# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.talosintelligence.com/2018/06/my-little-formbook.html?m=1

drylipc.com
handanzhize.info
bddxpso.info
atopgixn.info
cretezzy.com
casiinoeuros.info
newraxz.com

# Reference: https://twitter.com/avman1995/status/1038285919219068928
# Reference: https://pastebin.com/6MRD35Pq

http://136.144.52.99
http://47.91.170.222
lotochain.com
n01.tech
ourcrazyveterans.com
sy-adm.com
yinuxw.info

# Reference: https://twitter.com/dms1899/status/1038276577254146049
# Reference: https://pastebin.com/4pDsDuxn

http://5.101.78.222
http://5.255.94.75
0day4today.com
commercekorea.net
magnagrecia.net
npromo.eu
southsidenewhomes.com

# Reference: https://twitter.com/voidm4p/status/1037294325091250177

handanzhize.info

# Reference: https://twitter.com/ps66uk/status/1036782703788605440

ghazicraft.com

# Reference: https://twitter.com/ps66uk/status/1036773879321190400

truemusclesnow.com

# Reference: https://twitter.com/ps66uk/status/1036773694243332096

sosmedplus.com

# Reference: https://twitter.com/ps66uk/status/1036781260516061184

newd4y.com/sp/

# Reference: https://twitter.com/malware_traffic/status/957956818906632192

boosterfx.com
cabel-ispoffers.market
conditionalmachines.com
derekblasberg.net
exoticlocale.com
idlevents.com
fhsdjhfsdkj.com
lynkieevents.com
mansiobbok.com
wshamg.com
yougethosted.com

# Reference: https://pastebin.com/bEqJKZfZ

peliculainfantiles.com
vanzundertconsulting.com

# Reference: https://twitter.com/nullcookies/status/1046929109811630081

derwamanojaz.com

# Reference: https://twitter.com/James_inthe_box/status/1046864076624646144

graimmer.com
ww7.keygirl.site

# Reference: https://twitter.com/pollo290987/status/1044947696451235840

high5fundraising.net
lechevalierorange.com
returnlostitem.com
sftpcomponent.net

# Reference: https://twitter.com/James_inthe_box/status/1044580953912266758

aldocompliance.com

# Reference: https://twitter.com/James_inthe_box/status/1044324089714724870

graimmer.com

# Reference: https://twitter.com/nullcookies/status/1046924081591988224

bharimatrasay.com

# Reference: https://twitter.com/James_inthe_box/status/1047488230763913216

d.coka.la/ORg1ie.jpg
d.coka.la/BI0asY.jpg
jgc.com.mx/dat/heavy.jpg
jgc.com.mx/dat/mila.jpg
nothernpridecommunications.net
mrawesomescloset.com

# Reference: https://twitter.com/James_inthe_box/status/1047846258239401986

graimmer.com
refractoriesdirectory.com

# Reference: https://twitter.com/dvk01uk/status/1107851408269824000

higcaf.com

# Reference: https://twitter.com/dvk01uk/status/1098070906029723649

symtual.com

# Reference: https://twitter.com/dvk01uk/status/1091013599018000386

funguythings.com

# Reference: https://twitter.com/dvk01uk/status/1089807824731947009

humanytc.com

# Reference: https://twitter.com/dvk01uk/status/1089748801571700737

zinrop.com

# Reference: https://twitter.com/James_inthe_box/status/1108064849651601408

melendyou.com/rm/

# Reference: https://twitter.com/James_inthe_box/status/1110579161884577792

liongrooming.com

# Reference: https://twitter.com/makflwana/status/1068015579586453504
# Reference: https://pastebin.com/TurChwaE

jeycop.com
scubaarabia.com
journeystudentcamp.com
niger-online.com
simplegreenhabits.net
essayontime.science
frankandmidori.com
525pwz.info
check-or-wreck.com
purdomlnc.com

# Reference: https://twitter.com/dvk01uk/status/1118565721892634624

slideus.com

# Reference: https://twitter.com/pancak3lullz/status/1092534221783158784

mitafa.com
seajayssailing.com
327503788.com
michkatravel.com
recoil.world
lianglinyiyou.com
full-art.com
despasito.net
23o95.com
cultivatingimmaturity.win
dtrchampions.com

# Reference: https://twitter.com/pancak3lullz/status/1092434571889688576

w3c.ink
idreamstartup.com
tiaohuobuy.com
droptxt.com
demopex.com
thebodyshelinglogic.com
millcms.com
artframephotography.com
whitelodgingcollege.com

# Reference: https://twitter.com/pancak3lullz/status/1083019107568619521

goodies.biz
win603.com
microbreweriesassociation.com
xn--hck5aza9o8c.site
orangefirestarter.com
mmareligion.com
elhomegifts.com
mecharniser.com
xinghuategang.com

# Reference: https://twitter.com/pancak3lullz/status/1121108516637433859

/h383/?CneDl=

# Reference: https://twitter.com/pancak3lullz/status/1034149890983641089

/eu/?Lh54A=

# Reference: https://twitter.com/malware_traffic/status/1080623037471432704

/hx310/?JreXz=

# Reference: https://twitter.com/pollo290987/status/1082400417370251268

/private/?Uv1x=

# Reference: https://twitter.com/pollo290987/status/901090998343929859

click-ticke.site

# Reference: https://twitter.com/Antelox/status/895299149284999168

wow-tracking.site

# Reference: https://twitter.com/luc4m/status/1124220235656118272

arsimport.com
iniwhmya.com
molakalyva.com

# Reference: https://twitter.com/dvk01uk/status/1125703826890199040

mecharniser.info/ni8/

# Reference: https://twitter.com/luc4m/status/1126043316305506304

alabamaseosolutions.com
foodome.net
humanytc.com
shopnow1.com
wealths.us
zjydl.com

# Reference: https://app.any.run/tasks/5582d288-8fef-456e-be79-a8d80d1df829

rachelkinseyforcongress.com

# Reference: https://twitter.com/dvk01uk/status/1120628599793553408

tiboxe.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1128996781054996480
# Reference: https://app.any.run/tasks/c0094589-70db-4cbe-a7de-f1a08b79168f/

/ca/?U4kp=

# Reference: https://twitter.com/malware_traffic/status/1130450003422351360

/ha/?1b=

# Reference: https://twitter.com/dms1899/status/1138414720199864320

mypeeps.ninja  
yuchuanjz.com  
tasmanuka.online  
perryleycraftgin.com  
ttklyn.com  
pipiguan.com  
kw7ob.com

# Reference: https://twitter.com/James_inthe_box/status/1138478169755754496

explorenoblesvillehomes.com
prytherchforcouncil.com

# Reference: https://twitter.com/luc4m/status/1140979690758262784

tlkcloudem.com

# Reference: https://twitter.com/JayTHL/status/1141056334244253698

promotionzynovawillzerodacontinuegood.duckdns.org

# Reference: https://twitter.com/Racco42/status/1141672784357146624

desklink.duckdns.org

# Reference: https://twitter.com/killamjr/status/1131368397617475584

joeing.duckdns.org

# Reference: https://twitter.com/luc4m/status/1143815529079156738

srcalci.com 
paxfulk.com 
ajexin.com 
gmcpr.net 
shots.golf 
artnfoods.guru 
biocombustiveis.com 
phpcoding.life 
ncfgmm.com

# Reference: https://twitter.com/James_inthe_box/status/1146183202467303424

virtuoussnowball.com

# Reference: https://twitter.com/reecdeep/status/1149224578532741120

hsctsu.com
srilankika.com
westernenergymedicine.info
xn--5nq67dt91acob217ad91b.com
xn--fhqv52e1ueg8n.com

# Reference: https://twitter.com/1ZRR4H/status/1149282913751617536

vfxwarrior.com
protocol.life
15churchroad.com
djcreview07.com

# Reference: https://twitter.com/hexlax/status/1150113306545467393

regular123.com

# Reference: https://twitter.com/hexlax/status/1150744858132451328

mecharniser.com
shaxob.com
shaxob.com

# Reference: https://twitter.com/James_inthe_box/status/1154398293524271104

24648040.ngrok.io

# Reference: https://twitter.com/dms1899/status/1165009802470277120

241369.com
apachedrone.com
beziehungswerk.net
regular123.com
sadathetoure.com
telnyc.com
the-brand-nursery.com
trendteasindia.com

# Reference: https://twitter.com/dms1899/status/1165762759738437632

aagangirlshostal.com
bbo6331.com
crossfitktresrios.com
darts-bar-nova.com
dclogisticsbrasli.com
fanfantxt.com
haiju365.com
longlifebaba.com
sixfiguresuccessmastery.com
somosvip365.com
starfleetcartography.com
sukfat.com
yj.ink

# Reference: https://twitter.com/dms1899/status/1165742047539662850

americangypsealife.com
andareavela.online
dpthkee.com
espritmoteur.com
fawazalhokairfashions.com
get-housesecurity.sale
jeyucite81.win
kzxuqf8w7.biz
mbk.partners
olivianaphotography.com
woodlandsdogretreat.com

# Reference: https://twitter.com/reecdeep/status/1166255171200004100

alptraumaclinic.com
amobad.com
artilary.com
artistsandcreatives.com
beyhanbilisim.com
hunde-betreuung.com
mecharniser.com
pixelorlando.com
ronicooper.com
scjieniu.com
superbotany.com
khosravanigroup.net
tc521.net
pen6.net

# Reference: https://twitter.com/reecdeep/status/1168937433171484676

eprivacyguards.com
nimble.report
shinrigaku-riron.com
xn--gdka3eubcx5ge.com
sukfat.com

# Reference: https://twitter.com/smica83/status/1169553710999060481

joyhoundinc.com 
margaretminguy.com 
racooncity.net 
seastarways.com 
szahjw.com 
tp-hostel.com
travelersintheworld.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1172122495652155392

selforall.info
haddadunited.com

# Reference: https://twitter.com/coderippers/status/1156857536026484736

burkwp.com

# Reference: https://twitter.com/James_inthe_box/status/1173953038098128896

starttoto.com

# Reference: https://twitter.com/malwaremustd1e/status/1175779000687325186

beautyzonebyheidi.com
ristorantepagus.com
sensingbridge-platform.com

# Reference: https://twitter.com/dvk01uk/status/1178696483522191360
# Reference: https://app.any.run/tasks/3b84770f-b06e-47c8-b193-9be3c4c7a6bf/

dealskabaap.com
drrichardorlandi.com
ferienwohnung-dodel.com
geohoof.com
identityapparelonline.com
kxmphs.com
romanoimoveis.com
superadminapp.com
termesahiltaksi.com
veroxin.com

# Reference: https://twitter.com/luc4m/status/1179413765147807744

7thgenerationrabble.com

# Reference: https://twitter.com/luc4m/status/1181880797399326721

cvasajhsjkls00pro.co.uk

# Reference: https://app.any.run/tasks/d933e54f-4a1b-431d-ac1a-46b1f7dbe792/

alphlinic.com
atlantisads.com
apps-tv.com
cheapmonclerjacketsoutlets.com
edmov.com
eurodisfraz.com
hhtdhg.com
nieuwtij.com
pelvicheartspiritalchemy.com
skylod.com
xiaolinjia.com
xn--dll-8n0e103b.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1186906425836081153

100rupeeeliquid.com
allixanes.com 
cattybcreative.com
fastbatterysystems.com
lokmazel.com 
moonchildenterprises.com 
pi2023.com

# Reference: https://twitter.com/wwp96/status/1187064601327919104

guzelkaybettik.com
podwath.com
dairobby.com
danielemenchetti.com

# Reference: https://twitter.com/wwp96/status/1189234871291564035

cartedevisitegratuite.net
palsgraphor.com
veroxin.com
ferreiralove.com

# Reference: https://pastebin.com/29uSdMAk

cancertreatmenttransport.com
chuangshunchem.com
garthhassel.com
golaminators.com
hairminders.com
kovaxy.com
mizorl.com
moraxy.com
rwinzresearch.com

# Reference: https://twitter.com/wwp96/status/1191014781911736321

camexpertangkor.com

# Reference: https://app.any.run/tasks/c0597f3d-f31a-40f8-85e1-b0a8eb3af899/

926cb.com
molestuk.com
shabbirinstruments.com

# Reference: https://app.any.run/tasks/aa6bc7f8-a986-4a33-9595-fff5ac5a0c62

cmioffices.com

# Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Formbook)

emizard.com
hoscury.com
monkalef.com
oyishu.com
pursemtb.com
scaker.com
shaxob.com

# Reference: https://pastebin.com/xwT2gAgE

3hilltopstudio.com
bgtr.cymru
facetheday.net
gmopets.com
hottennisjp.win
imizin.review
mnuvmg.info
regiusgames.com
tweakboxapp.info
xn--oru96d1wax98e.net

