftsofsilence.com droplites.com futebolfitness.com.br highsiddityminks.com profoundai.net prulib.com pwjol.com saturnkorp.net thehealthierdonut.com unmanglement.com vtz6whu5254xb1.xyz weatherdekniagara.com # Reference: https://www.virustotal.com/gui/file/1f108a10b866def65686fcb0e0c10612152288ea1f7a6158e5ada37f26d03265/detection alignedenergetics.info craftsman-vail.com downloadhs.com fortwayneduiattorney.com gmworldservice.com lowcarblovefnp.com salahdinortho.com sim201.com twincitieshousingmarket.com xiang-life.net # Reference: https://tria.ge/210429-tmvpzvp3tj 12hourchallenge.com 890281.com airfieldelectric.com alleyesonegipt.com amu2020.com antalyasml.com asudprr.com berlins-cuban.com burmester.email businessfundingtodayscam.com byteidolon.com chiraaag.tech coinbutter.com commercestudy.online contorig2.com czech-lang.space designlyticsuk.com embarkjourney.party formulasimracing.com goldtraderassociates.com greedysafely.com gunsareworthmorethanlives.com hiltonbomontieforeaspa.com hzlingfa.com jetsurf-versicherung.com joshimaria.com kevinton.com kreuzbags.com kungfuglobalfamily.com loriinibrand.com mcclearytrucking.com medicareschoolcommunity.com metalservicesn.com ministernarf.com miusc.com nailsnhang.com newhopeadultos.com patrickleahydescendants.com pceasyreview.com pharmacistshoko.com plumaroja.com poseidonbeauty.com poshspotaccessories.com powersandprospects.net prevenirelcoronavirus-co.com rdifatra.com reasonswhyletter.com romicore.com shangmai.plus stelbertrose.com swallow-express.com tankmaniac.net ticoverde.com tiga-roda.com tirmastermind.com trselfstorage.com uswanews.com vbetcostarica.com venturabankruptcyattorney.com wdnanshan.com wordsinprogressthegame.com ww-homes.com yanmq.com yellushnesme.info yipinsutui.com # Reference: https://gist.github.com/silence-is-best/852a1c7c7dcf29fdc8d5df73433e7676 2739kingsroad.com 2k20-aide.com 5865145.com abarroteslacanasta.com active-label.com adjustedhuman.com alexander-hof.xyz anclaseadfoodmarket.com aperfectbrow.com aperocart.com areyssg.com bawakamus.online bono73clothing.com buildingdigitalmind.com campoyabolivia.com clientcentre.net cnhremandealerservice.com/maw9/ findinghonor.com fotografialove.com gofourd.com ienvoices.com import-union.com/uv34/ inajmer.com jieliangcaifu.com kenkelconsulting.com kingdavidtiferetshop.com/edbs/ landbirdevehicals.com lazyfears.com mobcitylabs.com newportbeachswim.com onlytwod.xyz paobuyingxiong.com phillhutt.com q8ah.net rva80s.com ssc018.com symbolofsafety.com/uv34/ thecoolprojector.com theswatidiaries.com thetempustrader.com wokeinteractive.com wyshio.com xsites-dev.xyz yogina.life # Reference: https://twitter.com/James_inthe_box/status/1389959476376006657 kayandbernard.com/8u3b/ # Reference: https://twitter.com/MBThreatIntel/status/1390022224497700867 wwwnptpool.com # Reference: https://app.any.run/tasks/01f8e582-fc44-41a0-a6d3-c85ffd3f9311/ stepgentertainment.com # Reference: https://www.virustotal.com/gui/domain/officewindowssecurityfirewallopen.duckdns.org/relations officewindowssecurityfirewallopen.duckdns.org # Reference: https://www.virustotal.com/gui/file/c46f6d72a258354c5267436ea0db9cd3f12cc1595a0d9072d904b0b15731f092/detection ayaksotocikmayedekparca.com buypartagascigars.com dieselfarm.wine fone.info gudengdc.com interviewat.com kandsaccounting.com regulars7.info thearcane.world valleysprings1.com withloveboutiques.com xhtd531.com # Reference: https://tria.ge/210511-ndh4plydgx 7brochasmagicas.com albertsonsolutions.com alphabrainbalancing.com astrologicsolutions.com axolc-upoc.xyz bastiontools.net beautiful.tours beautyblvdca.com bloodtypealpha.com candidanddevout.com chefbenhk.com codeproper.com constructionjadams.com contorig2.com customessayjojo.com dgyzgs8.com diurr.com dogscanstay.com dotgz.com eastboundanddowntrucking.com ebmulla.com emotist.com ethyi.com everythingcornea.com farrellforcouncil.com foxparanormal.com fsmxmc.com graniterealestategroup.net haichuanxin.com healtybenenfitsplus.com inov8digital.com investmentfocused.com jkskylights.com kladki.com labkitsforstudents.com lifehakershagirl.online magistv.info medvows.com melaniesalascosmetics.com namastecarrier.com online-securegov.com onyxcomputing.com organicwellnessfarm.com paragoncraftevents.com pensje.net plgmap.com qgi1.com rafbar.com reservesunbeds.com revolutiontourselsalvador.com sanacolitademarijuana.com sensationalcleaningservices.net shotsbynox.com stacyleets.com turkeyvisa-government.com ultimatepoolwater.com valuedmind.com vavadadoa3.com vissito.com xn--6j1bs50berk.com xn--demirelik-u3a.com xn--z4qm188e645c.com xtrator.com yourstoryplace.com zioninfosystems.net # Reference: https://tria.ge/210511-xpz6qx1ffn 0055game.com 959tremont.com ansel-homebakery.com artinmemory.com asapdecor.com barkinlot.com birzulova.com bnctly.com bullishsoftware.com buyruon.com chaytel.com cosmicmtn.com desyrnan.com drunkpoetsociety.com enpointe.online essentiallygaia.com ferienschweden.com fps2020dkasphotoop.com fptplaybox.website fuerzaagavera.com hostbison.com houseofsisson.com ixiangzu.com joysupermarket.com kerneis.net kissanime.press kkkc5.com lacompagniadelfardello.com lagrangewildliferemoval.com ljd.xyz makemyroom.design mentalfreedom.guru moderndatingcoach.com mondaysmatters.com mujahidservice.online myaustraliarewards.com northsytyle.com nugeneraonline.com omsamedic.com onlinehoortoestel.online outletyana.com paulpoirier.com peninsulamatchmakers.net philreid4cc.com poweringprogress.today prestiged.net privat-livecam.net radioconexaoubermusic.com redlightlegal.com relocatingrealtor.com rokitreach.com royalpropertiesgurugram.com rvvikings.com sarasvati-yoga.com sardarfarm.com sectorulb.com shitarpa.net sopplugin.com soukid.com spiritsoundart.net stylezbykay.com theanimehat.com umlausa.com union-green.com # Reference: https://www.joesandbox.com/analysis/415767/0/html 7brochasmagicas.com albertsonsolutions.com alphabrainbalancing.com astrologicsolutions.com axolc-upoc.xyz bastiontools.net beautiful.tours beautyblvdca.com bloodtypealpha.com candidanddevout.com chefbenhk.com codeproper.com constructionjadams.com contorig2.com customessayjojo.com dgyzgs8.com diurr.com dogscanstay.com dotgz.com eastboundanddowntrucking.com ebmulla.com emotist.com ethyi.com everythingcornea.com farrellforcouncil.com foxparanormal.com fsmxmc.com graniterealestategroup.net haichuanxin.com healtybenenfitsplus.com inov8digital.com investmentfocused.com jkskylights.com kladki.com labkitsforstudents.com lifehakershagirl.online magistv.info medvows.com melaniesalascosmetics.com namastecarrier.com online-securegov.com onyxcomputing.com organicwellnessfarm.com paragoncraftevents.com pensje.net plgmap.com qgi1.com rafbar.com reservesunbeds.com revolutiontourselsalvador.com sanacolitademarijuana.com sensationalcleaningservices.net shotsbynox.com stacyleets.com turkeyvisa-government.com ultimatepoolwater.com valuedmind.com vavadadoa3.com vissito.com xn--6j1bs50berk.com xn--demirelik-u3a.com xn--z4qm188e645c.com xtrator.com yourstoryplace.com zioninfosystems.net # Reference: https://tria.ge/210518-mahaj6148j aadiventura.com alexrabus.com alibbv.com artistssupportpledge.com barnettmt5.com businesspartner360.com campustore.net cdaboozecruise.com dubai-tlv.com education618.com elisabethchin.com essentials19.com ethereumlp.com fefffisce.info financesdigital.com fragrancecollector.com freightlogins.com getblackops2hack.com gosanispire.com hg62988.com hymingfeng.com iyogyl.com jawwal.xyz jphomedecor-01.com kickitfashion.com konbeca.com laurartproductions.com legalmktexas.net linkitmexico.com lovenfys.com mack-soldenfx.com madcord.net moveincyprus.com mytinyhometips.com nelivo.com nerdtoysuk.xyz northernirelandcustoms.academy oculensweb.com opinetree.com pigpigworld.com prideglobalholdings.com propointcleaning.com psychedelicsnail.com radicallymessy.church retiredalsolovingit.com rigwelllifetimeonline.com rjroof.com sacpanel.com shaunmdurrantbooks.com skip3-akjsdn.com statiajewels.com thejadedopal.com tu-aviso.com ufdzbhrxk.icu ultraletefit.com uncontenido.com upthehilldogwalking.com videoadprofits.com wellness-sense.com wellsleyarts.com weretheshepards.com wester.zone wirebeevehicles.com xywedding.com # Reference: https://twitter.com/whitehoodie4/status/1395266325547819010 # Reference: https://pastebin.com/DBKKAdtE astrokhushbooshokeen.com buymobilia.com gabrielaaa.com talbotserver.com # Reference: https://www.virustotal.com/gui/file/a47861eb94370a48bc6b4d99117b88c991fb199e300bd0cc24aa812c0ea2b3cb/detection edlexacademy.com # Reference: https://twitter.com/MBThreatIntel/status/1400533314696515586 artinmemory.com birzulova.com fptplaybox.website ixiangzu.com knighttechinca.com lacompagniadelfardello.com mentalfreedom.guru northsytyle.com peninsulamatchmakers.net privat-livecam.net relocatingrealtor.com rokitreach.com royalpropertiesgurugram.com soukid.com theanimehat.com # Reference: https://www.virustotal.com/gui/file/c16b38ae42a9c32ba01ccd93bd90efceb4df05adb997b179758844e2d7d9b8c1/detection doctor.hopto.org # Reference: https://www.virustotal.com/gui/file/cf32bf794461f1286ddf604e1aa6022cd4eef1b05020c01efd2c682db865106e/detection 351215.com finoblog.com startersattorney.info e-lohas.info onixtours.com alfenafootwear.com misstenazas.com lookupnanor.mbplc.xyz kkkwhitepride.com restondefencejobs.com returpen.net lvn.xyz thedonationcard.com neutralogics.com dnhsxm.com police-baton.com # Reference: https://otx.alienvault.com/pulse/60bf5cefa96120d4cf00fa53 fullmoonrestlessco.com wttfiber.com # Reference: https://tria.ge/210609-d1n5l5g5kn 0755hk.site 7sportslive.com 856380295.xyz 91jpjob.net 9yyabewxz6ifs.net abirepeh.com acheiumabrecha.com alencamera.store alicekoller.com alkawtherabudhabi.com andresmiralles.com askmikewatson.com beyondhill.info casadobeco.com cfprcapital.com clickoakland.com cloudsecurity.pizza devcosmetic.com dmcvc.com dufortridge.com egh.xyz esvastickers.com gardentips.tips green-bark.com grupovalmik.com hairandhairs.com halalmessages.com in-a-best-world.com itxas.com julianakarlagalettus.com kafengunjuq.com kounier.com liveincareau.space mardegrises.net martobe.com masterofrisk-rj.com megadap.com mightycaller.com moatme.com modasserjasim.com onlinemovies.one opsixpack.com otelmesut.net paydayloanr.com pogiandi.com pointbrite.com prithe.club racevx.xyz ravstyle.com roofers-hartford.com ruyinoodlehousenv.com saitamasocieties.net saneplantlady.com shanxibank.ltd shinehindi.com sistershantex.com siteshapers.info sm3ly.com startersdentalimplants.info thesoftmarketing.digital thesophieashton.com tranceoptic.com twizitter.com wisdomleatherworks.com wwwbarefootrvresort.com # Reference: https://tria.ge/210603-35ggm2vmxa 568215.com 67657780.com 691jxy.com alizamcandrew.com alwaysincerely.com asahizushi.info bermudefcrasettlement.com cdpp.net chrispricellc.com copinginfula.trade corporaterecruitertraining.com cortopepperfest.com cunerier.com desertcamelhq.com dinemuch.com doratemizlikurunleri.com electrumsystem.network fsjcfrozenfood.com fundwise.pro germinatebio.com gksfhzuhi.icu gp4458.com heartoflofall.com highspnhxm.trade hzzamy.com ihsangazisiyez.com jamaicanrestate.com kalptarucentrino.com kaqitoy.com kieler-hof.com koladintechnologies.com laurabarstowart.com lcpcap.com leetranscreations.com lessismorebeautiful.com ligaeuropea.com machinerycomfortable.com macusix.com merchasylum.net mescopro.com mymathstest.com pbzb94.com pheki.com radansaisortagim.com recreationanddevelopment.com richelitesingles.com sagesse-courtage-credit.com sdyuancang.com securenetflixapp.com shipbuildersforgolden.com stallionsilver.com tennisopenit.com texas956.com themallvideo.com theopendata.exchange traditionalmehandi.com weknownorthgower.com whirlpool-repair.site x-izm.net xn--2z1bq6efxj2gp2o9xd.com xn--anibalderedao-7eb3d.com yangpaair.com ycshop.net yds-inc.com zseasyfishin.com # Reference: https://app.any.run/tasks/f06bb2ed-fede-4404-8291-2b744ebd1bce/ bf-swiss.com cddcsw.com cpzgzcw.com findholmesinlaurelmaryland.com kleinrugcleaning.com mcluxuryrentals.com mss52.com ontarioboatcharters.com priyadubai.com skip1-dndasasd.com suderstr.com tfjxw.com unmeasured-grace.com updatesz.com wierzewzwierze.com # Reference: https://twitter.com/MBThreatIntel/status/1406973188828024837 magnoliamaycandleco.com zhf2883.com 2811152641.com jxsaigonanhvu.store reciperoast.com sallah-kw.com tigerk2.com sahnakz.com xn--vkc6b6baa6ac1jbwc6l.com # Reference: https://tria.ge/210624-gp1c67p5ra 592215.com academicplumbing.com alnooncars-kw.com aztecnort.com babbageacademy.com bestveganbook.com brussels-cafe.com ca3construction.com cursosaprovados.com dbrulhart.com debbiewilsondesigns.com delta-wing.com dkku88.com dottproject.net drainthe.com floor-space.investments forummondialdelamerbizerte.com garnier.red genotecinc.com girlfriendsgarb.com gon2580.com homebrim.com inclusiocg.com infinitilamp.com influenzerr.com informationside.com ip2c.net jakesplacebarbers.com jam-nins.com keeponsports.com kensyu-kan.com leelegantflower.com luckytwo.agency mdwovzrrm.icu ministry-of-barbers.com msmenders.com nazarickdeveloper.xyz packapp.net panache-rose.com pjcavaliere.info pursemore.com rbcoq.com scootgotti.com sezyz11.com smartswitchhomeloan.net snakby.com spacecoasthondaevent.com stagingsolutionsgroup.com sumaholesson.com tempestchs.com theapiarystudios.com thebusinessfitclub.com thehealthyimmunereset.com theservantleader.com tikhyper.com trebdurham.com trueblue2u.com vidasustentavel.online videohm.com vipandeep.com whachupichu.com wholehearteddaughters.com zhixintonghe.com zpxinxi.com zzful.com # Reference: https://twitter.com/MBThreatIntel/status/1408090816229351426 bebek-store.com jagrit.codes platinumforsale.net pornrog.com sneakygear.com thisislandonbraverman.com # Reference: https://tria.ge/210625-faspqe4qyx a2calf.com aimuseums.com andreatessler.com angiepologie.com bestivfcenterpune.com bloodsweatnskills.com bsankavl.com chocolatejerky.com classifoods.com creaturescreate.com currogpheasantshoot.com cyberzenith.com dwlrr.com dynamicfitnesslife.store edem-agency.com efrainspura.xyz emotionsmanifest.com employeerelationships.com extaseestreaming.com festeringuncle.com flirt-girls.icu freetimecleaningservices.com futureadb.com gadgetwoods.com icankid.net innerpeaceactivist.com izakayajun.com knektr.online kuromugi-blog.com lilaccityacupuncture.com lodgespringseniorliving.com lopsenetwork.com mafalda.cloud melaninswagger.com melissadishes.com mkc.xyz ohiocommunitynewsnetwork.com onshore-energy.com oohdough.com oxbstwnm.icu pemeroth.com pennygailpottery.com platinumortho.net pyantx.us quyetstar.site resumes2impress.com rulrr.info shuji-ogawa.com smacey.com smartchoice.education sofiaalva.com southerncloseouts.com stainedglasshockessinde.com thankyouforthemoments.com thefuntheboringtheinbetween.com theindependentwings.com tusinschoology.com ulinzigear.com uxlunexpectedlawyer.com vinh-heritage.net wefanthedead.com womanwithacode.com xn--tr-trkiye-t9a.com ycxlst.com zhaigoo.com # Reference: https://tria.ge/210624-wprc4elcza 4860p.com abundando.com airlinesfm.com alpha-psych.com aridham.com azaza.store boldae.com borwoo-packaging.com bringcovidhome.com buyersmeetsellers.net calfwag.com crewe-tech.com dmarc.press dronerealestate.net eagle-rock-real-estate.com emmonsfororegon.com excellencepi.com farmacykauai.com fbrblog.com ffpgv.top filledbasket.com findmyiphone.services glaseye.com gwokath.com handbagsbreeze.com hoodhippy.com hyperhostns.info infomediosdigital.com iopsms.xyz laive.chat leorisingcreative.com leverj.exchange loty-hd.com manchesterflowerwalls.com mayberrycommunities.com natalieball.com novitadelgiorno.com paysamba.com prophunting.com purple.gifts pussyfarts69.com radiosta.com registergamers.com richmondpistolpermit.com sans35studios.com sarahhariri.com scrippshealthprivacynotice.com seekingyours.com step1clean.com teach.wine templabels.com testcomp8260.com top10musicmarketing.com toughershop.com townsendcomics.net utikejt.com valengz.com wildeliving.net wyattwillgetbetter.com xn--kipinpaja-z2a.com xn--sllskapsdjur-gcb.com yange03.com yenisarkisi.com yourgafflettings.com zimmerkauf.com # Reference: https://tria.ge/210615-5h25azl6tn aapliweb.com accordinera.com alakhi.com arie09.com askfine.com asserghorab.com associationtechnologyblog.com aurummobilestore.com biologicaldeception.com bonap56.com bonus328.online cbgmasters.com cookingwithyourkid.com coolsgames.com copiaequipmentfinance.com dspinsure.com easypanservice.com efiesonestifanos.com elearchsearch.com eveaquila.com fireball15.com firstlinkk.com fuelofsmokenvape.com gangelich.com grand-dental.com grassysigns.com greatdomainsales.com gslge.com idealwindowmfg.com irc-helper.space jadepalance.com kcdyhbv.icu keys2successfulliving.net kidsclothing.center liveatrivernorth.com lucky5tarstudios.com macarthursflowers.com motor-lamp.com mounaquedecampan.com mumbaibusinesscentre.com napaluxurypicnic.com nastybestinteriors.com nataschabruder.com nusantarataniagung.com overthewaterfront.com paradigmtechnicalsolutions.com pub-g-free-uc.com raphaellacroix.com riseplc.com sawsome.icu sedlmeierbestattungen.com selllasheswithtonya.com studiopeer.com taksykw.com thebutterflylifers.com thebutterflyme.com thedigitalmarketerslounge.com thelewalla.com transferable-value.com unbaluns.com veracars.com wordhospice.com wpmaintenanceteam.com wtxpfoundation.com yourebridgeplan.com # Reference: https://twitter.com/reecdeep/status/1409451122511814657 cunix88.com # Reference: https://tria.ge/210630-qtfmtaaprn 29752ellendale.com 88q858.com allpurposepaintingservices.com allterdsmatter.com angelademarco.com awkwardpeachfitness.com balancerestoreomaha.com bestcoastwellness.com bidatauction.net blogafonte.com cjcgraphics.info cleaner-solar.com cloudservices.technology cnhy0769.com connecteddots.digital couia.com covidcustomdesigns.com e-srot.com eaornti.com eclorui.com enrgsystems.com fimco.net flaxx.life gezirapharma-sd.com gmb-marketing.com hardrock.site holowide.com hotelcastellgye.com irondoorsnearme.net jeilaslimefactory.com jimeipifa.com jukeboxjeffdj.com kate.chat kujtimet.com lolly-bops.com myzoomroomz.com navyugitsolutions.com notimpersonating.com pantheoncases.com parossunbed.com pohanc.net pontacols.com putortifashions.com rapidexpressshipping.com ravexim3.com red-studios.com remoteandnice.com renetyson.com rhexlux.com saltairbeer.com savignies.com schnarr-online.com shlokus.info simplysummerdawn.com soulpowerlive.com specialforcesofindia.com sutransformacion.com talsworldwide.com taspate.com thecode.community thepassiveincomecreator.com uluapokehouse.com vascularsurgery.club veristasolutions.com wwwgraciescottage.com # Reference: https://tria.ge/210630-yg8jjxplla 568215.com 67657780.com 691jxy.com alizamcandrew.com alwaysincerely.com asahizushi.info bermudefcrasettlement.com cdpp.net chrispricellc.com copinginfula.trade corporaterecruitertraining.com cortopepperfest.com cunerier.com desertcamelhq.com dinemuch.com doratemizlikurunleri.com electrumsystem.network fsjcfrozenfood.com fundwise.pro germinatebio.com gksfhzuhi.icu gp4458.com heartoflofall.com highspnhxm.trade hzzamy.com ihsangazisiyez.com jamaicanrestate.com kalptarucentrino.com kaqitoy.com kieler-hof.com koladintechnologies.com laurabarstowart.com lcpcap.com leetranscreations.com lessismorebeautiful.com ligaeuropea.com machinerycomfortable.com macusix.com merchasylum.net mescopro.com mymathstest.com pbzb94.com pheki.com radansaisortagim.com recreationanddevelopment.com richelitesingles.com sagesse-courtage-credit.com sdyuancang.com securenetflixapp.com shipbuildersforgolden.com stallionsilver.com tennisopenit.com texas956.com themallvideo.com theopendata.exchange traditionalmehandi.com weknownorthgower.com whirlpool-repair.site x-izm.net xn--2z1bq6efxj2gp2o9xd.com xn--anibalderedao-7eb3d.com yangpaair.com ycshop.net yds-inc.com zseasyfishin.com # Reference: https://pastebin.com/njbLBACM # Reference: https://app.any.run/tasks/94dda737-87d6-498b-bf3f-7f445abeea13 bhartiyabrand.com dataxamarin.com futeboplayhd.com guktree.com hondausedcarswestpalm.com htwengenharia.com mondaymindsets.com nxwatson.com politica.group shoppinkksugar.com sofiedeneef.com yadouganggou.com # Reference: https://otx.alienvault.com/pulse/60db0c73a92b92b79741d921 tvdajiang14.com # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0625-0702.html (# Win.Dropper.Formbook-9875089-1) 1e9sevenrainy.loan actu-occitanie.com aldareps.com amigurumibyamanda.com barkintheparkli.com bikby.com ebvdcxw.com empireremgmt.com jesusinme.net juxiangjidian.com keeenterprise.com liveonthehill-festival.com mansiobok2.info matthewelliotties.com mlyouxian.com mmssgg.com myshoppingchic.com qualitycarpetcleaningcal.com selectsb.com theadventurecurators.com tiangongqiaoduo.com tntcityinc.com vabomerewaste.info wxfkyyw.com xuse.info # Reference: https://twitter.com/ps66uk/status/1412126527593107465 newrichwealth.com # Reference: https://twitter.com/Racco42/status/1413401048132227072 szglkt.net # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0702-0709.html (# Win.Packed.Formbook-9875217-1) atlutes.com bjlmzk.com cybep.com dawnanddusted.com fifanie.com hmlifi.com itdui.com jlxkqg.men learningtolaughintherain.com lifesciencescareers.com photos4lyfe.net spiritualwisdominindia.com thunderwatches.com winhealthalert.info xn--qrq721bqkkzt3b.net # Reference: https://www.virustotal.com/gui/file/a449b2bf7415c385f7841bdd6f41f8f16dff16e4c77ef6c7865b457071011de3/detection 91ruitue.com aaronlemmon.net blestgroup.com bs-team.cloud chuchupaimai.com deltawinery.net doxagram.date godoil.net hust-today.info ideagazebo.com mattel.cloud portugalprivatetour.com serviciosconfia.com topratedshowerheads.com xn--droitdeladonne-nkb.com ytxfchina.com # Reference: https://twitter.com/pollo290987/status/1415213931375865858 # Reference: https://www.virustotal.com/gui/file/24c47f2838399f16001e5166458e1875494b118005ce354a4069d8fc82a20265/detection cyotie.com # Reference: https://www.virustotal.com/gui/file/63c9562ee89e1308b5be90e55ac0334e5bbdee69142741dd3e057d270f407106/detection 1groupinsurance.site collegium-lmi.com concordarabuluculuk.xyz incontrol-co.com makzmanagement.com royalesalon.com royareign.com ukcougarforum.com zozchat.com # Reference: https://www.virustotal.com/gui/file/9b4bcf870a79699cea2ef0add03b741bf14296f50b089a648f57903519eb8e7e/detection brackishcompany.com jpleasure444.com keilube.com mycashcat.com mylearningplaylists.com newmillenniumgaming.com pillar-gymnast.com printedcactus.com smartquintessential.com # Reference: https://tria.ge/210720-l5gncsb3fj 012997.com 966938.com adaptiveclick.com ampsportshouston.com angelacontreras.design ankergreen.com artisticdancecompanyct.com auntiebsbread.com clarkson-craik-wedding.com clubfit24virtual.com czflsp.com damselindior.site dwkjkvsa.icu dwysll.com elestampado.com erotikazdarma-na-seznamu.online erxia29.com fcknloveit.com gallucciowineries.com grocerygurunicole.com hypo-realitni-servis.online insuranceservicesfl.com isaandfriendsfoundationcorp.com itsgrind30.com jacobmantle.com katsworlds.com kristinaandmatt2021.com lagboni.com manayi-matnayen.com monekigames.com motionmediamail.com mybirthpillow.com nicholasvilleguttercleaning.com ourparentsaspartners.net paksfjphkqpfgoldenhpaksfpnh.net papagle.com portaldoinvocador.com psm-gen.com punebites.com quisiweb.com qyaswryhk.icu redeftco.com risingstrenghtscounseling.com rogerzhou.com ruiyiknit.com scootersfornewbies.com silversteel-ye.com stagdotenerife.com sunlightjoinery.com teamwork256.com the694.com thearticclaw.com thedemocratads.com thelogicsticks.com tomslandscaping.net torontoescortlist.com tramomed.com uni-star-cn.com venti50.com veranev.com weskunmgrf.com wetechy.com wonderancientswiftvibrancy.com zidesign.xyz zsesfw.com # Reference: https://tria.ge/210720-s2elczaedn 332xyx.com 5v5r3gf3lhvgvy.xyz abrosnm3.com adweb.menu airluxo.com arsenalization.com beiyingcp.com bgpproxy.com bows-n-bars.com bumble.sucks caracern.com coachsoley.com corkstandard.com created4love.com crezcayemprenda.com damoyan-ep.com drivethrupolitics.com electric-sauna.com energiafloral.com evidyadigital.com fecunditytechnologies.com fengyikang.xyz flyingpig-farms.com fresnovape.com glasgowmobilediscos.com guitaraerobics.com heatpumpgrant.com imploidtalentservices.com insurancewithus.com kejgan.com lu14444.com markdownme.com marleyssoiree.com mexx-lighting.com neptuneservicesltd.com nitinravi.com palmgables.com partyun.com personalizedyardsigns.com pghissofastighet.info pinmaomao.com propelai.net registeraccountants.amsterdam restauranteelrinconderosa.com ryapelsartwork.com shnasu.com sitad.online sjredlineclothing.com smarttennessee.com songnguyenkim.com survingcorona.com sxzycxxwlw.com tavarter.com textingjournal.com theoneitemstore.com three-ukalerts.com travelseri.com unstoppabl.com vinfast-mienbac.com winharadesigns.com wordpressaffiliatepro.com wpdesigntips.com wxxyh.xyz yardenfaragian.com yerlitestkiti.com # Reference: https://www.virustotal.com/gui/file/50878d11e846ea18fa1a83208091a237a32d941414b917ac2ca738762f7dc4ae/detection gerisapp.com jesselynnjewelry.com qaci.ltd # Reference: https://tria.ge/210726-cb97ggxx7x abrosnm3.com apipacking.com approvednursingdegreeca.com arknmhsc.com augeware.com bestskiboat.com bfosterbeauty.com bhakti.exchange bhoomifoodsdaily.com bim3dstudio.com blackmarkethn.com cedeaccount.com christcarriers.com comingintopower.com coolsoftware.xyz cooperseyewear.com creditfitbootcamp.com cyberfamilydesignagency.com dbd-cs.com digitalaage.com dinhgianhadatdanang.com easternshoreautobody.com eglobaldirect.com electricvehiclesdetroit.com expowe.icu hamrharddrive.com hawrang.com healthyvibrantandbeautiful.com hqs.xyz in-homeaccountants.com indiarmc.com janinefowler.com kolpath.com kvperryman.com lacarerx.com largshomebuyers.com larkfam.com maildeskserv.com mdroc.com mrleyos.com msd.rest mtdivas.com ngdnwgtsf.club oxystudio1.com peppershare.net pickenshomesforless.com rollingrevenueroadmap.com roshanrajas.com rostig-brennend.com shopchampagnetoast.com stormvalleysoapco.com supremeleas.com surfacesupplierscanada.com targetstudio.net techbotsoftware.com testjaycypes015.com the-level.net thinbluelion.com vbetmalaysia.com watdomenren48.com woofreelance.online worldambedkarsociety.com xn--qbt233i.xn--hxt814e yourchanceisnow.com yz-wsly.com # Reference: https://tria.ge/210726-nar5mm8hee 388384.com 62qtz2.com aanmelding-desk.info adoptahamster.com alternet.today ardecentro.com aussieenjoyment.today brisbanemagicians.com caddyys.com cbgmanhattan-hub.com channelarmor.info citrixfile.com coonier.com creativehuesdesigns.com democratscancelled.com drmetalpublishing.com ecorarte.com edicionesvita.com elaraberentcar.com endonelatrading.com espace22.com fabrezeairpurifiers.com