# Reference: https://twitter.com/58_158_177_102/status/1192332316917432321

bagelandcheese.com

# Reference: https://twitter.com/reecdeep/status/1161233442337697793
# Reference: https://app.any.run/tasks/4a4785fe-5b8c-4a36-83ef-ea6500a72df1/

2750tinsleydr.com

# Reference: https://twitter.com/wwp96/status/1193993959074402304
# Reference: https://app.any.run/tasks/35861fd2-8962-404d-a03a-6b90f2a83dad/

chungcuhanoihay.com
cubeandwater.com
deltavisiontv.com
flycoz.com
lateliercreatifdemarie.com

# Reference: https://app.any.run/tasks/954e589c-6906-4e99-9459-65a5770327ab

hitechhomepaintnyc.com
luxogloppeliving.com
balajiphotogallery.com
prlncess-hotels.com

# Reference: https://twitter.com/0xCARNAGE/status/1201194262093807616

beartraditionalkayaks.com
d55consulting.com
my-kit.net
nitsannthit.com
quickful.com
samperd.com
wk616.com
ympublishing.com

# Reference: https://twitter.com/ANeilan/status/1201346143155822592
# Reference: https://www.hybrid-analysis.com/sample/945c63a512d9d62583783329cd83d2872e250fba3c40d5fe0e36483a5a831a9a/5de484aa3f6a1d32720f2eee

norvicshippnig.com

# Reference: https://any.run/malware-trends/formbook (Note: as seen on 2019-12-04)

beauty-fullbox.com
idmicoffee.com
skylod.com
gazoly.com
gridadvisorsllc.com
corvinuscrypto.com
spillthegreens.com
bees11congress.com
atlantisads.com

# Reference: https://twitter.com/ViriBack/status/1202305799445504000

allixanes.com
casineuros.info

# Reference: https://app.any.run/tasks/5ded2851-08b2-4fe1-a34c-45daf448e8e2/

artgrowth.fund
fixref4.com
hotrugged.com
insidereaganmanx.com
institutdebeautechablis.com
jscheide.com
jevmod.com
presence-digitale.net
shopforbabys.com
sluas.com

# Reference: https://pastebin.com/7Ak2nP2T

domferz.com
emmajcoombe.com
ido-expo.com
italianato.com
nwsouthroad.com
thankslotto.com
wasserschaden-hero.com
wellmadecostumes.com
xosuno.com

# Reference: https://www.virustotal.com/gui/file/78377897d8c6ccd0f4e59ddf94db67b2489a4010fe404659f61ebeb91a037a49/detection

fisciapp.com
pinkiavenue.com
061man.com
nongda.group
kuotacell.com
clinica-financiera.com
wellmadecostumes.com

# Reference: https://twitter.com/James_inthe_box/status/1206944999499108353

millerjeanne.com

# Reference: https://twitter.com/wwp96/status/1207739801002291200
# Reference: https://app.any.run/tasks/0e337885-db1f-412b-aa9b-1c6f75eefe17/

meinvcaita.com
mipscenter.com

# Reference: https://twitter.com/wwp96/status/1210228386687279115

find-a-job-online.info
hextor.win
middlemalta.win
otomarco.net
sabyestreetfoods.com

# Reference: https://twitter.com/wwp96/status/1210602703279276032

earlymorningmama.com
hjlh888.com
thexfactorfoundation.com

# Reference: https://app.any.run/tasks/fe87d214-5fab-400a-ae93-7319483ea313/

covzin.com
2220027.com
jxck1688.net
www139706.com

# Reference: https://app.any.run/tasks/5d2b1a42-3931-4381-8f18-17b089100399/

ibelieveinbrazil.com
communityhealthypharmacy.com
raveltalent.com
lapuphealth.com
pornurlz.com
t4z4f7p34y.com
0g6fivegive.men
bemaaultosport.com

# Reference: https://pastebin.com/E6yzi5hz

adventuredogs.tours
brokerofficial-fraud.com
darkwhitechocolate.com
liuhongli.com
yashodankalpataru.com
yummymornings.com

# Reference: https://app.any.run/tasks/15ee6c31-b975-4f9f-ba1d-2f950f82e468/

bazmeadab.com

# Reference: https://twitter.com/James_inthe_box/status/1214176338040410112
# Reference: https://pastebin.com/XMTxaQ02

creativeheadfirst.com
kabsolug.com
stopczynski.com

# Reference: https://app.any.run/tasks/230ffb09-b135-4144-86a7-595110c4786d/

635bifa.com
amoorematrix.com
chemmaths.com
greatsavingsandmore.com
mizorl.com
pinksuper.net

# Reference: https://app.any.run/tasks/de247fe2-7b3a-4c45-b0b1-0be67319bcae/

swfltropicaladventures.com
sindomac.com
jingxiu188.com

# Reference: https://twitter.com/wwp96/status/1214936414749646849

chinabaumatic.com
dealermerchantaccounts.com
mizorl.com
xoso168.com

# Reference: https://twitter.com/wwp96/status/1214935400445358080

chinaplandexpo.com
nuestrojacalito.com
southerntexastitle.com

# Reference: https://pastebin.com/piCYtiS8

beattheburnout.com
harryhdesign.com
integralhome.net
kabsolug.com
mocowhalo.com
stage5klinger.info

# Reference: https://twitter.com/wwp96/status/1216790704007065600

mizorl.com
nymsf.com
promptpayplus.com

# Reference: https://app.any.run/tasks/1f46c9ed-e5d5-421b-8965-39d1536f02bf/

crosswalkclo.com
mydnrip.com

# Reference: https://app.any.run/tasks/4ef08030-7831-4eff-aa3e-7d151ccc231e/

nrojano.com
luckyluxuryhomes.com
quidoz.com
videntesmadrid.com
britelens.com

# Reference: https://pastebin.com/Tz5Kaup2
# Reference: https://twitter.com/FewAtoms/status/1221057533625819136

windowsdefendersecurefilesofficesnetwork.duckdns.org
windowsdefenderserversecuresofficew.duckdns.org
windowsdefenderserversecureserver.duckdns.org
windowsdefenderserversecurity.duckdns.org
windowsdefendersecuirtysystem.duckdns.org
windowsdefendergatewayweb.duckdns.org
windowsdefenderprotection.duckdns.org
bbo7376.com
lounge-fumi.com
luminaryproductions.com
msp29-05.com
ahjqny.net
aslihansaygili.com
highvaluenames.com
iambookworks.com
josephinegreenz.com
oscarwrong.com
47bh.com
51airuyi.com
kapai360.com
chengkeff.com
cjproducts.biz
differently.us
jcbbi.com
3i-j-f6rr.com
s8va.com
couplesense.net
kingdomofspace.com
nnnhg.com
openrprise.net
pojokpas.com
theexchangere.com
werberoboter.com
mccannproduction.com
afjkz.com
baodian.ink
gridhopper.net
howeitservices.com
keralahills.com
peufclothing.com
pursemtb.com

# Reference: https://twitter.com/b4rtik/status/1219924865643438080
# Reference: https://app.any.run/tasks/1b0fdc77-aa65-4b35-8d97-4f85d93d992f/

conorhennessy.com
crowdedfuture.com
ariestikto.com
emergentfamily.com
dhnfv.loan
yourdreamhunter.com
eb1579.com
nercox.com
prepareforyourretirement.com
nextmobility.news
ahcdentaled.com
actigy.com
hirexr.com
chefkennethclay.com

# Reference: https://twitter.com/James_inthe_box/status/1220381091988529153
# Reference: https://app.any.run/tasks/e26f7e65-482e-40fe-8423-38c1ba03b09d/

windowsdefenderserversecuresofficeiq.duckdns.org
joeing.rapiddns.ru
hd5088.com
13622days.com
moz-cafe5thst.com

# Reference: https://www.virustotal.com/gui/file/67bac2e45fce51b88afbf7215a1ea27fbbea871279b29d293e1e7423c297c134/detection

frehan.com
mutlulukicindahacokkadikoy.com

# Reference: https://twitter.com/wwp96/status/1222229357181140992

healthyroot.net
mp3kaka.com
msdcong.com
reloadexplode.com
syslinctalk.com
westsidewifi.com

# Reference: https://twitter.com/James_inthe_box/status/1222544907358720000

windowsfirewallsecurityauthorise.duckdns.org

# Reference: https://twitter.com/wwp96/status/1222625150438453250

mandat.online
saseolocal.com
cryptostrongbox.com
nyoxibwer.com
resistmagazine.com

# Reference: https://twitter.com/wwp96/status/1222642415405871104

civilinspector.com
dremtnw.com

# Reference: https://twitter.com/wwp96/status/1223326386234044416

zdmania.com
realcapemay.com
joxiny.com
qgptgj.com
ridingpassion.com
catbaoceancruises.com
374cb.com

# Reference: https://twitter.com/wwp96/status/1223330896931106822

whatsonprimevideo.com
whwgkj.com
gztla.com
liturgyofthebrokenhearted.com

# Reference: https://twitter.com/wwp96/status/1224412305577869312

fabinx.com
thevendredi.com
americanmotorwerks.com
iraqios.com
verkaufsfunnel.com
thebroadcastblueprint.com

# Reference: https://twitter.com/wwp96/status/1224430085064753158

tcszht.com
nyoxibwer.com
lslhm.com
changelly.store
kang-120.com

# Reference: https://twitter.com/wwp96/status/1224431371751325696

pinoconsulting.net
trn-harbour.com

# Reference: https://app.any.run/tasks/02addc72-ea33-443b-b3ae-f4d72ef11ee6/

skylerfarm.com

# Reference: https://twitter.com/wwp96/status/1224707855116382210

petrankampaamo.com
parknroll.biz
nyoxibwer.com
emtark.com
hemingway.site

# Reference: https://twitter.com/wwp96/status/1224785418991947781

pinoconsulting.net
colonnashipwest.com
trn-harbour.com

# Reference: https://twitter.com/wwp96/status/1224784499294248966

fenglingad.com
lux.institute
tradingforexjourneys.com
outsidegraphics-cs.com
dottortech.com
rfpartnernetwork.com

# Reference: https://twitter.com/wwp96/status/1224781167615975424

ukraivin.net
sachmoi.info
allworxx.com
ownbitcoin.net
dremtnw.com
theclyo.com
cleanyourdesktop.com

# Reference: https://twitter.com/wwp96/status/1225529957935390720

madisonroseholtze.com
softlanders.com
bluecottonhome.com
apachedrone.com
regular123.com
divineandrefined.com

# Reference: https://twitter.com/wwp96/status/1226920846255689730

hypochrome.com
yansixiang.com
skateroads.com
benh-lau.com
mansiobok.com
thebeseenproject.com
nationalcaretrust.com

# Reference: https://app.any.run/tasks/ad0cfeed-aeb4-4757-bd46-db615025bf05/

qingxunmao.com
rzjie.net
softgelatobusiness.com
morita-m.info
lovelyfeed.com
vanistihdam.com
jjuecorp.com
cvvpp.info
befindnewcarhub.live
xn--9d0bt6kvvhi2dq06a.com

# Reference: https://app.any.run/tasks/9fafc927-138c-4dcd-978c-6e0d3cb4937e/

liexiaoyu.com
gazoly.com
ihrpro.info
mycoins.online
keautotech.com
xiaoqiug.com
tialpha.net
ghostwood.coffee
washingtonwarrior.com

# Reference: https://app.any.run/tasks/57365b94-44cd-4994-b49b-95f6d9542ee1/

chnwsdyglobalwealthandreinforcementagenc.duckdns.org
know-how-products.com
smfinanse.com
lost-cats.com
greenpathconstructionllc.info
livreslive.online
seedsofgreen.net
taoyishun.com
tahoe777.com
gzakyy.com

# Reference: https://twitter.com/wwp96/status/1227989980724826114

nfocorpventures.com
zhangshazngmingzhu.com
josieandmichael.com
ionamin-international.com
blackgirlmagicschool.com

# Reference: https://twitter.com/wwp96/status/1228050542238326788

dbprimery.com
mamaheartandhomeblog.com
slacktracks.info
madkrazyworld.com
salienttraining.com

# Reference: https://app.any.run/tasks/18d33a1b-b272-4f3a-b1f8-7743b7282dd9/

0g1ninefall.men
5799j.com
9660123.com
acbce.com
airpopgrip.com
claimookup.com
dinu.ltd
downesbuildco.com
heartpotatoes.com
hpnairportinfo.com
jackedsonadamsarts.info
koozest.com
minjian-edu.com
mz779.com
regular123.info
the-littlemenu.com
tnt-tunnel.com

# Reference: https://twitter.com/Jouliok/status/1228271357995180033
# Reference: https://app.any.run/tasks/69ab10fe-4ddd-420a-8f8b-39b240c313d9/

23oakgrove-malverneast.com
6oclocksupperclub.com
dovfaq.com
dynamicmovementmassage.com
editionlevel.services
fichamed.com
gsjhzs.com
humanityinneedcharity.net
kel1erindia.com
lostrabajosylosdias.com
trybestinteligen.world
valdezoktoberfest.com
wildfolkcreations.com

# Reference: https://otx.alienvault.com/pulse/5e468cf0019b4ecbc557f209

7565657.com
908763.com
barrolahl.com
bhjksc.com
bowriverrustic.com
canhocaocaplavidaplus.net
chenyirail.com
christopher-cloos.com
discerningdomains.com
goodsystem4updating.win
josieandmichael.com
manguifajas.com
mjarvis247.com
msdcong.com
naturegang.com
phoenixtalons.net
tzxymygs.com
unsdgs-ottawauniversity.com
zhangshazngmingzhu.com

# Reference: https://twitter.com/wwp96/status/1228366299048431618

ulxery.com
jackhaworthmortgage.com
stairsstickers.com
flutterbags.com
phaypro.com
thermalguardfoam.com
seniordaters.com

# Reference: https://twitter.com/wwp96/status/1228355644547309573

594cb.com
glamotr.com
khanebazi.com
saudirana.com
siarelco.com

# Reference: https://app.any.run/tasks/78ad3a12-6d82-46a8-9035-cecdf8b23e6f/

ribbonlogistics.com
brighidreppertdesign.com
szbestvision.com
ungtekno.com
produitsbio.net
quidoz.com
asdfcard.com
huanglingmianfen.com
thesalsakitchen.com
marcelorey.com
deadbeatcosmetics.com
lucasws.com
enesodaci.com
haierjiebest.com

# Reference: https://twitter.com/cyber_gato_malo/status/1227997377807691777

simonzjewelry.com
naturegang.com
bjhmsp.com
moralloki.com

# Reference: https://twitter.com/reecdeep/status/1229390645355261953
# Reference: https://app.any.run/tasks/c9bb2639-adbe-40b9-b066-8e39cf1f1522/

yuanzhitang.com
aab1.top
ldot.ltd
lhdhwpc.com
oneillfilms.com
lwqkssdz.com
nigi.ltd
northbridgeweb.com
pressurebattery.technology

# Reference: https://twitter.com/wwp96/status/1229806436403830784

daditbetter.com
glamotr.com
rxqp1.com

# Reference: https://twitter.com/wwp96/status/1229846047066927105

osplans.com
mediconthemove.com
iamkantha.com
gpiventures.com
flutterbags.com
sandcherrystables.com
ulxery.com

# Reference: https://twitter.com/notajungman/status/1230210986554134528
# Reference: https://app.any.run/tasks/8b09a8cf-d3f8-4ffe-9b20-c35ba8622110/

3i-lnfotech.com
bmsay.xyz
cmsay.xyz
erasmus-france.com
etliekmekkonya.net
gnamall.com
itisdue.com
koukoudaikou.com
laffsaturday.info
mcats2379.com
oku.world
patientsportstips.com
pervade.info
rdllb.info
samiceramic.com
us1china.com
xn--3e0bv81a2rhx9e.com
zhejiangft.com

# Reference: https://twitter.com/wwp96/status/1230224137534214144

dronv.com
graememitchley.com
mobileadscontrol.com

# Reference: https://app.any.run/tasks/1909e9e2-6ac6-474a-8589-5a0051e662da/

michaelsdbablog.com

# Reference: https://app.any.run/tasks/b4adadc1-a270-4da7-9882-fb66ce7e03ca/

vertikutierer24.info
caryxo.com
uniquecutters.com
tatatusupports.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1230862696024858625
# Reference: https://app.any.run/tasks/b7bb5802-1357-4ec9-aeff-e023c9c5acb9/

njagongsik.com
lytcjz.com
radark.company
iphonextrade.com
ysitem.com
gyeswu.info
quanziplus.com

# Reference: https://app.any.run/tasks/ed82b375-be11-4ecd-ab76-b86d11c9ed83/

based789.top
ctrip.chat
doingjobs.com

# Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Formbook)

emizard.com
hoscury.com
kabsolug.com
monkalef.com
oyishu.com
pursemtb.com
scaker.com
shaxob.com

# Reference: https://twitter.com/James_inthe_box/status/1231962545222647809

msofficeinternatiinalfilecloudtransfer.duckdns.org

# Reference: https://app.any.run/tasks/098ba1ab-160a-4270-88f2-976134f289e1/

theking.kim
kinakogohan.com
testingtimes.info
ulxery.com
xn--gzra.com
paintmywedding.net
healtphere.net
specialityhomes.com
jacobgb24.info
wqsfc.info
hidrosalud.life
ticketcerto.com

# Reference: https://app.any.run/tasks/aa5e7383-71e7-450f-94e6-8fd7e1350c4b/

riverdalestandard.com
cncsurplusparts.com
estrellahuang.com
023yuechang.com
ricard-sameofficeial.com
ulxery.com
genxewm.com
hqygyg.com
sachthudo.com
kinakogohan.com
zjvod.info
pigeche.com

# Reference: https://app.any.run/tasks/b80a84c7-35a1-4308-b688-2f85cfd29297/

thuyhoangcoto.com
viwdfw.info
anastasiasfantasy.com
bdplaza.com
athinasailing.com
nyoxibwer.com
js-no-tec.com
kanglaotou.com
focus-ecommerce.com
cheap-clothes-for-women.site
markmackoart.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1232295249306845185

allixanes.info
apuestactiva.com
boozebird.com
crosbybowsercoleman.com
cryptozia.com
knowledgedrum.com
mymandan.com
shirtsformanagers.com
silverhill.net
sundogsupply.com
sxmbh.co
upstatecardprocessing.com

# Reference: https://twitter.com/wwp96/status/1232410976147922944

homesecuritysystemsny.com
medd.site
czhyzy.com
ulxery.com
technologyspoon.com
glasgowcourtslawyers.info

# Reference: https://twitter.com/wwp96/status/1232409688110718977

affectcbd.com
hzcmhm.com
mscgrroup.com
thumdyn.com
wlmqmbwx.com

# Reference: https://twitter.com/wwp96/status/1232395733900374017

canada49ac.com
dev-ops.us
onechere.com

# Reference: https://app.any.run/tasks/f27ab2f5-f0d3-47e1-9081-5964e9a05b4e/

477ope.com
150gpa.com
shukastu.com
caryxo.com
37collingwoodst.com
xolcoin.com

# Reference: https://app.any.run/tasks/448d9f9b-af58-4a95-a317-77e4f6d86dd3/

mudanyadaotel.com
conmdemamen.com
sgcpic.com
caryxo.com
150gpa.com
codeedge.net
leletaovip.com
zaco.top
barrio-libro.com

# Reference: https://app.any.run/tasks/cf45229c-410d-499a-8577-927c5c33bfa5/

carrotaller.com
1523sussextpke.info
enpuntoni.com
830manbet.com
alkcz.link
republlcco.com
worstig.com
provinciaricaurte.com
vwabo.info

# Reference: https://twitter.com/1ZRR4H/status/1232441079837777920

snbnamibia.com

# Reference: https://app.any.run/tasks/9b6cfba3-3edf-4044-b6d0-90690afa5cda

fitgime.com
allixanes.info
ugot2b.com

# Reference: https://twitter.com/killamjr/status/1233714210816704512

americancloudfiletransferprogramin.duckdns.org

# Reference: https://twitter.com/wwp96/status/1234505353527689218

modernboot.com/h2o/
decormagz.com/h2o/
elomafus.com/h2o/
amitywomenspt.com/h2o/
agitatorfactory.com/h2o/

# Reference: https://twitter.com/wwp96/status/1234512894588575744

auroraexpres.com/m5g/
sluttychefs.com/m5g/
resplendentsoul.com/m5g/
jxpingji.com/m5g/
angryfatman.com/m5g/
singlechimp.com/m5g/
mainahao.com/m5g/

# Reference: https://twitter.com/wwp96/status/1234523991739596801

worstig.com/kx9/
carrotaller.com/kx9/
worstig.com/kx9/
christinamjkim.com/kx9/
guidaalluso.com/kx9/

# Reference: https://twitter.com/wwp96/status/1234511070146027527

quidoz.com/r30/
9227kkk.com/r30/
sellanews.com/r30/
gominou.com/r30/
woodruna.com/r30/
andlynweb.com/r30/
tributenora.com/r30/
casaboquete.com/r30/

# Reference: https://twitter.com/wwp96/status/1234926865556606978

carrotaller.com/kx9/
showshow.club/kx9/
guidaalluso.com/kx9/
foodindia-bysial.com/kx9/
sebengriffin.com/kx9/
christinamjkim.com/kx9/

# Reference: https://twitter.com/wwp96/status/1234931238076657665

vinoblay.com/tx3/
sexualitymenshop.com/tx3/
healingherds.com/tx3/
ricsawproperties.com/tx3/

# Reference: https://twitter.com/wwp96/status/1235242516825415687
# Reference: https://app.any.run/tasks/081940ee-da4b-4466-bd9b-66a6aeb1268c/

psychesiren.com/j9t/
bigdickfuckgay.com/j9t/
7565657.com/j9t/
zhangshazngmingzhu.com/j9t/
vulcan-mania.com/j9t/
momvibez.info/j9t/
ionamin-international.com/j9t/

# Reference: https://app.any.run/tasks/119740cc-d4b5-46b1-94dd-6090a2d07f6d/

americancloudfiletransferexcelfile.duckdns.org

# Reference: https://app.any.run/tasks/ce4cc99b-3e9f-437d-bdc2-e15229b8ae73/

shgshgsndy6nationalindustrialgoogleklm.duckdns.org

# Reference: https://twitter.com/wwp96/status/1235249891904978946
# Reference: https://app.any.run/tasks/41796c37-40c8-49a5-8581-66a24fdf2f5c/

fulltimepreschool.com/q0s/
trianting.com/q0s/
gpiventures.com/q0s/
shipinluoliao.com/q0s/
flutterbags.com/q0s/
lefongplaza.com/q0s/
ulxery.com/q0s/

# Reference: https://twitter.com/wwp96/status/1235585908637868032

proofresearch-germany.com/e8p/
import945.com/e8p/
4lcoin.com/e8p/
combscollisioninc.com/e8p/
xn--s80b57jcsde6fcyau51f.com/e8p/

# Reference: https://twitter.com/wwp96/status/1235950654524448774

costabravadoctors.com/ot2/
eventierspace.com/ot2/
naturehealingshop.com/ot2/
asyule225.com/ot2/
lazydoona.com/ot2/
vlemi.com/ot2/
norjax.com/ot2/
triom.tech/ot2/

# Reference: https://twitter.com/wwp96/status/1235968366680117249

classiccurtainskent.co.uk/kx9/
enpuntoni.com/kx9/
breakapp-view.com/kx9/
worstig.com/kx9/
thepilltheplay.info/kx9/
myattendance.today/kx9/

# Reference: https://twitter.com/wwp96/status/1236013793290878976

amistadcristianairapuato.net/zy8/
sousvidemasters.com/zy8/
parosbet.com/zy8/
dronv.com/zy8/
dgsellsrealestate.com/zy8/
fjellburet.com/zy8/
prboatrentals.com/zy8/

# Reference: https://twitter.com/w3ndige/status/1237078724786479104
# Reference: https://app.any.run/tasks/9ee06ab6-2741-4547-bd64-3437c241b3cd/

officearchives.duckdns.org
sommernph.com

# Reference: https://twitter.com/wwp96/status/1237107769129553922
# Reference: https://app.any.run/tasks/7ec58842-7c33-4623-8c5a-6058074b45b9/

ssquid.net/mr02/
aoikyoutei.com/mr02/
cqyongs.com/mr02/
samuraisracing.com/mr02/
grievingly.com/mr02/
discountsclicks.info/mr02/
wanyaobxg.com/mr02/
808korean.com/mr02/

# Reference: https://twitter.com/wwp96/status/1237460282647199745
# Reference: https://app.any.run/tasks/6b3c7009-01ec-4739-9d54-9d2d8320d6a1/

junhao12131.com/r30/
milar.farm/r30/
kalpnacaters.com/r30/
quidoz.com/r30/
lumencos.com/r30/
andlynweb.com/r30/
trekofpersia.com/r30/
ilyakids.com/r30/