gallopshoes.com gameshowsatwork.com ganjegirls.com givanon.com go-rillathebrand.com hiphopeconomicdevelopment.com innocox.com jacardcapital.com jrvinganimalexterminator.com lindsaynathan2021.com lowdosemortgage.com matdcg.com mencg.com mitgrim.com nftsexy.com nogodbeforeme.net pastiindonesia.com piebuilder.com po1c3.com political.singles renewalbyheather.com ricosdulcesmexicanos.com riseswift.com rjkcrafts.com roiskylands.com roorisor.com rugpat.com smallsyalls.com tasaciona.com thecarbonbox.store thechicthirty.com themesthatyoulike.com tioniis11.com tvglanz.com variceselite.com vinhomes-phamhung.info virtualppo.com wellness-sense.com winstonsalemathleticclub.com yjhlgg.com ytzhubao.com zamlgroup.com ztsj10086.com # Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0723-0730.html (# Win.Packed.Formbook-9881913-1) 1e9sevenrainy.loan actu-occitanie.com aldareps.com amigurumibyamanda.com barkintheparkli.com costes-viager-metz.com ebvdcxw.com empireremgmt.com fixandflipit.com jesusinme.net juxiangjidian.com kiefchronicles.com liveonthehill-festival.com mansiobok2.info matthewelliotties.com mlyouxian.com mmssgg.com myshoppingchic.com selectsb.com theadventurecurators.com tntcityinc.com vabomerewaste.info wxfkyyw.com xuse.info # Reference: https://www.virustotal.com/gui/file/3fff5f3adf822fb5aa359a0585afaa385ab8671ea4ae37b6f35030542d6bbc03/detection 2manyguru.com amputaterevival.com fapndazo.com goodgospeltz.com hauntmafia.com herthamed.net iahawaii.com labhoster.com lki.life minimalgent.com myleadscreator.com profitablebrandfactory.com/heye/ sieauthentica.com thecreatorsbooks.com theneekynaykye.com # Reference: https://twitter.com/MBThreatIntel/status/1423347759797522432 # Reference: https://www.virustotal.com/gui/file/04e127c5bdf94f075639d7f44badd25223f3ebeede44258367413d8463505020/detection simplebox.world # Reference: https://twitter.com/unidentified0xc/status/1423696442359787520 # Reference: https://www.virustotal.com/gui/file/72320946e28ee9117b85cb1a83e5e122c3938e4a79c9be1551595103cb2c311a/detection travelscappadocia.com # Reference: https://twitter.com/reecdeep/status/1438135771974836235 gentciu.com # Reference: https://twitter.com/pr0xylife/status/1450413394050363393 # Reference: https://twitter.com/reecdeep/status/1450423446031249408 filecrev.com lilcrox.xyz uploadingpanel.xyz # Reference: https://twitter.com/reecdeep/status/1457992469400915969 # Reference: https://app.any.run/tasks/7beef4c8-16f0-4347-aa39-ed0d9d1c6065/ minismi2.com # Reference: https://twitter.com/reecdeep/status/1464173848245551130 lopsrental.lease # Reference: https://twitter.com/MBThreatIntel/status/1464329992486141955 tgfdj.com colesfax.com traicayphuongnam.com bloominunity.net buycitratesildenafil.com insularrofioa.xyz # Reference: https://www.virustotal.com/gui/file/accbe536ead9e57b36410e8769aeb211ec32419a0e92cf6282d74c0ed53175cb/detection wsdysuresb1interwsmo.dns.army # Reference: https://twitter.com/reecdeep/status/1465603269905035264 # Reference: https://app.any.run/tasks/6461fe1c-7d2c-4918-8421-fb33cc7c9b59/ saftcos.com # Reference: https://www.virustotal.com/gui/file/f0f020c489ae8bad33cee5f66c276f1a40dd9aff5eff55648922de36da0e233c/detection amzgroupsales.com arffinanacial.com bansity.com buyidh.xyz carpetbaggerehasz.com deliveryship.site discountchristmas.com eaujeunetuesunique.com effektivpeople.com elainelancelot.top elenapapernaya.com gayko.info gazalvet.com glow49.com gopro30.com happy99.club heynowbrowncow.com insurancewineappraisals.com ivoireshoping.com jtdroofing.com kgresale.com khnfcl.net kpfoundationinc.com lostdevice.xyz metanewyork.digital ministrymattersmagazine.com mooncloud.cloud myadventures.online nnw.photography pnsp3.xyz powerupnurses.com raisinglittlejoeys.com sendpit.com social-sound.net staffslearn.com suddennnnnnnnnnnn44.xyz weddingsbyiceberg.com xchair36.com xrzthd.com yavstore.com # Reference: https://twitter.com/JAMESWT_MHT/status/1460569876930703361 didimthebestkuafor.com kizitox.ga # Reference: https://www.virustotal.com/gui/file/0123fdb2e8de200e6fa07cd5c254771143b7d9fea4f6895077b4f609fc5ae1cf/detection 427521.com amaturz.info approveprvqsx.xyz clairewashere.site createacarepack.com cristinamadara.com diamond-beauties.com fronterapost.house khojcity.com ponto-bras.space qiantangguoji.com rthearts.com savannah.biz semapisus.xyz storyofsol.com xianshucai.net # Reference: https://www.virustotal.com/gui/file/4253f88eb5e931720c16e56f49babfbf8db93eaa8b6f85146cc2d690aee2b9d2/detection affexion-web.xyz antlersinternational.biz aspirastic.com babehairboutique.com confled.online digitalpathologytodayuk.com duoceshi.info educacaosemdistancia.net emaratishayclub.com giridharsweb.com jamesobrien.school kj4senate.com korhuay.info lineupfacts.com miramar.press nihonkoryu.site riversidebest.com scnbzx.xyz shengyuan1.com shoework.xyz showin-juku.net sucurina.com velostats.com wokite.net # Reference: https://www.virustotal.com/gui/file/59ec21c2cbea8337c61be946ea039cce2316085c64f83aff71e2fa2c72517104/detection binatonezx.tk lilcrox.xyz # Reference: https://www.virustotal.com/gui/ip-address/176.99.5.38/relations binatonezx.cf binatonezx.tk kiwar.cf # Reference: https://www.virustotal.com/gui/ip-address/2.56.59.211/relations nestlex.tk # Reference: https://www.virustotal.com/gui/ip-address/37.0.11.232/relations aqaumad.com # Reference: https://www.virustotal.com/gui/file/39ad43c4148cafd9463c874b9201bb1b6253d3c6b4984351647c1e7d4d88c2ab/detection 1kingbet.com 666b20.xyz apseymarine.com babeshotnud.com baila.madrid charsantosart.com dossierinc.com futurodr.com homesofchaparralcountryclub.com iktbn-c01.com immerseinagro.com limiteditionft.com mingwotech.com nailsestetic.space newhollandpurpose.com nudesalon.digital overlandshare.com parsvivid.com patrickandmaxine.com pondokbali.store rap8b55d.com searchengineeye.com sehatbersama.store snackithalal.com socialenterprisestudio.com thenewtocsin.com thevillageplumbers.com toptaxxi.store vapkey.net voiceyupcom.com # Reference: https://twitter.com/reecdeep/status/1470416422983585797 fastye.link # Reference: https://twitter.com/reecdeep/status/1470708891004637194 thimelic.online # Reference: https://twitter.com/MalGamy12/status/1470797891002421251 kizitox.cf # Reference: https://twitter.com/reecdeep/status/1473657263915216898 # Reference: https://app.any.run/tasks/67888005-1133-40d9-a7ae-190814e6d091/ daxvly.xyz # Reference: https://twitter.com/JAMESWT_MHT/status/1469240481007771654 tidylazy.com # Reference: https://www.virustotal.com/gui/domain/hsiens.xyz/relations hsiens.xyz # Reference: https://www.virustotal.com/gui/file/307a069ecd59369e9825b9e24d84d5a92f6e4273c7d1d463d03cad06497dbe09/detection mooorni.xyz # Reference: https://gist.github.com/silence-is-best/e2af8aa61000e4b740934331291c619b allnestek.com asiapubz-hk.com eyecandy-s.com filecrev.com fis.photos goldenentnefetis.com kumrualpaydinfikirler.com love-austria.com madlyrics.net nshocam.com scion-go-getter.com shzldx.com tejpalmeet.com tttk8.site tutoucheonest9.com w8sf.com xn--diegovariados-zeb.online # Reference: https://blog.talosintelligence.com/2021/11/threat-roundup-1029-1105.html (# Win.Dropper.Formbook-9905387-0) anjanaonline.com blakedroberts.com briankingfineart.com cabinetra.com cataractmeds.com dongtaykethop.cloud fsoinc.com glocp9.com gun-stores.net healthchu.com jqxfinance.com listertarot.com mbc-lucky.com mylife25.com obersrock.com sexting-sites.com studiodates.com ue3uue.com whereistheherb.store xn--v4q8fq9ps1clx5d774b.com # Reference: https://twitter.com/reecdeep/status/1463424870285459456 # Reference: https://tria.ge/211124-j31sdafdd8/static1 # Reference: https://app.any.run/tasks/bf25a335-870d-4159-ae8e-70b85197c7f9/ 018seo.com 39mpt.xyz 5gongvo.xyz 8nst.com 946aaw.net allmanac.info ambosholmzoril.com angeleyesevents.com app-demo.xyz arabatas.com astrielle.com bakosaoje.xyz canlioyuncuyuz.online clubfohl.com completefuid.com crktinc.com cspro-lb.com davidruperezdorao.com divinebaking.online eclox-btp.com ectax.online eleditorplatense.com feierabendshop.com fountainspringscapemay.com fuckingmom89.xyz game-band.com gcioral.xyz geradsss.com getjoyce.net heartfeltgiftery.com heritzlab.com icobrothers.media invertirenstartup.com karo-tasty.com latest-football.pro longshengfz.com luosenhuagong.com luxerlegends.com mayyaramedical.com medicinaoralbarcelona.com missjones.info mushukids.com ngaviations.com nigeriasecurityexpo.com nsureagent.com oldstjoe.com pellecorentin.com productzon.net rayganesh.com resortonannamariais.land resourcesassitance.com sarasotaexterminator.com sideroyalpalacehotel.website spiveyvillage.online suddennnnnnnnnnnn37.xyz toituresante.com tollesonhouses.com trans-mall.com trendytechtreats.com ttportalbham2.com usedhondacar.com xiluoxtmcwj.com zhbhhj.com zjef.top # Reference: https://www.virustotal.com/gui/file/3abbf47a610912e6c574899d0ad87529e16f6d3616806dfee02b8a4c2e171541/detection 25081mammoth.com 657haber.com a687t.xyz adhek-internacional.com andrew222651.com arsels.info artdirectorfff.com bglmart.com claggs.com clinicadeconsultanta.com currency01.com eqsadvisors.com erkesen.net espressence.com giangsontaikhoi.com hanfines.com happy-smail.com katesbotanicals.com lg-tv.tk orzcy.top qingqingtianyuan.com rogde1998.com sportspellz.com suddennnnnnnnnnnn28.xyz the-social-hub.com topitreviews.com whooshfriends.com # Reference: https://twitter.com/reecdeep/status/1480498723859976193 # Reference: https://tria.ge/220110-m4qkksebf2/static1 # Reference: https://app.any.run/tasks/6b49092a-42ee-4d03-a540-4210922f8d1a/ 2thpolis.com 360e.group 4338agnes.com 58lif.com 927291.com aloebiotics.com atlasgrpltdgh.com bookinggroningen.com branchwallet.com buysubarus.com carriewilliamsinc.com cevichiles.com cuanquotex.online damusalama.com danielleefelipe.net dreamschools.online ehaszthecarpetbagger.com ennitec.com evodoge.com farmacymerchants.com faydergayremezdayener.net finanes.xyz freelance-rse.com frentags.art gaboshoes.com gabtomenice.com ggsega.xyz gooooooo.xyz hempgotas.com hillsncreeks.com inkland-tattoo.com inslidr.com inventors.community ir-hasnol.com jiazheng369.com lexingtonprochoice.com libes.asia markham.condos mediafyagency.com micorgas.com mnselfservice.com mollyagee.com nbjcgl.com pastodwes.com pentest.ink pinkandgrey.info postmoon.xyz quickmovecourierservices.com rampi6.com rvmservices.com seebuehnegoerlitz.com sjljtzsls.com standardcrypro.com streets4suites.com teentykarm.quest tipslowclever.rest trulyrun.com uvywah.com viperiastudios.com wildberryhair.com wilkinsutotint.com wohn-union.info yixuan5.com youngliving1.com zoharfine.com # Reference: https://www.virustotal.com/gui/file/345dc5575dcbd4433aa5bbae510cdc259f898bfc23646c46ced2d154b0a7e3e6/detection /..W.w.........WWww.---wW--W-Ww--.w---wW...............Wbk-Wbk........wWWw/ /...-W--------wwwWw........Wnk...---WBK.----WwwW...wBkW-----w-w---Ww.wW..wbk # Reference: https://app.any.run/tasks/8802a5e4-88a7-4aab-8ec8-1d87bd25e4ba/ casino-pharaon-play.xyz harsors.com mackworx.net tedsefa.xyz # Reference: https://tria.ge/220111-ttnfssgear archdeylemmergay.com babypasal.com balaga-vacances.com beyerenterprisestreeservice.com billstrasse24.com boliden-ab.com bredaslo.com bspcanadaconnects.com buddymerrillmusic.com buychryslers.com connect01.com counterpokemon.com dartsearchengine.com dimcreadev.tech disfagiaresidencias.com duyol.com ecobook.club egregore.club ethereumpets.com excellentdefence.com falcongroupmanagement.com faxedfumnook.com feetlover.online ff4c75x4e.xyz foundergomwef.xyz gb2022-club.com gconsultingfirm.com grantopwincup.website hermespros.com hotgurlmarket.com islandresiliency.com jaynelsonphotog.com jlvip1066.com lab-design.online mgav26.xyz mlikew.com monascake.xyz mskindi.com nekomediphile.com newelectricways.com nomarcapital.com nuhive.net padelthiene.com pandawan.club particulares-es.icu phillystore.net phorganicfoods.com prill.quest princessbuilt.com purifybrush.com ragworkhouse.com rapibest.com ritebet388.com securewalletvalidate.com security-paiemet.com slayfearlessly.com smplkindness.com soflovrlnd.com spendbrasiltimebest.com taquerialoteria.com theeppunday.com thoughtultracruel.quest waysgaming.com writerpilotpublishing.store zenholisticstores.com # Reference: https://www.virustotal.com/gui/file/d346b50bf9df7db09363b9227874b8a3c4aafd6648d813e2c59c36b9b4c3fa72/detection # Reference: https://otx.alienvault.com/pulse/61d81f95eecd468222f85464 http://104.244.78.177 # Reference: https://twitter.com/reecdeep/status/1483048507149803521 # Reference: https://tria.ge/220117-m8cvaahfg3/static1 534wcc.com adverse-afield.com agbaparapa.digital artmuseummatch.com asiavest.partners atlantapressurewashingco.com axtaihe.com bestbabyreviews.com bolosdavovoeliana.com borduurstudioijmuiden.com bupis44.info cabot.center castlemainefarmersmarket.online cimpisa.info clinique-voyageur.com complynt.store creatsafe.com cruiseportscheduler.com dailygossiping.com dotieudung.online drsfurtimann.com fatbellytonic.com geloradomino.win gladinternational.com goodcallhvac.com gortansar.club gunpowderbrahmans.com hellodba.net houstonnaturalrasources.com hunterfineart.net idealseg.net iwholesalestore.com judwx.com maripremazzi.com marykorpi.com mencuci.online midwestcentertherapy.net moms-gone-mental.com mrcrypto.store msjj002.com multiheadac.com n-sport.xyz naggerswithaltitude.com nchh43.xyz netflix-regularisation.com neuro-ai-web-ru.club nodescamp.com phasernet.net prioryfinconsulting.com pulsecdn.com q1g2.com rayofdesign.online reviewkiliszekteam.com scottybhomeimprovementllc.com shalesmedia.com stanislauslabs.com tametaverse.com tankheadmuaythai.com tanya-kevin-coelho.com terrificlowdowntoskimtoday.info terrybridie.com thesoapcottage.com vue-update.com windowfilmspecialists.com zuinigerijder.com # Reference: https://twitter.com/reecdeep/status/1483348720120967171 tangodo9.info # Reference: https://tria.ge/220118-rflzpsbfak 14gjm.xyz 365xeber.info 8we46.net 961115694.xyz adoratv.net advancedbenifits.net aprenda-sg-sst.com avanproekt.com becu84ts.com birinciplastik.com briskism.com cajunrecovery.com cameraip.digital caringhandsofwyoming.com centogrisolia.com clagpr.net codyparkerlpc.com coremaxcorps.com dishtagena.com dominictrott.net doverace.com enjoyzh.com fixedratehub.com francegravures.com generationimpactmasterclass.com greenwoodok.com hairuno.com hauheung.xyz hopeforlifefoundationbd.com huntingtheeclipse.com iegco.group ipservicesaggregator.com ko4tei.com masoomalearn.online michellemall.com myfantasymodels.com mystrangedog.com norosunda.com northlakepoa.com originalsalywhale.com ovsshop.online paisakamaao.com permitaser.club poradniabioetyczna.com pra-accessibility.com ptalojamento.website punksparrow.com qardho.net rentunk.com research-center.xyz royalproxymarketing.com santablahblah.com sdsdvip.com secretgardensanctuart.com spatialmapmaker.com stupidcreature.com stwconnections.com subsistqlxxmf.online sumai.tech timyaa.com vitamincfood.com wiza-investment.com wzks.xyz yoloyoho.com yongincit.com # Reference: https://tria.ge/220120-kp5pvahbbm/static1 52economics.com alcmjd.xyz alraedest.com anaccommodation.com annual-journals.com anthropophony.com asiafinances.com bitherders.com buxledger.com cryptolux.store dlapi.xyz dp-yszxwbhc.com dragonflyessence.com dreamsinbloomphotography.com dualamaquinaria.com dunespro.com duocaterers.com eleynworld.com firebreathingpenguin.com foodgw.com fullharvestfundraising.com fykori.xyz globalyuncang.com gracing-up.com greenlightiim.com howtomakearesume.space ialife.info immovableproperty.online jacqueson-autocars.com jcrealtydesigns.com kennascookies.com massagecon.com mbbfocean.xyz meetjaykinder.com meta-medical.info modernwarfaresecrets.com momubeauty.com mydemosite0.com nautic-experts-hageboelling.com neurochirurgie-eisner.com nicoletian.com nillprive.com noaoka.com prizebuddy.club ramziflowers.com rapslearning.online royalfountainlogistics.com rxd-ereecd.com sallyandterry.com sexcommittee.com slingactivt.com southaustinmarket.com strelingcollectibles.com theamalfiswim.com thedefinitionteam.store thrili.com uncle.finance undershieldz.com wicked-smokes.com wy-bride.com xbdsm.club yogamat-turban.com youcarboneutral.com yourtechyadda.com # Reference: https://twitter.com/pmmkowalczyk/status/1485591842494238732 # Reference: https://www.virustotal.com/gui/file/fbfcc39fb2e03d204a83cb9dceaa90e692ddb28367457586fdace8ff27b11d88/detection belindahulett.com fikretbayrakdar.com kamchatka-agency.com mytrainermatrix.online personas1web.com # Reference: https://twitter.com/reecdeep/status/1486634645265567744 2ab0.com 9681627.com ashleighevan.com ativaragora.site bancogmacsa.com botpg.com brocoser.com bs-pipe.com campusmoneytree.com chuangshihuoban.com coastmortgageloans.com cubana-pablo.com cxyzjsrc.com dutrax.online eshaalgilliamslbui.com facecapades.com fistoffraggers.xyz forthesaltysouls.com francescabaldi.coach gophastr.com greywearimpex.com halloween-ready.com haxable.com idahofloat.com infoavatarslot88.com katsuyatoken.com klmywmux.com krisandmeigeni.com localemergencies.com metainstagram.faith metanovibrand.design metawhatsapp.insure netpug.com nipahvax.com ordinaryborrow.xyz otl-logistik-gmbh.com ourdogdream.com paddyscaddy.com personalbias.com portalzy.com quantumcapital.technology realdolls.website rejykio.site revtiredirect.com sbyidn.net sejt.xyz sheinfluenceschange.com superbstix.com tarinalintu.net theahmadis.com thebestmediaguy.com thefomorprophecy.com themarketplace.digital thepowerofdtk.com trttanks.com trustminingfx.trade umoveebikes.com unpeg.xyz weldonswestern.com writesco.com xsightvideos.online xxyipay.com yoko-by.com zaphysio.com zfld1.com # Reference: https://tria.ge/220127-nzvjeacdb8/static1 599qu.com 77hub.cloud albanybestbuyers.com amazingfactsabouteverything.com antonavt.com bedplot.xyz cdamanagementservices.com chefjeffrecipes.com cloudymellows.com colorbells.com connectedmk.com cowboychannellpus.com cryptopal.xyz dreamyhousewife.com explainersadvids.team groovyrelease-toknowtoday.info hainanmizhi.xyz hypedrize.com infostate.store javacodecafe.com kezorup.online liquidministry.store m7ssucx.xyz manoncollinet.com metaheaven.global miclanka.com mohaisen.xyz mwm-security.com my12127.com parcel-alert-redelivery.com phxpowdercoating.com ponpesihsaniyah.com propelcolor.com qterps.com riskfreeenergy.com s-h-a-h.com sdfvlog.xyz smithstores.net soakedindelight.online southernfreelancersph.com spineklinik.com supershhhbros.com synjive.com szabossteakandseafood.com tampanazareno.com tgogziae.com thefirstgroupscam.biz thenftlotterys.com threegalasdesigns.com tradecardsbtz.com trinksaifenradiodocumentary.com uniqueclsssiccars.com unitedwii.com ventadesillasymesas.com vozeestore.com wakilin.com walltage.com willtuckfinancial.com wofdex.com woshinidie1990.com wu8jvohkp12w.xyz xk8abxci6ogf.xyz xn--arbetslivsaktren-ywb.com xu7d7mfh6fht.xyz yfsallegiance.com # Reference: https://tria.ge/220124-slq2aafcbm 5gwirelesszone.com a9d7c19f0282.com babyvv.com besrbee.com bhalawat.com bodevolidu.quest boraviajar.website browsealto.com cbd-cannabis-store.com certidaoja.com chahuima.com chatteusa.com cletechsolutions.com cryptointelcenter.com cyberitconsultingz.com dairatwsl.com drmichaelirvine.com dtsddcpj.com fairytalesinc.com fly-crypto.com genrage.com hevenorfeed.com hf59184.com hominyprintingmuseum.com hostedexchangemaintainces.com jingguanfm.com jkbswj.com kadinisigi.com kovogueshop.com kymyra.com laqueenbeautybar.supplies lendsoar.com lewismiddleton.com lovebydarius.store loversscout.com m2momshealth.com mes-dents-blanches.com minjia56.com mintnft.tours nba2klocker.team nethunsleather.com nxn-n.com oded.top onlinesindh.com ordermws-brands.com perfectionbyinjection.com picturebookoriginals.com redsigndesign.com scgxjp.com semejnyjochag.com servicesitcy.com shinepatio.com shopvintageallure.com skin4trade.com smplkindness.com snowjamproductiosmedia.com taksimbet13.com trist-n.tech uptimisedmc.com vacoveco.com virginialandsforsale.com waltersswholesale.com wayfinderacu.com workerscompfl1.com xrgoods.com # Reference: https://twitter.com/reecdeep/status/1488086128603406336 # Reference: https://app.any.run/tasks/5e09730c-56c9-46d3-b299-90cabc735603/ # Reference: https://tria.ge/220131-la8zdsghdn/static1 0003271.win accessiodoc.com accurbizlist.com acingthesat.com amelntl.net ammarus.com ankaraninbaglari.xyz aprilrehrig.com barkleysbettermints.com bestinvestments.pro blissfulcreativework.store boogey.xyz bundleandpreloved.com cedacventures.com chattelsmore.com chengxinyuan.online chuckmitchel.com crochetbycare.com cryptoandshirt.com diesva.online evesfashion.online explorelacrescent.com f2fcomunicacion.com fedelini.online focalberth.com furnitureqchina.com gloriamcarter.com griffin-intl-ltd.com gstfranchisecenter.com hbsckj.net hospedajeteques.com hothess.com imagepixo.com jdmnn.com jimoshopping.com juliadeantravelworkshops.com ksssz.com kusiwara.com magnificpets.com manimani1225.com marinayouth.com medyasmmpanel.net mkpackersandmovers.com modernleadersacademy.com newbalancebestsale.xyz nwzjr.com oceanic-sauna.online passiverewardssystems.net popierwszezdrowie.net pressonnailsie.com rajuulabels.com relyoncarlos.com selberherrlab.com sycochic.com szkoleniapolskilad.online taiwanlongyu.com techsonworld.com the-pumps.com thebestcloudcomputing.info theebook.cloud timdixonpreferredadvisors.com unicornbourbon.com unitedstatesarmyfieldband.com webpassion.club yuanyuzhougame.net # Reference: https://twitter.com/reecdeep/status/1488821892387647488 # Reference: https://tria.ge/220202-mcjyqaaae6/static1 1w3.space absolutenuisance.com airtogether.com ak8flfqzm8.com arrow-electronics-corps.net balanzaseconomicas.com baysidecanton.com bdelsaer.com best-eternal.com camaras.store chamaaibrasil.com cryptoclits.club cyberews.net daliborkokic.com data-schwab.com datemyso.com directmail411.com doctorsby.com fruittys.com gamiteisnowjoyned.com gelsinpremium.com glistonshop.com global-forbes.biz hightings.com hkkbags.com honeyroux.com iot-vn.com itsajinkyaraj.xyz maktabarasheedia.online mburmtdvccti.mobi mpu-vermittlung.com mrk-9.com naclepin2a.xyz needscooters.com nicethelab.com nnhhhhnn5.net nropes.com operationservefirst.com paijuluntan.com paprikaproduksiyon.com profitablemechanic.com pvu1863.com redenyl.com regitconference.com resilientbutterfly.com retellinn.com rodrigocoppa.com roofrepairnow.info schneex.store silverhavenfinance.com tanzibkarate.quest tdetesla.com temaksa.com thebritenseries.com thesuvidhastore.com thomas-wildlife-control.com thruzens.com timothykmyers.store tinawcounseling.com tipshalal.net townsvillelawnservice.com urnam.com whatsappstatus17.com xn--1lq90isray30ltdc.xn--czru2d ydbsy.com # Reference: https://www.virustotal.com/gui/file/daa049b15bb5c1d0aef06276f9940d2fea76242f1a01ebfe299a63b7c74f7ea0/detection http://185.238.168.187 /d_add # Reference: https://twitter.com/pmmkowalczyk/status/1493194105257607173 # Reference: https://tria.ge/220214-nr5peaafhj 636851.com air-watches.com airlesscondimentdispenser.com anentbottskeen.com annahve.xyz aracsozluk.com australishomes.com becu84ts.com birdy3000.com bitcointradel.com boxedwallconsepts.net bundesfinanzeministerium-de.com buongpuso.com campervan.love carbsupplements.com cngm7e.com common-criteria-isac.com domainsraj.com elaish.com epilepsycolorado.online executive-air.net eygtogel021.com fisioletsgo.com freeadakahamazon.com goldenconcept.art gpawidegroup.com hackensackfitness.com hanssuter.com healingandhealthy.com ilmarijuanadispensary.com iloveapple62.com kidskarateonline.com luckyfandom.com nightcanteen.com nutcrackernoww.com nvgso.com online-bolgar18.com petips.xyz potserve.com proceam.com qhwl2017.com qubtantoys.com rashil.digital rushpcbtest.info sahumeriosartesanales.com salonautostock.com savarsell.com sdunifiednursingcollege.com sehatherba.online sharifulmer.online skillga.com subritulandoando.com sumiyoshiku-inoitami.xyz tackle.tools thelukeliu.com tkspoboys.com tonghetaiye.com turmoilgomkww.xyz victoriajayde.com vyounglighting.com woodstor.com xiexingyu.top zaar.solutions zdbhl.com zj7aszamjwe3.biz # Reference: https://twitter.com/reecdeep/status/1493510598545526784 037yu.xyz 1ees.com 80cq926.top adelaideofficeinteriors.com alba-laser.com albayscofield.club arbiz.farm arrowelectronics-corp.net birchbayapartments.com brisbanecarcollectors.com cahc.info colorfulfluidchaos.com cwdestore.com daidalo.com dcfrc.com enjoy2m.xyz enrevologix.com goldenrhythm.com hnjst.net institutozavaleta.com internaturalestetik.com intricatepainting.com iwjvit.com jack-barbara-memorial.com kincsemto.net konjophotos.com libreriarenemoreno.com liveincare-online.com localmarketagents.com marianiartspace.online miamitaxes1040.com mimihin.com mintbox.pro mmnbm.com moonsonkashback.xyz mothersmilktn.com nahda92.com nordic-aesthetics.com northernlightdebtrelief.com oki-net.com omniahgames.com onboardaltdigitalavg.rest onlinedelivery.biz phpmv.com plickthepick.com poseidonvips.com primelinedistanc.ltd qhyingtu.com searingrofivt.xyz sentpostja.com sfheatpumps.com shabupaperpot.com shepinhang.net sixfigurefundamentals.com smartsew.online sogu.one someglimpses.com stoneprodirectory.com sugarkelly.com testimonial.direct toptraveltouch.com vanlifedubai.com watchonlineplay.xyz wildeblum.biz yun183.xyz # Reference: https://www.virustotal.com/gui/file/1155c0a3ed4fff855d7638989626d70a34a9cd35c943d5899fce5fa8fb2a47e2/detection pixi-url.herokuapp.com # Reference: https://twitter.com/James_inthe_box/status/1493995456434630656 # Reference: https://app.any.run/tasks/149afc40-954d-41f5-b32d-751651839d28/ czuj.info # Reference: https://twitter.com/reecdeep/status/1494613626958880768 # Reference: https://tria.ge/220218-lrwqdscda9/static1 # Reference: https://app.any.run/tasks/b5707b2a-5356-4659-8997-969193a1dbf7/ 1stuebc.com 77xy.xyz academiademujerespro.com alex-covalcova.space androidappprogrammierie.com anwisystems.com armbandtas.com autnvg.com benormxukraine.xyz buylowatlanta.com buytacpyshop.xyz cardinalsplayerstore.com catrionatowriss.com clarensis.com cruzinu.xyz drnicholasreid.com gbwpmz.com gents.style globalrockstar.xyz greenelectricmotors.com have4grand.com heathlytrim.com hilldoor.com hnart-child.com hongjunwuliu.com hopejustmade.com ilovesinglemoms.com interviewacomicnerd.com jitsystems.com jklhs7gl.xyz junicy.com kcebtaz.xyz kenmark-inc.com ksherill.com lagosian.store lesaventuresdecocomango.com libertymutualgrou.com lifuyao.com makciakla.com matercenter.com mcattoneys.com metaaiqr.com nameniboothac.com nexuslanka.com npwpkl.com oculos-ajustavel-br.xyz ollorhythm.com ozkonyalikebap.com pholoniex-an.xyz racingsilks-nft.com raverwren.net recuerdosoxidados.com relatingtohumans.com sidesofthenorth.com socialfiguild.com stocktonfingerprinting.com