# Reference: https://twitter.com/wwp96/status/1237458425287712768
# Reference: https://app.any.run/tasks/4b7ada4b-f96d-4516-b9e3-54ef9dc4bf33/

sidinstitute.org/ri01/
whatareyousoafraidof.com/ri01/
trumpcoin.online/ri01/
me-mart.com/ri01/
discountsclicks.info/ri01/
longrunohm.com/ri01/
34lv.com/ri01/

# Reference: https://twitter.com/wwp96/status/1237466791322046464
# Reference: https://app.any.run/tasks/2b83d26c-b74f-4ed2-8929-5d9df254ddd0/

5554975.com/l89/
nercox.com/l89/
unicigar.com/l89/
raztrans.com/l89/
drousehair.com/l89/

# Reference: https://twitter.com/wwp96/status/1237477304009240576
# Reference: https://app.any.run/tasks/bd661e9c-92a8-4508-b3b0-1f8ecd380e55/

808korean.com/mr02/
discountsclicks.info/mr02/
ssquid.net/mr02/
planetmecharnical.com/mr02/
samuraisracing.com/mr02/
bulmmaf.com/mr02/
yibo.ltd/mr02/

# Reference: https://twitter.com/wwp96/status/1237485063366942722
# Reference: https://app.any.run/tasks/b0178458-4783-4cdc-bf95-0683c92e775f/

crokve.com
mix2025.net
midasrxpharmacy.info
kreasidesain.com
livelifeoutonalimb.com
linkseepay.com

# Reference: https://twitter.com/wwp96/status/1237487962566393858
# Reference: https://app.any.run/tasks/50b155ce-7d71-4f09-b3d6-6c6236722c9f/

aprils-website.info/r30/
sipenyuluh.com/r30/
buy-cyprus.com/r30/
appsdidi-secaccount.com/r30/
sellanews.com/r30/
fidem-consecuta.com/r30/
woodruna.com/r30/

# Reference: https://twitter.com/wwp96/status/1237802222991413258
# Reference: https://app.any.run/tasks/f4e1007c-482b-49b7-a972-abeabe34af29/

cutdream.com/kx9/
showshow.club/kx9/
christinamjkim.com/kx9/
myattendance.today/kx9/
guidaalluso.com/kx9/

# Reference: https://twitter.com/wwp96/status/1237794145940525057
# Reference: https://app.any.run/tasks/b3b3beef-bb19-4343-b078-7fb1e923873a/

leaseloveown.com/l0x/
bridalphotographystudio.com/l0x/
doverax.com/l0x/
ecomcollege.com/l0x/
teetailz.co.uk/l0x/

# Reference: https://twitter.com/JAMESWT_MHT/status/1238078045027794944
# Reference: https://app.any.run/tasks/69676e2c-6f89-463a-be79-1c26e03fc734/

ariafm.gr
flammaart.com
isome2018.com
opebet199.com

# Reference: https://twitter.com/malwrhunterteam/status/1239863667409276928

mastervisacloudesystemprtomicrosftwareus.duckdns.org

# Reference: https://www.virustotal.com/gui/file/be3cfbf10a732af9965dab5b769ef622233eeca26dc1a3e541326e7ce6788bab/detection

indexcalbromarisportallservices.duckdns.org

# Reference: https://app.any.run/tasks/83bd9eb8-7e5a-43af-b131-361590b336b5/

freehobbysolutions.com
moswanted.com
votravo.info

# Reference: https://twitter.com/FewAtoms/status/1240322356880576513

msofficewordfiletransfertotheadmintrue.duckdns.org

# Reference: https://twitter.com/Jouliok/status/1242187207588405248

tescohomegroseryandelectronicstday2store.duckdns.org

# Reference: https://github.com/silence-is-best/c2db#formbook

liuhe127.com

# Reference: https://twitter.com/JayTHL/status/1242196123848245248
# Reference: https://pastebin.com/raw/8qSuUVB4

1ameem.com
1billionhappy.com
1billionwell.com
5product.com
60apexchecks.com
60checks.com
6figurepayraise.com
abillionhappy.com
abillionwell.com
acton.in
actonlabs.in
ahcprheumatology.com
apexasset.io
apextech.biz
apextech.info
apexworld.io
apexworldlaunch.com
apexworldlaunch.tv
ashfaque.me
atefehjewellers.in
auracoolum.com.au
awakencharlotte.com
bellkrank.com
beonbeauty.co.uk
bestexoticdogs.com
brandon--sellers.com
bunkworks.co.uk
cakesque.com
caraconsulting.services
careandcompanion.co.uk
caribbeanwebfestival.com
classysun.com
classysun.info
classysun.net
clownpenis.solutions
colwellandcolwell.com
comfortzonemarketing.com
coronadocobshop.com
crystalindiainfra.com
danandrobbie.com
davidhareart.com
dealerships-suck.com
dianetyrrell.com
diyajewel.com
dotadois.com
drkswrks.com
dubaiexoticdogs.com
earn60apexchecks.com
earn60checks.com
earn60techchecks.com
epica.life
epicassets.info
epicassets.io
exoticmicrobullydogs.com
exoticmicrodogs.com
expertsat.io
fidatoo.in
finalclear.com
funerarianevarez.com
get60checks.com
getservices365.com
globonovo.com
gmshorses.com
golitech.com
goodygifter.com
goteamdeveloper.com
grandmascheesecakes.com
griotplus.com
harvestyourownhemp.com
haula.net
helo.life
heloworld.us
henready.co.uk
hilaryreading.com
houseprof.ca
iamallin.com
iamhappyandwell.com
ilearner.com.tw
incrediblykayla.com
iowabaseballranch.com
iqteamfreedom.com
iqzoom.us
isai4me.com
islandspect.com
isthisforme.com
isyys.net
janfitzpatrickhomes.com
jeremyroma.com
jointhecoinclub.com
jonicablog.com
kamanait.com
kimmys.com
kimmysrestaurant.com
kinderism.org
korling.de
labaccidenttheband.com
levatemediamarketing.com
lifetech.io
lilannie.com
livecryptostatus.com
magnabusinessconsulting.com
martinidewinter.com
matchmymatrimony.com
memeingoflife.com
middlewaremaniacs.com
mil-leon-clothing.com
milleonclothing.com
millionairebootcamp.io
mohanlakshmipathy.com
moist-towelettes.com
moneyiq.tech
mortgageclaimscentre.co.uk
mustbenyce.com
mybtcdeposit.com
mymoneyiq.io
nanghtikeaung.com
nashvilleeastrentals.com
natureswebb.ca
newchain.io
neweuphoria.com
newlotions.com
nicegirl.nyc
ninewestfinancial.com
nitramax.in
okayspark.com
ollie-wood.com
pennyfables.com
perilli.com
pharmdcareers.com
pippingstudio.com
primegusclub.shop
psychotherapyandcounsellingmelbourne.com
rashtraudhyog.com
reliefcbg.com
repdestroyer.com
repdestroyers.com
rerecall.com
rhumboogie.ws
richdeboer.com
rollingwithjoe.com
romasboutique.com
rubell.nyc
rubellmanagement.com
ruhiz.fashion
rushcode.in
secautotransport.com
shittlez.com
simonmiminis.com
solosugiero.com
steelecreekpresby.com
sunshinecoastmow.com.au
switchuations.life
taichibham.org
td.world
thaomoctrungdong.com
thebrainworkacademy.com
thebulldogpubgrille.com
thecottagepiecompany.co.uk
thedistractedwriter.com
theellisgroupholdings.us
therealworldchangers.com
theroommom.com
thesuccessalliance.in
tmpist.com
tnmedonline.xyz
topexoticdogs.com
totheranchandback.com
transforselogistics.in
trizle.com
tylascountrygarden.com
uberspace.co.in
umidaroma.com
urbnwarrior.com
vagastophostels.com
waldorfian.com
wisconsinmicrogreens.com

# Reference: https://app.any.run/tasks/847e1945-3b02-422f-8030-5722b20ffc44/

rogerssmarthealth.com
ahzike.com
sonnensteinwasser.com
alxbrtn.com

# Reference: https://www.virustotal.com/gui/file/6fe43863e02d4a6fb20cbb2c2ad39368abef81636f597da94f7234af2dea47e4/detection

0573sghp.com/sm02/
44exex.com/sm02/
discountsclicks.info/sm02/
istikhara786.com/sm02/
labo10.com/sm02/
lifflander.net/sm02/
piczum.com/sm02/
piknus.com/sm02/
selfieblast.com/sm02/
sluas.com/sm02/
ventouse-carrosserie.com/sm02/
wulkan-mania.com/sm02/

# Reference: https://www.virustotal.com/gui/file/ec7d04da5408d773d949a47cdbbe102b5548ca7358b8d6bf677c3033df5bf04f/detection

athlete50.com/cs2/
govaj.com/cs2/
htma.us/cs2/
jinshengintl.com/cs2/
movingtowardsmeaning.com/cs2/
shengdestone.com/cs2/
susapflug.com/cs2/
vaisnavalife.com/cs2/
yb77777.com/cs2/

# Reference: https://twitter.com/FewAtoms/status/1243249736662028288

systemserverrootmapforfiletrn.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bc000ae8600c8e6fadceb92af23b0f929ec90ea9184675428f88c01b61af6c63/detection

2070pe.com/te/
crisngrt.com/te/
jlzbtx.com/te/
kranche.com/te/

# Reference: https://app.any.run/tasks/cc60c746-1cf8-4adf-8055-4964111c1c9f/

catalinacustomcreations.com/y8r/

# Reference: https://twitter.com/58_158_177_102/status/1245619205833031683
# Reference: https://otx.alienvault.com/pulse/5e8618aa07d72250efbcc853

grabascoop.com/e8p/

# Reference: https://www.virustotal.com/gui/file/c07e2d84c2f5cef7c52c89516cddb219451e2ca0a9bc8c2c98a438cd16db351f/detection

alarmaconhumo.com/zu/
episdenergy.com/zu/
kervax.com/zu/
lautrevision360.com/zu/
medialab-infos.com/zu/
nadirezeki.com/zu/
twfutures.com/zu/
viviselfie.com/zu/
xinheguoji.com/zu/
xinyanjiazheng.com/zu/

# Reference: https://www.virustotal.com/gui/file/616662d9be4b626c73d56cdd6ab4992dbe124de7ce8769630da99397087eea3f/detection

kervax.com/nu/
networkmarketinghq.com/nu/
zswei.com/nu/

# Reference: https://www.virustotal.com/gui/file/d31f7974458508d491e0840db4385c5a38731195cae24a891abb24bb4699c9b3/detection

cambridgehomeimprovements.com/nu/

# Reference: https://www.virustotal.com/gui/file/125a3d4bdb49a67bb4a9dfb6a7c3a09f82083392a76ea1b5cec87bb477ca6bda/detection

bowerbirdnest.com/nu/
mauritiusurlaub.com/nu/

# Reference: https://www.virustotal.com/gui/file/24a1fd76b3daece9142d9ec00807f9bf1bb15831bf72646f013464c8dd94acd1/detection

buildthemind.com/ej/
chuanyuemeili.com/ej/
goldmanjewelers.com/ej/
kervax.com/ej/
kevincurley.net/ej/
newconnectbiblestudy.com/ej/

# Reference: https://www.virustotal.com/gui/file/5d7a56e18e95592673a4c922d86375a168e695966502007cb6b67c1bcc0f16b8/detection

kervax.com
kervax.com/dy/
traumainformedlens.com/dy/
varolemlak.net/dy/

# Reference: https://www.virustotal.com/gui/file/7e756510a7ed412001857c371cafb5af3158eb0a73c9b51eb5823d9002c7d3a8/detection

dalu.ltd/gh/
purespeech.net/gh/

# Reference: https://www.virustotal.com/gui/file/1c57ad28bc07997adeb829bda45513521d95fe2c6880736f69fa701828a30255/detection

cricketxtreme.com/sk/
dikaiyun.com/sk/
hypno.solutions/sk/
kervax.com/sk/
playlanddaycare.biz/sk/
tunegeartech.com/sk/
ukholidayhome.com/sk/
ybsankeshu.com/sk/

# Reference: https://www.virustotal.com/gui/file/af14c1c7562021939f0a68e699a3ba28e26cb6d8d12e8df2c8ca4deba6ceacd7/detection

dalu.ltd
dalu.ltd/gh/
fangjiedaikuan.com/gh/
kervax.com/gh/
massimogirardi.com/gh/
shiweitian.net/gh/
vidolin.info/gh/

# Reference: https://www.virustotal.com/gui/file/fc9be600e3961102a93f5096cac156c1be7e875af98e12ab4f85698f8442475b/detection

byhisgraceestate.com/sh/
comet-sunsun.com/sh/
honeyanda.com/sh/
kervax.com/sh/
maltafarmhouse.com/sh/
shciicoe.com/sh/
zpjrt.com/sh/