topbunkconsulting.com uidrp.com vegecru.com veuology.com wghakt016.xyz wu8d616yyt6z.xyz wu8ggqdv077p.xyz xn--kinsithrapeute-dkbe.xyz # Reference: https://tria.ge/220218-nlkgaadcfq 024labs.com 69xibao.xyz 979511.com aaronlala.store accountingsoftwaresusweb.com aleksandartaskov.com arcade24d.biz autobras.online balatonartcenter.com bctransporter.net bez-part-ufa.xyz bitsgifts.com blantontransport.com braktonem.quest certipsy.com chrisdaughtryfans.com cindercapacitacion.com cpybc.com cq396.com curatedcraze.com deluxeinterior.design detentionart.com drivelingo.com dsp-energe.com equito.agency for2play.com fourcrestaurant.com futureoneafrica.tv garageair.agency gbnagkvr.xyz genyuandl.com hsa-attorneys.com jantfencingandsheds.com jasbellyfusion.com jlhvz.com jungleking.online liberatoreshepherds.com longlastingoil.com macadamangel.com metalcorpperu.com metaverseloot.club mokkaoffice.com moniqueroerdink.online mypartners-april-investors.com neurosise.com novregen.com nowosee.com oakiedokies.com organizedkay.com paghosting.net pysznepay.com salamdiab.com seculardata.com tecnophone.net thehelloloveshop.com tinturas-plantas.com trinsity-solsar.com uniquesi.com wakasenninshikirenaitechnic.com waltersswholesale.com weddingtowifepodcast.com xcybook.com xfdtiz.xyz xn--80ajy8a.xn--80asehdb z5jgazn.xyz # Reference: https://twitter.com/JAMESWT_MHT/status/1495449578556080136 apollorealtors.com # Reference: https://tria.ge/220222-rtv5jaback/static1 0396pp.com allscapeslandscapeinc.net aviabiletkassa.com bagour.com bfreemovement.com blue1hello.xyz bolerconcepts.com bucaescortbayan.xyz bzore.com camscouplelive.com carenowgroup.com carsvehiclesapps.pro chrishonbell.com cyber-attack-simulator.com detonix.xyz dikdikpics.com disbep.com effizienz.coach eleanorreardon.com fijnstraal.online fixedincomeauctions.com fourtradeghana.com fraudulenttransaction.com gabriellahall.com goodhandscare.net groeducation.com himalayanwanderwoods.com insu1con.com iphone13mini.onl isabellaeveapparel.com jedanetworks.com lashedsa.com lmhaglund.com lookyanychev.store luxurypartygirls.com lz-jaini1615-hw0916-bs.xyz maxicashprodif.xyz michael-ludwig.info mylavabo.com offer5u.com openseagames.com peaks-hub.com petinggiean.tech polebear.xyz professorrolandocaballero.com reidak.com remixedteez.com riologisticsinc.com rotorotos.com sddn55.xyz selezionemiccis.com signalscrossed.com sinceretour.com solutionsemissionsimplifiee.com stor-morathens.com tennesseelegendarycleaners.com thentn.com theshaheenos.com ttagoa.com w5gbaq.xyz whitedovepottery.com wychit.com xn--3h3b77jqteeykb4g.com yenerbelli.com zhchgx.com # Reference: https://twitter.com/James_inthe_box/status/1496566212649570305 nnpcoil.buzz # Reference: https://twitter.com/c_APT_ure/status/1498967728002060290 # Reference: https://www.virustotal.com/gui/file/587db04b7b6cfd24c9c33bb352bbb8a32f069a15853faffeec0d48baf82cad6a/detection http://156.96.154.210 amtechprinting.com/Ioqsvp.jpg # Reference: https://tria.ge/220303-jfcr2abdar/static1 76482.icu 79znw1ajsv.xyz ailanis.com allaboutthepatterns.com atalayagroups.com bmxpro.online cabrioletx.com cannabisseedreviews.com cheappricecompare.com chicagohomeremodel.com christian-lehrmann.com coppaitalia3d2022.com coreagency.net cryptopedagogy.money curibo.xyz deteccion.online dinox.tech exactgeneralcontractors.com fishgirlfeats.com glamourendorsedsquire.life greenlabdelivery.com gs385.com hapocun.link hashtagorg.com hc6ady6y837tn.xyz hc6dlm7febdpv.xyz hnkhackingdojo.xyz i-97eevvq.life installationart.online kinlin.net lamornewright.com lassopicinnovations.com laurapaganigarrastzu.online managedsupportia.com medicinehattowing.com mission15.com modernconstruction.company monimachine.com moonbeam33has.com oermap.xyz passyourlicence.com petir55.com promotion-atserviice.store quantumanite.com quickbodyslim.com razavi8.net renaltrials.com renmaitong365.com rumahmakanbutin.com saleswoodstock.com scottsdowntime.com speaktartar.com spoluprehlohovec.online testing12345678.com themodernmandiary.com tianbaolan.com tipo-bet365.net tydonyb.com tyhup.xyz unicus.company update-edv.cloud upper90sports.com vised.xyz yeswesing.com yucer.xyz # Reference: https://twitter.com/peterkruse/status/1499320398701342721 fastcredit.club jbelleandcompany.com letsfeaturemedia.com outerverse.estate panyuhao.online rasa.services xn--legande-rza.com # Reference: https://twitter.com/MBThreatIntel/status/1499435864035934212 czuj.info habitatsaludable.website maxxflush.com modhotels.store vzddc.com # Reference: https://tria.ge/220304-p2f98sgcdk/static1 1207rossmoyne.com 20dzwww.com 595531.com 68135.online 77777.store ahmadfaizlajis.com alert78.info alifdanismanlik.com allmnlenem.quest anniebapartments.com awp.email bendyourtongue.com berylgrote.top bestpleasure4u.com boardsandbeamsdecor.com bubu3cin.com byausorsm26-plala.xyz cielotherepy.com crux-at.com customapronsnow.com dandtglaziers.com deepootech.com drimev.com encludemedia.com fabio.tools game2plays.com gongwenbo.com gulfund.com hagenbicycles.com handejqr.com herbalist101.com hugsforbubbs.com jasabacklinkweb20.com kreativevisibility.net kuechenpruefer.com laidbackfurniture.store lankasirinspa.com launchclik.com leatherman-neal.com librairie-adrienne.com mddc.clinic mehfeels.com metavillagehub.com mobilpartes.com nathanmartinez.digital oecmgroup.com oprimanumerodos.com pkem.top protection-onepa.com rematedeldia.com segurofunerarioar.com seo-art.agency shristiprintingplaces.com silkyflawless.com southerncorrosion.net spbutoto.com t1uba.com tajniezdrzi.quest teamidc.com the-pumps.com thecuratedpour.com tracynicolalamond.com turkcuyuz.com uschargeport.com vulacils.com # Reference: https://tria.ge/220302-m7zyesgdak 567go.club 943991.com abiding-life.com abioduncleaningservices.com artistrytribute.com arvidaontour.online ashokeperception.com atisbeauty.com basepicks.com bujok.xyz chattelsandmore.net cindyrandband.com comhotfile.com deamorwineandoil.com diagnosiscovid.online diamond138.biz djcaponeofficial.com duikescollection.com ecoimpactnft.com elefantenverlag.online gafiber.com goldapp.info heystudiocr.com highanddrygardenworks.com i5yx.tech ibfsinc.com igorleonardo.com itdiver.com jackiesimon.photos jascroggins.com kyomaruheyblog.com lesulemetrin.quest lipsrv.com loyanto.com mazengr.com mcdonnellanalytics.store mein-amberg.com mengesleckst.quest missmayuri.com mlxezzvvxtuujipokez.biz moreosin.com my688.xyz myarsemychoice.com mydkabc.com native-shirt.com nernsnook.online nicolasreboledo.com papadeuxpointzero.com pfotenpower.net physiocare-ye.com pluggdicono.quest ppskse.com sientespa.com smith-command.com sponsorclient.com starzara.com stronghal.com tess-factor.net timberwolves365.com tolexinesansordonnance.space topshop4kids.com ttcolorz.com vertexwebdesign.us wtsam.com zaboctoatoa.quest # Reference: https://twitter.com/peterkruse/status/1501506590914056192 3cnew.com 4127raymondav.info 68132.online debriefenmif.club ecosystem.team switchyardcharlotte.com thesmokecircle.com ycjtwy.net # Reference: https://tria.ge/220309-lzhhqsgch3 567go.club 943991.com abiding-life.com abioduncleaningservices.com artistrytribute.com arvidaontour.online ashokeperception.com atisbeauty.com basepicks.com bujok.xyz chattelsandmore.net cindyrandband.com comhotfile.com deamorwineandoil.com diagnosiscovid.online diamond138.biz djcaponeofficial.com duikescollection.com ecoimpactnft.com elefantenverlag.online gafiber.com goldapp.info heystudiocr.com highanddrygardenworks.com i5yx.tech ibfsinc.com igorleonardo.com itdiver.com jackiesimon.photos jascroggins.com kyomaruheyblog.com lesulemetrin.quest lipsrv.com loyanto.com mazengr.com mcdonnellanalytics.store mein-amberg.com mengesleckst.quest missmayuri.com mlxezzvvxtuujipokez.biz moreosin.com my688.xyz myarsemychoice.com mydkabc.com native-shirt.com nernsnook.online nicolasreboledo.com papadeuxpointzero.com pfotenpower.net physiocare-ye.com pluggdicono.quest ppskse.com sientespa.com smith-command.com sponsorclient.com starzara.com stronghal.com tess-factor.net timberwolves365.com tolexinesansordonnance.space topshop4kids.com ttcolorz.com vertexwebdesign.us wtsam.com zaboctoatoa.quest # Reference: https://cert.gov.ua/article/37688 (Ukrainian) gobits3.com # Reference: https://www.virustotal.com/gui/file/f09d1a726e7cdc701ce9be7f0988b7751896140fa76d9db2c4b3189d8cf9e0b6/detection 185.244.31.132:1809 stonecold.ddns.net # Reference: https://twitter.com/reecdeep/status/1504365541502459908 pedorc.com # Reference: https://twitter.com/reecdeep/status/1504467051267575817 arches2.com # Reference: https://blog.talosintelligence.com/2022/03/threat-roundup-0311-0318.html (# Win.Dropper.Remcos-9941356-0) # Reference: https://www.virustotal.com/gui/file/26d19ab100f651d0a6c6b4f9d69a0fb3dc04ff6073bf852497f81be982996c74/detection 41230793.net besthappybuds.net hanaleedossmann.com hotsmail.today hypersarv.com igametalent.com jialingjiangpubu.com joomlas123.info liqourforyou.com midlandshomesolutionsltd.com moodandmystery.com rapport-happy-wedding.com sellingforcreators.com shadowlandswitchery.com shoupaizhao.com twoblazesartworks.com whatsnexttnd.com wwwswty6655.com yoursafetraffictoupdates.review ziruixu.com zoneshopemenowz.com # Reference: https://tria.ge/220321-vp2y3adce2 5okx.com affinitybuzz.com andro.finance budunkafunk.com canadazk.com ceonsolutions.info computevault.com coriliechty.com cryptwo.xyz dailyjointhealth.com ecolifeco.com fatflorida.com flawdogs.com freeloanseva.com gangsha2001.com green-stone.solutions happyhempbakery.com hilutv.xyz hizika.com idyijr28j.xyz infinitelifetransformations.com joansbestshop.xyz khenonline.com kingstreetlife.com kosaz.online liveexim.com lqctqtal.xyz luxefashionaire.com madamebet.com menzelengineering.com mydactil.online ndcqchc.com newdealny.com nfhotel.net nginspection.com njpropertyrecors.com non-transferabletokens.com noticejcb.xyz packingfairturkiye.com paypalverifie.com positionme.site rever-age.com ridgwayracing.com rommyarf.com room4rent.net rsvip13cvx.xyz ruscc.xyz securitenovo.com shalomsingapore.com shanaesbeauty.com societalsystemic.com steady.store successvideo.today sveshtivosak.com thetimewheel.com tuvanvaytien24h.site uc-usa.com unicryptdoge.com unityassetstock.com vacumeet.xyz westfieldswetlands.com wingonvacations.com wodev.biz xfcad20.icu yaxi868.com # Reference: https://tria.ge/220327-wct85abae2 3pxm.xyz 59208.xyz amongusleaks.com antiwardrobe.com athlonebiokinesiology.com avrecommendwiki.com boatsrentalcda.com carseg.site chayaelements.store clemons.tech colormusedesignco.com cricutonlinesales.store crowd-news.com dasenlin-jiaju.com demopanel.xyz forkidofukraine.com galabet472.com giftexpress15.xyz gtm-kalisumapa.com haotian9981.com hqdtgyl.com huangsanguai.com indianfood101.com invtips.com ipoyce.online iyraproperties.com jinwanlicai88.com jjshomefurniture.com jogo.tech kawuldim.com kelaikemc.com kompanko.com lonesomevalley.xyz lowdowntracks.com lvsebianzhidai.com melaniewieseler.com miaurora.net newgenelectronics.com nikahclub.com nuoim.com oa1xs.xyz okparking2013.com orino.info outletscheapjordans.com peaceandlovebhs.com pyttoin.xyz qewuy.biz raidencity.net reveplac.com ripper66.com rooplaza.com rowanmasonry.com scrubbinsisters.com storkbucket.online templerestleisure.com thecodealchemist.net tvpoy.xyz victoroverseas.com wecome.club wiggly.site xfmm9538.com xn--h6q362bj4mp5c.com xpertlockandsafe.com your-funds-available.com zhekou8.net # Reference: https://twitter.com/peterkruse/status/1510927735325175810 germanshepherdpupz.com jardindaime.com sextv18.com ulrichfab.com ykahap.xyz # Reference: https://www.virustotal.com/gui/domain/online-be.xyz/relations online-be.xyz # Reference: https://www.virustotal.com/gui/file/047ff786f8bdd92bcf070f006d07ee6ca9bf63bd08213ec6b8807486c8b3f016/detection domaky.com lauravitale.net rest-report.com # Reference: https://www.virustotal.com/gui/file/3c94599cada17b9fae62316e54a1d69db7c475223721a5a57abe8774a2b5da74/detection 09012345678.com alloneart.com antoniolopezmurillo.com beaconhillboston.net blakfri.com chicasgunsboutique.com contorig2.com digitaldownlinesecrets.com edenwholistichealth.com effectivevip.com homebuyerspa.com jasminespot.com joshjohnson.pro jumbkprivacy.com khoemanh.club kyyx666.com letscompile.com mythree-informationupdates.com pusatsopsubarashi.com storeralumni.com travelchina.store underpressurecare.com wantedtrek.com willysuefarms.com xvideoapps.com yuanyouwang.com # Reference: https://www.virustotal.com/gui/file/b84fdaf6b81dfa063bf018bb2ed589f5fe71e694ae86f7b2ca7e1554eb11563f/detection bakegeeks.com contorig2.com fontaine-escargots.com impactxnow.com khoemanh.club letscompile.com level60media.com lushlobes.net master.recipes mst-srv.net oryzeae.xyz pinkinomanbeauty.com stoneautoaces.com wantedtrek.com yuanyouwang.com zxywxmr.com # Reference: https://www.virustotal.com/gui/file/19f97cbe74d777797e6f6c5e323b8611dbf57811a7d8f58b9ba8ea8171c19188/detection 736141.com aater.space adampulpit.com benenopen.online bihada-news.space bit-eth.com bjyanqiao.com bssystemonline.com bybundy.net dallasdwiguy.com eduardoorosc.club erikakorma.com galabet0350.com irvid.info jackmeetjay.com keepitng.com kffreshfruit.com lscarlzk.com luokeseals.com mamamachi.com mivolts.com nemetgyakorlo.com nomadisen.com nutrioclinic.com orderinformantmailer.tech osmium-institute-paraguay.com payments-gate-325r.xyz rbmo.top rubberyrofqci.xyz sishedh.xyz stripmywalls.com tangoespasion.com theorigins.xyz thepopularboots.com wucaishisc.com # Reference: https://yoroi.company/research/office-documents-may-the-xll-technique-change-the-threat-landscape-in-2022/ # Reference: https://otx.alienvault.com/pulse/6193e3f5b119e561c52ed3ba art-space.xyz # Reference: https://tria.ge/220418-rbygyadhh9 21sq.xyz 2day-recv.info adforalums.com afromoorishfilms.com aleimanpaper.com algurg-living.com allmoves.net anatox-lab.fr ankaraogrenciescort.xyz bethesdaclinicllc.com chouwakarunewssokuhou.com coach2college.com creativeportraitstudios.com csfromsinai.com cumbrebomberos.com d72gmj3bpdhc.biz directionsettingpoint.xyz eludice.net emdestak.com feinquebrantabledoc.com fifihill.com findinvest.xyz gasandliquidcontrols.com generatorgmer.xyz geoplates.com gmcrjizppcx.mobi gorastionse.store greenft.xyz hobe.agency impqtantaou.com inmyhindi.com j3ebx4thyf5h.biz joinlegacyforge.com keepitng.com lamphuchai.xyz lianxiwan.xyz losangelescapainters.com lovawood.com medicinalweed.lat meenubhosale.com mgav23.xyz mintnft.fund nidoumenojinsei.online njjbds.com nomorewarnow.com nuhuo333.xyz onthemarket-smartboard.com plotniska.net powersforsupervillains.com ptmetaverse.com qywyfeo8.xyz r-souls.com scmce.com seacoasttractor.com seattlerealestateauction.com soulworkerrush.com sourcemycandles.com stealthcarrier.com sxuseon.com thephilangies.com upisout.com valgtrizoma.quest vendasaprovadaonline.com webwideoffers.com xiraji21.com # Reference: https://tria.ge/220414-j7arraagfq 4caminos.biz 5151vip51.com 701017.com aauni.academy aestheticpls.com allcityinterior.com apexautomationsales.com axelaguilar.com beritabolabo.com bestmodsforminecraft.com boostover.net buzzsaw.club carfik.com cattlecallphotography.com charbousisterofthemoon.com chaunceybarett.com cockgirls.com corporacionddt.com crypto-geniusworld.biz darkharborband.com dgmnsp.com eddemployments.com erodingbnustx.xyz gamblrapps.com gg168bj.com helpcloud.xyz hexedox.com icyreps.com jakubkokoszka.net jarrellmahusay.com jzwlhg.com kyukeimap.com laconsentidaseleccion.com lshdkj.com lu-dra.xyz mavrlabs.com mixcogroup.com munixc.info myesunlife.xyz onlinedownload.digital pavlovsbakery.online peternieboer.com prona.xyz recom-altaka.com researchers.company rewlec.com rodblur.com rtexbot.com rush-booking.com sewncurtainsandblinds.com silentpartner.plus stateofbiotech.com supraforward.com theeastendvoice.com thefliptruck.com thelindleyfamily.com tonysgourmetpizza.com tudoemvendas.com universityairexperts.com upnnett.com urbannft.xyz virtualofficesolutionspro.com warungdgital.com xn--g2xt1dp5qljo.com yudaria.com # Reference: http://blog.talosintelligence.com/2022/04/threat-roundup-0415-0422.html (# Win.Dropper.Formbook-9944286-0) 5151vip25.com aestheticpls.com amazonbrickandmortarretail.net amelntl.net awp.email beylikduzuhatunlar.com bucariito.com carfik.com cgbbqllc.com cherrythechickenandfriends.com dynwa.com fabio.tools fujistrek.quest hbsckj.net hdlypx.com ideastax.com jakubkokoszka.net lshdkj.com nbsze0.com positiontrader.club sauqenta.com stronyinternetower.com supraforward.com theeastendvoice.com # Reference: https://www.virustotal.com/gui/file/506c0eb3e46ed30251d48f7d39d0cfd14f3bf4c6a90a4ce37d7d76c3ab0e8fb5/detection bonbyk.xyz comfortshoppingmart.com divinacafeteria.com fieijfjie.xyz shopexstore.club xn--42cg2czax6ptae6a.com zhidaojy.com # Reference: https://www.virustotal.com/gui/file/2436139a182cd467b9669673ef9953bd25337fbb083995a7b69534bcfb75e9d5/detection bondihome.store excellglobus.com grasshopperswickedpickles.net mindgasma.com onlinechwilowka.info silyutin-invest.online sunnote.net voilathefamilyrecipeguide.com # Reference: https://www.virustotal.com/gui/file/02b2f3c02cfa488e665ff9e41233993dcfe8f2f02bf79536b1f9c88723ca7c32/detection baby-gene.com buketmert.com buzzlocate.com cbinventory.com clv-poc-dev.net drilling.world fmdllfdlfdfdf.com hottradebuzz.com houseofluxuryorganics.com jpystablecoin.com korupanorama.com naspartners.com onlineshopgr.com primehome-inspections.com verlan.guru # Reference: https://twitter.com/MBThreatIntel/status/1519696178543140864 # Reference: https://www.virustotal.com/gui/file/cde7a256a7b8de85acb73ab4697147fbc4c9a8cda56f594b20d278e26c177856/detection albawardl.com bizjust.xyz borntohealpodcast.com bsfs6.claims capshopnateasy.rest ceramicstrainers.com chrisfortner.com collie-langhaar.com countryharvestcrafts.com cuestiondeminutos.com focuspbc.com fountainspringscapemay.com free-spinner.com frontrunnr.com garygrahamnyc.com generarelead.com hoatuoithainguyen.net icotus.com ivaanvikram.com jinchanghe.com librairie-adrienne.com lightingreference.com monteiromt.com munixc.info omzast.com printables.digital smartboostmedia.com sujonpaul.com themakershands.com usbankofamerican.com whyasen.com # Reference: https://www.virustotal.com/gui/file/f5db253b6db31aaeab9068feea2d05436629b75e4602a7d2428299b1fa934184/detection # Reference: https://www.virustotal.com/gui/file/f0acca1bd8656cd5f75130a06f2df7abbd2bb234812234985de025b8af0a8573/detection # Reference: https://www.virustotal.com/gui/file/ee35a5464cc7b7d4fe9ca9fce5321e1f6e235447792678fb71d768f5d1e2d319/detection 172711.com 3a5hlv.icu 515pleasantvalleyway.com almanecermezcal.com alnileen.com ankaraescortvip.xyz azalearoseuk.com bitterbaybay.com casino-pharaon-play.xyz cg020.online cimpactinc.com cinemaocity.com civicinfluencers.net dayannalima.online douglas-enterprise.com eaglehospitality.biz eidmueller.email fbve.space goodgood.online greatnotleyeast.com groceriesbazaar.com gta6fuzhu.com gzhf8888.com hebergement-solidaire.com hempgotas.com holyhirschsprungs.com hopeitivity.com ioewur.xyz italianrofrow.xyz jaggllc.com johnfrenchart.com kastore.website kitcycle.com ksodl.com kuleallstar.com lovely-tics.com lovingtruebloodindallas.com maymakita.com mcrosfts-updata.digital mentalesteem.com mytemple.group palisadeslodgecondos.com plick-click.com punnyaseva.com quadrantforensics.com rainbowlampro.com ralfrassendnk-login.com richclubsite2001.xyz roofrepairnow.info savageequipment.biz sharaleesvintageflames.com sho-yururi-blog.com sincerefilm.com sirikhalsalaw.com sittlermd.com sport-newss.online stella-scrubs.com tghi.xyz theinteriorsfurniture.com tiny-wagen.com translate-now.online ukash-online.com wwwripostes.net # Reference: https://www.virustotal.com/gui/file/eafdcbea5a9544d87f8a7c03ee4eb6ab0d9c12bbbbc1d9705dc94d5fd983c5bd/detection 2thpolis.com 360e.group 4338agnes.com 58lif.com atlasgrpltdgh.com buysubarus.com carriewilliamsinc.com damusalama.com dreamschools.online evodoge.com faydergayremezdayener.net finanes.xyz freelance-rse.com gaboshoes.com gabtomenice.com hempgotas.com ir-hasnol.com libes.asia micorgas.com mollyagee.com nbjcgl.com pentest.ink rampi6.com rvmservices.com sjljtzsls.com standardcrypro.com teentykarm.quest tipslowclever.rest trulyrun.com uvywah.com viperiastudios.com wilkinsutotint.com wohn-union.info youngliving1.com zoharfine.com # Reference: https://www.virustotal.com/gui/file/00570adfd84d458743a5e951d58043e836043d01b0016e78928d2db9a724e730/detection albertaeatsfood.com autocalibre.com dac71047.com espiaruncelular.net fem-iam.com fusiontech3d.com gmopst.com guncelekspres.com likekopi.com livehealthychoice.com morganjohnsondesign.online phigsa.com saharsaghi.com sargeworld.com talasoglufinans.com # Reference: https://tria.ge/220504-fw33dadah5/static1 48411.xyz 4sansquatre.holdings 8388cq.com advanceddataenterprise.net alsuwayeh.online amor-vincit.com arbitrum.party arresgroup.com aryocoding.com bighornholdingllc.com blockchainsmartsystem.com bmstore.uz boredones.com brasilseafish.com breweriana.online carnetdechef.online chiaraboffi.com cjlucmpt.com clonda.com conditionssuitable.net contohot.com ctsygzs.com cushionsandmorehn.com diduxi.com funhouse789.com gentlemanpig.com gurbuzsuaritma.com hakomas.one heshi54.com hitmanautomation.com homeautomationtexas.com hsgmaster.com kershoes.com lamborgrini.net le-fam.com leeracingteam.com lennoxalexandar.com loaparis.com lottoss.xyz memoirofanerd.com mentication.com metanum-solutions.com mgav57.xyz mrteez.club nationalmetalbuildings.net navarracomercial.com osvfbf.com phimlon.net pistachio.land quickest.website recalibratementoring.com romasonra.xyz santiyq.com sarojnimarket.online sbs68.com seaverde.com sebastianlouder.com sharkyslipper.com soodscan789.com stiff-pols.digital szum.company t2kenya.com tdmjsc.store xinnuosn.com xn--octr39apqo.xn--czru2d # Reference: https://www.virustotal.com/gui/file/ab609e7ec35be92d719b79706a8b32c8b173b33b2c0d1a2d0c378ae0ab24d503/detection 23icecream.com acastino.com catherineseher.com darkartgames.com detzag.online dvxgem.xyz evlovess.com gadolant.com gregorylongoria.com hemsbya.xyz kaplanstore.xyz movil-internet-fibra.site rathdrumproperty.com sr-ilustrado.com supplygrocery.com titcd.icu trafficdevils.xyz virginia592.com # Reference: https://tria.ge/220506-myw56shgc6/behavioral1 akabouumikaze.com aloin.net ambercline.com atercus.online atomlook.info awakeningworldplayers.com bcdm.xyz beezr7fizghz3n39.xyz bestcannabisbutiken.com camasline.com chlorinetcca.com clientfirstrcm.com coastventure.info copysouthbound.com croniesnft.com customerupdateservice.support dk3cs8pm8p08tm.xyz dogoodcamp.com dongchenyake.com dtef.xyz entprnhealth.com fixyourprocess.com g50999.com gavc.club gazekb.sbs generationsheating.net global-ec-group.com globalshowbiz.com gotiktokpro.com homeinprovments.com hrbggames.com infotechno.net jialiba.xyz kellyblusbook.com kriptobotu.xyz ksjiea.com lovellsautoglass.com luxnol.com magaluiza.site mxavsp577.com nikkiaugust.info nishiokayoshi.com peacedoge.club queimaagora.site randcorcoa.site rediwatt.com rlc.wtf sabrinabi.xyz simbacatering.com sirotti.xyz taxempires.com telstradiscount.net thenftexplorer.com tn8itwpe2hjrrfip.xyz top500dao.com trii-a.net trottadevelopmentgroup.com vacationtennishome.com viralindo18.com visionarysolution.info wedo.direct yakobylife.com yjswsd.com zhanl116.xyz zts-ic.com # Reference: https://twitter.com/b3ard3dav3ng3r/status/1522875454537216002 teamazmog.xyz # Reference: https://tria.ge/220512-knp8rseear 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://www.virustotal.com/gui/file/fa3d030c48ed99d3eabfcb7ce2a85cfca61dfe1d6185a99ea27f4687fba99601/detection 1420radiolider.com blinbins.com bodymoisturizer.online cambecare.com csec2011.com garagekuhn.com glsbuyer.com herr-nourimann.com lcmet.com loyalcollegeofart.com myfortniteskins.com nwaymyatthu-mm.com smartmirror.one teens2cash.com turmericbar.com warmwallsrecords.com # Reference: https://tria.ge/220523-lwgf9sgagr/static1 0shixa7u.xyz 10000wallets.xyz 360tekpartners.com 48962.xyz 99yy.info allrates.info anthonyveyssiere.com atillos.com banjaranews.com belezz.com bestahem.com blackfoodierecipe.com bronchia98pew.com bsdprint.com chateaubaro.com chpvl.icu d-paj.com digitalmarketinginspanish.com discoverourtours.com dizaynservis.com ekj7fn.xyz eotefashion.com eudeed.com fahrzeughero.online findingfocuspsych.com freebuy.today g-glawgroup.com gotskills.xyz handanshengtai.com hawkeseye.com house-lover.xyz hye07on11.com iassets.cloud imifone.com invest-quantum-ai.space itransformtraining.online jessicaerenato.online jieshundz.com lbzbtgg9.xyz leaguestocks.com livigno.travel maesonandcompany.com mastiba.com mbbpaymentplan.com monbjrd.com njhxkj.com particular-verificaciones.com phillyfitformula.com post4pay.com scramet.online seucredhope.xyz sixcache.com storegonline.com sxhengshan.com thg268.xyz web3connect.world web3jake.com welcia.online whereisonka.com winsy1015.xyz wlidrhino.com xhygsc.com ycmu520.com yurongshipin.com zhangnala.com # Reference: https://twitter.com/tosscoinwitcher/status/1529350646847008768 # Reference: https://tria.ge/220525-flexssccdn 012skz.xyz 14offresimportantes.com ageofcryptos.com american-atlantic.net anotherdegen.com attmleather.com bimcellerviss.com buggy4t.com candybox-eru.com ccav11.xyz chambaultfleurs.com china-eros.com christineenergy.com climatecheckin.com clime.email dabsavy.com dbcyebnveoyu.cloud dearpennyyouradviceblogspot.com demetbatmaz.com denalicanninglids.com dhslcy.com dialoneconstruction.com doxofcolor.com dreamonetnpasumo1.xyz drsanaclinic.com edisson-bd.com embedded-electronic.com engroconnect.net exceedrigging.online fairfieldgroupfw.com fjqsdz.com floridacaterpillar.com garglimited.com gofilmwizards.com gororidev.com hofwimmer.com huvao.com insurancewineappraisals.com kincsemto.net lotsimprovements.com mentalnayaarifmetika.online mftie.com modelahs.com muktobangla.xyz myamazonloan.net nagpurmandarin.com qhzhuhang.com salahov.info sandstonehosting.com seekbeforefind.com shiftmedicalstaffing.agency skb-cabinet.com societyalluredmcc.com souplant.com tahnforest.com tellgalpy.com tentacionescharlie.com tootko.com travisjbogard.com tubesing.com wallacehills.com xn--ekrt15fxyb2t2c.xn--czru2d xn--hj2bz6fwvan2be1g5tb.com yonatec.com zyaxious.website # Reference: https://www.virustotal.com/gui/file/53251bf08457a79fce96a4493d96082dd2ddcce3789d8132b1be249943d3f33e/detection http://3.124.188.36 blackcreekbarns.com bluechipblog.com cartogogh.com cerradoforte.com dach-loc.com echoesdesing.com elon-drop.net facts-r-friends.com luyensex.club nitsmm.site permitha.net sana-poratal.site sportsgross.com tiffanyrockdesign.com whneat.com # Reference: https://tria.ge/220531-hmrdbsdeap/static1 215totobo.com 