# Reference: https://www.virustotal.com/gui/file/3e85d65f5ea95309ad331f5c371449ae85bad3efd0e272b3983377f54a5dee32/detection

fensier.com/sh/
kervax.com/sh/
lapanganpoker.com/sh/
lex-investigations.info/sh/
napshoes.com/sh/
sunbul-phone.com/sh/
umrah-visa.com/sh/

# Reference: https://www.virustotal.com/gui/file/47b251c6e857843db7f377471c90ec48d3ea0f0f5ced461aebf607644815f181/detection

byhisgraceestate.com/sh/
cbd-innovation.com/sh/
eba-ecoenergy.com/sh/
sabetta.family/sh/

# Reference: https://www.virustotal.com/gui/file/b066282209652ab35d7f93ce103b33b06a10e9d4b74e1ea3263466e2789b422d/detection

dharmaworksonline.com/gh/
dukabcn.net/gh/
fangjiedaikuan.com/gh/
gppz999.com/gh/
kervax.com/gh/
mirinavsgorgon.com/gh/
niyoufan.com/gh/
yinstkd.com/gh/

# Reference: https://www.virustotal.com/gui/file/bb8d0853cb0dad63c6098031f2166ba7171259efc5ce83968bdf121cfdff8763/detection
# Reference: https://www.virustotal.com/gui/file/21deeba7640f04a0149d5bd890d8a638c1e126e82c49d0d04a5fcf42c3e5af75/detection

5injlq.com/wi/
720wangzhan.com/wi/
adjointlab.com/wi/
adskitchen.com/wi/
ashishtank.com/wi/
backroomcoffee.com/wi/
cbelleza.com/wi/
chocoval.com/wi/
formattressesok.live/wi/
iron-rain.com/wi/
jamaltooley.com/wi/
janeadamwedding.com/wi/
kervax.com/wi/
lec88.com/wi/
lingnuoguanjia.com/wi/
mengxiangfengcai.com/wi/
musicbyrivals.com/wi/
nvwang41.com/wi/
pg5-formations.com/wi/
tinymarvels.com/wi/
understandingbitcoin.info/wi/
web-design.review/wi/
wm-sb.com/wi/
xyfps.com/wi/
zen507.com/wi/

# Reference: https://www.virustotal.com/gui/file/e97f3ad278b659df4d30bf8181f0698562342e7c03a5a1d41bc601856b2b725c/detection

claddingsheets.info/m01/
coinpon.biz/m01/
kervax.com/m01/
listingclose.com/m01/
ructious.com/m01/
rustedcrate.com/m01/
yczpsh.com/m01/
zeroabuseproject.info/m01/

# Reference: https://www.virustotal.com/gui/file/627b93e8da6daaee1b32bc527ca60f79c501ecd0a3a820fc2a7dea588a795f24/detection

2enablehealth.com/jw/
amindfulearth.com/jw/
janainaerobson.com/jw/
kervax.com/jw/
spaceteamentertainment.com/jw/
sweetsenbake.com/jw/
twz1982.com/jw/
xyi876.com/jw/

# Reference: https://twitter.com/James_inthe_box/status/1249767134269304835

masionlex.info

# Reference: https://twitter.com/James_inthe_box/status/1250077975803916288

thamxop.net

# Reference: https://twitter.com/FewAtoms/status/1252947093171441665

systemintergrafileexchangeserverprotocol.duckdns.org

# Reference: https://twitter.com/petrovic082/status/1255122599354552323

thesecuritysoftwarescannerindustrgreat.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9dce0e1dfbf676137ce1e57f626ad4911056a18c8bdc76f8c3d9b6eaff117092/detection

blkdotconnect.com/t8a/
cufusionevents.com/t8a/
guojizk.com/t8a/
jakedfinkel.lawyer/t8a/
pikio24.com/t8a/
radioncr.com/t8a/
spenbulk.com/t8a/

# Reference: https://app.any.run/tasks/8c381564-3161-42e7-8e91-142990fe4717/
# Reference: https://app.any.run/tasks/6a7d9731-d5de-42ed-85d7-84bc2866196d/
# Reference: https://app.any.run/tasks/ee7b9409-b311-4152-bcea-885e2f055215/

1l4m-5qeh0cgx9a.com
amazingthunderworks.com
badnoordzee.com
cosmemia.com
cryptofinance.services
devereaux.us
empety.com
garden-scope.com
godhep.com
hamptonandjones.com
hulebang.com
jiudianhuixun.com
keeperofthebeesnwnj.com
mangaromance.com
myplusha.com
odjmusica.com
portsel.com
quantumreapers.com
schoolofintrovertship.com
sippingnpaintingcolorado.net
storeketo.com
studio815.salon
supremeondemand.com
vannuysland.com
wyalusingbeverage.com

# Reference: https://twitter.com/DynamicAnalysis/status/1260721412773380096

russchine2specia21plumbingsndymaterialjp.duckdns.org

# Reference: https://unit42.paloaltonetworks.com/silverterrier-covid-19-themed-business-email-compromise/

12kungwsdyducationaldeveloperinvestmenty.duckdns.org
6uniteddefenceforstdygorvermentsocialeme.duckdns.org
americanmicrosoftclouddepartment.duckdns.org
antipiracydetectorganisationforwsdy3film.duckdns.org
bbchenkotsdywoolandpappercompanybnhs5.duckdns.org
chinoex2onlineantibullyandgeneralxpstdy5.duckdns.org
chnes9wealthandstdyorganisationsumit.duckdns.org
chneswealstdy8thandorganisationjokbo.duckdns.org
chneswealthandorganisationstdy7joppl.duckdns.org
chneswsdy13wealthandmoduleorganisationrn.duckdns.org
chneswsdy8wealthandorganisationjokbo.duckdns.org
chnfrndsecurityandgorvermentstdy1socialf.duckdns.org
chnfrndsub1inteligentangencysndy4project.duckdns.org
chnfrndtsdysecurityandgorvermentsocialjf.duckdns.org
chnfrndwsdy1securityandgorvermentsocialf.duckdns.org
cloudfilesharingdomainurllinksys.duckdns.org
crimedetectivefor1stdygorvermentndsocial.duckdns.org
empowermentorganisationstday1government.duckdns.org
engin3worldstdydevelopmentandtechnology.duckdns.org
engintsdy3worlddevelopmentandtechnology.duckdns.org
fileexchangeserverprotocolsystemintergra.duckdns.org
filegotosecureothers.duckdns.org
frndgreen1frdycreamcostmeticsladiesshop.duckdns.org
frndgreen3creamwsdycostmeticsbabystored.duckdns.org
globaltransfersecurefilethroughcloud.duckdns.org
green9wsdyelectronicsandkitchenappliance.duckdns.org
investmenteducationkungykmtsdy8agender.duckdns.org
kung11ducationalstdydeveloperinvestmenty.duckdns.org
kung13eduationalstdydeveloperinvestmenty.duckdns.org
kungeducationalinvestment8tusdyagender.duckdns.org
kungfrdyeducationalinvestment8agender.duckdns.org
kungglobalinvestmenteductgpmstdy8addres.duckdns.org
kungglobalinvestmentjpjeductaddres5stdy.duckdns.org
kungglobalinvestmentjpjwsdy6eductaddres.duckdns.org
kungstdy7globalinvestmentjmpeductaddres.duckdns.org
kungwsdy7globalinvestmentjmpeductaddres.duckdns.org
livevideoremoteconference.duckdns.org
mastervisacloudesystemprtomicrosftwareus.duckdns.org
msofficeinternatiinalfilecloudtransfer.duckdns.org
msofficewordfiletransfertotheadmintrue.duckdns.org
office365securefilegatewaytransfer.duckdns.org
omentradinginternationalprivateltd.duckdns.org
prodigtsdy5organizationalcompanygroupin.duckdns.org
russchine2specialstdy1plumbingmaterialsv.duckdns.org
russchine2specialstdy2plumbingmaterialgh.duckdns.org
russchine2wsdy1specialplumbingmaterialsv.duckdns.org
russchine2wsdyspecial6plumbingjkmaterial.duckdns.org
shgshg13nationalwsdyobjindustrialatempt.duckdns.org
shgshg9nationalobjwsdyindustrialgoogler.duckdns.org
shgshgnationalindustrialwsdy8googleklm.duckdns.org
shgshgnationalobjindustrialstdy10atempt.duckdns.org
shgshgnstdy7ationalindustrialgoogleklm.duckdns.org
shgshgstdy9nationalobjindustrialgoogle.duckdns.org
silentexploitfileexchangerzeroday.duckdns.org
tescogroseryand1wsdayelectronicstorehome.duckdns.org
tescohomegroseryandelectronicstday2store.duckdns.org
tescostday1groseryandelectronicstorehome.duckdns.org
webxpostdytechnologyhardsoftware5buyers.duckdns.org
wewewewewesesesesasbacwederffggffddsss.duckdns.org
windowsdefenderwithfiewallprotocolsecure.duckdns.org
windowsfirewallprotcolsecuritysystem.duckdns.org
worldengindevelopnw7stdymenttechnology.duckdns.org

# Reference: https://twitter.com/luc4m/status/1261260538870366210

6wsdychinese2profesionalandhealthanalpn.duckdns.org

# Reference: https://news.sophos.com/en-us/2020/05/14/raticate/

ef-oh.com/c208/
odoyo.net/c208/
hearee.com/c208/
binzom.com/c208/
pizzans.com/c208/
phochain.com/sa/
rdrfi.com/sa/
skylod.com/sa/
hsctsu.com/sa/
cbespania.info/c206/
conrak.net/c206/
coxemen.com/c206/
dachfix.com/c206/
hypnose-beziers.com/c206/
jevmod.com/c206/
lighthouse-campus24.com/c206/
miscov.com/p0x/
oleum.gmbh/c206/
pupilfy.com/c206/
ratokasutka.com/p0x/
tellpizzqhut.com/c206/
terenium.com/c206/
vibe.restaurant/c206/
yamatobb.com/c206/
yncits89.com/p0x/
czxpkj.com/c206/
cbespania.info/c206/
jevmod.com/c206/
slashoff.com/c208/
sofisleep.com/c208/
jinshasoft.com/c208/
binzom.com/c208/
bywebhost.com/c208/
jinshasoft.com/c208/

# Reference: https://app.any.run/tasks/fe1f56d5-b4ac-401f-abcf-2e25957c13da/

methvenonthemove.com
3lmktgsvc.com
hylg6.com
100fwq.com
laperamordidablog.com
gtitdunproductions.com
glamotd.com
www.azasianow.com/gm1/

# Reference: https://app.any.run/tasks/58333b8b-3488-492e-a1e2-f61bec0a1cca/

teampositiongurus.com
zulfahly.net
capterium.com

# Reference: https://twitter.com/DynamicAnalysis/status/1263680114476191744

webxpoadukejumokeadejokeabolanleholagg.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/creatonetwothreefourfivesexsevenmansgg.duckdns.org/relations

creatonetwothreefourfivesexsevenmansgg.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/metadefenderinternationalsolutionfor.duckdns.org/relations

metadefenderinternationalsolutionfor.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1264882811141488641

aviraantivirussecuritysystempro.duckdns.org

# Reference: https://twitter.com/JAMESWT_MHT/status/1265553518049492992

chinese3lowncomeiscausedbythepandemic.duckdns.org
russchine2loganxmenischangedtonewperson.duckdns.org

# Reference: https://twitter.com/JAMESWT_MHT/status/1268827911722799104

22kungcommunicationtariffsuplierlimthdy.duckdns.org

# Reference: https://app.any.run/tasks/947a591b-200c-4409-8a71-7888da9c93fa/

beautyqueenstores.com/k0f/
chataan.com/k0f/
fattireflights.com/k0f/
moviesfan.net/k0f/
printpeacock.biz/k0f/
sptor.net/k0f/
superwebox.com/k0f/

# Reference: https://twitter.com/JAMESWT_MHT/status/1271356489341558785
# Reference: https://app.any.run/tasks/d85e6f91-5369-454c-ae9f-996dea6743c8/

s-immotanger.com/n7ak/
moodandmystery.com/n7ak/
kangen-international.com/n7ak/
joomlas123.info/n7ak/
runzexd.com/n7ak/
belviderewrestling.com/n7ak/

# Reference: https://twitter.com/MaelSecurity/status/1274414782645506049
# Reference: https://app.any.run/tasks/ad5f5540-df5d-4f7d-853d-9ae4a97be620/

officedocumentfilesharingcloudbaseservi.duckdns.org

# Reference: https://app.any.run/tasks/e6dbb7aa-2d2b-4031-be25-0a86c263a6f6/

asmreekasounds.com
arhiereus.com
oxagp.loan
handyngoods.com
simoneisaaclifestyle-1.com
akbank-mobil-giris.com
wrrsh.com