316242.com 95623.maison abdi-kings.com airflatego.com amerikanewsu.com aroma-shop6.com audubonenv.com authentisign.xyz bonshengempire.com bursalokma.online cerdasycauchos.com cliverof.com commentn.com comyourlens.com dadsimprov.com daka489.com dl99931.com eldercarepas.com eroptik.online findhypeart.com georgiaqueenpageant.com getcampusnations.com glovesandprayers.com gma-seen.com healeyhero.info healthexpertfund.com hieghtsdriving.com hnsjxxzsw.com hobbling17urd.com hongsencraft.com hotelnikhilregency.com howtosavetheworld101.com iammohn.com kykn8sghjadg.com leesgun.parts mayrathecoach.com metformin100years.com mindhobbybox.com minhkhoiauto.com msontag.com mymelada.com p2pilive.com popupplus.store qings.online raldistrictgoingalon.cfd sacramentoproudboys.com samedayjeweler.com samscosandmssaad.com sergiozini.art spontazz.com stevewellsforcongress.com stmfl.com supportokta.com themrbeastgames.com thevirtualeventsheroes.com toplist.guru underthesunset.cloud uniquemarketingtool.com uniquemindtech.com weplyshop.com wrobeson.com yinchang99.com yinhuapiao.com zghy.tours # Reference: https://twitter.com/reecdeep/status/1531954945494228994 # Reference: https://tria.ge/220601-mtzqhagba7/static1 128dd.xyz 55byvi.com algofan.lease alirbad.com b1khcj.com beijingbluestar-tech.com bigtime-redeem.com bjshxxw.com bjtvapc.com bo426.com careerguru.net ccaboyyhhj.com cgem.today contradasantacaterina.com cryptobuyer.site daobox.art designmehndi.com energieat.com farmersdaughterdelivery.com fujlfilrn.com gettspot.com health-cvshealth.com ismaazamzico.com kjcftylrsm.com legalzoomcard.net lmtoken-pay.club longboardsguide.com lovelitee.com maizhuanji.com mariemikulsky.com medicarebooking.com medimarquelab.com mesagre.online milanjoojosang6.xyz mqsjw.com mrplugzsneaker.com mybazer.com myfloaty.com myndighed.info pcr-user.com poweredbyclem.com premalex.lundbeck qichev.com qzenfood.com radiosdepanama.net rebillionares.com sanbarts.com seafiw.com simplyemail.info solanverse-staking.com starkindus.com strymtvapp.net suabinhnonglanh365.com szxy188.com tafkcleaningservices.com tddbjxutvytm.com tiffanychilds.com tradingbot.fund ttmhkpzmz.com txualnor.com volcanoscenic.com webuybuildingscash.com xn--9db0anl.com xn--grupoamoreoxignio-6tb.com y1xml.com yolgecenhan.com # Reference: https://www.virustotal.com/gui/file/030567e6bf7a5ecf93389aa9fe1ecad8c93bbef64864816be50677a8f2c7b12c/detection ayudaten.online cashbet.pro enjoytravel1.com hugobos.site jindu56.com ketolin.store miningnotifications.com mpace.store mwe079.com paulysatelier.store sindmart.com thingsrisenewspapers.biz xynhealthy.com # Reference: https://research.checkpoint.com/2022/xloader-botnet-find-me-if-you-can/ abros88.com alpeshpate.com amenosu.com aminsfy.com ammarus.com arabatas.com arches2.com b8ceex.com ban-click.com bantasis.com becbares.com becu84ts.com bendisle.com beputis4.com berdisen.com besasin09.com binbin-ads.com blackbait6.com blendeqes.com bra866.com bracunis.com brasbux.com brass-tip.info breskizci.com bubu3cin.com budistx.com buge-link.com bumabagi.com bupis44.info buresdx.com busipe6.com busy-clicks.com butsins.com butuns.com cablinqee.com catdanos.com ceser33.com cesiesis.com ci-ohio.com cinasing.com click-tokens.com coalmanses.com cobere9.com cures8t.com cusio3c.com cusmose.com cutos2.com dain6544.com dashmints.com davinci65.info dempius.com ducer.info dugerits.com earches3.com erisibu85.com fellasies.com fendoremi.com finsith.com finsits.com fraiuhs.com funtabse.com gamusemenu.com gate334.com gesips.com gimbases.com gingure.com gogoma3.com gulebic.com gunnipes.com heinousas.com high-clicks.com high-clicks2.com highpacts.com hugefries3.com hughers3.com hype-clicks.com jervinse.com keepitng.com kraines3.com lopsrental.lease mecitiris.com mimihin.com minimi36.com minismi2.com moreosin.com motarasag.com motarase.com motometics.com moukse.com munixc.info n4sins.com nerosbin.info neurosise.com nifaji.com norllix.com noun-bug.com nropes.com nu865ci.com nutri6si.com ocvcoins.com pedorc.com piecebin.com plick-click.com pordges.com price-hype.com private-clicks.com probinns.com ranbix.com range4tis.com rap8b55d.com rapibest.com rastipponmkh.com recbi56ni.com redandseven.com sacremots.com saint444.com sanfireman.info sasanos.com seo-clicks6.com serenistin.com side-clicks.com tangodo9.info tes5ci.com travelsagas.com trc-clicks.com tumpiums.com wecuxs.com # Reference: https://twitter.com/1ZRR4H/status/1532305804266721281 # Reference: https://tria.ge/220602-jt1e9ahhel 03c3twpfee5estjovfu2655.com 104wn.com 123dianyingyuan.com 89qp52.com advanceresubeopene.biz aforeignexchangeblog.com akmeetech.com atelierelzaaidar.com autu.cfd azureconsults.com bam-bong.com barmagli.com bchmtn.net blackcreekwatershed.com bm65.xyz bolacorner.com boxberry-my.com clairvoyantbusinesscoach.com corporacioncymaz.com danta.ltd dawonderer.com defiguaranteebonds.com dronelink.xyz e3488.com erentekbilisim.com estudioenzetti.com euroglobalnews.info finance-employers.com gangqinqu123.net iampro-found.com informacion-numero-24-h.site jetskirentaldublin.com kc7.club krdz28.online lepakzaparket.com maisonretraiteprivee.com marumaru240.com matsuomatsuo.com metagwnics.com minioe.com mtzmx.icu mutantapeyachtclubtoken.store people-centeredhr.com pepeksquad2.host pixelkev.xyz primobellaquartz.com rodosmail.xyz sdwmkj.com server4uuss.net test-brew-inc.com theceditpalooza.com thegioigaubong97.site thegurlyboutique.com tj-assets.com tyma.club tzjisheng.com uixray.xyz usaservicedogregistratuon.com vaoiwin.info vcwholeness.com vote4menk.com withoutyoutube.com ycw2009.com yourpamlano.xyz yundtremark.com # Reference: https://www.virustotal.com/gui/file/765cf82aa101df797cecb2d850761713b62450619ec0bcf8e335573b21010104/detection http://103.153.77.138 blogging-news.com bojan-milenkovic.com dispectra.com dzpmzf.club engematec.com fortymall.com grocits.com jfcls.xyz jimsan.com ketoyjugyshop.xyz lexbbc.com milozzo.com polynerdle.com weddingsiteshop.com # Reference: https://tria.ge/220613-lycwvsfdfn 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://tria.ge/220616-ljvhcschdl 5starrentertainment.com 69988.club 8m1id.online affordablebathroomsbyfrank.net angellogordon.com arkdia.xyz atomcapital.net batuhanasut.com cabanatvs.com cactus-aio.com christensonbrothers.com christinesyquia.com dance985.com detectorlifestyle.com doitlive.online dskensho343.xyz dvfdressoutlet.com eventsp.xyz eyetechlabs.com fabianmarin.com fiercefantasyshop.com forge21.xyz freshiestuning.com fzl-fs.com genesisrofprc.xyz globalfrances.com hawkonline.club hdwiz.online hobartiamusic.com hyiptron.com iran-style.com jenaeeaginshair.com korenshop.com lens-experts.com magnetstudios.global mayclaim.com mbljbspro.com milanoineout.com morningvibecoffee.com newleafremodel.com orderjoessteaks.com ourhighlandacres.net oviagrooming.com peopleonhealth.com perabett463.com pokerdominogame.com puzzlelux.com range4tis.com residencialseniorspa.com seelenmedicus144.com sinergiberkaryabersama.com sjczyw.com sjsteinhardt.com skateboardlovers.com sosienna.com stanegroupe.com takeyourshot3500.pro tauikrychy.space tbrme.com turnerverve.quest unitedkingdomvoip.site vertiney.com ysxol.xyz zjins.com # Reference: https://www.virustotal.com/gui/file/01b4a9e7c4479cf0e72a55af192c151b08f96b8244805711dc8980d05f850e56/detection aydenalice.com bodog-review.com chengdubangdao.com elitetoronto.net fashionrongo.com greks33.com humoradvocate.com leon-bet-uz.com marcelhladik.online mobilenotaryconnection.net rbtez7.store rkbet51.xyz shop4scrubs.com thedwordbydh.com worldsriot.com # Reference: https://app.any.run/tasks/11c557a3-87e5-4f70-9254-656cabc5c6f4/ xiaojiaowanwan.com # Reference: https://twitter.com/reecdeep/status/1538897538144690176 # Reference: https://app.any.run/tasks/23e9f82c-8ef4-469f-95e3-a2700ece36e7/ aydaajans.online bigabid.engineering cocopaintings.com comment2020.com ditiya.space fsids20.com gastreatmentinfo.site jzcrjyw.com oficiosdaterra.com plantonio.com propagandefilms.com rusvogue.com sb11w.xyz webdesigntezcan.com xn--rckenknacker-dlb.com yatida.com # Reference: https://tria.ge/220621-y3jlesehb4/behavioral1 2045479233.asia 337742.com a-prime-dogfood.zone allaboutwindow.com alwaysinvestor.com bar-clicks.com betmonde201.com chrisandrewcobo.com cratitonebank.com daftarslothoki.net dhongroom.com direitodigital.net elb-hohenau.com enieria.xyz enlyfist.site entrepreneurdeouf.com eurorecuperisrl.cloud exgps.net eyewearwiki.com financialgurus.net fitness4world.com fullbedroomset.com hausofelviradior.com implyeventos.com j3dqt.xyz julia-wallace.com landviews.art ldyss429a.xyz ledgelougners.com legoscene.com lemonsanver.com lzhaimany.com m5ocy.xyz milihz.xyz mrsxarbitragem.com myofficesoftware360.com nailvivify.com nuianfla.com onlinelab.site oovohealthcare.com picsyaphotography.com powergrand.site prettyfuckingprotected.xyz pth1688.com qinqinpf.com queenasharp.online ralestate.mobi sacredbond.agency satthepgiagoc.com sendi.xyz slotgembira.info squimbot.com stack9.cloud stone-conta-premium.com switchvr.xyz tigerglobal.direct trigenttechnologies.com vaapmi.com vestitiperneonato-online.beauty vikingworks.site wgtstyle.com xuwutv.com xy-evehicle.com yourjeepconcierge.com zychat37.xyz # Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook%20-%2025062022 176bwcx.com 67f5ead1a275.info amsordglobal.com au-techng.com awndka.xyz barq-id.com bhui7.com biznes-poznan24.xyz boscue.com bretholdings.com businedstrack.com cankaoao.com carings.net carrotshelter.com dailycuatudong.com derechoromano.com doca29.site emnopgroup.com energyecuador.net gcpropolis.com gektolicompany.xyz glitzye.com globalepic10x.com goodandperfectgift.com hardwarepicker.tech how-to-learn-languages.net jadacomercializadora.com joselynbaezs.com keiwaseitai.online kinsgtonbrass.com kitabisabelanja.com landliner.taxi lermontov.online liwoo.top mafleursam.com magictvshow.com mayipaimai.com minex-intl.com minijob-duesseldorf.net mybullion.net nasdaq-ex.store nonnydesigns.com perfectingnextstage.com primarole.com purchase614210.com rabeproject.com readoku.net releve.space roshmary.com ryzcn.com serengetifadhions.com shirtgse.online skyglowtech.com sticktogracestudio.com stripe-forecast.com thenextbigtech.net thethoughtgenius.com thevirtualcafe.net titantechmail.com wojiayouxuan.com wordsofweightandlevity.com yatirimtamam.com zjzcmy.net zorbaplus.com zzbb8899.xyz # Reference: https://tria.ge/220626-x3rrcseba7/behavioral1 abbigliamentomedici.com barbararomanow.finance bemo88.xn--6frz82g chisalan.com computercodingclasses.com csnfrs.com erosludi.net fsentimes.com gigiandnatemovie.com icqiangdan.com koincreditunion.com mysupport.space nicegames4u.com promedsecurity.com respectnelda.com sega55.net songlark.xyz theoctopuspress.com trybigbangpromos.com xusenyu.top # Reference: https://www.virustotal.com/gui/file/303bc30a830329084290c40b42cb9700852fd98712ceba40e99318e926658e03/detection accountppl.com adfbingo1971.net aerty.cloud becas-maestrias-ec.com dressusinc.com eternalflamez.com facefoot.net frontpagesweb.net heavydutydiva.com hschanglixj.com ios.run jayagunaaluminium.com klumpave.com lotonmyplate.com morganhertel.com njshoreanalytics.com osmond8421487.xyz tomrings.com weissburkelaw.com # Reference: https://twitter.com/reecdeep/status/1541735626915069954 # Reference: https://app.any.run/tasks/92fd7447-8f6a-41fb-a032-9df926fd49ad/ nxgills.com # Reference: https://www.virustotal.com/gui/ip-address/188.114.96.2/relations ccxqw.net dsjxc.net dwf77.net hbzkz.net hgb2b.net i19lo.net rcttc.net sdbus.net slzsb.net sxlxh.net sz-dz.net # Reference: https://www.virustotal.com/gui/file/5355e8a90f5f1c0499804a00e727e793c889999f7b70c658fdf8da29940a8a16/detection 42627thb203.com alligohorizonprivatelimited.com ankarabahcepeyzaj.com baincot3.com bellemooi.com btc2048.xyz citestaccnt1598424138.com coolcitygroup.com emojiunlocker.com exhibfilmbuying.com kaijoecolors.com kursatyaman.com mbbkulturyayinlari.com microqb.com staywellca.com thc8hemp.com # Reference: https://twitter.com/reecdeep/status/1545378651147042818 # Reference: https://app.any.run/tasks/1652e1ba-153f-4c1a-80fc-5928840ee8f3/ ninoxins.com # Reference: https://blog.talosintelligence.com/2022/07/threat-roundup-0701-0708.html (# Win.Dropper.Remcos-9954770-0) 100shortvideos.com assasa.net augustamobilenotary.net disintar.xyz duckholland.com elanagro.online ezhuilike.com gasurvivalgear.com hayatcevredanismanlik.com hubinvoice.com icarus-soft.com iden3s.com letbeautifyus.com sinibelanja.website takeka.com tematemazo.com timinis23.com unitedoceanlogistics.com vineabank.com waydiscount3.xyz # Reference: https://twitter.com/reecdeep/status/1546419589965389827 # Reference: https://app.any.run/tasks/1a135893-9e18-4a4d-9649-419157a88de6/ sunamiros.com # Reference: https://www.virustotal.com/gui/file/030f42b89811d4a8e5fae006983b4ec62a2f902a05758eec1ed062b1b5347054/detection destaqueregional.net fiat126.info finlandten.xyz fleaimmunity.com fuckjoebiden.info jessicaloewen.com josiemaran-supernatural.com latinfoodtunisia.com office-antenna.com papamamastoel.store statenislandferryhawks.com suddennnnnnnnnnnn11.xyz supremeantivirus.com thefoothold.store think-digital.info ttyk.net vollabi.com # Reference: https://twitter.com/reecdeep/status/1549064064760008704 # Reference: https://app.any.run/tasks/1b40b5cb-f2ca-4171-a749-30be751b317d/ bestselectrics.com # Reference: https://tria.ge/220723-j55jcaddap 94ei6mgy.com agentsheila.com almavivaranch.com andykaufmanisalive.com artbynadiaxel.com ashleyryannestreet.com aylagrey.com bangaloretomysoretaxi.com biaolingroup.com buymistnow.com casaspecialtycoffee.com celebrateocala.com chunqi888.top cie-revolver.com conservativesshop.com delicioushq.com dominiclis.com dongxijiangpin.com downloadmasters.net downtownfamilypharmacy.com dupreportablebuildings.com educaterealestatepodcast.com enjoyablestopnshop.com epiccaremedtraninc.com finanziariaruscelli.com foyfoy.ltd funakelo.com ghjan.com grandesfinanzas.com heygotrip.com hotelspacasino.com houtai12123.club imanicarton.com jimihoodie.com jinyida.xyz kedaimks.com ketoodavoqslim.xyz kiniecta.com koinslot888.tech langeculotte.com littycreationz.com lowesy.club luminousfadel.com maison-colette.com mavenpension.com mujid24s.com nhlove.net noyanlarinternational.com officialcaliyoga.com ownempire.net professionmessaging.com rockbettergear.com secretstation.xyz stairsuppllies.com stake-login.com stipclub.com thtoughthenight.com tilemarkng.com universalbumpkeys.com usreliacares.com wiworwe.xyz wwgge.com www69188q.com xinlanyuan.net yourinsuranceconnection.life # Reference: https://www.virustotal.com/gui/file/ed7cffa33cba2ae44d44f61137d598743a1e9a3c20a66d5a77381e39846ad3be/detection 1264skernave.com abutest.com agrisudparrella.store ayrenhoney.fitness barbacoalosmartinez.com bnmsas.xyz coothohh175-biglobe.xyz info-upgrade.com lartigue-demarbre.com marcaubry-photographe.com pankajkhairnar.com physiciansdigitalservices.com reventeresale.com sabrinasherman.com studiodraagvlak.com swifterrand.com sydneycream.com teeveeshop.com yaseenoliver.com # Reference: https://www.virustotal.com/gui/file/00851f75f4b3386811e5cc2fcbf67b918bd27ea7d71fd84314c46531635881f5/detection asdaservices.com benefitconsultantsny.com cloud-9.tech conticorporations.com cretefam.com dildilli.com discgolfgermany.com earches3.com ecoalgo.xyz educationsavingsaccounts.com freshdesk-japan.com hatteker-us.com itexange.com ktnaward.xyz liangyonxin.com livrosfotograficos.com lovelycontentandmarketing.com newjerseyglass.com pasoroblescahandyman.com picguess.com pilysc.com sapphiremanagment.com servingusveterans.com sketchnfts.com smallbusinessbebefits.com surerxpharmacy.com tacticalgamers.net testferresto.com trendcenter.tech trotapie.com vitale.email xn--zbs99xiw4azst.xn--55qx5d # Reference: https://twitter.com/reecdeep/status/1551888570016845832 dianna36.com # Reference: https://www.virustotal.com/gui/file/a2b73eed60ceba21bd55ef009b0677406e3b7af75fca15f83c9a2ce7082ef783/detection 1one2three.com absasha.com angeleah.online cqubit.com elixefx.com gratitudeimpactweek.com integrity-roofers.com jswzq.com jzjiayu.com personalloginuk.com petalpetal.net redsea-ksa.com successfulsoultionworks.com tcgfairy.com use-records.com wizardrozin.com # Reference: https://twitter.com/reecdeep/status/1554130081500598273 # Reference: https://app.any.run/tasks/5657e71e-32dc-44f1-a8b6-dc747bf4c531/ vinpilates.com # Reference: https://www.virustotal.com/gui/file/1e7e19ce21214b78b2c90a6d440db777bb3ce42bb68924d592678a6fc0fdd515/detection sinibelanja.website # Reference: https://twitter.com/JAMESWT_MHT/status/1555445680797270016 # Reference: https://www.virustotal.com/gui/file/c31b17eb7e69da771f0ee2230922622a94e1d27cfea1ff556615e4f27104340a/detection buggingin.com cocoaslimparati.store dohsrdmoney.com lendana.net preppdev.net stockdalecapital.us wiltongm.com # Reference: https://www.virustotal.com/gui/file/009e6b48b7d9b2a802d6e831138b1e55c4390861c123287e134bbc21f8a6e225/detection 3beadsbytj.com columbiaathleticboosters.com congtycoessentials.net dusubiqiqijem.xyz eroerofuck.com holoique.com independienteatleticclub.com iselotech.com lixinjishaiwang.com maisons-france-confort-mp.com mewydyrqd.xyz oceanprimesanfrancisco.com officialjoyslots.com rincondelvinologo.com rummypepper.com sem4seo.com spencersigmon.xyz # Reference: https://tria.ge/220809-pq62hsacfq 1to1vision.com 1weekweightloss.com 247homebet.com 883996.xyz accsforyou.com ahwconsultinggroup.com aisopus.com alakazam.wtf alberguedawebb.makeup amqzoqn.com arenaofdeath.xyz arinastepanova.site baicorsprayinsulation.com betpipo31.com coldonafridaynight.info decoratedpumpkins.com doiqualify.info donghwacos.com ducatilastvegas.com eye-catcher.site famedhelium.online gankotin.online gdgsjl.com gottagetting.com holyfamilysports.com juuwa777.com lastingketohealthtechdaily.com marleybrat.website metaverseworkshop.online milestoninternet.com myryanhair.com nelsonwldwide.com nftproperties.info ngshddq.com nikitasbarandbistro.com nobelpawtrait.com nonurseleftbehind.net novelty.mobi osakakansaiexpo2025.com peachbebe.com potosky.com pronodes.pro qhsjcn.com quadrants.site ragznmops.com ready4rishi.club recambiodeventanas.com reform-ookura.com roadday.sa.com rotate-mech.com saghiparhamdds.com saiyczx.com satserdova.com sigmaformacao.com subngon98.online sucrearret.pro textformattr.com thekagaz.com tipiministries.com uavhiring.com vo3t1n1pt.com weareplanetprotectors.com whoisjohnmoney.com wicklesschrista.online zhuokuosm.com # Reference: https://twitter.com/1ZRR4H/status/1557893313566588928 158187.com 659368.xyz 7553000.com amerchem.net esandcraic.com greenrosetarot.com ideardonot.top lilsdealsforreals.com loan072.ltd ninenct.store trecobat.net # Reference: https://twitter.com/reecdeep/status/1557380445758701570 gilalspence.com # Reference: https://twitter.com/reecdeep/status/1559483912249696256 # Reference: https://app.any.run/tasks/3f879881-5093-4f45-b8cd-3e8535782377/ firtoky.online # Reference: https://www.virustotal.com/gui/file/3500006bb33536ef2379f76afe8d70f57141c92025a0c6c14e80fba4a7a6bd9a/detection gbd.life 896851.com artovus.com bense003.xyz carpetlandcolortileflint.com cherie-clinique.com clinicadentalvelinta.com eventrewards.site evershedsutherlands.com filmproduction.management gdexc.com gshund.com invetnables.com mqttradar.xyz rettar.net solaranlagen-forum.com sussdmortgages.com teesta.xyz teklcin.online thecovefishcamp.com trainingmagazineme.com tvlido.com underneathstardoll.com usdcmeta.xyz zilinsky.taxi # Reference: https://www.joesandbox.com/analysis/691056?idtype=analysisid#iocs fabstaging.xyz jxhckt.com my1245.com # Reference: https://tria.ge/220825-d9hmgsgac5/behavioral1 0016.site aaa4bn.com aaateamcare.com akanay.site alg-maintenance-hub.com azino777club4.xyz blogthongthai.com caregram.biz circulodeltrastierro.com cyberstratosllc.com digitalshui.com enriquepimentel.site healthseg.com hostzones.co.uk ilkoyhareketi.net iuxinnian.com johnnellbragg.com karmashakti.com kotan1992.com mchacks.pro mensfitnesstalk.com modalsayabcde.xyz online-mommyhanamy.com phawaysafe.com piobellas.com reggaetonmusic-au.site rentalps4.com royalsprospects.com sleepcouncil.co.uk socialpigeon.co.uk sportask.org stake-dao.org stratonstake.com thecropok.com translationtools-au.site uswildfire.info # Reference: https://www.virustotal.com/gui/file/70c90f2d3d41ea0122bdfb814294e873c963621a093faefeedd2ce5e025b886a/detection alwrists.com baremaster.online cesarjunaro.com ebtl.wtf howdyart.com hunn.pro jam-nins.com kijangjantan.tech kuxita.xyz leslainesdumouchon.com mycto.today neatneighborncclean.com otnmp.cfd slot999.site tizzbizz.com wanligui.com xctech.world # Reference: https://tria.ge/220824-wgaehshacq 591easy.net 809dispatchlogllc.com aghype.site andm2022.com arlocalhost.online barrystanner.com bautrocknung.xyz blog-host.online bloghealthandbeauty.com blossomsjb.co.uk canlisohbetburada.xyz carpetcleaningmasterclass.co.uk chandu4u.com chukwuebukastanley.com cointwovte.com colibriads.com congcunggibng.net cosmeticsz.com crawfordcastle.com cynitic.co.uk cyuugakukyoushi.com czsaj.com dreamsmaking.com ecologistique.co.uk electricridesboise.com everyverse.net foodmie.com freshnhellish.com goodstaygetaway.co.uk heveany.com hikz.net hiro138.xyz in-vision.systems jantdeposu.online jeniusbank.co.uk kiaradininten.com kingalfredmotorservices.co.uk klmleisuretours.com kryptonapps.com kswautobot.com kuboshiori.net londonphotoworkshops.co.uk mdcsweb.com nickatkeson.com nilas.fr oilgascity.com onlineweed.xyz quique.website reno-easycash.com salamanderfire.co.uk salisburypride.co.uk savannapropertyservices.co.uk silverdropsofficial.com slboxing.co.uk stickybuttsbbq.com streetbriefs.com sussexaestheticdentist.co.uk sygbitpay.com teamen.tech thequeenclean.store vcel.co.uk viemon.online whitehawkproperties.com xuemanzi.net zgcjjy.com # Reference: https://twitter.com/reecdeep/status/1564556804213932035 # Reference: https://app.any.run/tasks/14ee6fed-74a4-4630-8710-75685bdb85b9/ baintsras.com # Reference: https://twitter.com/JAMESWT_MHT/status/1564500423792271361 # Reference: https://tria.ge/220829-qk3mkshgbp/behavioral1 digitalsaja.com elev8comms.com futurelightiq.com hicvxzaw.online imikimi.nl jeannadonavocat.com nortonfree.net oceanrealtygroup.com sagalana.info santiao123.xyz secureservice.app # Reference: https://www.virustotal.com/gui/file/6d0df288f02f7dad22fb9ea7ad1d07deeba5a37c540c552aa399da5eb7fe82e7/detection 272.group 6e1etxpnne5quxlnalk4226.com 7crownsco.com adetg.xyz anderson-spanien.com bedsruz.com chinabest-hp.com claria.ca frankasah-holdings.com jklaesch.com littlelantern.life myvfxpr.com redsuri.com therequisites.com transit1stbd.com warecomb.com worldking.xyz yiye10.xyz # Reference: https://twitter.com/ni_fi_70/status/1572534721091080192 cmnops.com # Reference: https://tria.ge/220907-hvyglsbcb9 0755aite.net 24casinoelit.com 4tlracing.com 552northvictoria.com 77herbs.com 909injured.com 9486.site 99vin.global abizar.xyz abtbank.online acmumzo.info adagihlina.xyz agendogliodoric.com aliceseagerfitness.com autoaccessoriesa-z.com aynmjy.com b7dd192.com baggreet.com bctugala.com blanket.sbs brazilianwives.com bybala.com cadismimil.xyz camperbuysell.com chicken-shack.com clanfuller.com danny-mickey.space echafa.com eevakoskela.info emprendeahora.pro enethome.info futureclosers.com giannamichaelsxxx.com hampyko.online hlcp5533.com ingspira.com itriyatci.com jacksoncafepaola.com jacobdrop.xyz johncaruso.online jollegratta.xyz kaamla.com lovecollective.church lsqcys.com manalapanhome.com marvpn.tech mtechvn.site ntscleaning.com okchurch.info orket.store pc-x.net pemdescijengkol.com pnc05secure.com radiovivaitalia.com sandboxwp.site sanoba.site se4.top teluguclips.com thedatingfunda.com tilastudios.biz toplinkstorage.app tradecontractortraining.com voicetall.com webteori.com # Reference: https://github.com/0xToxin/Malware-IOCs/blob/main/Formbook/Formbook-%2013072022 1ggn.com 778189.com abeylele.com abna.international acoinmintexpert.com americangaslighter.com app-youhodler.site appackle.com atom-ontherox.com baikhati777.xyz blountfirm.online boardinghouses.net boostmedia.agency brainwellnesssolutions.com canineconquest.com check-info-asked.com classicscase.com creatioconsultants.com cutiemind.com d1g1tal-loops.com dharvest24.biz dozivljajskigozdpohorje.com dx-ss.com edtechcreativity.com eleganse-home.online englishzones.com evergreeneq.com fbcpear.land fromvalleytosummit.com hayebenefits.com hollandmulchus.com jju21.com johndivine.com jouw-server.online kasirselasarbrbd.com kingoflogisticsgh.info libretypumps.com lovemya.xyz mhcbrokers.com moldshirt.net nailonika.online nationallrentacar.com nbaonlineus.com ofertascapital.com pacificoakllc.com parkwhiteplainss.com prerising.com printthisstudios.com roadsideassistanceillinois.info securitycamera-at-2022.life shiyoushuzhi.com szovegmuhely.com terrariaserverhosting.com theknightstemplar.global titansfitnessapparel.net tixdyweb.com tongkhodentrangtri.com trading-cracks.com troyleedesign.store turkiyedenalmanyayanakliyat.com worldwidedatazehn.net xn--9l4b93h4ub.com yeslom.xyz ywwpjqd.com # Reference: https://twitter.com/tosscoinwitcher/status/1546717291726794752 # Reference: https://tria.ge/220712-e41rjsdfb4/behavioral1 2620farragutave.com 304windmillcanyon.com acinstallationamc.services arielchristmann.com audiodobyps5.com baguasan.com bertusmabukyuks.xyz bijiuche.com businessdirectoryshopify.com cabolinansthingsandmore.com campkingind.com captainmun.com christinasharpe.com claraeygor.com clarencegresham.site cownedes.com craigbjones.com creencia.xyz dxcrmbase.com emeryhistory.com essay-forsale.com fantasydrift.net flashtte.com foodresorts.com fotografia360.agency freewinupdate.com geeminee.com glootlea.com godriver360.com governmentsscheme.com gsy56.com isaiahfunnelcakes.com justmakemoney.xyz jxdqyx.com krav61.xyz laononggushi.com le0hp8.xyz ligeria-production.net lovetreecafe.com lowcfs.online lowsugar.online luxxagency.com maitresalanomobikisi.com mcleansit.com morevisibilityagency.net nyhhz.com odulinsaat.com okhuk.com pherop.com piauipet.store platinumflooringaustralia.com poker-star-top-casino.net qrongsaid.com rabbids-party-of-legends.com rapiturs.com read4achange.com salinasresorts.com seattlebusinessconsultants.com studiohartdesign.com szqnbmrd.com thebestlifeapp.com wbs-ekkyo-ec.com web3sex.site weboughtavideostore.com yayasansetara.com # Reference: https://www.virustotal.com/gui/file/9599673090c496dffd6feb789338325421921d43579ace8a07acb3ea3ce6eb7a/detection advancedeventsystemsd.com anthonyeditedthis.com farcrysis.net imikimi.nl js088850.com lloyd.technology manruiwangd.com moralincense.directory nawyh.space nortonfree.net prunkvoll.com puredelataiga.xyz splnilud.xyz