# Reference: https://app.any.run/tasks/ec7fd1c0-e975-44b1-8719-b0d2b7dfa568/

abiligo.net/kkb/
glamotd.com/kkb/
iscompetition.net/kkb/
renkoto.net/kkb/
2nfq.com
adsars.com
aretocloud.com
dentalonline.info
myvelvetcollection.com
theluxuryindustry.com

# Reference: https://twitter.com/FewAtoms/status/1275473977885024261

firewallinternationalgatewayforoffcefile.duckdns.org

# Reference: https://twitter.com/FewAtoms/status/1276181803712167936

americanfirewallsecuritysystemprotocolfi.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/wsdychnesqudusisabadassniggainthe30wmg.duckdns.org/detection

wsdychnesqudusisabadassniggainthe30wmg.duckdns.org

# Reference: https://urlhaus.abuse.ch/downloads/text_recent/

22chnesqudusisabadassniggainthehudolat.duckdns.org
22kungcommunicationtariffsuplierlimthdy.duckdns.org
23chnesqudusisabadassniggainthehudokgd.duckdns.org
2morcmmytalententertamentforwsdyshampn.duckdns.org
4sndychinese2onlyywalkaloneinlifea1ptc.duckdns.org
americanfirewallsecuritysystemprotocolfi.duckdns.org
chinese2stdyonlyywalkaloneinlifeagfd10.duckdns.org
chinese2thdy9onlyywalkaloneinlifeanre.duckdns.org
chinese2wsdyonlyywalkaloneinlifea13klm.duckdns.org
chinese3higncomeiscausedbythepandempv.duckdns.org
chinese4higncomeiscausedbythepandevop.duckdns.org
chinese5higncomeiscausedbythepandekjp.duckdns.org
chinese7higncomeiscausedbystdythepandybv.duckdns.org
chnes29sndyqudusisabadassniggainthebba.duckdns.org
cprvstd4upcomingtalentanimationauditnyc.duckdns.org
cprvtsdy2upcomingtalentanimationauditics.duckdns.org
firewallinternationalgatewayforoffcefile.duckdns.org
green13kegheedahatakankeadeshnaastdyjlp.duckdns.org
green14kegheedahatakankeadeshnaawsdycxz.duckdns.org
greenkegheedahatakankeadeshnaajaotawqsz.duckdns.org
greenkegheedahatakankeadeshnaajaotawsut.duckdns.org
honeysposecurityfileexchangeservice.duckdns.org
internationalantivirussmartscreensecur.duckdns.org
irequestyoutopleaseadviseonthepayment.duckdns.org
kung20communicationtariffsuplierlimited.duckdns.org
kungsndycommunicationtariffsuplier27abj.duckdns.org
livelifewithnocoronafearforcountry.duckdns.org
microsfotinternetsecurefiletransferserve.duckdns.org
microsoftvirutalmachinefilesafetytransf.duckdns.org
mkpksb1behindcloseddoormatchisnotgoods.duckdns.org
morcmmystnewtalententertamentfor1winner.duckdns.org
officedocumentfilesharingcloudbaseservi.duckdns.org
ppkpsureksub2mondaynightgraceofalmighy.duckdns.org
ppkpsuresub1intercontinentalsuitishere.duckdns.org
russchine2mapanxmenischangedonewpethdy9.duckdns.org
russchine2mapanxmenischangedtonewperkkg.duckdns.org
russchine2mapanxmenischangedtonewperpvc.duckdns.org
russchine2mapanxmenischangestdy10donewcx.duckdns.org
russchine2mapanxmenischangestdy12donexaz.duckdns.org
russchine2sndymapanxmenischangedone14ajb.duckdns.org
sharefildecenterforsecurefiletransferwin.duckdns.org
sndychnesprvallanouthegreatsoustraofour.duckdns.org
sndychnesprvlandofglorylandoflifeforle.duckdns.org
sndychnesprvwaybackmaybachholdbageverl.duckdns.org
sndykrlssnp4curruptgovernmentagencytlki.duckdns.org
transferwisefirewallsystemupdatedinfo.duckdns.org
united17sndyfokesokoriorimistreetsjxzw.duckdns.org
united31stdyfrkesokoriorimistreetsjmng.duckdns.org
webxpopunlariscostlyinthemarketsevelmk.duckdns.org
webxstdy18popunlariscostlyinthemarketzq.duckdns.org
workfine12stdyanotherrainbowlomoyentfkw.duckdns.org
workfine15wsdyanotherrainbowlomoyenttdf.duckdns.org
workfine7alogorainbowlomoyentonloyevpn.duckdns.org
wsdy6pksnpcoperategovernmenttgpdagentx.duckdns.org
wsdychnesqudusisabadassniggainthe30wmg.duckdns.org

# Reference: https://twitter.com/Bl4ng3l/status/1276446227928924160
# Reference: https://app.any.run/tasks/d8c16703-53bb-47f3-8ecb-4414bc42451a/

3or8mwa-ynq.com
betokem.com
freamsahub.online
irmcentral.com
porcber.com

# Reference: https://app.any.run/tasks/a998e908-7e78-4c69-aa4a-0fb899669078/

selfdrivingpractice.com
sh-feiye888.com
doneym.com
s-t-a-r-b-u-c-k-s.com
bowrivarenergy.com
akgulsa.com

# Reference: https://twitter.com/Bl4ng3l/status/1277882548098609157

glpfundraising.com
goodfatco.com
aliyahbrack.com
omgpu.com
glamotd.com
mc-davo.com
planningforsurvival.net
aretocloud.com
cheffrais.com
helenhotfm.com
tv17403.info
bushfriends.com
aretocloud.com
renforts7.com
calciobalillaroma.com
hxjmzc.com
dynamicmusiq.com
iscompetition.net
nidaot.link
lechefchile.com
glamotd.com
aliyahbrack.com
halal.exchange
glpfundraising.com
goodfatco.com
envydesignhouse.com
dentalonline.info

# Reference: https://twitter.com/Dr_N0b0dyh/status/1277872993650331650

sndykung29communicationtariffsupliergfd.duckdns.org

# Reference: https://twitter.com/reecdeep/status/1278948869531930624

kungwsdycommunicationtariffsuplier30mgh.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/chnfwsdytwomanglobalbusinessexyandjps.duckdns.org/relations

chnfwsdytwomanglobalbusinessexyandjps.duckdns.org

# Reference: https://app.any.run/tasks/160c15e2-65a2-4a4a-9e4c-c48dda841e90/
# Reference: https://app.any.run/tasks/2cc7e325-5d33-4cbb-bcd6-fc873b336167/

regulars7.info
gographics.promo
lsalik.com
onlinekharisma.com
tt1558.com
stylishbeans.com
wireformationtechnologies.com

# Reference: https://www.virustotal.com/gui/file/2edc612812919760be42de00fde052d6808281cd5009fb6050b21b67cc6db93f/detection

healthclubpdx.com/gw8/
sandrxy.com/gw8/
healthclubpdx.com/gw8/
bennettfoamaustralia.com/gw8/
robertdebartolo.com/gw8/
robertdebartolo.com/gw8/
healthclubpdx.com/gw8/
sandrxy.com/gw8/
bennettfoamaustralia.com/gw8/
sandrxy.com/gw8/
bennettfoamaustralia.com/gw8/
cheekywebhosting.com/gw8/

# Reference: https://www.virustotal.com/gui/file/9dae9325edf14a042013558bf5d564a8c67491813b63fa66a3eb79aec59ed4b5/detection

amaliagris.com/r86/
dna-cancertest.com/r86/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1281592784407990273

19workfineanotherrainbowlomoyentwsdywrk.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ebbbbbd6f76c1d7557568bb7aeac9f66e3bdfdfdd6acc5546fbca31041ff9c05/detection

labresa.com/s4w/
marketingkonzept.com/s4w/
pakietbioasekuracyjny.com/s4w/
qelwah2.com/s4w/
susuzluapp.com/s4w/
yenihayatgreencard.com/s4w/

# Reference: https://www.virustotal.com/gui/file/d120c2d090953fec810563847c2ba5cdcbff3dc4715949e5ef7531e71c5c560e/detection

fromahighschoolgraduate.com/dum/
rochesterlocalseo.com/dum/

# Reference: https://www.virustotal.com/gui/file/aad021f8bd11f8e9195e4954b1269db584dd838026f3d73e751d69b142ced6c4/detection

igametalent.com/3nop/
joomlas123.info/3nop/
potashdragon.com/3nop/
shenglisuoye.com/3nop/
sixpenceworkshop.com/3nop/
sunflowermoonstudio.com/3nop/

# Reference: https://www.virustotal.com/gui/file/ad36c93aff3c5ad262be5608200b1d583624dd29cfb2a78fd4dfab034282bde6/detection

16sf.info/63j/
1h0threeout.loan/63j/
1k3onecould.men/63j/
5526693.com/63j/
abarkforhelp.com/63j/
ago-merch.com/63j/
autistics.info/63j/
empowermyv.com/63j/
escuchamp3gratis.com/63j/
fabriekuniek.com/63j/
govaj.com/63j/
hollydoe.com/63j/
inboundmag.com/63j/
jiejinrihua.com/63j/
mabinhura.com/63j/
mahroofbuilders.com/63j/
meehanmindset.com/63j/
mprigweld.com/63j/
royalgiyim.com/63j/
shopfor.toys/63j/
tacostuzo.com/63j/
thedeadgoddescendants.com/63j/
traumafutbol.com/63j/
unblockrun.com/63j/
wen8.info/63j/
wineanddine.online/63j/
wwwswty7733.com/63j/
xn--ydst0c036adla.com/63j/
zhongzousijichuang.com/63j/

# Reference: https://www.virustotal.com/gui/file/e95f01bbde0fbd70670b820b972768e7fc5f23509495c805ddbc3271030f443c/detection
# Reference: https://www.virustotal.com/gui/file/e1763e78b22d20c2185170aeb03f138accbfce6f6d55cad6fefb9b632ff6e685/detection

accident-law-yer.info/3nop/
ajikrentcarsurabaya.com/3nop/
beepot.tech/3nop/
chinapopfactory.com/3nop/
cloudmorning.com/3nop/
dealsforyou.tech/3nop/
divorcerefinance.guru/3nop/
foresteryt01.com/3nop/
frseyb.info/3nop/
hotsmail.today/3nop/
igametalent.com/3nop/
incrediblefavorcoaching.com/3nop/
jialingjiangpubu.com/3nop/
joomlas123.info/3nop/
koohshoping.com/3nop/
leyu91.com/3nop/
liqourforyou.com/3nop/
maximscrapbooking.com/3nop/
meccafon.com/3nop/
mindfulinthemadness.com/3nop/
naehascloud.com/3nop/
online-marketing-strategie.biz/3nop/
paintpartyblueprint.com/3nop/
potashdragon.com/3nop/
rockerdwe.com/3nop/
shadowlandswitchery.com/3nop/
shoppingdrift.online/3nop/
sixpenceworkshop.com/3nop/
smokvape.faith/3nop/
vandergardetuinmeubelshop.com/3nop/
yellowbrickwedding.com/3nop/
ynlrhd.com/3nop/

# Reference: https://www.virustotal.com/gui/file/a6e77007716111b244339e9cb1a0b0f2f09b7f313f73e03b136e1a228755438d/detection

514ope.com/tgqh/
collectivekc.com/tgqh/
empty-gallery.com/tgqh/
h2poland.com/tgqh/
hair-pharmacy.com/tgqh/
harisnurmansyah.com/tgqh/
hoyosintegrity.com/tgqh/
luxurylifeaccess.com/tgqh/
minnanwulong.com/tgqh/
nova-sb.com/tgqh/
regulars7.info/tgqh/
shouyangshanchem.com/tgqh/
showin-horikawa-oike.com/tgqh/
slingshotcycle.com/tgqh/
sopchain.com/tgqh/
squire-inigma.com/tgqh/
stratusontimemerchtrans.com/tgqh/
suncitybulldogpuppies.com/tgqh/
tablespoon.ltd/tgqh/
tooyet.com/tgqh/
tuoi96.com/tgqh/
zabikmusic.com/tgqh/
zeboxtee.com/tgqh/

# Reference: 

bpassport.com/boa/
camping-equipment.site/boa/
clavepr.com/boa/
david-kley.com/boa/
floridapostpartum.net/boa/
flpnidhi.com/boa/
hudsonhotspots.com/boa/
jiashimt.com/boa/
nhangiaivn79.com/boa/
reachidyllic.com/boa/
rebr.net/boa/
resumebanc.com/boa/
sulicet.com/boa/
v19sv.top/boa/

# Reference: https://twitter.com/_re_fox/status/1283491541236035584

sandiego-garagedoor.com/bll/
tomhufford.com/bll/
doneym.com/bll/
kalbarnews.com/bll/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1283740160476184576

39unitedfrkesokoriorimiwsdystreetsmghg.duckdns.org

# Reference: https://app.any.run/tasks/097bbd0b-74c4-47b4-9f4d-201ee4c38a4a/

dfb.cymru/ei9s/
leaderarena.com/ei9s/
lostdistrict.com/ei9s/
mansiobok3.info/ei9s/
ryytrip.com/ei9s/
student-circuit.info/ei9s/
theshadows.online/ei9s/

# Reference: https://app.any.run/tasks/4fa18ccb-ea1b-44e3-a818-d803155a9e29/

regular8.info/2cur/
tingo66.net/2cur/
towerofcards.com/2cur/

# Reference: https://www.virustotal.com/gui/file/794e7cb14496ddd13a5ce6e540822deb5cec4ca43fd0174d98e4209beda66eaa/detection

catalyseur-de-vivant.com/jjk/
qqwnet.com/jjk/
ksplaza.com/jjk/
porcber.com/jjk/
gadget13.com/jjk/
520tsbaby.com/jjk/
cjplogger.com/jjk/
fotomataio.com/jjk/
joepolifroni.net/jjk/
femalebagvip.online/jjk/
sccinvestmentnet.com/jjk/
waldenfitnesshop.com/jjk/
xn--4oq39cm25azjf.com/jjk/
karmawatersonline.com/jjk/
michiganbusinesshub.com/jjk/
gclsteelsiteservicesltd.com/jjk/

# Reference: https://blog.talosintelligence.com/2020/07/threat-roundup-0717-0724.html (# Win.Dropper.Formbook-8866958-0)

annualtransmission.technology
astonfly.info
azasianow.com
cloudyans.com
fristcreditunion.com
gtitdunproductions.com
intera-canada.com
joshkaeding.com
mannionexpertseniorcare.com
methvenonthemove.com
mysticadventuresails.com
myweddingbeautiful.com
novaeramotoboysportoalegre.com
pepper.guide
q83pfq.biz
startboostcapital.com
stoxcrypto.com
theclippersofficial.com
theedgebizconnect.com
www750456.com
xnyppw.com

# Reference: https://app.any.run/tasks/393ffa82-d780-4bdc-b47f-456c458201da/

bewheybetter.com
qhlkzl.com
cpwy8c.com
finesewingservices.com
5dollaralluringstyles.com
izfyb.win
regular8.info

# Reference: https://www.virustotal.com/gui/domain/bsskillwsdyemmulatorsdevelovercommunity.duckdns.org/relations

bsskillwsdyemmulatorsdevelovercommunity.duckdns.org

# Reference: https://app.any.run/tasks/989b1b9e-b3b5-435a-ba14-a5f5f9fc1b7c/

insidemarinacity.net
jeddahresources.com
mugtravel.com
onstagenewage.com
vitosophy.com
xianzhonghe666.com

# Reference: https://twitter.com/reecdeep/status/1290967132562501639
# Reference: https://pastebin.com/4H24JFGS

accident-law-yer.info
bakecakesandmore.com
duftkerzen.info
janewagtus.com
joomlas123.info
koohshoping.com
maximscrapbooking.com
mindfulinthemadness.com
online-marketing-strategie.biz
pmbnc.info
potashdragon.com
rockerdwe.com
shoppingdrift.online
sixpenceworkshop.com
stepgentertainment.com
tawbj.info
vandergardetuinmeubelshop.com
yoghurtberry.com
yoyodvd.com

# Reference: https://app.any.run/tasks/60d821e5-4221-4f92-9871-2f34d4493704/

cocoding.net
kokoandkiki.com
laurelcanyonmusicroom.com
mansiobbok.info
produkdigitalstore.com
schuster-partner.net

# Reference: https://www.virustotal.com/gui/file/99623ab781dc923aa8fc80c49845845705c5e95ecd15bc3c22dae3dd6979aca8/detection

myblogforyou.is

# Reference: https://www.virustotal.com/gui/file/e229bf532a101dc01cea0f119eddfa6de309a6af68743b7a5d6ca63df110573c/detection

315px.com/kvsz/
fex-tracks.com/kvsz/
jiqing3.com/kvsz/
marijuanadogbone.com/kvsz/
okashyns.com/kvsz/
priestvedic.com/kvsz/
sif.email/kvsz/
taylorsandbek.com/kvsz/

# Reference: https://www.virustotal.com/gui/file/a327d63bea241fd175c5dda029f2cf997e13565393c5d0bf0f7ce4df5c7a7bb1/detection

asktarifleri.site/kdz/
bbetmoose.com/kdz/
blockchaincso.com/kdz/
chacharen.com/kdz/
christmasjumpersireland.com/kdz/
doggygreatpet.com/kdz/
funpexw.com/kdz/
herolander.com/kdz/
keragramam9.com/kdz/
kxqsw.com/kdz/
niulunbi.com/kdz/
punkrockpeppers.com/kdz/
taylortao.com/kdz/
wwwclarion.com/kdz/
xxwzsw.info/kdz/

# Reference: https://twitter.com/Dr_N0b0dyh/status/1297850974833451008

santhoshibitcoinlocalmarketdropdownand.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7167c1835bc0c219b5bd2df7d529bc063482af7362b6d9c0f4eb8de0d90e1587/detection

finalwireboxtransferthesessioncookienorm.duckdns.org

# Reference: https://twitter.com/VirITeXplorer/status/1298549793137086464

savetheverse.com

# Reference: https://www.virustotal.com/gui/file/73f93e83e8452ee5a80a098908e627fd315fc7d7886e42a20952614f01ccf27f/detection
# Reference: https://www.virustotal.com/gui/file/07bca888b32f2b57d4dc7c80504b425b8a764e90c3879e45363aa017e86ba254/detection

00307r.com
51gayporn.com
academiefutsal.com
alejandrajazo.com
ashleetaylor.net
beautifulbridesandbeyond.com
bodypiercingblog.com
brainpowersound.com
ceptenmuzikindirelim.com
corki.site
g3391.com
holdingeggs.com
idefoto.com
jordanthedev.com
kiacraft.com
libertarian.site
lushe12121.com
maiscash.online
mansiobok2.info
mesathean.com
minlisc.com
newuniverse.net
northwestclassicfirearms.com
pnwminiacs.com
postmortemrecycled.com
pranaavgroup.com
prosolutionsgroups.com
shkafko.com
story-learning.info
tastyafrecipes.com
thetangleiota.info
usainshape.com
vaguidelines-updated.com
valueaddedindustries.com
venicecast.com
wellsnextthesealife.com

# Reference: https://www.virustotal.com/gui/file/12bf313b477f06f8732fcb79b706b0bd6534948959f5c6017acaa534e52ec43e/detection

842cedar.info
ausu96.com
capitalrealestateservices.com
ernestospaccesi.com
flekcht.com
hezehzxx0530.com
incubatorplatform.com
kymsusujinsha.com
perocreations.com
pizzazucca.com
reparmaxpro.com
thecyclingvegan.com
uscawm.com
vehiclenotes.com
xn--vs2b19v.com
zds9999.com

# Reference: https://www.virustotal.com/gui/file/1d752833612c96dff4dbd5cad8342b2d82cc62f76be376eabdf4e5a7e6d8001c/detection

763bifa.com
cerecaustin.com
coinpatent.com
discoverfrenchtown.com
ecomobilecarspa.com
howcuty.com
huntsvilleguru.com
idbcc.com
in4rac-acc3es-re7unds1.com
iznjreb.com
mining-journal-30.com
njzscy.com
retireinyourstyle.com
topnotchhardwoodflooring.com
xarkz.info
zepi.ltd

# Reference: https://www.virustotal.com/gui/file/79f09ef70447edc02b3ab24259050de6ea4da4b4c26391798ae238b9c42cb56a/detection

553349.top
balikesirmasajsalonuu.com
ceptenmuzikindirelim.com
chepinclub.com
everfileit.info
holdingeggs.com
jordanthedev.com
kiacraft.com
maiscash.online
manilagogo.com
mansiobok2.info
minlisc.com
northwestclassicfirearms.com
usainshape.com
wellsnextthesealife.com

# Reference: https://www.virustotal.com/gui/file/32cb38541ca29d629b4d411191023bbd67887b099ff5f5b71067998eddb7d678/detection

asif.services
austinjdugger.com
burikinochabudai.com
carlymccrayblog.com
cct-happy.com
happychicks.exposed
joyfinaclinics.com
latrovadorabarbersupply.com
liquidtreecbd-sleepaid.com
reliablemedspharmacy.com
surensoy.com
trancus.com

# Reference: https://www.virustotal.com/gui/file/9d45fa3a16cf0a0f8ff071a745ca85e67fc23a6da3072d77854c0bb56b79ee7e/detection

7122-info.com
aqadelics.com
arescsg.com
baldinimakeup.com
champcarfanatics.com
cifmyanmar.com
decentralizedfinanceguide.com
euroruyane.com
fuyucoffee.com
houstongrowmyairway.net
igiddevelopment.com
jacketgraffiti.com
kobfrin.info
kocerstudio.com
libbythrifts.com
meowusaurus.com
nevertravelled.com
nyfirewatch.com
operadorapacientesmexico.com
projectholos.com
sharkcoastline.com
stashboxcombos.com
tampabaytrash.com
thermalsmartglass.com
transinta.com
wherethebestplay.com
ynkshengfa.com

# Reference: https://www.virustotal.com/gui/file/dca8e5059018aa3f1aeeee14511d9e57cc4268a8aed1584110c0fbb4822839f2/detection
# Reference: https://www.virustotal.com/gui/file/3a1465485ed94bbfde14f2b538153a0a007bb8aa82b75d8cbf84bbcb483c4db9/detection

10valemont.com
24mane.com
7955t.com
a1services.one
adondeva.com
advisorsoncall.pro
casestudyinabox.com
cgkvnt.com
emirativisitalaqsa.com
essentialcarementalhealth.com
foxvegapunk.com
frecoy.com
futurepoweruk.com
hocakoisanvuon.com
joerow.xyz
macrocpas.com
neuroticbuffet.com
pmqvodka.com
presisiontestprep.com
primeautocars.com
rapornzel.com
registergamers.com
sharonschmith.com
shopcamacci.com
steripowerbank.com
thaihicaregloves.com
tradebrochure.com
trelbikes.com
whtybw.com
womenme.com
xiongmao-g.com
xmlmobilepulsa.com
zaibatsucoins.com

# Reference: https://www.virustotal.com/gui/file/17a8084c74f8cc58490b8698860b482de514164362640d00116c61e81a95934b/detection

book-london.com
bzyzk86uzj.men
champcarfanatics.com
coachdrj.com
day1transportation.info
decentralizedfinanceguide.com
kobfrin.info
nevertravelled.com
nevooptimum.info
newtsboneyard.com
orkneyelements.com
qizasoluciones.net
role013.com
skandalist.info
theuniformpages.com
thisdadflips.com

# Reference: https://www.virustotal.com/gui/file/46604ca23348020b3ba4a772be141fb9a1a6d9bf263ab04453e37aa3449307b3/detection

1-edogawa-one.net
angelmedics.net
blackbaycooler.com
cexo.ltd
deepcallsmusic.com
ehoulby.com
f0aw9u.com
fizzwagon.com
frontgames.info
gentlemanism.com
intensivprogramme.com
iskovlay.com
j9d9.com
jnjmqzzl.com
larympei.com
longdu665.com
mlabsassociates.com
multonin.reisen
qww13.com
recetasinstantpot.com
rilke.photography
saludcomplementariaintegral.com
serviceiqinternational.com
silvfly.com
skyhomeshn.com
smokinginc.com
strikermillion.net
thatmountainbiking.com
theflamingorealtygroup.info
unieekly.net
vieclam-jobs.net
wesk.tech
wwwstrikeout.com
yimifanghua.com

# Reference: https://www.virustotal.com/gui/file/36ae1f2db02a8deb4ae22d4d81be0c69ce30f471b0822405b56ffb2faaf304b0/detection

armandonieto.com
banknotesync.com
bet365c.win
dmoneylife.com
drb77.com
edgaralanbro.com
fex-tracks.com
freespin-support.com
funippon.com
getawomantodoit.com
goldencanaries.com
h0jt1y.accountant
hotair.wales
jiqing3.com
lahistoriade.com
landbank.site
levelretail.com
okashyns.com
priestvedic.com
rticlubs.com
savetheverse.com
specificpcshop.online
upbeatnewyork.com
vedattelekom.com
weeip.com
xn--oorv2aj6bj7cds0d6p4b.com
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/ac196db28c1b5e6d0772f61f5ba55824d6e6de820621b9a2485ee78fe7b553e0/detection