superiorsprayfoam.net tanaadd.info # Reference: https://tria.ge/220928-nq5m1sghaj anquyebt.com # Reference: https://tria.ge/220916-sgqjysbgdr fcektsy.top iyiqian.com uefhkice.xyz xxhufdc.top # Reference: https://twitter.com/pollo290987/status/1576940825585414144 mmakwakingjajasalmghandnaiojamixicolqadaraz.s3.sa-east-1.amazonaws.com # Reference: https://www.virustotal.com/gui/file/d19b7eea7766c49218f7335e263b5c8f7cbba26ac69118ff5f57de531238ce9f/detection 124767.com 3d085.com 5huae.com 6528876.com 68ceyoc0.com 79179.org amphionoy.com apkmodtex.com arcadecase.com arquitectosenzapopan.com aypakagit.com bestwomenclothing.xyz bibercik.xyz bridgerakefet.com bruceforceconsulting.com chaumontel.info cynaxa.xyz dgfunnyapparel.com diamondconsultingsxm.com francisartclub.com fuzzyvoting.online hellenwallpaper.site hogsmeade.online karismaoptikal.com katsuyadaisuko.com kgjft.com kuschelwinter.org lestoreadores.online marianaediogo2022.com martin-goebel.com mccartinconstruction.com naaririelnews.site oboybeygomlek.online payment5991350.xyz prayonfire.com salutevolutiva.com savinginflorida.com spreparadas.com supportpet.xyz thehotelnomads.com ufa1.info unitedlinguas.com village700.com yeymp.com ytaohao.com zen-shin.org zeron1autosoft.info zstwai.com # Reference: https://www.virustotal.com/gui/file/07febd49f76153c48a0a4f9803e4e62fa589413c99280f0838b73f3e0260e713/detection 2ndoss.info ace1inc.com babehou.com camwoobats.com coviders19.com ebay1111.com elclubswinger.com evargasdev.com qatib.com shareourjesus.com stanleywatches.com ttxxremote.icu wearetwo-a.com # Reference: https://twitter.com/reecdeep/status/1578299118761697280 negerbajs.info # Reference: https://www.virustotal.com/gui/file/00f848b905c8530564a150e1b824db06990f4dccd5cb65284967632e6f2b0660/detection 3sixtypano.com 915783.com alergiapediatrica.net bahrain-lottery.com blinkcommerce.tech bmstech.us desentupidorasuperhidro.com hipillrvacem.xyz isaidyes.online luontoretket.net mayorgabutler.com oort.tech orientdeliveryservices.com pirkanlattia.info slimscoop.com studiomia.store tesla-bags.com thenorthside.online tjwya.com ukuchic.com whatsonpaxos.com # Reference: https://app.any.run/tasks/c2a28d3b-0618-4d02-b82f-790b6518d656/ bbm55.com boatpile.com chemistryramasastry.com clevermarket.pro dubaidesertsafarihub.com e8a36zg.xyz fleetcsr.co.uk freerubuxnoscamlol.com grouppoprius.info jobsfv.com lips-one.top radioequipment-au.site relmusik.com testbank-textbook.com toialsat.online traccioncyl.com turkuazmaden.com # Reference: https://tria.ge/220926-nmebnabgfl/behavioral1 carflippingschool.com futurelightiq.com helpsquads.info kanallipim.com linknhacai11bet.xyz muellerit.net pimentdoc.com promociones-ec.com prunkvoll.com sagalana.info scienceonline-ca.site sindtserj.org stellarcivitasschool.com stocktecnovisioncr.com supportnummerbelgie.com # Reference: https://www.virustotal.com/gui/file/2e6b14e41b3f871355635c7427cb1531a9b61a37e137f90a590d21eab7648f2f/detection amssupermercados.com anastasiavekselis.com asda6.com centralpats.co.uk digitalsaja.com fridcentral.com halfpriceornothing.com imikimi.nl joynd.xyz kriptosit.com qrupeocajarual.com robotdienmayvt.com runthusiast.com sapancabungalovafra.xyz spekinkantaa.xyz traumaburn.com # Reference: https://twitter.com/pmmkowalczyk/status/1572532158543306758 # Reference: https://www.virustotal.com/gui/file/09e5f2f0a838ed840a20d428dd17517b8f9747a09774ecc0f2e3b6d0d9e5f7ac/detection adorantha.com banhmitayho.com errorsitsen.com fedefarmatour.online fofinhaslacos.com fromtheearth.net garzaroofing.com gogojackmin.com googleus.xyz hassankalip.com hghaofang.com htckasauli.com ideonaut.org liveasaveyshopper.com nft-mktg.com njclosingdocs.com palacewazyc.xyz partnermdg.com polevoyton.store rabokala.com sadaffstone.com tinybabyhooves.com tudodeliciareceitas.com vpnyjscloud.site vymenanemovitosti.store # Reference: https://app.any.run/tasks/77d590ec-4474-4962-915f-1a387d00b5da/ 37300.uk 8ug4as.icu 941zhe.com airbnbtransfers.com allprocleanouts.com bendcollegeadvisor.com bluebirdbuyers.com bookkeepingdeerfield.com casinorates.online classicmenstore.com diacute.com erenortopedi.com feelfeminineagain.com iaqieqq.com lunarportal.space meclishaber.xyz naruot.xyz nrnursery.com nurse-jobs-in-us-35896.com padelfaculty.com seedstockersthailand.com sipsterbyananeke.com skymagickey.com thaigeneratortg.com vixensgolfcarts.com xn--osmaniyeiek-t9ab.online # Reference: https://www.virustotal.com/gui/file/069b2c8f0b66e3e32f76b719ee0fbdef37a602ebbfcb0d36c9b51cc5e0516779/detection abakwsm.org capta-selecta.com cccoaa.com d5innovote.com enterprisetownship.org followyourbliss.xyz hunpinji.com illumihotti.com jillio.rest location-site.com monamjewelry.com nhacaiwanboviet.xyz reddassair.xyz sbarenecessities.info soill.jp splendidrelax.com tedxutsc.com tslender.com # Reference: https://tria.ge/220907-jgdqqabcg2/behavioral2 6vrueh.xyz atama.engineering centralpats.co.uk christalindberg.com minneapolisuniversity.com oplandtravels.com paym40.online unitedhollywoodtv.com # Reference: https://twitter.com/reecdeep/status/1582700811163160577 # Reference: https://app.any.run/tasks/fcb30d67-81de-47db-a70c-119ea74f8813/ artglass.shop carymel.xyz f1-ticket.com familykitchen.ch justremortgage.com kuvips77.click livinghopedoula.com mad-cyborgs.com patricklanding.com paulmontecalvo.com phootka.ru ranchomeg.com seatandfeel.com theron-resource-group.com westinotion.tech xn--brger-geld-9db.online # Reference: https://www.virustotal.com/gui/file/0ce34548a6c082e497ae568cec71b6425526e626c7211ba3d82e5c0c3c4def17/detection almihdar.com arzeshjoo.online bet365star.online c-ver-huawei.net cartieronline.club charlyanalytics.com chelanweddingvideographer.com circularsmart.city correoversoi.quest diet-delivered.com eastportapts.com fernandocarretero.com fourjmedia.com gabrieliglesiasorlando.com globalparavarfoundation.com hbwstg.com healthylifefit.com hkljq.com hoodratsforum.com intocaveis.bet khpet.xyz lvhomeinspectors.com lvlhomesolutions.com margondo.com namesaketransport.com networkporkwd.xyz onlinedelivery.biz persiantrips.travel rabenteec.com rebles45.com santiago-services.com scientistinbusiness.com sebasfernandezart.com sha1401100.com shojicorpadvisory.com takipdiyari.com tonaprawdeniesamowite.xyz tylesri.xyz unisifik.com web-devph.net wellspringwriter.com xn--kws549fp3p.com yakinototamir.com yanposta.com zooplus.info # Reference: https://www.virustotal.com/gui/file/3b5f6e720bd764199412694821748c78cc1197f33470921f173b745478e07523/detection sorbo-balance.xyz voques-tfr.xyz # Reference: https://www.virustotal.com/gui/file/cbf93093cf6fb13bbf0f47f896f5527e0de585923dfbc86f9a4a15e961183b6d/detection alvis.one carmana.store floridaindianrivergeoves.com growupmarketingservices.com gwnv.link infoepic.info jurgenremmerie.com lesyeuxdanslespoches.com magnoliabymr.com norbercik.online nuvidamedspa.com ogurecsbatvoi-7.online optitude.finance pingacx757.com suratdimond.com taiguszab.online # Reference: https://twitter.com/reecdeep/status/1584499004951302144 # Reference: https://app.any.run/tasks/da3eded9-e734-4d0a-ab91-9cf504e38f54/ 46iot.com ceraqr.com g5i9a0.cyou greekite.online kaibi20.work supremereiki.com # Reference: https://app.any.run/tasks/58b9cfe7-5322-4795-877c-04ba8dbb7435/ 16ardagh.com 3444zz.com coffeepayment.com innovativedbs.online masset.paris minkun.online nutrizionista.app qdmzx.com odr3wo.com picklewall.net scrumcopilot.com sequiratione.click shopswayze.com simplnergy.com soldadelivery.com # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-9-to-september-16/ (# Win.Dropper.LokiBot-9969312-0) 6298vip15.com 825766.com 998899.lc aceyourexams.org agenlexispkr.xyz awesomegih.net ct666666.com eminefendipsikoloji.xyz european-resilience.org famallcameroon.com goinuffies.com grupoprius.com gurilab.com jeuxjetx.fr kevinandboots.com mjmedia.online nineodesign.com randrconstruction.site solutionsdr.website strcktunkea.xyz tbwtaobao.org wettenunseam.xyz # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.NetWire-9970213-0) alpenfieber-events.com banchers.com beachloungespa.com bobijnvidit.xyz cacconsults.com drivemytrains.xyz fdupcoffee.com fitnesshubus.com homecrowds.net imbtucan.site intelsearchtech.com kettlekingz.co.uk kigif-indonesia.com leeanacosta.com meditgaming.store momotou.xyz northpierangling.info olympushotel.xyz searchnewsmax.com supera-digital.com thespecialtstore.com tricon.info wearestallions.com xn--agroisleos-09a.com # Reference: https://blog.talosintelligence.com/threat-roundup-for-september-16-to-september-23/ (# Win.Dropper.Formbook-9970817-0) fftblogs.com icishopping.com junaidsubhani.tech lanyuelou.com locallywhitstable.co.uk mail.boyyem.com.tr mooreandsonsak.net # Reference: https://blog.talosintelligence.com/threat-roundup-1021-1028-2/ (# Win.Dropper.Nanocore-9975783-0) halloweenoncentral2.com klodifiks.space msk-kadril.store thicmewtwopics.com threadandcotton.com xinhucj.com # Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.Nanocore-9976516-0) 3egcfl.cyou 8065yp.com azalpay.site bbobbo.one blast4me.com cacconsults.com co-gpco.com confurn.net duenorthrm.com duetpbr.com fabricsandfashion.com fbo.app fistfulofeuros.org ndppoc.info nyhedsbrev671.shop onlyonesolutions.com stjohnzone6.com thespecialtstore.com tigermedlagroup.com www1111cpw.com xn--agroisleos-09a.com # Reference: https://blog.talosintelligence.com/threat-roundup-1028-1104/ (# Win.Dropper.NetWire-9976531-0) agencybuilderforum.com alfrednelson.com blkdenim.com blossomenterpriseuganda.com communityinsuranceut.com dotalogy.com elegancescent.com movementspecialistslv.com onurtel.com paintedinafrica.com qqbokep.com rainbowbanks.com rubenvdsande.com socia1security.net thegolfclubatcirclec.com tqiawy.xyz # Reference: https://www.virustotal.com/gui/file/673883ceb7adf30ad980e5e51b7515414becba3b5f6b96068dc4d35b092799fe/detection demixafrica.com fiscalfido.online hnsmhbkj.com ivcckx.hair lenderark.com m3in76.cyou sathunter.site snzbx.com # Reference: https://www.virustotal.com/gui/file/081bf8a1ffc276c44fdd2ee9ea841848324df601dfb8ea53ca7f614f5e39bb21/detection 209648.com 2594.faith 446owkhvtuad.xyz 8410506.com asatimes.com backiptv.com brewsolutions.net cowsupportcover.xyz desertcleanpro.com hived.xyz hopeisarainbow.xyz intellectuel-balance.xyz jackiekate.xyz jernieswritingcorner.com kingdomwarrior.xyz neorevolution.ltd onlyhamster.com proofmoonbird.xyz savage-street-shirts-843.com scoutsilverlake.com seekerblogs.com shlycl.com tiltedseven.com usnorthsideparts.com # Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection cafes-lyovel.com com-421.info cwtproject.com defireti.com delcostudiola.com dentalimplantspracticesbcan.com dometodd.com dothis.website genesisgomkch.xyz hantieluliao.com hokashoesingapore.com hotmanplayid.net iphone13.space ironweedaudio.com knapsack.graphics marina4bunbury.com maryhillsubdivision.com mashaalfashion.com metagforce.club nropes.com onestory-book.com rarityswap.com remembergary.com shoeloans.com sydneycarsales.net szqhkl.com thecalminglounge.com unionplusgiveaway.com vdcrnw.com viaggidafare.com vintagekatherine.biz # Reference: https://www.virustotal.com/gui/file/7e4c62f05f269c89ddba4bfbde605803406b779429bf9a1cd08ae57967edd2fa/detection 000006138.com 5092377.com a-snag-tokei-kaitori.com agcompanion.com aifconference.com ardtalscase.com bigrockhuntingpreserve.com campgreencove.com constructiongst.com designerinfotech.com efeturozemniyet.com electricsemiloans.com foremostbookkeeping.com ganitvigyan.com happinesssangha.com hcr.store hongyanwulei.com ihrorg.com kosodate-tiger.com l8e9gr.xyz loudbodies.info mariafonsecafreitas.com mayascleanservices.com micahlinacero.com microw0rker.com murata.life mysitetutorial.com norsgaard.net nusires.com penelope.team pertlines.com prmainey.com qxu0l1pgl9jm1.xyz renovacg.com skinbid.pro sodapins.com sofanemphuyen.com solfuls.com sophrologuemontevrain77.com syzbf32.xyz the-roel.com tur-advocates.com tuvistaing.com verdure720.com vistadocs.com vvv223.com wwwfreemovies2021.com yanpoake.com zamanscorner.com zaqv40.xyz # Reference: https://www.virustotal.com/gui/file/c17e80bdd62f9993e1894ffb7d0a47bacf1d720667935ed8468dcb87addaa76f/detection 845562.space 882668.xyz airshiftvr.com bzness.store clubfreak.net dmsbrand.com estherakademie.com excelbar.com fmnr.xyz gohamaru.com havexub.online houseofgibraltar.com likesalere.site little-verons.com livecams.quest majahfit.com marcanesas.com masterpieceofgongyi.top metavrse.events millennialpayments.com mint-saintxdmon.com my-loyola.com nnnn.company sharedknowledgehub.com shells-logistics.com shop-clock.online takebackourstreets.info thefoxsmith.com thekable.store unitedgroundworks.com ymgmt.xyz # Reference: https://twitter.com/reecdeep/status/1592113890241937408 # Reference: https://app.any.run/tasks/3ffb4e53-6523-4123-a968-cbded3882bc7/ 10555ff.com 52012f.com 882201.com 9j4.net aliatransandlogistics.com bidolupartner.xyz creatednow.com cremas.store dealsgolf.com drenkol.xyz esmemariang.com evanwoosley-reed.com ghv0656.com hrbyky.com kghbjx.xyz londonpapershop.com medbump.online omegabotics.com pho-enix.online scbjams.com shxmnykj.com valuemetamorphosis.com wlchsl.com # Reference: https://www.virustotal.com/gui/file/2ad6796c2512bf0ae919a777b01a7f160013b9f70023cdc02b362aed25b904ab/detection 1an2kdo.com agropecuaria-hsr.com besukhateens.com burpbrothers.com cocoone.club crossexpresslogistics.com davidmcquinn.net disctheart.com elkelaadessraghnainvest.com fibverse.com houm.design iskconmahipalpur.com jakubholesinsky.com joia-data.com kelxim.xyz mentorsforladies.com moonsandviewsbyemd.com nobletheories.com olga-link.com ourdailystories.com thesis-boosters.com wskshopping.site # Reference: https://www.virustotal.com/gui/file/009a9784dc899205aa987fdefee13129d223879d65903d82c2f3a6a4f144e0a8/detection 3533callegavanzo.com 3d-mod.com ahmedo.ch americahaseverything.com braintrainingcoaching.com cagadmin.com ccgszj.com houmenmarket.com iamme-label.com multimediapages.com primeworkspace.net puncvite.live saintmarychurchec.org senhongtea.online slebuild.com verywellcasino10.com # Reference: https://www.virustotal.com/gui/file/02099eff8c8367527b831448f397741f49f34ee22d581b7a7776755fe3479e94/detection 2326285.com aireandco.com betaber.store bronhr.com casinox-ki.xyz essentiaschool.com getceylon.com goldenagemininggroup.com gsolartech.com lawsonvineyards.com lzty188.com maccaverns.com mrbinbags.com newstz.online primacosta.com scienf.com simaanchalkhabar.press stampedzhane.com thepediatricianskitchen.com thundervetclinic.com tistinstitute.com vizeciyim.com www2823s.net # Reference: https://www.virustotal.com/gui/file/1ae4b15d714b9a62bb44d45e610cadacb50115b686c993ed650ff703452e8519/detection 7ccoffee.com 8499162.xyz bdcdamper.com cams.games cicelyvanstraten.com cosmoinfinity.com dakaliuxue.com gardenofeden.vip gustaupdd.com habusty.site interfacearea.com interschoolcarnival.com jellofnation.net meta-urbanvr.com nortonlily.com pariomemlak.com peastar.net stable-algorithm.com tomatolemonapple.fun unselfconsciousnes45s.sbs wzkazzis.site wzmylabel.com zippycoupon.com # Reference: https://www.virustotal.com/gui/file/002c72c9f9823d128c815a8f752a8fbcbd7f52bc94440988e8b70ca0491e171c/detection 6py.xyz barigoodlivingvsa.com bluedotair.com bxtrace.online cvelocity.com entourageaid.com forkmylifellc.com goldenknights.systems groundbreakcoalition.net guttercatmint.xyz iidoag.xyz ionclicks.com lemonshopee.com mariolagardner.com mbossefootballclubacademy.net mesinjilid-lempanas.com metavsarena.com rentsalot.com sungardcapital.com # Reference: https://twitter.com/reecdeep/status/1601194626089906177 # Reference: https://app.any.run/tasks/1aab9aa2-e07c-40a4-b7a6-46212efec881/ 700544.com amspustaka.com bookmygennie.com cscvlehelp.com dailyheraldresearch.com davidemarone.com frwqc.com gmrsnodes.com lee-perez.com new-thinking.digital newpublictransit.com oonrreward.xyz porggiret.site publickit.website spirituallyzen.com tobewell.store tommy57.shop ybkos.link # Reference: https://www.virustotal.com/gui/file/7857362e481c6630f18d052274a1ddd18ea1ed0d910f220ed50dca32f5960964/detection 41829.site abbyfaith.com belleriacortland.com blocksholding.net casa-gomez.com dorismart.online equus-creative.com farawayflessner.com faylike.com fisharinvastmnts.com kaity.site karengillen.com kungquer.com meda-services.com midtowndistrictsantafe.info nakamu.online nathansproperty.com nft-quantum.online niveaguide.com nstsuccess.com nthanisolutions.com oddsonor.com poweranalytics.site powerhandsbypowerfit.com riccardoolivier.com rmchomeloan.center sahityanepal.com scentsibleliving.com sensing.rest shotblastwearingparts.com streettreatsicecreamtruck.com suthworld.com the-bitindexprime.info tyfinck.com virginiavoyager.com xeome.co xn--72c9at8ec1l.com xn--v9s.club # Reference: https://www.virustotal.com/gui/ip-address/67.223.117.3/relations achivego.site ariseplay.store domight.live dorismart.online martfind.online netinseg.website notbokin.online paymallmart.info ringdrive.website wordybag.online # Reference: https://www.virustotal.com/gui/file/0da037449078eb28dffcd95733769019ee21831ac82b12d845fb051be22b33ec/detection 123387lx.com 1960lawn.com 8181yd.com aflambooks.com alexito.space allinfobd24.com aquaflor.online augustacrim.com bancopec.com batrainingstudio.com bestplant.xyz comptechs2000.com conationcrossing.com douvip303.com expressingunderst.store greatbayhme.com gskpop.com gunwicam.com hirevirtualexperts.com kilthiredirect.com kokofleks.store lesbianparadise.com livingessencewater.com longlakehomesales.com margaritavillemelbourne.com masterstouchautomotive.com mengabarkan.online mhw44.xyz mickeysmotors.com minifootball-promogive.com mischianti.com newtech25.com oandazx86.xyz originophthalmics.com podiatrybroker.com prolificgraph.com putnamob.com qiyepin.com referto-online.com rfzjsb.com tabvern.com undangannikahku.xyz unlimitedlyfestylez.com woningkeuren.com xn--arbetslivsaktren-ywb.com xn--unww24c.xn--czru2d xolegal.com # Reference: https://twitter.com/JAMESWT_MHT/status/1603068902367719424 # Reference: https://www.virustotal.com/gui/file/f263a1f2233076c952f5dd01e57b8b3942f24697745b1c19f52e2c97837f9f10/detection columbuscasino1.com fencemac.com loudesios.com microwebtfm.online nsowarning.site takedetails.com # Reference: https://www.virustotal.com/gui/file/18f31ac2d71ac144e713f11c2fdd14391962af4b0e77192d3e790a36aeae125d/detection 1404-123eglinton.com aimir66.com akashicrypto.com artisticintercessor.com bestnetworkcabling.com bow-navi.com coalmanses.com elections-development.net hollistergoodvibras.com libertadmadrid.com mmamixedmindsart.com olgalirabusiness.com radhakrishnavrindavan.com sososo168.com unfinibeats.com ushopnd.com watchonlineplay.xyz /xx_cloudprotect/winlogon.exe /xx_cloudprotect/ # Reference: https://www.virustotal.com/gui/file/02bdbd4777fc54081f239ce8936bb56d899ec58fe61437875f09227a55a74920/detection apartamentoslaencantada.com bingser.space blast4me.com co-gpco.com ddstennessee.com digigold.info dronebazar.com helfeb.online homedecorsuppliers.com magicgrowthproducts.com miamibeachwateradventures.com minimaddie.com qifengsuo.com rafiqsiregar.com ragnallhess.com restorecodes.website sunnyislesgardens.com tigermedlagroup.com tunneldutransit.com veirdmusic.com xixi-s-inc.club # Reference: https://www.virustotal.com/gui/file/e66a017fdb8d050f8497d367ce1c3cb02a5d6c6bcbf7f35ce11daf8969b8495d/detection afiliadosilva.com alrayangroups.com bigbet2298.com brkhot.top bsnguyenhuunam.com createdbybonk.com edison-press.com fiitnutr.com georgemanuel.com greendiamond.pw hoshikoblog1.com jtbfunnels.xyz killeendirectconnection.com kitsusimplex.com liaquatsibtian.com metalzj.quest millionaireproducers.academy paehdfdtrujdfhs.xyz pieko.net qatarstyleart.com ryanmurazik.icu straforkutu.online sz-videocom.com thankful.love vanillanoir.com xoarin.online yukselfirca.com # Misc. 111116138.com 222226138.com 444446138.com 555556138.com 613800000.com 613833333.com 613855555.com 613866666.com 613877777.com 6298vip17.com 6298vip18.com 666666138.com 777776138.com 8060yp.com 8062yp.com bincryr.space eeeee6138.com efeturonline.com efeturonline.net efeturozemniyet.net electricsemiloan.com fffff6138.com healthcarereport24.com hhhhh6138.com jetxslot.fr jokins-gos.space lislemusique.com lllll6138.com primarycontract.com rfdnewsnet.com wshvgazette.com wzfmnewsnet.com xn--efeturzemniyet-0pb.net xn--zemniyet-m4a.com yyyyy6138.com zoey.team # Reference: https://twitter.com/MalwarePotato/status/1612764382429351939 # Reference: https://www.virustotal.com/gui/file/065bfe7258ac4eb13d48c8db0da681c32448bbcb96a0e8a80a692a61ba25c18c/detection 19t221013d.tokyo 85188jx.com afterdarksocial.club ap2tsdaily.com automotiveparts-store.com brennancorps.info chicashentai.com courdak.info eufidelizo.com foxwhistle.com lojacoliseu.com lopezmodeling.com lyonfinancialusa.com ourstayaway.com patrickguarte.com seufi.com trueseller.one youandmegb136.shop # Reference: https://twitter.com/reecdeep/status/1613871217831809024 # Reference: https://app.any.run/tasks/8cbc1237-c999-4061-9a4c-f1768e7b3173/ 13615.vip 667fm.com adenium1000rose.store apisat2023.com bdtongbangkj.com biogenaacademy.com couteauxcreation.com cryptoinvestltd.online deaholid.online floss.software glb-mobility.com hediye-paketi.online homeresearch.ch k2aav.info loaddown.vip minilife.shop mynichemarket.co.uk naturalsalttheropy.co.uk newhard.ru uevj.win # Reference: https://www.virustotal.com/gui/file/00823e9ec8d00674fdd3d60d55a953536574435d1e0bb4a0333aff86dd6559ec/detection 3laaaldin.com 500-fortune.com arabiansanglers.com baileysepictravel.com buldrinox.com bureaubois.com carcanva.com congtyvyyen.com cuttacktop10.com dudetechy.website epowersportstechexpo.com equipoiseenergy.com etheriar.biz evc24.com felisblack.com goodmorningpaname.com hsshengri.com jieruicloud.com kedairatu.com kidsdrawingstolife.com marekpauli.com margie-s-sensational-scents.com matryoshkatechspec.online nulumelighting.com oasispaint-uae.net paypal-caseid194.com pepeglass.com slobird.com srmxcm.com truebelievers.info urbandbracelets.store ville-fogalmam.com vinhomeshungyentheempire.com voltchain.net web-solutiontnpasumo5.xyz wrestlingfancam.com # Reference: https://twitter.com/reecdeep/status/1615293924020461574 # Reference: https://app.any.run/tasks/128b9516-2c70-4a99-bf1f-6881103593fd/ 1688eet.com barrdsecurity.com brandsmania.net breaksetle.online canadapostd.net clickrapidoonline.com cwhalesart.com exeterseoexpert.co.uk foody-people.uk freydachsolution.com generaldatapolicy.online growbigg.online gvdxop.xyz lendike.ru nigex.uk oregonfirearmstraining.net rrshoumi.net saltirefireworks.co.uk scapegoatbooks.com # Reference: https://www.virustotal.com/gui/file/476d035ee5f31bea9c4c7560ff1625691d15ab8ca4b164de9ef8365ea09a5859/detection 15726.tel appcast-63.com atlantispharmagroup.com bayfuid.com carpetcleaner.guide celikturklojistik.com chosen-threads.com coadept.club danielfehrle.com drgrafic.com drunkenmumbler.net electra.clinic flexyfun.com fraughtpklodt.xyz frontiervalley8.com gigaspro.com grocebag.com guchi-log.com heiwork.xyz hokislot99login.com jxfae.com kzexclusive.com leftup.xyz legendssim.com madebygenz.com modernmpm.com moleculairscent.com nm-beauty.xyz northcoastcedrick.com oldwestproperty.com omnes-reunion-annuelle2021.com prestigeinventory.com radissontickets.com rs23.club ruiheaid.com santogin.com smiling-leaf.com spidrmusic.com thedanielrichard.com thermalsystems.net theuranus.net tnfcoupon.online toglobe.net truckdrivingjobsbr.icu uliicosmeticos.com vendingandco.services vitalreliefstore.com # Reference: https://app.any.run/tasks/ede574c5-d88a-4a3e-afe8-3db6c48353c4/ 23info.site 79355.vip alcomarxism.ru captoriot.com change-flow.com detail.tips dev2up.tech eco-rasy.com existo.site gospachile.com hhkk569.cfd laranium.net puiry.online techsupportfb.co.uk ufalive.ru vistavineyard.co.uk # Reference: https://www.virustotal.com/gui/file/e22dde0bf08c6cddafbc0f6630c2ca0185fdf929ca9239783bb7c17686c23122/detection celikvet.com chengyumeta.com clinicafresa20.com everstorelithium.com hapticvibe.com imqualife.com insulicstore.com new-unhide.com nftqueen.store proveedorampsxxi.com ropponme.com wahl.technology wingsandcurries.com youduoji.com zymiterial.com # Reference: https://www.virustotal.com/gui/file/03735650255866b1c2592bcb4567cbcb2b9d23eea5430d2e7d7c6315abadb5ad/detection racevx.xyz ubique.works # Reference: https://www.virustotal.com/gui/file/6f73d6879f3f916f05780e0d90b538cf6d01b976f21620a716e268c672906827/detection http://104.168.46.125 # Reference: https://www.virustotal.com/gui/file/6b37e659593f1240578829cdbb6f5b7ce92de4ec407a0819570725514af57ff2/detection cmaii.com visawe.online # Reference: https://twitter.com/TrackerC2Bot/status/1611984695683604481 efxety.top hbgents.top rsnzhy.com # Reference: https://www.virustotal.com/gui/file/001997f3e75c1e0e3857f79186bfc2af22a043a2e3bd9b640a22b9f59dbc9149/detection dietnow1.info digisoul.tech elite-cuts.com etchapad.com experienceanewtradition.com integrityinlending.com interaktifkitap.com itstimesd.com jays1fan.com jpegpartners.com listincode.com longforge.com missedyou.club noemiklein.com picmyrun.com resell-success.com thamost.store toysandguys.com unknown-consulting.com xbdckk.com zhuoqilong1688.com # Reference: https://www.virustotal.com/gui/file/04c559bb0be01415e957d3dafa1ed6730505e35736eaea8cb03b8b7d101998bb/detection 147731.com 6976pk.com adventuresegypttours.com alina-jewels.com arhehgap.com baiersy.com beachpawsmobilegrooming.com bergenyouthorchestra.com childrenseducationonline.com cloudy-fi.com coinchecke.com cryptodouble2x3x.online cyrptomag.com daringtolivebook.club darkwadlights.com dazzleflat.com dom-directory.xyz duiqz.icu erahuge.com gordonzak.com haulseattle.com itsallcharlie.com jordysangels.com lightcorporateb.com moonlit-raptor.com natural-vanilla.online newnasri.com nightpartner96.xyz pzz123.top rozhunt.com rticproduct.online sharebay.store shirleywong123.com supremepeak.net sva-pro.com t-shirt-cat.com thewealthwisdom.com tikibeachgraphics.com tokenomist.online topotostar.com tuoitrevietnam.club urgcity.com # Reference: https://www.virustotal.com/gui/file/02214be7a1ec20e21ab4209575618bb2a5090f15b53c4aaaac9490634d6aa48b/detection znsjis.top # Reference: https://app.any.run/tasks/0b6ee845-1b5a-4d0a-af37-c3a9d9045a19/ 4tx.ru 667fm.com apsocreto.online bookinbournemouth.co.uk byfuture.biz expertponto.com flippingfrenzy.com ituyiut.wang jourmoe.com loaddown.vip poweroffer.net seeword.site solutionsquik.net vowlashes.co.uk # Reference: https://twitter.com/wwp96/status/1627685160937463808 # Reference: https://app.any.run/tasks/a974d025-28f5-441c-bf04-d05a3317c051/ cardano-dogs.com # Reference: https://app.any.run/tasks/f18444ea-5f7c-4e1b-b27c-adba0ef1f09d/ campisi.website cmproutdoors.com dcorearts.com de-nagel.com fluxgreenn.space kenymart.online kokororo.tech proveedoresbeauty.com tonica.life # Reference: https://www.virustotal.com/gui/file/aefe5754459fbae160dc381c09ec8d3ad5484f527a1ea9accdb01b2d8f4c45e7/detection classified.network fiifuififnjfs.xyz grocerylord.com kostta.com yibobet3546.com # Reference: https://twitter.com/reecdeep/status/1625074510037762049 00360vip.com 24worldmarket.com 49138.net alende.cloud algient.com beegain.live beijingwudao.sbs bluesky67.com capersungai.shop cobolmaui.com cordesa.art dekogenc.xyz ellie-mae.click # Reference: https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ # Reference: https://otx.alienvault.com/pulse/63dbf90f5bcd0f8d91bec067 365heji.com allspaceinfo.com baldur-power.com carlosaranguiz.dev cistonewhobeliev.xyz femfirst.co.uk graciesvoice.info h3lpr3.store headzees.com heji88.hj-88.com huifeng-tech.com iidethakur.xyz in-snoqualmievalley.com kajainterior.com ohotechnologies.com popimart.xyz togsfortoads.com # Reference: https://www.virustotal.com/gui/file/8fb593875f0bf9a1ecf72114935267caa80e7f2b2a268c3570927e4138070dd0/detection 3658622bet.com allspaceinfo.com themssterofssuepnse.rest # Reference: https://www.virustotal.com/gui/file/04db053ddaf38c4d040e12c2ffdd19a98dbeb9cafb43e4ef397e95da97ba3036/detection achyutlifesciences.com amigasconesencia.com armmapp.com cantomarbait.com craftstockco.com edfnu.com elkerfly.com facetofacewith.com finlayo.com fundafes.com ganleychevybuyscars.com globalmarineserv.com goodoffice.online haerotechs.com hautlescoeurscollection.com high-clicks3.com hjku.xyz integritynotarial.com janesgalant.quest jcswkj.net medicaltrust-sd.com meggisiegert.com midatlanticbath.com minutemannetwork.net murrayforcongress.com novatel-network.com passivemen.com publicyazilim.com rukygua.xyz surfsolutions.info thevishantiverse.art tigerstarmatka.com unlimitedrehab.com worldwidecorumuk.com xc6811.com xn--schwche-8wa.com # Reference: https://tria.ge/230324-vy135aga88/behavioral2 # Reference: https://www.virustotal.com/gui/file/d2fec4950c622ad3d82ebca0d30e9c1ed8db03769aea9fe764d8efb16e335bd5/detection beavent.com heroclassicrally.co.uk redystedy.com seolutions.xyz wb293.com # Reference: https://www.zscaler.com/blogs/security-research/technical-analysis-xloaders-code-obfuscation-version-43 # Reference: https://otx.alienvault.com/pulse/642d3ab1a3264fd75e77f2d7 060jinbo.com 10086253.vip 117ygh9x.com 365-8119.com 991-touring.info abttt.win adacaranya.com allforfun.online allison2patrick.online applicationsdown.store avdeeva.info betfury-platform.net bilpoinsaat.net bocc.live botanica-online.ru canlicerrahi.xyz ceu84g.com chiyiqian.net christmatoy.com cinemamaxz.com coffeelectro.online dedmorozvidos.store difozaa.life dugebitv4.xyz eatgre.wiki farmanow.xyz g2fm.co.uk ginaandhipa.com guzmanmodels.com habka.online hal-skincare.com hiufouwnwk.shop hjiqa.com identowel.com inigrey.com jimtrosper.com mgconsultantlogistics.com myif471ok9ipidk2kkl.xyz najdlegend1.com nnhuigou.com realtxt.co.uk themas5erofssuepnse.cyou wanknumbers.co.uk wsavxrg.shop zzaen.com # Reference: https://www.virustotal.com/gui/file/f71defb8a1a7d2b0a39c1f0be1066c817190950d43120c0377fa13a2b0c126c0/detection # Reference: https://www.virustotal.com/gui/file/c98602331ae9aeafc78d2d0c4209632aad294c8cb214073c9fb016ac6bf8806d/detection 4c2r7z.cyou 8ai.ooo 95z.top alamsolutions.com aodagency.com bazaznanii.online blobsms.com com-walletconnect.com courtindones.com crystalclosetco.com datasciencewiki.net digitaltrophycases.com dollyrosedelice.com donatirmobilya.com entityget.com expressfreight.online gamma-sa.net gastronomi-salatiga.com goehgy.store gulluri.online hardlock.click hermeticat.com iberianspecials.com kbtcoin.store kitchen-in-london.xyz kkqqzb.xyz lolisex77.top manessi.xyz moneyflowplant.com nekosapiens.com nrmaridodealuguel.link philanthropydmv.com primemart.life ptv825.com registemob.live royalcrestresidents.coop secure2connect.com seriums.com themasterfixer.com tqrt.com txtentertainmenack.org.uk unidosservicos.com wlkwinn.net xn--mobilyahavzas-gbc.com zedalphaquantex.com # Reference: https://www.virustotal.com/gui/file/11f78a6f1d2cc4587778143bdc8b011ca509978c26ba60bd41fe74bd6773444d/detection http://192.3.215.60 011965.com 1wwuwa.top 2348x.com alphametatek.online b708.com betterbeeclean.com braeunungsoel.ch coo1star.com cupandsaucybooks.com deathbeforedeceit.com delightkgrillw.top echadholisticbar.com freezeclosettoilet.com gemgamut.com goglucofort.com gt.sale hkshshoptw.shop jacksontcpassettlement.com kellnovaglobalfood.info kui693.com lightandstory.info mtevz.online sweetcariadgifts.co.uk # Reference: https://tria.ge/230429-a474eaha87 1wwoio.top 4152.uk 5777757777.com 622058.com 90adbazi.xyz acasascbcenter.com activ8brace.com aimappq.info aliciartiz.click alineacustomhomes.com amarresamorososperupactado.com ana-verie.com anpaijia.website anzpapimi.com appskul.com armormediia.com asos-boost.com asp150.com aus-anzhelp.com awoflo.club bacteriophage.asia bankoftama.com barbershoploft.ru brequx.online bwoywonderkids.com car-leasing-54007.com carspace.club ccpandashare.com celeratuslegal.com choac-2023.info chrisandfrances.com clintprow.com dart-z.com dististicks.com diy-alice.co.uk downhomecoastal.com elboshari-tradeinvestment.info fatimiyyaalawuyyatv.africa gewirgq1uw.xyz ghrevenues.com giuseppedematolasax.com goldenfestivals.com grainespotager.com grandcoeur2007.com grunge.mom guvenceoyunevi.com healthyliiving.com hewittstoneoutsourcing.com ipsmagen.com jessicamorimando.com jgaytfiz3.xyz jualan.email kfoto.online kings-health.com kjds11171.top lazersec.com leahdig.com liuyao168.com livingsouthshore.com modburyremembers.org.uk mookaitejasper.co.uk norske-jenta.ru themetropolispta.africa tylersphotovideo.com uniteddividinghands.net # Reference: https://gist.github.com/silence-is-best/d168f4c94f59e444a1081751e9dc79ca 8rr.xyz bebas88official.click bocahkota.xyz bookcom34567875373733744444.top chrestheryulelog.com gestionamostualquiler.org jamesdevereux.com rmaex.xyz toulouse.gold # Reference: https://twitter.com/tosscoinwitcher/status/1653477554249166848 # Reference: https://tria.ge/230503-ayr51adb44/behavioral1 161453.com 420ewaterside1201.info 7292dd.top 82651nud.skin accounting.capetown allloycorepro.com bidnpost.com bokymii5.site cashcraze.site conradi.fun extremepareidolia.com farklisanatkoyu.com grey-matter.life kj7004.com lgys174.top localvoicesproject.com nejdoulmail.xyz opioidrehabhighland.com proplo-ls.com pzlktwqqn.top ridilisusera.xyz saidamatrix.com shopluckyluxury.com sk676.com sociitopin.xyz su74.vip tenutaquarrata.com tqxpongee.xyz tungaformst.xyz vgr511.icu vinoforo.com vntropicalfruits.com vouchshow.xyz wagar.work wigletsmich.xyz wplescbocsai.xyz xpox.xyz y1119.vip yenisigortaaammm.net zaketn.online # Reference: https://twitter.com/reecdeep/status/1658408922410110977 globalaspect.life # Reference: https://www.virustotal.com/gui/file/c149b95c4ff79668ca124cb218bf2f2b5fc8bf90372848370450ca94644d876d/detection baotrang-jewelry.com date-store.info dinohoki85.online # Reference: https://www.virustotal.com/gui/file/2750db58bd94b97aa33fb563461c528c54eb3f08f3315b0648291842576e6857/detection fokusdongs89.click innerpeasnutrition.com ioddinemax.info jsmaiyou.com minsk-adstr.pro pzr9.com ready-sim.com subicpearlresorthotel.com touslesjeudis-test2.ovh unrushlagos.life wtwbenefitsapp.com # Reference: https://www.virustotal.com/gui/file/077c6e0a6a5df926dd7673d81f466faf5a11b8e04d3a5ecddf9d7951107e0026/detection altered-view.com arolo.site atstaxpro.com barefootrestaurantil.com calvingross.com cartvey.com clotheslist.com creatifroom.com daniil39.ru grandmakadescustomquilts.com hncovnyyra.best ilovethecraze.com ingeborgbleonard.icu m3mparagongurgaon.site mszsora.com nerdppc.com omdestinationweddings.com regularizeimoveispr.com resurrectedroastingco.com robertduffywoodturnings.com sepuluhgesit.shop silvermacpro.com somwear.xyz truevoicetea.com weareroamingexpert.com worsall.com zweei.com # Reference: https://www.virustotal.com/gui/file/8c305a8516089a9e811fbc9cf560b0e36a2494debe59c5677376638c7155a452/detection http://172.93.161.118 # Reference: https://twitter.com/Kostastsale/status/1688806753520308229 02omn1.cfd 595qdd.top alannamershon.lol amazing-s.com artkit.top czjhsklu.click dconnekt.com elodie-mace.com gt6yzx.cfd handdrawnpepe.com help-hair.info l0rh0q.cfd lei-apels.com lifeiextension.com mydesigneredge.com myvicesweats.com nomadcreative.biz nsu7aik18.xyz refreshbee.com ryjnfd.sbs superxwin.app triplemshipssupplies.com ui-un.com vevo-verify.com vusujhyf.click weinbrenner-stiftung.org # Reference: https://twitter.com/reecdeep/status/1689271098926325765 # Reference: https://app.any.run/tasks/0519a6a8-66f3-4a6f-b80f-659468d04566/ 1ijym8.cfd alansoly.com badbiche.shop donnavariedades.com dorama-feelings.com empowermedeco.com gampro.xyz headingforchange.net kepaoqin.top lloydsgroupco.com pianosugar.com supernaturalsuperstar.com therealmastercoach.com top-xixi444.top twinlogo.xyz zuanlansi.top # Reference: https://asec.ahnlab.com/ko/40556/ (Korean) aseopli.online asyimpo.xyz dwpato.xyz flayos.xyz gastries.info lastsummercog.com myvea.online shutro.online ziewip.xyz # Reference: https://app.any.run/tasks/296e8414-8ac2-4120-a9b4-546157ea14d7/ 12allchat.xyz 1ygds.com 8956kjw1.com bagisigorta.com buxmam.vip dhmkmam88.shop ginbaochip.com hiphabits.life iweb-sa.com lancele.com lazarus.team lifeworkfunnel.com pacomarquez.space rcarca.com recrutoalliance.com sanequeja.xyz shrinedao.org thewildmates.com trustv-team.com xn--939ay02cwla267bba.com # Reference: https://www.virustotal.com/gui/file/020a524c60cee4ed6ca0aa54a118a3b8db045ea43049f9851c3d809e07437bc0/detection 914762.com aurestia.com beatavergine.com blackhawkstickets.com e-fite.com eunicebarber.com fumart.info jshjyz.com mission2run.com moqainc.com pitmansupply.com texanbrisket.click u1uc86.shop # Reference: https://www.virustotal.com/gui/file/4246ac35e29b03cf4057457231abf222b88bf64cd65b59d7dc79d35b1953372b/detection alemania-paredes.com aryor.info danielcavalari.com denzaimivsem.buzz eewapay.com elperegrinocabo.com formulavsupplements.com gaoxiba150.com gkoders.com gstringtheory.com gsvaedpzugtdn.com hftroi.xyz holdmytracker.com iwantbundles.com kalendeargpt44.com kawitrack.com khoyr.com lodjireal.online lojinhaevelyn.com mic-reform.info naiol.com nlast.cyou nodesofty.com orlynyml.click proloop.work rainydayroofs.com realmpabq.com rfc234.top salesfactory.pro ssssne.com supportive-solutions.com thechaay.com thundershorts.com ultraflooringmore.com # Reference: https://www.virustotal.com/gui/file/0e32221577915aa8a0871d2e2f01cc558450d69a93b8276b46cd70a8fcf4d84a/detection big7041.com daagureport.com deseriohen.com dharanatural.com hfdkgm.com kozmikkix.com lepacificateur.com portonomics.com realmofencounters.com rigel-connect.com rksyss.com sandyssugarshack.com sfsadff203.com sgnanda.com tattooremovalwinnipeg.com ton1peru.com uvetcfm.com walk-over.com wisergiz.com wortalnet.com wyyxeeat0012.com yousbusports.com # Reference: https://isc.sans.edu/diary/rss/29958 # Reference: https://otx.alienvault.com/pulse/64907a0fed2b36310998d7ca 4thmainland.com abhisheksharma.life astudyinstories.com babyshoespromo.com bjhxtp.com chaintrt.com cleanskinshop.com cloudzon.world ctrivertravel.net dl-jmjg.com driversofficial.com eliteenduranceuk.com eperq.buzz firstonsiterestoration.com gameozo.com ganosignsandprinting.com hew9.xyz langlaufdavos.com livetcvety.ru martynasobczak.com nolinkoti.biz openseamonkeys.com porgy.online rtlsdepmpyv7.com sagewoodworkinginc.com simplepay.kitchen strattmanwedding.com thecharmingchimp.com theclockpeddler.com thewoodeniphonecase.com unbecomingsail.xyz valleyofbreath.com website-dolap.com yolcu360online.autos youhousedesign.com ytdxjt.com # Reference: https://www.virustotal.com/gui/file/042a79fca496efba98589c7115c620c116af2ef1e1308a9ab91f21026a5ccd43/detection 77121144.email aboutwean.site bawdydesignz.com dbszdjh.fun drops-of-awesome.com financialfashionista.com futuretechpros.space futuretechsolutions.site garderlafoi.com grav2.com illuminatonightlyrental.com mgn4.com moobileproctor.com mycravingscafe.com myhc360.com nuaar.com pinax.info recursiveinscription.com safeborderpetition.com sarjanateknik.com speakerbluetooth.com squallo.group stockprob.com tanglewoodbybci.com terapiavisualaeronautica.com u2sr03.shop weighing.xyz xvngitnsfbtjregw.xyz # Reference: https://www.virustotal.com/gui/file/553d2a3bc08b3ead2c4f13d0e9af86365ac4596697a60963685367d153ba0efd/detection 85343.top boatparty.online cardiopathy.online cz-handbags.life easylearn.click epistratagem.com hglx.bar inailshickorycreek.com jtfaqyxo.work ksecurityblog.online ky7437.com mejor-proteccion-es.click paintingsantaclarita.com pralniacms.online revyoume.com staemcommmunlty.online tcykv.site tintash-sg.net tophatlimitless.buzz trinidadrealestate.net zonazerogamescomar.link # Reference: https://isc.sans.edu/diary/rss/29978 # Reference: https://otx.alienvault.com/pulse/64a2e1b31615d5a3975beaf5 7523615.com atlas-management.tech espiaocelular.foundation harrisonfanilyvets.co.uk realt39.ru # Reference: https://www.virustotal.com/gui/file/4317a2e7e3a7570581a38000cc4f37c8cb9a53e522bfbd4bde00ea9d198db6b0/detection alcmcyu.com claudiaduverglas.com displayfridges.fun flowersinspace.tech fuhouse.link funwarsztat.com johnnystintshop.com kwamitikki.com oliwas.xyz omclaval.com ourrajasthan.com sarthaksrishticreation.com sofbks.top summitstracecolumbus.com sx15k.com uadmxqby.click zhperviepixie.com # Reference: https://www.virustotal.com/gui/file/0ece8fcce07dcda17dbb5cbf23b09f6bee6edc228a83f8721242eeceb3ec4550/detection azgu8c6s9.xyz # Reference: https://www.sentinelone.com/blog/xloaders-latest-trick-new-macos-variant-disguised-as-signed-officenote-app/ activ-ketodietakjsy620.cloud akrsnamchi.com brioche-amsterdam.com corkagenexus.com growind.info hatch.computer kiavisa.com lushespets.com mommachic.com nationalrecoveryllc.com pinksugarpopmontana.com qhsbobfv.top qq9122.com raveready.shop spv88.online switchmerge.com # Reference: https://isc.sans.edu/diary/rss/30020 # Reference: https://otx.alienvault.com/pulse/64aec959f8017dda53219cd6 6882b.com 730fk.xyz aamset-paris.com alanyatourism.xyz ambadisuites.com atlasmarketing.life bluhenhalfte.xyz collingswoodfd.com df8588.top fn29in.xyz hhfootball.com kalndarapp14.com kdu21.com latabledelepicier.com london168wallet.monster personifycoach.com printmyride.store r1381.xyz smartinnoventions.com tarolstroy.store terrenoscampestres.com test-kobewaterworks.com theartboxslidell.com uximini.com vidintros.shop windmarkdijital.xyz woman-86.com wyyxscc5856.com yahialocation.com zsys.tech # Reference: https://twitter.com/reecdeep/status/1694704918584848831 sonokmall.info # Reference: https://www.virustotal.com/gui/file/ec8c114e9c0bd6154bd58396c72fabe79e2ffe70dea761cabc98b35186723360/detection 8ppdy.xyz 91gag.com brightodhove.uk firstaidbank.com fortifiedfinancialsolutions.com gatorfunding.services ic0.computer inovakoni.com leatherpocketbooks.com libaslim.com medichiccenter.com rggamer.com stratst0ne.com tdpsampark.com www-66552.com # Reference: https://www.virustotal.com/gui/file/7af9cc5b2aade862d245026c370d0d4fd4d375426cd26357abba3ddb4c8a9824/detection 24eu-ru-startup.xyz 359brigham.com 4tvaccounting.com 678ap.com 6o20r.beauty adept-expert-comptable.net arsajib.com avaturre.biz b-store.shop bavrnimn.site bioprost.club botfolk.com canadiantrafficmanagement.net connectioncompass.store cpohlelaw.com cyberlegion.group cyg8wm3zfb.xyz dcmdot.com desire-dating.com dp77.shop dtslogs.com eletrobrasilvendas.com emsculptcenterofne.com epeople.store ezezn.com giuila.online guninfo.guru hfaer4.xyz hg08139.com jaehub.com kickassholdings.online lb92.tech lucasbrownviolinstudio.com mamaeconomics.net mathews.buzz matrix-promotions.com meet-friends.online mimi2023.monster misstamar.mobi mybet668.com myjbtest.net narcisme.coach oktravelhi.com out-boundlabs.net pagosmultired.online paintellensburg.com pf326.com pittalam.com qfs-capital.com redtopassociates.com ruixiangg.com saledotfate.live smokintires.net taylorranchtrail.com tempahwebsites.com theaustralianbrisketboard.com theoregondog.com totneshotdesk.com trongiv.xyz wealthjigsaw.xyz xn--groupe-gorg-lbb.com yuwangjing.com zamupoi.fun zekicharge.com # Reference: https://www.virustotal.com/gui/file/ed970f5692d7a2e1fcf63f57635b45304d047c2d0f3b854dae2a39bff7e9707a/detection 983xpj.com aboutmart.info bathandkitchendesigns.com benefit-america.com bet366b.com broadfield-party.com caballoyjinete.com cufit.net cyclevalue.net fannydarat67.shop ioioidev.com leadsbot.online mayday.media medicalodgesgardner.com mt031.top muffliquorcompany.com munzarabogados.com noumit.info pratticofscience.online rightbell.org sbads7.click stpro888.com switchjobz.com testuojamvazonai2.com thewandedtrader.com tonysthreads.com wakeup.services welder-prices.xyz # Reference: https://twitter.com/reecdeep/status/1699386670301294792 # Reference: https://www.virustotal.com/gui/ip-address/66.29.142.244/relations evernature.top framedart.top greenbolt.top mentuz.top onemall.life playboss.info renderity.xyz shutlleross.life tarcontrol.info tartar.life vinoz.xyz zeeluck.xyz # Reference: https://twitter.com/reecdeep/status/1699386670301294792 # Reference: https://www.virustotal.com/gui/ip-address/69.57.161.67/relations boscon.xyz cerajove.xyz cerave.top clovein.top foxixy.xyz gasseit.life payflows.xyz showpay.life starfox.life treadom.info # Reference: https://www.virustotal.com/gui/file/b2085baf71cd3b01505f42752e2024d360a6684b0eb0feaf11ccbfdf47c3f96a/detection # Reference: https://www.virustotal.com/gui/file/08db0d0c9d1d2ce767a17c4461b25fccdf2f9075be2a8fe45d4461d23e936f35/detection 311849tz3.xyz 3sqjrh.cfd 692122.com 93v0.com ashiuvn9562as.vip autoant.net bayhouse1701.com book2110.com devo-parts.online efscollectionswexinc.com f3dfym.cfd futuregainers.net grecanici.com hvzpw.com iran-uk.net mega-clay.com navigate-power.boats pagerwojogaes.com passportrenew.xyz revitive.org rigintech.info sugargz.com whiskeydecanterset.com zippochinhhang88.online # Reference: https://securityintelligence.com/posts/email-campaigns-leverage-updated-dbatloader-deliver-rats-stealers # Reference: https://otx.alienvault.com/pulse/6503fb29e81f4b7d817bfed2 660danm.top aconaus.org altralogos.com azurefd-paitohk.xyz bvgroupcos.com dunia138.info janus.news mattewigs.com mytraderstore.com oldironmetalworksllc.com playdoapp.online purelyunorthodox.com rva.info sinpercar.com totomata.com transportlogistcs.com undoables.com # Reference: https://research.checkpoint.com/2023/unveiling-the-shadows-the-dark-alliance-between-guloader-and-remcos/ vrezvrez.com # Reference: https://www.virustotal.com/gui/file/254420572478301187f36171b5b34d183c1ce78427041a205790e0dddb214133/detection 69573.xyz 81mof.top ainji3.space alessandrafausto.com alloneplace.top cjoks.top consumasa.net domainyabaik.click fabioostermann.org fb99vn.com gd001122.com give-b4.buzz guyix.com harikanarayan.com jasminewebco.com kilat.cloud messaggerienazionali.com p3pp.top pdfamazon.com poker495.com remoteyear.asia rewardtool.xyz shopshenn.com sixthsensehk.com smkmodelkhaschalok.com sorteosconttravel.com theclosets.world wecouriergoods.com # Reference: https://twitter.com/tosscoinwitcher/status/1706743409179082818 # Reference: https://tria.ge/230926-wks12adg53/behavioral2 1hxyut001.cfd 1weasw.top 2017m.com 62gru.com 920222d.com adrentek.com alphadiscount.buzz asrworldbridge.com bachblueten-center.com barbendersapparel.com biyou-club.com bizcapitalmanaged.net brainmedicine.net civinqagency.com cli-test.com ctygd.cfd ffnd-it.pro gogoeconomy.com grovehillgardens.com hm4kem.top holisticpetpals.com huayi17885.vip investorslabs.site irlandhouse.net jgkstore.com maingeem36.click mjn977.top msoftco.net ncc833.xyz povfilmfest.com rabota-promlit.store shahabatlas.com socialvideostream.com sportsstump.com staging121.online thewaterfallhouse.org titklive.top ushaibusmani.com zaimdream.online zaimonet.online # Reference: https://gist.github.com/silence-is-best/23738d87475d67d843bd79231b008e5a bbq011.top browser-privacy.xyz nasyoeastasia.org resenha10.bet thesoul.agency universaldoner.org # Reference: https://www.virustotal.com/gui/file/559efeb0d4c9e06127bcf12bc69d19c901fc7f723e076073506fdedb7c1a2117/detection admiralx-ksaa.buzz avanty-renovation.net bia.beauty gardag.com gxdclass.com heritage-pnc.com kalndrgpt01.com kotovape.com liith.org marcustheares.com montanasapphires.online rosefinch.xyz sti719.cfd tuckerfertilitylaw.com # Reference: https://www.virustotal.com/gui/file/4e52766fa90e1ffd16cba2eb039e5bdb2916f2c6d61d3f53461f44b4e9796907/detection http://5.181.80.156 capitalm3m113.com compoundforce.club cookchefs.top corteiz.org dazzlebeautybox.com fstrainingllc.com ilsge.club iviaggi.blog kai6.name kotovape.com leshka-toshka.online liith.org lojadivamais.store luxeconcept.net lyesmith.net muraveynik.online r-grenader-jackpot.lol rosifariasestetica.online softpro-qa.com tamique.com thebestforyoucom.life tisdale.bio ucrypt.pro winchespullers.store # Reference: https://twitter.com/reecdeep/status/1714268250048229495 nagtco.xyz # Reference: https://www.virustotal.com/gui/file/c502569c4e1000de90545d80b4f714c0549e64d78d4a9468f11dbdba2231e3c6/detection http://172.245.208.6 bradslinkard.com dulcestipicos.madrid hotelunivers84.com lesresort.shop mantap89.online viteview.com # Reference: https://tria.ge/231026-ezsv5sdc6z # Reference: https://www.virustotal.com/gui/file/1f30b513d1315b7a9432f9cf2937d5c4728455fbd7c681a552b94f57a849757c/detection http://141.98.10.13 03ss.vip 278809.com 91967.net alcmcyu.com apneabirmingham.info asgnelwin.com b2b-scaling.com cjk66.online claudiaduverglas.com completetip.com displayfridges.fun docomo-mobileconsulting.com drpenawaraircondhargarahmah.com dryadai.com emeeycarwash.com flowersinspace.tech fourseasonslb.com fuhouse.link funwarsztat.com fzturf.com giallozafferrano.com gk84.com gracefullytouchedartistry.com greatbaitusa.com gypseascuba.com hbiwhwr.shop hrmbrillianz.com jizihao1.com johnnystintshop.com kebobcapital.com kimgj.com kjnala.shop kwamitikki.com leontellez.com mercardosupltda.shop mfmz.net mosiacwall.com motorcycleglassesshop.com mysonisgaythemovie.com mysticheightstrail.com oliwas.xyz omclaval.com ourrajasthan.com podplugca.com polewithcandy.com qixservice.online rollesgraciejiujitsu.com sarthaksrishticreation.com sofbks.top summitstracecolumbus.com sunriseautostorellc.com sunspotplumbing.com sx15k.com thwmlohr.click travisline.pro trishpintar.com uadmxqby.click vandistreet.com vaskaworldairways.com vinteligencia.com vistcreative.com wb7mnp.com weoliveorder.com wilhouettteamerica.com zhperviepixie.com # Reference: https://www.virustotal.com/gui/file/6b90f7fe7abcb028f3f1ad8173f22d11b950714483ab6cdcb2f0a37961a30a51/detection abcya50.xyz addtr.online botani-don1.xyz carbonbeeagtech.com carmenceja.com cloudavde.net golgotaromanianchurch.com gonks.shop hollydays.online hopeaugust.com hstonme.xyz identcase.com jewlselegance.com jupefeeds.online klinkspremiumwildlife.com lah280.com lojasdna.com lyzhang.site mroadholdings.com myyacht.rentals planetmercury.info retaron.online secured-jobs.com slhstrategicsolutions.com smqzgy.com teto-store.com thecreativesoulart.com topskillsnow.com truthnotpolitics.net uinnou.com ymvip296.com zuqiu11.top # Reference: https://www.virustotal.com/gui/file/17d4054d9cb3dc8df10d4ca4bd4f201b087cb58716dab9c93390d3f35010c8e4/detection 9310harmony.com algogames.xyz annturner.space bumisriwijayalestari.com chemitronic-thai.com clauderuelle.com drone-majic.com easonshen.com flawlesspheno.com godoctordrywall.com gray.management headlineoutline.net highcaliberperformance.com hijabzone.online homedecor12.com hostedexchangeanalysis.com ihouse.love lovabledoodleshome.com lpsfhls.com maestrodelamarreefectivo.com myyntisofta.com nexria.com nowcleanran.top onespeeddriven.com photoimaging.center preorderpizzas.com rocketnow.club roofrevivenc.com senatortomcullerton.com slingerlanddrumcompany.com squawpalisades.com tcchiropractic.net thenorwegianbutler.com thethomasgrouphomes.com uh.immo vat-jp.com xgspw.com yn-wx.com # Reference: https://www.virustotal.com/gui/file/865c3d5398639b15b66ded5441836610bc82d3c996e707ff8741c8b7fce482d5/detection 91qds81ik.biz allixanes.info perfect10beautybar.com schwander-weine.com spaghettislice.com stl-rsvp.com xn--c1akodirg.com ylmby.com # Reference: https://www.virustotal.com/gui/file/97acc5c52513ead4ba018af7dd726edd3179f993099640681cd706db4d263f38/detection http://141.98.10.123 # Reference: https://threatfox.abuse.ch/browse/malware/win.formbook/ (# 2023-11-08) http://103.138.108.96 http://103.151.123.228 http://103.156.91.153 http://104.168.33.25 http://107.175.212.60 http://107.175.218.12 http://107.175.218.31 http://185.29.9.30 http://192.3.152.135 http://198.46.199.168 http://45.85.219.226 http://5.181.80.36 http://64.44.101.233 alienzouks.com bojz168.com keprom.works offtec.cf ryandeby.com wellcalls.com # Reference: https://www.virustotal.com/gui/file/00eefbbfef027c2641476d176e81f017cc9f27d91798c30cb47c2a5cb46b126a/detection 633922.com belaflorloja.online blessingstation.org cjjmobbbshhhu.shop fortunetravelsltd.com fwl0q2w.shop godhuman.org greenharbor.info hcfa-cis.com hillcresthealth.online hmoatl.com lets-room.online medical-loan24.live ozzventures.shop porousworld.com sorenad.com speedbikesglobal.com zbbqis.store # Reference: https://www.virustotal.com/gui/file/ea5a8efb33e85213a96baada2f0f330d2b065d8efac0dbabdacef44eed8ee34c/detection 3gresources.com aelgjf.cfd belasaudecom.com betongpumpningen.com digiscout24.com fam-scharf.net foodcos.xyz prostoptowing.com shenzhoucui.com # Reference: https://gist.github.com/silence-is-best/67adb7549211b3046f554044bcc5c151 australiavisaprocess.com coolermaster.xyz e-saleshub.quest echolinkevolve.xyz ikun720.xyz latechdz.com maxvoss.com mr-u-taste.com sell-home-fast-for-cash.xyz t5-1682468.xyz talknconvert.com vaultedjewelry.com vfhnyjgr.cyou viptop77.biz waterdropdilter.com # Reference: https://app.any.run/tasks/e448b261-f10f-4937-a999-cb7dd91d37d2/ 333vvs.com antsnav.com cmmug.asia finebb.net gdyanjiu.icu hreeremaeps.com ljwixsb.top mobdigim.com pdian.link shopbons-mall.com shortfall.net tecverse.xyz yf168vip.com # Reference: https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2023-11-29-IOCs-for-JinxLoader-to-Formbook-XLoader.txt 1214888.com 219855.xn--80aswg austintrafficlawyer.com autrevalevale.click e3iaibr.icu infinite-7.com julieannmirabel.online ldhqi4.fun ncdanmark.org ofupakoshi.com overthemoonphoto.com taxhwangeub.com terranovaservices.top worldlife.casino zkrbma.store # Reference: https://app.any.run/tasks/49f42b26-c220-4fe8-8181-cf9c1215ffb7/ collline.com functional-yarns.com jokergiftcard.bu # Reference: https://twitter.com/K_N1kolenko/status/1732660807316455743 giftjubilee.com ladyboyfaceswap.com wildenmann.shop # Reference: https://twitter.com/reecdeep/status/1737429448754954552 apexpion.club # Reference: https://www.virustotal.com/gui/file/0105a34effc8386010c179ec1fa6131c642380a82ab9445010cd9dd2f4906f9b/detection efasthosting.com emergencyprep4cast.com mu.network pancytopenias.com # Reference: https://www.virustotal.com/gui/file/19dc94108fa40fab39e63da6436a1925dc3bb5491c4b0d7fef94fd4f26e42a62/detection 297191.com 2minus2.com 530westley.info affordablyrefined.com amerika-grande.com artificial-pigment.wiki becomemoreamerican.com bella-pi.com bets-bc-aingz.xyz bettermtl.xyz by8115.com cannabis-entreprise.com certezza.academy christinevandenhove.com comicbookkitchenparty.com designssavelives.com digitalassetagency.xyz drredu.com egfintl.net emperorsoasis.com expartcomputer.com footpeel-tr.com grabsure.com hokkistar.com ideaevcharging.com idwalalodge.com imzztoken.xyz klvfklfdklciovfkldklvcdf.store litho.ltd mapogosmello.com mendazilima.quest moodylight.store ortakoyfirini.xyz palisadestahoe.net pjduffy.xyz quantatix.com quotexqatar.com qyornaturescare.com restorativeeducationllc.com scarpatostudiolegale.com stabisville.quest techtv.pro theendofmonth.com valentina-gil.com vtuos.com wenxuer.com zeuss.info # Reference: https://twitter.com/V3n0mStrike/status/1751246926824026314 # Reference: https://app.any.run/tasks/45c442c5-015f-44e1-a6b5-8998e5c6ad2f/ 104kwt.com collegeshirt-shop.com israelijewishwisdom.com kevinstephensdesign.com kklvyy.com nextlevelindependence.com octet.asia perfumariacheirobom.site produceoficeland.com projectsupdate.com pslsjy.cfd va8qsy9rwa.info # Reference: https://twitter.com/K_N1kolenko/status/1757639707922407857 infiniteiris.xyz servicemailteam.com thesleeperandco.com veikkausbonukset.guru yvz74e01q.sbs # Reference: https://www.virustotal.com/gui/file/3970ae4e6f0de1fcf790d6d65f4ab7cd348d5256a1293bc196a5906b38acf6a5/detection admiralx-um.top doctorscrummaster.com yjeqj3.cyou # Reference: https://www.virustotal.com/gui/file/832b6bc13d01a6a29ed594caf07462dbacc619b9be8b52a6ccd53efc2b19eb12/detection 97238.vip bwchosting.com bydglobal.online charee.shop goremtnbuilders.com hkkwmhwv.site klix.icu klsxofficial.com moony00tsnft.xyz nasigoreng.online nmckyiqsi.top pinupmeals.click qfaw.mom sec-28082672co.info tinchap-nganhang.biz tprgamesslot.com viberteacher.net xraytoys.online zabloudil.website # Reference: https://twitter.com/James_inthe_box/status/1785306584081744095 dianomefs.cfd # Reference: https://x.com/pancak3lullz/status/1791899616234832272 tycent520test.com # Reference: https://x.com/James_inthe_box/status/1792642601440403887 # Reference: https://app.any.run/tasks/b8fe6ed2-d843-4340-b03d-4f8be11006e4/ trabnyvideosx.com # Reference: https://x.com/ShanHolo/status/1791374709658927222 # Reference: https://www.virustotal.com/gui/file/da739ef3c898ffb05d524c4697e6bee1b3a37a71a0e6e25c3d3d2b549a36decc/detection crimsoncascade.xyz gcashservice247.com gregoriusalvin.com infomail.website italiangreyhounds.online tintasmaiscor.com # Reference: https://www.virustotal.com/gui/file/00d3d0c49343dba533737e4a17cf453697aa569b00d07deb2cd7688c66d88ada/detection 222ambking.org avisrezervee.com bitservicesltd.com cherimoyacafe.com ecomofietsen.com employerseervices.com energyservicestation.com fclaimrewardccpointq.shop germanreps.com gritslab.com mygloballojistik.online shapshit.xyz thedivinerudraksha.com thewildphotographer.co.uk un-object.com white-hat.uk younrock.com # Reference: https://x.com/ShanHolo/status/1802999589701616106 http://192.210.150.58 # Reference: https://www.virustotal.com/gui/file/2407da1627f35dafc162c06c93c95d612ac0349488241d297152e41d0f8af7a0/detection econoautomate.com skinnovations.xyz sonhouseton.com # Reference: https://www.virustotal.com/gui/file/02af626e64ba37d93733dfbaa5ac38601c59521656cc0751b961800e22f36958/detection http://172.245.26.136 alarmself.com bialbo.com centrelseal.com cryptobaka.com draincleaningservice.club feononepage.com freewildhearts.com galvess.one gp522.com hmpmovie.com hungryrooms.com jarryfoundation.org johnnytimothy.store madhar.net magichniy-svit.com maximizeyourcampaign.com mightyminerals.com myrvpartsplace.com nolanvogel.com norwatt-es.com one01click.com pandorabrasil.life prima-xchange.com pwev.xyz rts-restore.com sabahbogor.com solid.events swiftlinkshipping.com waitakigeopark.com wieartoll.xyz xjjbd.com y8fdunconvinced.rest yarimadadekor.com yoursoloempires.com # Reference: https://x.com/malwrhunterteam/status/1814009754123190687 # Reference: https://www.virustotal.com/gui/file/a7113afc816d7271162798bbc5ef67b744336160c016ffe5fddf1107e6417478/detection http://103.161.133.121 http://198.46.176.133 00050280.xyz 00050680.xyz 123sz8.buzz 439570.photos 5425357.vip 88809.club aircraft6loan.xyz aituranft.app amimaneramontclair.com audmet.xyz bagibokep.one bt365961.com bugrasirinn.design clickrush777.xyz detodogourmet.com dinoweb.site fe25.top flickbetegypt.com globalbuildingbrands.com golden-retriever-miniature.com gwfilmphoto.com haulsreward.com hecxion.xyz hxpuog827m.top itjobsatlanta.com jaipreeth.com jdios.icu jf5i2of7h8kdl63.skin kindkill.com lambertroom.site layninder.com meninlovehk.com michaelsec.com mines254.com mintglowco.com mo60.top mtplus.online mytistabenifits.com n3tro.com nmqhu.sbs passiveincomeyourway.com pastecode.dev portalpuff.shop powerfulpositive.com praiseword.com quickcash.agency rmnqevea.xyz rohmglobal.com selfdiscoverywellness.com silstarascenter.com snapvideodl.com sodec-home.com somoka.com sp20242.click srnindustrialco.com sy-lg.com talentscalinggroup.com threadsbackups.com trevelloescapes.com triplekpets.com utepibu.com willsbountifulcatering.com wwacp.com yt163.top zvbbb.com # Reference: https://www.virustotal.com/gui/file/ecfc4d909793ddf4ac25da8cd24a138ad96cefd6284a1b7fe6cf7ccc0a297f46/detection 17tk555j.com 1win-yyy-official7.xyz 247866.top 24angel.com 96503862.com bt365231.com celestialcharts.network dungcamvu.com floraperfumaria.com jbovietnam.vin msmotorsjp.com sansiddhiedu.com slotcuan88login.com wukunstudio.com ygsj009.xyz # Reference: https://www.virustotal.com/gui/file/e878bc9103eb16c9edec5cb0efbc8ae207b0a22eb8dcd022e22863eeb644b484/detection http://38.240.40.42 fnx-group.net # Reference: https://x.com/doc_guard/status/1815733443419910487 # Reference: https://www.virustotal.com/gui/file/f17bd7fd6d8a9e5fcbda5a90f2e7b6cd0835e52eda90c374290e896cd460745f/detection http://54.38.139.98 # Reference: https://x.com/ShanHolo/status/1818541500348707022 # Reference: https://tria.ge/240715-kmwn6axfpr 2ecxab.vip 331022.xyz 522334.com 7140k.vip abramovatata.online aklnk.xyz appmonster.live axoloterosa.com bahismax.com barillonfo.net bb4uoficial.com beqprod.tech berry-hut.com budakbetingbet43.click casvivip.com clareleeuwinclark.com clarimix.com cualuoinuhoang.com depotpulsa.com detoxifysupplements.info drmediapulsehub.com easy100ksidegig.com errormitigationzoo.com f661dsa-dsf564a.biz flipbuilding.com h-m-32.com holisticfox.com instzn.site jezzatravel.com jwsalestx.com k2bilbao.online keendeed.com kursy-parikmaher.store lottery99nft.xyz malianbeini.net nn477.xyz outdoorshopping.net pcetyy.icu plaay.live polariscicuit.com pptv05.xyz project.fail qhr86.com qudouyin6.com quinnsteele.com reignscents.com rvrentalsusane.com rwc666.club sagehrsuiteindercloud.solutions sahibindencomparamguvend.link sfumaturedamore.net shapoorji-kingstown.com ssongg11913.cfd taobaoo03.com ternkm.com thelbacollection.com tricegottreats.com us-pservice.cyou used-cars-99583.bond wot4x4.com yunosave.online zj5u603.xyz zmdniavysyi.shop zsystems.pro # Reference: https://www.virustotal.com/gui/file/001092f8991390fa91aaefcb2f9a2b82c3a545557f0cacf7653531cf4e105a12/detection aalesundapartment.online alphaconqa.com cosmeticalowcost.com costofzero.xyz duoduo215.top fricknfrak.com golajme.com hausjazzle.com hooppthames.com investwiseehub.online isst.info jnty4506.vip kentoncoatty.org koiliaucepai119.shop malonrabat.site martinezolivares.com namenestegg.com payattelakebooks.com poker982.com pokerobat.com spanishnoir.com uchbfm.cfd waterandsoda.com wazicare.com zr4nlt.online # Reference: https://www.virustotal.com/gui/file/acdb9200f4df953d6baa67057e7064d01571bd0fa03fd4decce365c171527937/detection 00050427.xyz art4zenbyscribtine.com casinoramada47.com comediantes.shop dlimspunjabgovpk.com dtmt.online farmoviva.com ifcexpo.com ikonkablo.online lctglobal.com qmljg.xyz saktibalak.com shop-wcyw.com skilledrvrepairs.com thuthurahat.store vx67.top yerfmvav.xyz yyzb.tech # Reference: https://www.malware-traffic-analysis.net/2024/08/12/index.html 354388.pet 618110.com agiantsbar.com agrigatefarm.online airbnbneuchatel.com alohaconnect.org askvanta.com barbie69.xyz by2526.com coffeemakers.online connectionbyebd.com cradunk.com daisseur.online denflos.top doonsideproperty.com dressroza.com dulichngaaz.info forexpp.store globalexecutive.agency hachettegroup.media huanle.store ontoweightloss.health physicallyfit.org pmcq1.xyz ppsonco.store qkotc.xyz screw.lol sisouehnmnxxd.top steelplaque.info ueimg.xyz wowsomefan.store yu86h.top # Reference: https://www.virustotal.com/gui/file/0c7b2c7700ae8b1a73a2526154631fbf6f6019e8538d4d522f0a6f03e0537335/detection americanrelocationpros.com beachbumtrader.com bethelmargate.com crisdrout.com dlphntrack.xyz drkamaleshkidneystoneclinic.com freedy.xyz grcblog.com limonise.com signalbooks.xyz stanscleanacan.com webhearmedia.com xianggenshangmao.top /sa47/?S2J= # Reference: https://www.virustotal.com/gui/file/00353067ce93a59ca01cefd04bb95e6b5831f51d9e151539e44a5e114ae46114/detection 138566.org activere.org aiseying12.com boxishopp.com cryptobjective.com dzgbtctb.com eugeniyaandevan.com hejlillenumsegmial.com icascards.nl infiniti-software.cat lendicdevler.xyz mickingsolutions.com panelset.com purebeautysolutions.org qichebar.top standahomintric.com vitaminb12power.com winwin289.net xixi667.com yugnuk.com zacmanmusic.com zivoks.com /ibu9/?WL3lvHf0= # Reference: https://www.virustotal.com/gui/file/736575d7277732b652edade1e21e8614755935b24ba6b032c2a831748a006ac4/detection universalmovies.top # Reference: https://x.com/kddx0178318/status/1829493107123187788 # Reference: https://www.virustotal.com/gui/file/6eccb4a585edfb2d4589851a1994d2cfff4f6f7c05041a0fa4b1498992df6790/detection 14oz957dd.autos 870077.vip alrv9s8.christmas atrixdon.online azavivianonline.tech bropub3.online ealthcare-software-96535.bond erminia.net est-mortgage-loan-2507.today ickbrady.dev j10j.xyz j11j.xyz kfirsatimla.online nline-advertising-91281.bond ockyjapan.net onnaberich.online ormswarm.xyz otaislifexd.xyz rohns-disease-early-signs.today xrmxfh150.xyz yexoiup.xyz ysticastrospain.online zesuteta.shop /m49z/?cz # Reference: https://x.com/ShanHolo/status/1831712927893578149 # Reference: https://www.virustotal.com/gui/file/c8fd300e87a7bf78dacadc8c3e826ac7135efc804966c0b2fe098250eb443738/detection http://52.195.219.214 2886080.xyz foundation-repair.biz sgcwin77rtplive.fun # Reference: https://www.malware-traffic-analysis.net/2024/09/11/index.html allthingsjasmin.com chalet-tofane.net d27dm.top everycreation.shop federall.store inf30027group23.xyz kabaribukota.press lojashelp.video mechecker.life platinumkitchens.info rockbull.pro rtpgaruda888resmi.xyz sansensors.info trisixnine.net useanecdotenow.tech weatherbook.live # Reference: https://www.virustotal.com/gui/file/1e0a87b108efea24b2bc3d44a7d62008763498e1b1bec26818724edd74fbc84b/detection albertabeerlawyer.com allegrafindlay.com bettaroom.ru cawthonisland.com cortonomous.uk drjoserizal.com fraseszz.com g1we2a12f1fqw.top ojyphyi.website qpdkg.lat thegoldengirlsshop.com vivelenoire.co.uk # Reference: https://x.com/banthisguy9349/status/1836081813409632439 # Reference: https://www.virustotal.com/gui/file/fe255f931fc3c8920862d4acf6c8e797bc20951ac25b7b7e27f0fa2921abe453/detection 2024tengxun361.buzz amitayush.digital arnstadt.vip crochetpets.online fitfan.life insicilia.today sapatarias.online zz82x.top # Reference: https://www.virustotal.com/gui/file/2a567983b658efa18cca57328fea4fc0ebae27e9a0b13fa24dd91d4bcc1e8dd9/detection nlslzm6maz.com # Reference: https://x.com/D3LabIT/status/1839280512000577555 # Reference: https://www.virustotal.com/gui/file/e4d1f88b5db146a70bce062886dd60b15d13bda9b325535ef4d3ffcb484981ec/detection 19bet.xyz 368i8rnoy.xyz 61ep864tr.autos 7556r.club 8015.xyz 8080734.xyz anfocusedviews.shop ar-deals-15908.bond arpediemwireless.net athroom-remodeling-59089.bond avada-ga-3.press avandakitchen.online b-999.top believehim.net c-marketing.net crubber-brush-64789.bond eeplab.xyz elationship-coach-72450.bond elix-saaac.buzz emosjumpers.net etausaha.online eth-paaad.buzz filmyhit.vip hwqcoiu.xyz iangshen56.cloud igitalonlineseva.online inoliga.app iversitiendaplus.shop leeconcerned.info liveiraeletro.online lxspinsenin.lol mvqimnpwkxcixccaeafmibpiq.top oland-flight-deal.today opinformation.net ounjaronaturaloferta.online ower-bank-za-4886348.world pboardresult.net reakinggroundtherapy.pro renvillemarianne.net sed-cars-35796.bond sqqpkv.pro sychology-degree-69585.bond toptalkingaboutit.net tudioalberto.online uwueriudsjkdjnfjkdjnkxzk.vip wgxb.top wpgs2448.vip zkirv.top # Reference: https://www.virustotal.com/gui/file/006be2382a7564f63d2e3a095db87949a9dc6691f69fd22d7fbb31f0f8c9c3c5/detection amkmos.online blockscraper.com cscf1000y.com detallespeciales.com jryhzzs.lol little-character.com mahtayurvedapvtltd.com megaqq77.com moonbam.network qriem.com skpjqav.lol skyinftech.com stellardaysigning.com therealmforge.com wiltonz.top zx766.com # Reference: https://x.com/ShanHolo/status/1850138336393863678 # Reference: https://www.virustotal.com/gui/ip-address/65.21.196.90/relations # Reference: https://www.virustotal.com/gui/file/7c574bdd2bab3a3aeac6e023238fb3c1b20748048207b45cd7a483502b6c0a3e/detection 030003378.xyz forklift-jobs883.click # Reference: https://cert-agid.gov.it/wp-content/uploads/2024/11/formbook-12-11-2024.json kevin-torkelson.info myjiorooms.services vasehub.xyz # Reference: https://www.virustotal.com/gui/file/047cf01946d338dbb132a5564269002b6aba1b0b2bf26b3199503b7d293712f6/detection becker-bauelemente.com creative-outs.com cygoodshopgogo.top djtescao.store drrnagrl.cfd ecpgbtrj.cfd ex-sideproject.com gotothe.bar incontragay.com j51xit.cfd jc1134.com jerxier.online ktkequipment.com lhivpgi.xyz lindenhursthfc.com mmbythmv.buzz muaslbaf.cfd onlinemarket.cloud pioneerelectrical.net promoaverage.site qcekilps.cfd samtroart.com spatialdatacapture.com thutceem.cfd tonder.info unificcoops.com # Reference: https://x.com/James_inthe_box/status/1866530426216648845 # Reference: https://app.any.run/tasks/43f807db-2361-4807-8e05-19831c56b5e4 sunnyz.store # Reference: https://gist.github.com/silence-is-best/80e7b20f37e8ba6212144d4a37fb714d amyard.shop bienmaigrir.info bser101pp.buzz d48dk.top masterqq.pro prestigerugz.info snyp.shop soainsaat.xyz thaor56.online xcvbj.asia # Reference: https://x.com/salmanvsf/status/1877257317424439351 # Reference: https://asec.ahnlab.com/en/84574/ # Reference: https://www.virustotal.com/gui/file/c2dc3417156e0194d217765e77feba875380a4095be0d5dfb627d859c6685fd9/detection # Reference: https://www.virustotal.com/gui/file/6276f6fac834e355ef86d304598a128d7155cbad4d1e70b1bf3db088dee0d744/detection datarush.life site-techonlogy.com # Reference: https://www.zscaler.com/blogs/security-research/technical-analysis-xloader-versions-6-and-7-part-2 030002304.xyz 44ddw.top aaavvejibej.bond aarunifoodcrafters.com airbatchnow.online alace5.com allsolar.xyz am8pw.us arasymimbi.com aromavida.net aspasskeoffice.homes avolci.com bayarcepat19.click bismarckrecovery.com bkexclusivecars.net bluegirls.blog brighterhomesdecor.com carpmaxxbait.online cgm-logistics.org childlesscatlady.today cuffbow.com devocionmusic.com dhkatp.vip dsisarl.com dto20.shop dumpstedoctorca.com dutch-wildlife.shop earn50k.com easestore.shop eeja.uk efidence.com electra-airways.info electronicraw.com energeticfranchise.top eslameldaramlly.site fastr.live flusznwrldwide.com fraternize.org gattosat.icu getmylinks.cc goog1evip15.com greekhause.org haftplicht.com happiluv.com haycoches.com hentaistgma.net hk9.xyz huemanstudio.today iwin.exposed jamesgadzikmd.com jarvisandbrown.com kavanzi.com kx507981.shop lenaguillemette.com lifedrawingbristol.co.uk limitlesssky.org livemarkat.live lollybowly.com lriz.site luismoreno.monster mag-flex.com markthing.site mc9uh8d70.site meg21c.top moncoop.coop mscfoundation.info myhosting.co.in ngmr.xyz nojamaica.net ntn.solar ohio-adr.net ok2yu.us pachuco.supply pethut.shop pinnaclebyte.info polarmuseum.info portfutures.asia projectimprov.com promasterev.shop queima.shop resumeyourway.info revelationfithub.com roundhaygardenscene.com royalkredit.online rtpngk.xyz sathyfe.com sazekents.cfd scwspark.com serverplay.live softillery.info solar-windturbine.life tehranrizcomputer.com theproselytizer.net tk254kr6rwr7mjtru.com torex33.online tracy.club trapkitten.website tupinkeept.cfd uxzl.site vegastinyhomes.net wdcb30.top wdeb18.top weberze.com womenscalshion.com xediedie.icu xfgqbh.site yourhomecopilot.online yu35n.top zwetststuren.cfd # Reference: https://app.validin.com/detail?find=Habitat%20-%20A%20Professional%20Bootstrap%20Template&type=raw&ref_id=f06f0ebe695#tab=host_pairs (# 2025-04-19) actionulse.live axiomaticlab.live boldedge.website bouncedash.live cloudwave.top cozycomet.life crumbrocket.xyz glitchnest.live hyperdyno.info kightpath.website lavafox.website limiles.xyz mellowzap.site neurotap.xyz noodlejet.website novoint.xyz orbitflick.site peakrank.top pluribiz.life primelow.live quicktraze.website snapbit.site thrivell.life vaportwig.xyz velocraze.xyz visipool.site wafflepeak.top zenacode.live zenithphere.site # Reference: https://x.com/K_N1kolenko/status/1899386519963500841 dualbitcoin.xyz espuna.xyz kantad.xyz purepot.tech skyew.site valorpackaging.shop # Reference: https://x.com/skocherhan/status/1902201610006396972 # Reference: https://www.virustotal.com/gui/file/45c14e9996d48547335f3622fbc733ca0c7008ac28f78782d2fd1d00daa08f38/detection 2ndwifemoneyfor.com 31corteplacida.com 409manbetx.com 52099.ink 637800.net 666668t.com 80abgtcaqw1f.com activestrong.com alliancehorneloans.com apstoreforpetlovers.com aryaasia.com avuk8e.info axs.science bestadvicever.com brusewei.com cadsapien.com cniito.com com-shp.com dragonheroes.online edison-kurgan.com findmybbw.com freetrafficforupdateall.review fresist.com henanzhengshi.com hokkyfood.com ieabiotest.com ika.ltd imagarium.com intocoupons.download jeebontori.com krazymomma.com lifeinoffice.com littleapple-vo.com livecalendar.online lnues.loan makrobet336.com malacaraserver.com manchwellness.com manginternetvnpt.info marroncreatives.com medmjcapital.net mens-erotic-wear.com merapitheme.com mgsyp.com mobenstudios.com newsevents.online paidingzhi.com photofacial.expert photographlisbon.com proseccomontecastello.com qnu8dd.info qslsspjx.com rfxuat.com rollstaff78.com sanjati-cosmetic.com sebastianwinterwriter.com smarthards.com suncity2019.com synapseafrique.net szccf360.com tctrib.com tempssedetendre.com themakingstatementsboutique.com xpansiveshop.com yourspecialmessage.net /ob/?ML0tLF= # Reference: https://x.com/JAMESWT_MHT/status/1902283433902035188 # Reference: https://www.virustotal.com/gui/file/bd2301d09553a1e89f2b9a54eaf5a1f64038029a4cc4318d4337f34e8e5021ac/detection osmica.live /bk6y/?ct= # Reference: https://x.com/K_N1kolenko/status/1902698534291333438 anyang-590303492.click blackhat.chat erovoice.pics garan.shop gellyhall.shop jxcnj.org k2gold.group leosnybagel.xyz mailersquares.online nashishop.online sc200boss.sbs soportemx-findmy.click tgwfj.xyz vibeam.live # Reference: https://x.com/skocherhan/status/1903700121189318749 # Reference: https://app.validin.com/detail?find=e4e087a6bc00deace6b5&type=hash&ref_id=d8fea112143#tab=host_pairs (# 2025-04-25) # Reference: https://www.virustotal.com/gui/file/9b7f5fe8a427008edb8c5a059ee7151f6b50e66e17fd2272369e9c7398d05d42/detection # Reference: https://www.virustotal.com/gui/file/ecefb803180041d0c6ba85a10cfa411d287f4ecf3a5ad70de80e47a11e1d7b32/detection # Reference: https://www.virustotal.com/gui/file/b4938bda6c1e18e3173f977c519924835c5223362b6f52b2bcb7ef8be071277e/detection 031234912.xyz 21098photoit.pics 51-clubb.net 788477com-bbs3.top 980598.shop adsmstech.shop ampmplay5000.vip asnanii.shop astrologerritesh.click blackshoe.shop caseyscomsurvey.shop chene.shop climatepro.shop codestorage.tech cperflsn.shop cvbzntlez.shop digitaloutdoordogsupply.shop dltmcw.shop dmart-offer.shop dthotelsdf.shop dubaicarpark.xyz duhbu.shop eioo.org ezleaf.shop fhm500166i.vip finsholdings.online fomilto.shop geopet.store giggiolone.shop gonzalezstore.shop goprost-men.shop gpvxjayx.shop hdghub31.xyz hidwzowij.shop hxkaaphdv.shop ihwx90w1m.shop indiapharmacy.shop irhamoakemlimb.shop jimireb.shop kalikasan.xyz lamorenadiving.net lgikijde.shop liangfeng.cloud lockedoffroadprm.shop malayexpess.online manzuan.shop miracoins.org mm018.xyz networkcomputing.tech nextgengadgetz.biz nianghip.shop nihu.shop nodefolio.xyz odevona.shop onebodyonequran.online ontidfe.shop opreinde.shop owewbsann.shop pcguardsvault.live pembawa.xyz pembiayaan.xyz pklodew.shop play-venom-rush.xyz plinkobinko.shop ppostealeone.shop primuslabs.cloud qmldow.shop qxwdcmg.shop reiki.voyage replode.shop rstyle.pics s7uw8jjxf.shop shibsocial.xyz shuangunder.shop siik18.boats skinbeauty.shop sneakercross.shop specialgpt.xyz super-mist.store techcakes.xyz thykingdomwear.store tku9aoxdmn.shop twoskirtsco.shop tyuw19.shop tzurik.click uvly4e01mb.shop vaishnavi.xyz vsilmhxj.tokyo wiggle.info woodenbook.store xjhobbies.shop xocoug.shop zhenghard.shop zzavcw.shop # Reference: https://x.com/skocherhan/status/1903695571593945130 # Reference: https://www.virustotal.com/gui/file/432c0a8707fb053a2fb053de43525e6a892a1d72e92d0226fb11ef4c2dbf8479/detection # Reference: https://www.virustotal.com/gui/file/e9c775996d508887553a42f6d22b0b327e1b3a474d0dae1bcfd009b42d88c20b/detection jialei.xyz optimuminvestment.net uniservepro.xyz # Reference: https://x.com/skocherhan/status/1903992436373750251 # Reference: https://www.virustotal.com/gui/file/dd0a805eb7aabc613481611d6ab5288b7b9d916ecc61d567a11659c300e84933/detection 1gv52.top 4109a37a693.xyz 51je936qi.sbs 6m86.xyz abysitter-service-32322.bond ags-under-999516409.click anglore-flats-gov01.today archattinfobreach2024.net aycrk.net b777.top ddanything.win dtech.team ecurity-jobs-61871.bond ell-property-32572.bond emglobal.net enesiscorporation.tech estdrivencompliance.net etoxsecrets.today exbjfpbxhjcgzsdgumh.shop g-poc.net hestarterkit.xyz ihdwt.info itchens-31.bond ixel49.shop kin-rejuvenation-60489.bond kin-rejuvenation-67012.bond log987resultbest.shop nolises.shop ntesa.group obahrainiioyiq.shop oho.uno olawanliao33.click ollipop.group oloactive.college ome-loans-72725.bond ontacttracingwristband.net oorso.live orussiansthub987q.shop oyalthaiherb.net parkautotransport.website pdld.net phconline.info ressconversation.run rview.net sgazaproject.net tgr.pro tudy-in-spain-58534.bond umpsiconi.shop urseryinfo.net vwhay.info wmzotvekqsnbaxvf.shop yperpigmentation-45231.bond zhexifniu.top # Reference: https://x.com/K_N1kolenko/status/1904766577980961103 axpnqq.business confyxerengine.info dsigngroup.net ecksbadgirls.net ggbj.top headvancestore.shop ilmeonlibe.online ioace-it.net oelsharon.online omfycoffeecorner.site riceradargeniusnow.xyz uanyang.store usthavelist.app ythought.online # Reference: https://x.com/skocherhan/status/1911781634191294787 # Reference: https://www.virustotal.com/gui/file/1288749acbec0442294a4de48b128c1b4a2434ecb18d48ad5567bf0a2542a837/detection agistaking.xyz anartisthuman.info temecula.deals zeniow.xyz /c8u0/?gpYH4XwH= /c8u0/?WXchszo= /xwqx/?jHo8K= /xwqx/?_Lx= # Reference: https://x.com/skocherhan/status/1912242726285746365 031233051.xyz 031233529.xyz 031233882.xyz 448828.party 7gcapital.club amtdevelopment.pro arrchii.xyz blogkart4u.xyz braposaldesk.cyou crosspatches.info dappbtc.xyz dd87558.vip deepwork.cafe dgpno.info du6m8zk1.vip eatdaba.shop enpgcb.info fkrvhaupjtc.info friendraiser.net fstudy.xyz hastanhizmetleri.xyz isoemarket.shop jewellake.xyz kizlo.tech lenzor.xyz lounge60.shop malekenterprise.xyz musicail.xyz nan21.net openseafoundation.shop otonix.xyz paoginbcn.net primepath.net quwzcz.info rbopisalive.cyou rumgdz.info scottish.cafe smartrbaskets.net sonygraf.info splogi.xyz teschi.xyz tether1.xyz thefounder.ceo urbagan.net visualizerlt.store westende.live xchnge.xyz xmq-servicecenter.xyz yakabetguncel.xyz zeniore.xyz # Reference: https://www.virustotal.com/gui/file/17ebff01add23c39eb97265c5d825f490326a19073f6f9091e2bc19136772b40/detection http://174.138.179.43 quo1ybjmkhdqljoz.top # Reference: https://www.virustotal.com/gui/file/19a610efdf9693350e5b9eea2959b328c74dda894c87ee55955a3a1a4967c0fb/detection lingkungan.xyz mobi-phone.net nexusstakes.xyz warc.tech # Reference: https://x.com/K_N1kolenko/status/1917088917011955968 031234440.xyz ambitiouswomen.net aqbtkj.top auradesigns.xyz coininsight.tech efcoin.live eternalethereum.xyz guiasservicos.shop holorush.live kissjav.pics newshunt.biz nicheremedies.xyz rciede.info royalbond.xyz rtvs-sk.sbs # Reference: https://x.com/K_N1kolenko/status/1919697053652816165 ap1w9f.top apesquery.xyz batchcopilot.xyz caribsljm.net ceacg.xyz countryclub.info cyprusestate.net dappassets.xyz decoding-us.media logicalcomputer.xyz lymo.live onsome.info privacydapps.xyz textureassets.xyz winmy.news # Reference: https://x.com/skocherhan/status/1919828243466617116 # Reference: https://www.virustotal.com/gui/file/1868be5b142d2e686c6994bbde095753080bb5c346d474e0f4214773c0a1150c/detection http://192.3.243.172 layer224.xyz mebuceiop.xyz thought-hop.app triv.website /xampp/fbo/bestoffertogetmebackwithnicepeoples.txt /xampp/fbo/bestoffertogetmebackwithnicepeoples.vbs /bestoffertogetmebackwithnicepeoples.txt /bestoffertogetmebackwithnicepeoples.vbs # Reference: https://x.com/skocherhan/status/1919698622649622570 # Reference: https://www.virustotal.com/gui/file/9262bb8d45b86ce3583351d99db66eeb3481102a260477360d93185677da2863/detection 91dun.vip ap1w9f.top beverlyhillsdonut.info cb0001.scdn.91dun.vip cbpamke.org klb1999.fit rightloom.xyz scdn.91dun.vip yourmutualcredit.xyz # Reference: https://x.com/skocherhan/status/1920353804182028437 menguasai.xyz pixelplace.shop xdoge.live zenithint.xyz # Reference: https://www.virustotal.com/gui/file/078cd1b6995a95e2057591899a7050da5799ad226afefd75fd442060efd1b027/detection 130t.xyz 3a4p8gq8bojwn.xyz 5zbm0.cfd aser-skin-treatment-95250.bond aysec.net ellbar.shop elvetvoiceskiresorts.website erspacehealthandwellness.info g1wszulqv7lc.xyz gsp657.top hagrinleemotooltechus.shop hbnzk.cfd igitalmilanolegacy.shop inktrim.xyz kfast.store kpqh.town lx2cbhe5vee0e1.xyz netuzio.xyz njjwh.info ompanion.bio rog.top teelpath.shop tp-batik77-1.vip x92q.top # Reference: https://x.com/skocherhan/status/1923748837266501816 bloodycovina.site carriageletter.icu eggnogunit.xyz flavortop.info frogtruck.xyz getglobaldata.com ministerkiss.xyz picklebat.xyz quincestreet.icu ricebreath.icu seeddevelopment.icu sodabedroom.xyz teethelbow.icu threadbranch.xyz topmounting.com troublesisters.xyz venaetdqfn.run # Reference: https://x.com/skocherhan/status/1923854308316987452 # Reference: https://www.virustotal.com/gui/file/d17fb30415089f60d847648d73f98438977a7dbcdcacbdcfc9054fb39557f1d0/detection http://208.89.61.141 powerplants.info # Reference: https://x.com/skocherhan/status/1928938796898492748 aksow.xyz audiobooks.ltd autorolluphub.xyz buildertools.xyz cardo.work clevelse.live covoai.live cravatte.xyz dfsdfgergrrtth.online dgdetailing.pro doeda-pvcw.xyz droneapp.xyz earthandiris.net echotch.website fasadmebelchelny.store financialsquare.xyz freedom.golf gedankenlaut.xyz getcasino.info h34ry.top hagitkoren.online halo78.org herpich.one hptechsoft.xyz idearchx.net idgluxe.shop infinityplatform.xyz jefebusyness.net letsgoogarage.click quick-image.xyz rentnt.xyz rieo.pro secretariaa.shop sticker.business teamx.club tempoproje.xyz turbocloud.website vibeark.xyz voguevanguard.xyz vpert.online # Reference: https://x.com/James_inthe_box/status/1929560663963144661 # Reference: https://gist.github.com/silence-is-best/ede4c444ba406003642a99017274413d 5794.loan anguage-courses-48869.bond arinsurancehints.xyz craftytee.net ctopeaux.shop echowok.xyz encorebrands.info expertscloud.xyz ikure.health ilansocials.online instella.net livego.app noahsandoval.store parshmen.art swordsandbox.xyz talklayers.xyz tartweb.click tqzjixmd.biz uqcdnvgr.biz worrr17.homes # Reference: https://x.com/skocherhan/status/1930089890026533063 031233926.xyz 031235066.xyz 031235246.xyz 2hvve.xyz 86536.pizza actionpulse.xyz adventurerepair24.live aicycling.pro allenamento.xyz autoabmeldung.net autonomousrich.xyz balivegasbaru2.xyz banjia0731.icu baurishu.info bitcoinescort.xyz bitcoinvendor.xyz bitsensor.xyz boldhozons.website brispere.site brothersharetender.xyz btbjpu.info caral.tokyo christmas-goods.store covsds.info ddvids.xyz dogeeditor.xyz dqvcbn.info enkisan.xyz esushi.xyz exhelp.xyz frpisealbites.cyou fz977.xyz gariano.info hoaqua.xyz hugeblockchain.xyz infiniteve.xyz intention.digital iquery.xyz israeljobs.net j8g5rjpc.top jeanandolive.net kakupi.info kalebetgirislinki.fit kasun.wtf kdjsswzx.club kdrqcyusevx.info kpilal.info ladies.center leveledge.sbs liveseam.live lucynoel6465.shop luittard-le-mode.shop matindi.xyz meacci.xyz menekankan.xyz mykitchen-ideas.shop nhc7tdkp6.live openambient.cloud pembukaan.xyz physicsbrain.xyz rds845.shop safitri.shop satoshichecker.xyz seasay.xyz selcukselcuklu.xyz shibbets.xyz sigaque.today sofiaagibson.xyz sonomedgroup.online spinco.news sscexampyq.watches stellaritemvault.shop stellub.site superhoroz.xyz tabs123.xyz themutznuts.xyz topear.top travel-cure.sbs trustai.chat tumbetgirislinki.fit tyxxg.net weilaishijie.xyz xrrkkv.info yueolt.shop zhuanphysical.shop zkplant.xyz zltbd.top # Reference: https://x.com/skocherhan/status/1931556563463905542 031234245.xyz 031234799.xyz 3333bet.website 382d3.boats 567win.website 61081.shop 623575.xyz 6644win.mom 72422.pink 7p55-7p55.top 8vhh8.makeup a2market.online ai4y.life aiphones.xyz algerparsiyel.xyz allinoneavenue.shop archie.cloud ayase-bluesky.xyz b78urc1.shop banayad.xyz baratabetvip.pro bashionisti.shop bebigclothing.xyz beds-campaign.sbs bionanosurf.info blockchainvip.xyz blzxbet.pro boldcatchpoint.shop c3py4i6s.top cargolite.app carshowtuning.info click68vp.store cloudhypo.xyz coder.shopping computetools.xyz critai.tokyo cryptoannounce.xyz curiosa.news cyberpraxis.pro daniloperez.net diehutigen.shop dietproio.info drgnmoney-98.buzz drippin.tech eczanem.shop edtechcreator.xyz ekstrak.xyz empero.fun ethnicfinancial.shop ezchem.xyz factio.xyz ff87558.vip full4movies.christmas fun1995.net funday24.ru futurt.website gamewarriors.live gdlsolarenergy.store ggpoker.xyz glimmerrush.live globedesign.xyz golleger.club granvillesentinel.org hakzmkt.tech hangten.tech heroeshaulingca.net hocoba.net hoskel.tokyo ifxquw2lfld18.skin illuminatidata.xyz immersivemoon.xyz jellbit.site jinzebengye.net kayaki.net ku188.today lahasen.net lavanest.website lbsgolf.net loginjablay123.live manikurseti.xyz maticon.xyz mczacji.top medcangroup.net melayari.xyz meredithamon.shop miconion.shop minttide.website moderationstation.xyz mslgdkor.xyz naturelingo.info o8azymfkzk8vk.buzz object-58974.shop paylocap.net pixeldrift.site polanyaindah.xyz powink.site quokkajump.live ramabuktijepe.shop rapio.site reviewsonline.shop rikyuu.xyz roastroots.lol rtprubikslot-asli.xyz rupto.xyz rwefzczx.club servisyeni.xyz sexkoreakhongche.icu sgtvs.top sidd.fun silbrco.com slotgacorterbaru.xyz snappypeak.top sonddajika.bond soyuz-zoloto.online storii.shop stuhlmann.cloud swatersantuy.click swrvnuep.xyz thebourbongospeltn.net thrivte.website thrustaviation.info tieniu09.xyz topdogdrones.net vipwin.buzz vitalay.life whalenavi.xyz wholly-well.info worrr13.quest worrr19.sbs x56uasf728r.shop xxxvideosbox.xyz yeupnz.info zeniost.xyz zestypath.xyz zhangthird.shop zthzzyg.top # Reference: https://www.virustotal.com/gui/file/22d5d86fdbaf20732ea8df5293e71795a0ca1ae7c1edb31fc4ccae6735e9bf2a/detection 031233414.xyz 896bt55fz.xyz bytes.press computational360.xyz fix.shopping huanmengzhibo.net hypehike.buzz maizhaozhibo.net mgf-301wu0.vip nohuz68w.xyz pigeoncomics.nyc qs369.xyz regicom.cloud scoopdog.app shanzhuzhibo.baby theobservanteye.sbs twistedradio.org # Reference: https://x.com/skocherhan/status/1932142616638103874 2345bgnrty.lol 3groupe.business ahamasskate.xyz ailis.cfd alancedteam.info aminvip3210.sbs ar79872479489.today arehouse-jobs-52853.bond arkettelligence.net asereward.cloud asternky.university ataleague.xyz avada129.casino b-us-stone-panels-27f.today devgirdi.cfd eaconfactory.xyz ealallergystudyhall.online eforcertx5090.shop egapersoneaals.online egapromodealsdirect.world eltatechnologies.info eomappa.net ercowboy.net erityhub.tech etrev.world gkdemy.net hatchadoin.net iami-florida-county.cfd implyhome.info iomar.biz ishlist.run isneyai.online itness-center-id-5619388.world jhekite.shop lexacons.net lus-size-swimsuit.today mallelectricarsgb.bond naycrystalsava.shop ncryptchat.xyz ndreas-marketing.xyz nipers.digital nsitechsolatam.net ntelligenceplatform.xyz ochafariasbusiness.online odeinfra.xyz omfortemporium.online ordphanter.info ouasd.xyz oyle-lawgroup.online pblanket.xyz raft-opia.app rca-nc-test-13.fyi ridgingruralcommunities.net rimeone.fun romof.irish ronbloodtattoos.net sghgs.xyz tfe2f.shop tp-jos178-a1.online ubliccnfdcbqae.xyz usclecarsales.online vatardesigns.xyz # Reference: https://x.com/K_N1kolenko/status/1929871072532250758 031235218.xyz fourexclothing.shop iphone16.shop kakeksakti25.cfd koalasan.net petersen.photography play-whisper-forge.xyz private-trainer.cloud toncho.art turbonest.live venturegioballng.fun # Reference: https://x.com/skocherhan/status/1933562678254915823 # Reference: https://www.virustotal.com/gui/file/dd5edc5d6ca3505117d9f1b5bccc097dab0cbebfcb7fc373c8131f088b195520/detection antonio-vivaldi.mobi clubhoodies.shop clzt.shop cozythreads.store cruycq.info dnft.immo goldenjade-travel.com joyesi.xyz lonfor.website magmadokum.com marketyemen.holdings nosolofichas.online overlayoasis.quest rssnewscast.com sonixingenuine.shop sutbkn.info x3kwqc5tye4vl90y.top y6h6kn.top # Reference: https://x.com/K_N1kolenko/status/1937479231681741070 1659bet.lol autoscenario.xyz kincirclehealth.xyz lopixa.xyz miyue457.xyz todaysport.xyz weborigin.xyz workspaceplatform.xyz # Reference: https://www.cyfirma.com/research/apt36-phishing-campaign-targets-indian-defense-using-credential-stealing-malware/ 59292406.xyz chillchad.xyz kp85.cyou # Reference: https://www.virustotal.com/gui/file/8779b70231926f6b486dea22bfe04c6659533c64582a916df3f6b4e7eab47014/detection 031235285.xyz 100lica.online 55cc.info 740900.party azval.shop bakor.store credit-agricole.pics enceladusdrop.xyz ethicalcreator.xyz fitnesstitan.shop genericagi.xyz livulse.live mindfocusn.pro restrainreflection.xyz rtprubikslot-asli.xyz skingraphica.net visionary.finance webcudos.xyz # Reference: https://x.com/skocherhan/status/1942471141425041433 # Reference: https://www.virustotal.com/gui/file/575398c7fc2c460fbfba428791f2cd100f9699d6c16d6b3e200ae2fe8cb63e96/detection 12345lopkmj.lol 62258.net apelow.top birminghampsych.online bolaemas88.online qooqootv16.store v153cbo9xcl49.buzz # Reference: https://x.com/JAMESWT_WT/status/1942498358645645794 # Reference: https://tria.ge/250708-jm9eks1qv6 8293.sbs 868com643.app 88865.xyz ababakh.shop acking-jobs-17785.bond ai8866.vip andirussell.art anguage-courses-93435.bond apecash88.xyz atamspa.net c0518.top creenboard.top d25124166.cfd del.business eboldbraverobot.shop electsoftwarereviewshub.top eraka189sleepguy.xyz estcleaningquote.info etabeauty.clinic etmagneticmessaging.top ffoik.top g-farcaster.xyz hamarhqh.net henhuazhai.food hepio.click hlbfs.top iendaahorro.shop ifodsiffl.pro jalki123fa.app kv16ybq7qm.sbs landestinecreations.shop latformjago89servervip.lat limaxholdings.net lphacustcareapp.top lphagatherhappyhoney.forum m444.top obgil.xyz occpit.net ocumessage.click oldenapple.studio ollectionss.top omagugra.cfd otholez.xyz ov-fze-pay.top ov-vdotbt.vip ovapeptide.net ovie-tickets-89216.bond pennatelindhq.top pkmagic.xyz q0.shop q8ocuz2.xyz rolan.shop rtprinthop.shop shfgr.pro sy609.top trezcip.xyz txbx2.top ubuly.xyz ucnso.top unseokyang.dev uochantanhua.net vow0bfd7z3-wc8g.shop x06n.top yfamily.bar # Reference: https://x.com/skocherhan/status/1943442412938150374 14382lilliancir.info atomicmanager.xyz bole.asia capturemetaverse.xyz copygamefi.xyz dul4dv.cfd electric-bikes07.today epilepsy.pro ethtemplate.xyz filehorse.online mywir141.sbs protocolvirtual.xyz rocketkava.xyz taxpy.net veltowave.life # Reference: https://x.com/JAMESWT_WT/status/1946106663829684680 aramco-files.cloud astaoffices.com lctechengineering.com petrofac-files.com saipem-files.cloud saipem-project.cloud # Reference: https://www.virustotal.com/gui/file/0157b660ebea0c4eaff16124abeb54a153d6dbec358456b1e383205292637d23/detection 8pxlzy.vip centerwhale.xyz fymo.top gardeners31.click handwerkeln.info prompthub.asia superar.info thecelebrity.net # Reference: https://x.com/skocherhan/status/1951491387179888910 # Reference: https://www.virustotal.com/gui/file/576a3d025cfd33442e9556b9953926a679eba8cd83b3b12a2feab9a7e021702a/detection 2026xr.xyz 429s233s.top 596767.top 78449973.xyz 78451658.xyz 9axgb6.vip achtzehngrad.net ascendia.club augmentingdata.xyz biologyedtech.xyz buymydomain.today clearairways1st.net driftshark.top editmedtech.xyz financialbalance.xyz frereasisted.net gdnyems.info hangjiayinyue.top hiddenworld.xyz lecerisierenfleur.net m92ivc7bt.xyz magicsagents.xyz maxboxbrasil.shop missionaccelerator.xyz moalucky.top northcarolinaoms.net outputscomputer.xyz oxymovie.sbs seo138linkamp.dev shhiajtdaz9bhau.top sloshe.tokyo staticmediax.net streamingsite.xyz streamsearch.xyz synergydrop.xyz thornsw.online tightly.lol ts-coaching.info twinspapa81.shop udupi365.bet ukinky.shop youpartnership.xyz # Reference: https://x.com/skocherhan/status/1951998006686839018 airdropcafe.xyz drlara.xyz hyperautomationvr.shop livream.live michaelaowen.xyz peetzlifestyle.net perfumedeparis.store primebes.live # Reference: https://x.com/JAMESWT_WT/status/1968982187782365647 7130ce.vip gooder.bar # Reference: https://x.com/skocherhan/status/1971543474655670452 0039.love 01916.town 024739.com 03hw46d.net 06018.buzz 0602.top 06581.icu 0741.love 07zxb5g.net 0894.top 0925rc1.vip 09768.vip 0byz2ev.vip 0tcn0ng.vip 0z1eki2.net 104166.com 10621.love 11353.icu 124cj9gw.com 1430.love 1451.top 14a26rs.net 16476.co 17315.gdn 1779.love 17rf79f.net 18438.icu 19255.ad 1ekgy1i.net 1vj2or4.net 21068.icu 22181.work 22xampr.net 22yc7cj7.net 22ze4qr.vip 23232.xn--90a3ac 243825.co 247945.cc 2491.top 2493.love 26912.love 27547.love 2819.love 285863.town 28jtw.com 2s8lu7l.net 3074.top 3157.love 3167.love 3168.love 338309.vip 345jzgz.net 3473.love 3537.top 357969.town 363473.com 37335.work 3968.top 39802.one 3a2866.tv 3bdwz.net 3dzaf9w.net 3lq5f.cc 40295.co 40371.co 4229.love 4292.love 43026.work 4398.top 44584.icu 4462.love 45238.cc 45862.icu 46739.org 4816.love 48420.co 4843.top 48497.work 4s83rjt.net 4wwbqjj.net 4zqd3j1.vip 50259.icu 50591.work 51142.love 5297m.vip 53002.ad 5349.love 55249.love 55403.one 5771.love 57804.icu 57839.icu 57860.work 5795.love 58104.icu 5957.love 59651.xn--90a3ac 5ecms1z.net 5f9zndz.net 5iwhnua.vip 5touf.cc 5uhlnkh.net 6077.love 61364.co 63788.town 64163.top 65474.work 66527.cc 67058.ad 67619.top 68443.icu 68f1s.net 694147.town 6f9pd.com 6fgl4xp.net 6hg0pfq.net 6p3svqs.net 704qe.cc 70608.love 7125.love 7224.love 74537.one 74561.cc 74629.love 74x6ke6.net 7677.love 77535.icu 7795.love 791342.vip 79655.one 7arjug3.net 7gz76um.vip 7jmsq7z.vip 7k9pe.net 7m5rkfo.vip 7mzey.com 7vrnrki.vip 80742.gdn 80f5xlr.net 81650.gdn 8372.love 84413.my 84rz9e.com 853835.com 870844.town 8721.love 87735.cn 88648.gdn 8azpa9m.net 8i1zwuy.vip 8ic06qn.net 8lw7f23a.net 8mue9g.com 9018c.tv 92675.icu 9415.top 9461.love 94962.gdn 94wpqhf.net 967742.vip 973534.town 9819.love 98195.icu 99071.my 990821.town 9duj99r.net 9es71wb.vip 9hcmb8t9.com 9hf043f.net 9nnrd.com adagg.work adijs.gdn alpll.work asdel.uv5h9bl.net asvbv.cn augff.work auuexe.com ayvqr.cn b7rbjwt.net b7xdeyw.vip b8x9y.vip bbahq.loans bczty.work bfqrftl.net bgsjpp.my bhwyep.com bj3lbug.vip bkp5z2v.net bm5gasj.vip bmchd.gdn bo7hj5k.net bqd6dtf.net bqilv.work bqore.gdn bwkae.cn byamv.work c8mvfku.net cbdfu.work cdfln.gdn cdtba.my cnhpjvu.vip cobka.work cov3xl0.net cprbphx.net cwml3vj.vip cx9uv31.net cxonkps.top cyoth.work danhlg.com decxt.gdn dejhig.com difjnga.top dkqsmy.com dmedj.work dmpvz.net dncxqzu.net dxekxxf.vip dycm.rip ea26w.net ebqhh.com ejcyt.gdn ejpjp.work elfytr.com eqrkn.cn f86wd2z.net ff5s81u.net ffevgev.net flpa4lk.net fmzfw.work fox9kui.vip fqlwg.work ftpmv.work fy6fofq.net fzoeyd.com g2itg.jqj3jq0.net gb3mong.net gcxct.work gkhto.town gmvf6.cc gt42r.4s83rjt.net gvnmg.com gx35r4uh.wadjajds2.com h4lb7to.net haiuswk.vip hbryy.work hgbpi.net hkhnff.com hlqhyqp.top hncaxc.my hnrbp.work hnuzpik.vip hqnrx.work hrheta.com hse07.com hsotw.work htpzop.com hujykke.top hwy4j.com hz0gcaj.net icfyu.work idyut.net ie5e0po.net ig6p626.vip io1fs.net ioilul.com iolgi.work ipp7e.com iptoilf.top isakpm.com itykozn.top iyklu.com izdsjr.my j180256.net j8mc2.cc jbbte.work jbpll.work jbrib.work jc0dyu0.net jebzaoi.top jeuktq.net jewoese.top jhniw.cn jkrii.cn jqj3jq0.net juqfk.work jw17v.cc jwfrs.work jzsmgm.my k1bvdtbw.net kafgz.work kauut.cn kemzs.work ki4u56z.net kkejr.cn kktza.work kmoylhy.top knt87.com kxcy2.net kxktd.work kyzsh.work l5eic92.net ldeax.work ldejf.net ldzez.com lermw.work lgkqi.work lheemm5.net lhubs.loans ligzjlp.top lpvdmds.top ltdkc.town ltgctqn.net luu7nni.net lwxdbrj.top mcqyjq.com mfely.cn mjujgi.com mkakf.net mmojh.work mrdaw.cn mriicwh.top mvvrv2n.vip mwucv.gdn mxiet.work n44hz73.vip nbcnm.work ncnix.work nfrl5gj.net ni62q.net niqzu.work njprz.work nnxewv.com nvgaw.gdn nx4w4.cc nykyted.top nzg71s1.vip nzzcw.town o0xtmw4.vip obsglm.my ocawl.cn oeoeh.net oeoxou.com ofor0ih.vip oiump86.net oiyzh.work okezc.com osdtuk.com osldn.work ouljs.cn ovhbp.work owzyg.gdn oxuhc6j.vip pahay.work pasda.work pbcty.com pbyvpvo.top pdmcet.com pelee.gdn plckx9w.net pn4lwgvvy.com pnrmr.com prlwcx.com pvyem.gdn pwdsj.work pz926.cc q1093.net q6ke0.com qd1mmcd.net qeddkn.com qgrkb.com qpejv.work qxeo0om.vip r0pzx.net r4gmlsk.net rbnkk.com rebbc.work redty.town rmyhb.my rorlpri.net rqhni.cn rsregm.net rsucy.work rtg4e.com rvgeh.com rwpos.loans rypxlv2.vip sacur.work sbnwf.work se1laga.net seqau9j.vip shygv.gdn sm2a252.net svynji.com tazln.work tcocw.cn te96tpv.net tfdiwz.net tfgvq.work tidh4ko.net tjakzno.top tjlnyvb.top tkqbms.com tllktm.com tmofm.work tn1d1js.net tobye.work trkxia.my tzciq.com tzher.work u28mx3np.wadjajds2.com u2bhi6f.net ug79a.net ugcpv.work ugnlijp.top uizzcq3.net ujqji.com ukcyizy.top ukozs.work uksgz.cn ulitvb.my upee4.cc uqegh.com urejndd.top usoslv.com uv5h9bl.net uvomc.net uwuye.my uxtil.gdn uy4bw04.vip uz3k9.com v04qvk7.vip v5zh4sd.net v954igz6.com vp0ckjo.net vvp75.net w3zhz.com w6zhy.vip wadjajds2.com waub9sp.net wgixi.work wgoue.work wieug.gdn wkimynq.top wmsdj.work wnvpb.work wvsntf.my wynbo.gdn x7ia4ez.vip xanqvfi.net xb2cq0f.net xbssqom.top xcdzx.work xciujet.top xfjsp.work xipjjlu.top xjmpbfn.top xniyi.cn xnzdc.com xs99h.cc xuudpel.net xv9ef1s.net xwhz11v.net xwkqvi1.vip xxwke.work xzkubuv.top xzvqz.net yapjn.com ygstios.vip yhnqp.work yl7ebtc.net yokmt.com ypmkrhd.net yvcpnpg.net zfho0y2.net ziwlvj.my zixpx.com zktiasa.net zlb6y8bzk.com zmeud.cn zmftq.work zopcnn.net zrzq9fq.net zwtgmf.com # Reference: https://www.virustotal.com/gui/file/66c139f7356dceff6b1000b7eb3721a40a672c8989892a4aeff7547a046a58d5/detection 073jce.vip 51580.vip 78451770.xyz alunos.fun blackapi.xyz brokensilenze.cfd fsle8n.vip nexbloom.site olinsautodiagnosis.net piyar.shop poker88gacor2025.xyz projecttopics.xyz thenorthtrade.net /r4ze/?DDgTlF= /r4ze/?JNODSZ= # Reference: https://x.com/D3LabIT/status/1975850676820582444 254-badaimaxwin.sbs klikdewaadsdisini8.shop # Reference: https://x.com/JAMESWT_WT/status/1978708045355000118 # Reference: https://x.com/skocherhan/status/1979142501869957519 77y7fl.vip bfufe.town senora.life simpy.store specialultra.xyz symbolx.xyz # Reference: https://www.virustotal.com/gui/file/6a2d9b504dfdb7eeab3ed16b3529618639d16044e6927fea6282b0aaba207675/detection 11stv5.xyz 1sidik.vip 20955.town 31789ww.xyz 62uxok.top 76chw.mobi 78448748.xyz appetit.shop berkshirefibre.store blaisi.tokyo boluskinho.xyz builder.lol chanceera.online cloud-adsync.click coinvest.shop df88w.top ebrxau.mobi fundingtrusted.xyz goldenway.biz herophotos.live i5djp5.top j77e8b.vip ls865.top managementcouch.net medatendimento.pro medicalapi.xyz merivo.live ogzbfm.mobi okejek88.club oxpmn2.top pigvl.mobi polajekpotfw.xyz rocketecology.xyz salon-kaigyo.net tacticalvr.xyz takbynano.duckdns.org tempestap1.net token-dymension.xyz ugodh0.vip urbeagents.xyz vft-s.mobi weddingmy.xyz whalesapp.xyz xgsukmhwpb.xyz xvideoscomsexthu.icu yisb.tokyo yousellers.xyz zgydyx.top # Reference: https://x.com/ShadowOpCode/status/1984254466804305927 # Reference: https://app.any.run/tasks/43bfa36b-2c4a-433b-b9c8-5e0d526d7aa8 # CLASS_0_HASH-HOST=80ee06c89bcac1caae61716136ea209a 78907890.xyz admin.ascententerprises.top admin.brightdrift.website admin.chillrocket.top admin.cloudtango.website admin.cotxot.info admin.dornexa.xyz admin.driftfork.website admin.echoblaze.xyz admin.echoroot.website admin.frostloop.website admin.fusionbell.website admin.goldpal.xyz admin.grevla.top admin.holorush.live admin.jagdud.store admin.lavagong.live admin.lavanest.website admin.lavascroll.website admin.meadowpure.life admin.metrio.site admin.novamint.website admin.pixelcrate.website admin.pixeldrift.site admin.pluvano.live admin.quirkyden.site admin.saventa.life admin.selectox.xyz admin.solgju.live admin.techyes.life admin.turbonest.live admin.turbonest.website admin.turnnex.online admin.zaptrail.website admin.zaptrek.xyz api.sparrowcrm.xyz ascententerprises.top askmike.tech bbloom.in brightdrift.website chillrocket.top cloudtango.website cnnnews.biz.id conviddoc.netlify.app cotxot.info dornexa.xyz driftfork.website echoblaze.xyz echoroot.website fairoz-in.pages.dev frostloop.website fusionbell.website goldpal.xyz grevla.top hajucu.xyz hnxagfjyga.cf insurancemy.biz.id jagdud.store lavagong.live lavascroll.website meadowpure.life medicalcare1.netlify.app metrio.site modele7.e-metech.com mokia.info mrernesto.site novamint.website orakra2.78907890.xyz pixelcrate.website pluvano.live pulsa808.blog pulsa808.blog.ovo89.co quirkyden.site reten.top samsungoffer.me saventa.life selectox.xyz smarttechbyte.web.id solgju.live sparrowcrm.xyz techyes.life tennis.mrernesto.site themes-wuhan.pages.dev tiket138.blog tiket138.blog.ovo89.co transformasidigital.biz.id turbonest.website turnnex.online uro.ubp.mybluehost.me whoarewe.online ykwlhxxwyxgsc2h.yijhome.com zaptrail.website zaptrek.xyz # Reference: https://www.virustotal.com/gui/file/021f8cb07742e0a6eca79e466ec4733922ba73b76e18daef1e3bd47e60d8de36/detection amofb.com drtyyuyijhkhjnmjh.cfd fairbitawayposearisk.com fala23.shop flyingfoxnb.com frefire.top homerag.ovh kambassador.org legendaryyes.com marketing-solution.net onlyleona.com palatepursuits.cfd pengeloladata.click poultry-symposium.com prianasaputra.com prosourcegraniteinc.com siteapp.fun toss.is tsygy.com xxkxcfkujyeft.xyz # Generic trails /config.php?account= /05yk/?hTHMTDZA= /09rb/?BL3= /0irq/?UFNDs8V= /0vh9/?A8= /2cur/?p0D= /3iw/?URfhe= /3nop/?zt= /3nop/?-Zd0qV80= /3nop/?BBZ4xph= /3nop/?oN6xjP= /63j/?RHD8= /66op/?8ptlzV= /68yb/?y4L0= /6hsc/?i88= /6ihh/?2d= /6qne/?bw99= /6rnk/?FFNTRl= /6tjv/?RsZHuW= /75gn/?3f4= /8mwu/?86Eqi= /8o3b/?Him= /8var/?Cr4TFn= /9d1o/?5j= /9d1o/?jDKt_= /a42m/?Y8= /a42m/?ylD= /a5wz/?TLFdL= /ahc8/?Cfc= /ahc8/?dvx0q= /a8c/?r6= /agbz/?VpIXMZ= /aggq/?gPdL= /agjr/?d8fDs0= /ahc8/?9rIx= /ahc8/?ON9d9ZdP= /ahc8/?RJ= /aiwv/?hTHMTDZA= /ajr/?Jt78= /ajr/?oj= /ajr/?gzrP4xE= /aofk/?yPMl= /aofk/?XrxlCh= /aofk/?ZvlpdD3X= /aofk/?SfV= /aofk/?VXVxArBH= /aofk/?yp= /aq88/?0VKdcx= /ar73/?5jGTz= /ar73/?nndDe= /b2w3/?5jRDfl= /b4d/?mrj030Qx= /b5sf/?x2J8= /b62n/?B8CDV= /b62n/?efX0fHtP= /b80i/?9rF= /b80i/?K6AlwZ= /bg6/?Pds= /bjtd/?7nUt_4= /boa/?GDHDW= /boa/?CDH= /boa/?Ozud= /boa/?RDK0= /bqko/?3f= /bs5/?sBj8R= /bti/?CBLl4= /bu2n/?JR-PJ= /bu2n/?tXQLjb3p= /bw82/?7nU0_4= /bw82/?ixlp= /bw82/?kHQX_L= /bw82/?m2MpP03h= /bwk/?phbxg4sP= /bwk/?uRqHO= /c0a7/?DTJL= /c0in/?3UfGs01o= /c0wb/?rJ= /c1k0/?z6A= /c22b/?GPFPs= /c239/?NN= /c9wt/?Ok= /cfn8/?2dqp= /cgc/?vR8XO= /cgf3/?jZHL8FV8= /cgf3/?kGQP_SL= /ckvl/?RF= /ct6s/?rF= /cx0u/?J0Dd= /cxbz/?a6Al= /cy88/?rF= /czqa/?2put= /czqa/?4yv_JF= /d10a/?AN= /d15n/?aBWDfHh= /d15n/?SfR= /d30y/?zPah= /dcn0/?fXV8y2ip= /dgrg/?Bf= /dmpz/?_0GxxfX= /dum/?NjBDlp= /dty/?Mv18= /dy/?7nRL= /dy47/?6lzd4R3= /e23y/?ApjLzT= /e23y/?BZFPW=_ /e2au/?7nol2HT= /e2wa/?MDKtU= /e3eb/?3f5= /e3eb/?PBZ0= /eauu/?qZktM6= /ec14/?cdlpd= /ec14/?JxotnDq= /ee3s/?Pb= /ei9s/?5jfHZlY= /ei9s/?lnzH= /ej/?3fvH1nq= /ej/?5jxTV4Ux= /ej/?AnB= /ej/?d8FL= /ej/?mL30v= /ergs/?kPLL= /euv4/?VN6dNdgH= /evcy/?2dl= /f43e/?MDKxd= /f43e/?MRL0cd= /figc/?ITUTAN= /figc/?PBDlF= /flc/?lhud= /fqqa/?gKrAc= /fp58/?06= /fs44/?rB= /fs8/?0V= /fs8/?AX1= /fs8/?q6Q= /fth/?aBZPdF= /g25e/?-Z8p3nd= /g25e/?4h40= /g25e/?yL= /g2fg/?mvHpT= /g31s/?j80t= /g832/?OReXw= /g832/?Vzut_2= /gh/?9r= /gh/?pdfX= /gh/?wtzx= /g8kn/?1bIxl= /gkp9/?KvAtvL= /gkp9/?TB= /g2m3/?Cxo= /gnt/?Tzu= /gnt/?zPah= /gqx2/?UDK8jj= /gqvv/?UL3= /grh2/?JTRxBp= /grv/?LZv8= /gu5d/?ljF= /gut0/?PBZ0= /gvqa/?DBZlKP= /qwg6/?2do= /gy14/?lJBtHNX= /h26/?9rfx9hDX= /h96v/?2dLtNL= /h9t0/?QXg8-= /hdzz/?FnWTdB= /he2a/?4h_Tw= /he2a/?ytx= /henz/?MtxX= /heth/?CBLl4= /heye/?GZo8s= /hi5f/?LhJL= /htqs/?glqhT= /je14/?K48Lebx0= /jjk/?1bn4ip= /jr22/?KlD= /jy0b/?Qzr07t= /i6rb/?BFQLRT= /i19/?tzsDXFa= /i286/?lrjPuXF= /ih8i/?FH= /j0eu/?WB= /jy93/?3fo= /kfr/?0dnLRd= /y8r/?kFQl7b= /kdz/?axlP= /kdz/?cf= /kdz/?m2MpPNip= /kdz/?nH9= /kmge/?e81hyLsp= /kp1/?r6= /kqna/?LDHHu= /kt0/?Lh54A= /kvsz/?8peTw= /kvsz/?ajL= /kvsz/?an= /kvsz/?cd= /kvsz/?MvX4BN= /kvsz/?NlI46pq= /kvsz/?OlG= /kvsz/?OL34= /kvsz/?yzutZfsP= /kvsz/?zv= /l3ld/?2dup= /l3ld/?H4ElV2k8= /l3ld/?rDK4= /l9yc/?UN= /la1/?cf= /la1/?TB= /lmh/?BN6= /lmh/?MdItZ= /lmh/?OJEtdtiH= /lmh/?oPO4K6C= /lmh/?tDK= /m02u/?iJBl5DH= /m1n9/?WzZx_h8p= /m25m/?sH= /m6us/?XL3= /m858/?5eg5n= /m8a3/?CLZll= /m9ae/?Njx0rZ0= /mbx/?OL3D= /mcn/?_nD434I /mcn/?pL08= /mh04/?0duH= /mh04/?rHm= /mh04/?z6t4vf= /mqr7/?2dz= /mqr7/?8paxn= /mqr7/?bn= /mqr7/?erah= /mqr7/?LPW0d= /mqr7/?ZhUpphA0= /mqr7/?ZX50dDih= /mjl/?M2MpdRT= /mi8/?1bwhC= /moc/?0TG= /moc/?BL= /moc/?OrD= /moc/?_L30= /mt88/?LN9dL= /mzk6/?UPa= /mzu5/?ClsV= /n6i5/?d2MdxHVP= /n10i/?OP= /n10i/?qT= /n1wh/?72xJM= /nic4/?UN= /n7ak/?lrDtuB= /n8ds/?tzr= /n8t5/?yz_SDajJ= /nahb/?axCY8= /nahb/?LLTod70y= /nahb/?YtSrkY= /nang/?YPxdA= /nbg/?K0Gd= /ni24/?HZHxy4b= /niku/?nV3TFh= /njo/?KPO4XxjH= /njo/?s2= /njhr/?-ZlDQ= /njhr/?NreTZ= /nk6l/?wN98br= /nnmd/?erah= /nqpg/?Yj8Yy= /nsag/?6lop4xQ8= /nt8e/?qNG= /nu/?n4= /nu/?8p= /nu/?rvKdSp48= /nu/?w2Kdbz9= /nurc/?9rF8b= /nwc9/?NreTZ= /nyk/?Gdj8= /odse/?CdL= /oecd/?LDHDp= /ogg/?3fk= /ogg/?F2= /ok6h/?L6J-8= /ok6h/?SR= /oncs/?SL= /onqm/?JJBtglX0= /os16/?JvK= /oiwu/?3WQJUZ= /oiwu/?6u6AyI= /oiwu/?aGv= /oiwu/?aRvcsIY= /oiwu/?H61Q= /oiwu/?lzI7= /oiwu/?PuVoB= /oiwu/?ZyFo4d= /oqhk/?AhS= /op6t/?OdrXC= /oy30/?yVlpidI= /p01e/?CJE= /p01e/?H4D4s8f0= /p2he/?1bz0Vl= /p2io/?1bUl= /p6ai/?Xrx4qlt= /p8ce/?y4L0= /pg21/?d484rJlH= /poub/?-ZF= /pth/?lL04m04= /qmek/?57wTk= /qmek/?psR= /qmek/?wd= /qmsj/?jzrDED= /qr26/?0rZli= /q3m8/?wYDJ= /q4kr/?CBZt8= /qjnt/?GDKPHRd0= /qmek/?9iBF= /qmek/?fU397= /qmek/?K8KRH-M5= /qtpn/?8p= /qtpn/?g0DlvJP= /r0bh/?3fD= /r3hg/?_jG4S= /r690/?9rId4= /r690/?aBZPMh= /r690/?0l8= /r690/?X6I8= /rb5e/?iIbtL= /rf5o/?cB= /rf5o/?3fl= /rgoe/?AN9= /rht6/?AN6= /rqth/?2d30m= /rrc/?CBr= /rrc/?MP= /rrc/?Rfd8= /rrc/?VZxTAfKP= /rse/?vDH8F= /rse/?VR-XC= /rv7/?CBZXp= /wdc8/?lf= /y88/?uZ-D= /s0iw/?z6A0I= /s0s2/?K6AliR= /s0v/?cdH= /s0v/?qR70f= /s3s3/?RF= /s48/?Yn= /s86o/?nZ= /s86o/?y33oDN5= /s8y/?zXq4AN= /sa/?HZaxUrJ= /sbjq/?oZotnV_= /sfd8/?jzuPNd= /sg03/?iN6h3= /sl7/?p0q= /sk49/?2dz= /sm3g/?Ml= /sm3g/?PbvtUt= /sn31/?UrjPbNmp= /st28/?-Z5= /st28/?uz= /stcf/?KnpM= /suiz/?bda= /sy22/?6lzpL= /sy22/?Axl4i4-= /sy22/?tfL0m= /sy22/?9rI8n8= /sy22/?UXL= /sy22/?vP= /sy22/?yP7Plp= /sy2h/?J6A0d4iP= /sy2h/?W4Q= /t0r3/?1bwhC= /t2p/?Ezg47B= /t36t/?00DpA= /t36t/?svm= /t36v/?jyu= /t65q/?M2JHn= /te/?9rmDEzj= /tgqh/?dh= /tmz/?2dul= /tmz/?APcP7D= /tmz/?YR-0= /tn73/?elHH= /tn73/?Yr= /to12/?ebft= /tpd2/?kjm81= /txuu/?AX= /uar3/?B81062R= /uia2/?ARd46F= /uia2/?oL0xqXQH= /urde/?AN= /urde/?Ztxhw= /utg6/?PV40d8R= /u8nw/?Bzr8U4l= /u8nw/?LFQPH= /pjn/?yVcHTBN= /uszn/?3fUt= /uszn/?a2MtxLZ= /uu0p/?Up8l= /uv34/?2db= /uv34/?eBZl= /hx227/ /hx321/ /u2kb/?GZ= /u2kb/?rSHG2h6H= /w88t/?_PAp= /w8n5/?KrO4XnMP= /w8t/ /wh23/?5ja0c8rh= /wh23/?azuxWju= /wnoa/?2dtl= /wszm/?BRQlPj= /tef/?Tj= /x0h/?MfPxb= /xczm/?ZVatuBj8= /xczm/?NN= /xy18/?GZwdbR= /ymb8/?-rnjn4Q4= /xle/?OrpDKZ= /z7a/?pJEdPf_= /zzun/?tL= /?_DHxTPyP= /?flDhjrj=