1tmm11ou.biz
2lsuxxk7.site
3-333i000000f04-virus.net
atlantisads.com
civx.love
coinpuma.com
dollaryearbook.com
hhtdhg.com
jonstats.com
mpmts.com
origamiformal.win
pczfk.com
rdrfi.com
silverstone-pharmas.com
skylod.com
xn--5nq67dt91acob217ad91b.com

# Reference: https://www.virustotal.com/gui/file/55356d3c2e71b6221d8590c9733cc45d09661f0210ef12aad830afca3653c5fa/detection

315px.com
alexandre-boissard.com
chaiseloungereviews.com
funippon.com
getawomantodoit.com
goldencanaries.com
grouptulip.win
jeaniney.com
jessandjeff.net
ldmeili.com
levelretail.com
loulancaster.com
magic-desktop.com
marijuanadogbone.com
okashyns.com
rticlubs.com

# Reference: https://www.virustotal.com/gui/file/e0db3294cbab3b55595d396941434b9bc7a82ce2f87d6819ff3c17936d559fe7/detection

557023.top
banknotesync.com
bocapvang.net
chaiseloungereviews.com
dmoneylife.com
eugeniobarros.tech
fex-tracks.com
freespin-support.com
jatinangorcity.com
jiqing3.com
lahistoriade.com
landbank.site
ldmeili.com
loulancaster.com
magic-desktop.com
marijuanadogbone.com
okashyns.com
outofthepark.today
polychips.com
savetheverse.com
taylorsandbek.com
valorartetattoo.com
vecteur-u-shop.com
vedattelekom.com
xiaoxiong365.com
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/8005ecbb424af2a2504693bdf4550825855b1036a049e6c81852f5be0f435f02/detection

alfaranakle.com
banknotesync.com
chaiseloungereviews.com
fex-tracks.com
h0jt1y.accountant
hotair.wales
ldmeili.com
motoreselectricoschihuahua.com
okashyns.com
specificpcshop.online
yuwanqingmy.com

# Reference: https://www.virustotal.com/gui/file/f3a30108ab40b7f31ad7ad191bb41bd3ad148d09597705c1ec0bc0352d18c29e/detection

bbetmoose.com
blockchaincso.com
chacharen.com
christmasjumpersireland.com
cryptoassettrust.com
datemere.online
efamu.com
fintopix.com
flexwireless.net
funpexw.com
grinn.company
heritage-japan.com
herolander.com
iskratrip.com
keragramam9.com
latinosinpolitics.info
lauraandjose.com
makrobet909.com
mariannevaatstra.com
niulunbi.com
nsqpg.com
nutri-bulletmania.com
punkrockpeppers.com
queenpiececustoms.com
shanxiu360.com
sharegrills.com
tecnologiaconcalle.com
weltricom.net
xxwzsw.info
zljrlm.com

# Reference: https://app.any.run/tasks/a676d29f-57bd-4aa6-ad6c-99c60fb99d01/

ridi.ltd

# Reference: https://www.virustotal.com/gui/file/1a85e9979700746c2e7cfff81ac8308d723ffbbc94fd62dd5450bfb511b0eb8e/detection
# Reference: https://www.virustotal.com/gui/file/cf87ae81ce49eafc69bed54e2ce2051cb2e56a47d6b9d2d18f1eafdecec5794b/detection

hdfcbankprivateltdinternationalfirewallf.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/timestableforjuniorsecondaryschoolsdone.duckdns.org/relations

timestableforjuniorsecondaryschoolsdone.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org/relations

ghjasdjhgqwdyuiaskjhdwahosds.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/12chnesstdywealthandmoduleorganisationrn.duckdns.org/relations

12chnesstdywealthandmoduleorganisationrn.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b7c19faebbb9a0539f3ce80d25be908f44a078ccdfac440ad9ed1484b3f546c5/behavior/C2AE
# Reference: https://app.any.run/tasks/3263eddc-12e0-43c4-8916-f7b4ee7c8d07

agraindustry.xyz/xczm/
aupeiedu.com/xczm/
blackhillsgazette.com/xczm/
crowgangrecords.com/xczm/
cyypmy.com/xczm/
digitalmarketingsinc.com/xczm/
gigs-list.com/xczm/
jhpaolilo.com/xczm/
johnjacksonutahhouse44.com/xczm/
karenchartanowicz.com/xczm/
partiesandprettythings.com/xczm/
qrocodile.com/xczm/
restauretsens.com/xczm/
robertwebsiteworkshop.com/xczm/
sebuildingcontractors.info/xczm/
shaymika.com/xczm/
solomoncrane.com/xczm/
supereasythings.com/xczm/
talentos-sa.com/xczm/
thenextbigbang.com/xczm/

# Reference: https://www.virustotal.com/gui/file/4458df211fccf5c1d24b96ebb7b4191cc94edc0b0e13bbb80ae3919f015297d9/detection

3j120.com/uts2/
blissbureau.com/uts2/
dannystar.online/uts2/
farmtractorpartstam.xyz/uts2/
finanzleiter.com/uts2/
iprintdrivers.com/uts2/
jonaskold.com/uts2/
richfun9.com/uts2/
sinseek.com/uts2/
stutinney.com/uts2/
top-dex.com/uts2/
v-imagery.com/uts2/

# Reference: https://www.virustotal.com/gui/file/ab2134e4b74317f5de2f265e46d73c4bb6593cdbfc795d84acc5ac92694fcfd8/detection

cyberrome.com/evcy/
phytphysios.com/evcy/
roofingscontractors.com/evcy/
w662017.com/evcy/

# Reference: https://www.virustotal.com/gui/file/3918933694be0d073cbbf212787b2645ff55f13d0465068c07bfba9429c592c9/detection

766ht.com/wc2/
911respondernews.info/wc2/
arikagroexporter.com/wc2/
balaji-industries.com/wc2/
bishopberrian.net/wc2/
boopdedo.com/wc2/
bsmw.net/wc2/
crsmrtns.com/wc2/
ethihadhub.com/wc2/
huaxing888.com/wc2/
imkollection.com/wc2/
learnitanywhereskills.com/wc2/
lexafit.com/wc2/
lisajohnsva.com/wc2/
ludo999.com/wc2/
majahada.com/wc2/
originaleprezzo.com/wc2/
proglove-news.com/wc2/
range-view.online/wc2/
shotsbyshari.com/wc2/
silver-marketing.com/wc2/
szcstl.com/wc2/
theyolarbi.com/wc2/
thomasallmer.net/wc2/
tyres-n-services.com/wc2/
zxnhyc.com/wc2/

# Reference: https://www.virustotal.com/gui/file/a8dab0706fcde32079548def807a0970b9ea1777e191a4de545b286b21e37d28/detection

americasbestpw.com/r690/
china-harmonica.com/r690/
chiomydiary.com/r690/
cluehut.com/r690/
grabareelfishing.com/r690/
graveltravel.company/r690/
gromomedia.com/r690/
haciendadecuacos.com/r690/
highchikadns.com/r690/
kikinico.com/r690/
livein.space/r690/
qrudghana12.xyz/r690/
sagivfoods.com/r690/
shinelightofgod.com/r690/
thesibrand.com/r690/

# Reference: https://www.virustotal.com/gui/domain/moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org/relations

moworerklrzzmkcourudohebmonparxmshehluis.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org/relations

dciztnpifwipuxtftzivozdybyzevgipsgqhgwce.duckdns.org

# Reference: https://app.any.run/tasks/a2d97909-68ca-49f3-9c8c-20eba5681fb5/

wsdychinese2onlyywalkaloneinlifev26mba.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8fc21c2279038625176289496bc8f34b0cb2404b064edb3fb2da8d3ca43dc5b1/detection

azwertfgdshbvcgyujmlpokjhgfxzaewqsdrfgh.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a4c9cd227e58728c221e9001d28f166143980f893d45a2b7757b73ce5fd903ce/detection

acessorios-nerd-app.com
eldesvan-sinlimites.com
gokdaginsaat.com
healthcbn.com
hippainyoga.com
inveplor.xyz
investstoneycreek.com
mayasign.com
pitandplate.com
schokogirls.com
sillymillie.today
teamreddragoninternational.info
thelastwordapp.com
theme7.com
trakfin.com
zhonglinsd.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1303601913364180992
# Reference: https://pastebin.com/KzJT43TM

bl2clear.com
boujeegoddezz.com
bringfilmes.com
coffeeandproductivity.com
covidbreathrehab.com
domdlyabolona.art
gameingalaxy.com
ghtrive.info
mammal-immunity.com
molianggong.com
moreupdates.info
roselandcompany.com
selfloveonlineshop.com
vissist.com
wccs.school
zjbeidou.com

# Reference: https://otx.alienvault.com/pulse/5f58c504cc7ae467f9d3355c

bogrollbandit.com
jramfox.info
moskvaoptom.net
naomiatlibrary.com
vegoutlv.com

# Reference: https://www.virustotal.com/gui/file/a715a6693137085afaf486b54cac1653b19685bc5f79ed03afbbe818a4df2dc7/detection

scmtonhumanrightandjusticeorganization.duckdns.org

# Reference: https://twitter.com/jorgemieres/status/1310669976156676099

20greenkegheedahatakankeadeshnaastdyhma.duckdns.org
2morcmmytalententertamentforwsdyshampn.duckdns.org
stdyworkfineanotherrainbowlomoyentwkgls.duckdns.org

# Reference: https://www.virustotal.com/gui/file/aa173d61945504c96ede4e050072747bce9747b05ba64ad7e63c931988fd5afa/detection
# Reference: https://www.virustotal.com/gui/file/2bd70691b602c8a94d298de4a1d629eb4e6eee5640f73ae4f323939334cadef8/detection

affiliatedinsbrokerage.com/lmh/
avantgardeperde.com/lmh/
chidehdesign.com/lmh/
covertextensions.com/lmh/
electronic20200818.com/lmh/
finanzbildunghartmann.com/lmh/
goodmol.com/lmh/
gzjxrg.com/lmh/
kaboom-stores.com/lmh/
onelivenews.com/lmh/
properope.com/lmh/
resfebertrip.com/lmh/
spinthewheelof.com/lmh/
stopthecull.info/lmh/
supng.com/lmh/
testaker.com/lmh/
testcitestdpp03.com/lmh/
thefamilybrew.com/lmh/
thisshowistheworst.com/lmh/
uyenty.xyz/lmh/
zainiicandle.com/lmh/
zaxesoutdoor.com/lmh/

# Reference: https://twitter.com/reecdeep/status/1311677288384262145
# Reference: https://app.any.run/tasks/9ec07b95-db5c-4a6d-9ce8-7b2b4803f9e5/
# Reference: https://pastebin.com/1Uax6brn

adventurewhisky.com
carrollbusinesspath.com
chuansongm.com
dcurvezone.com
ezecustomprints.com
futureheadcoin.com
home-orchestre.com
hotelkewal.com
leggiies-es.com
reallygood.toys
regular-list.info
shopatman.com
thekindnanny.com
vqxxmrxhpsho.mobi
warnddd.com
zhizaotuan.com

# Reference: https://twitter.com/jorgemieres/status/1311775076501651458

newhdconnectionforfiletransfernetworkwit.duckdns.org

# Reference: https://twitter.com/jorgemieres/status/1314554323389550593

kungthdycommunicationtarisupliermgthbzm.duckdns.org
privatethdycloudshareandfileprotecthmbw.duckdns.org
unitedthdyfrkesokoriorimistreetsmthbdx.duckdns.org

# Reference: https://twitter.com/Unit42_Intel/status/1312126230309740544

717cary.com
anunaysrivastava.com
armstrongramps.com
bootlegmask.com
cgv-so.com
claricitywealthplanning.net
csbaoxing.com
dannisconfessions.com
easyloop.email
ehrbar2012.com
elevatedqueensnc.com
entrepreneur-de-demain.com
firestarterelectronics.com
firewoodlogsbristol.com
janet-lorenz.com
kayarihats.com
misspinkk.com
myworldgay.com
piao.mobi
pricemanmmi.com
psm-gen.com
readingbythewindow.com
sporkedmissoula.com
tapchiotoxemay.net
tdhudsonfarms.com
theduneco.net
usarmedforcesforbiden.com
virtualinspectiontraining.com

# Reference: https://twitter.com/luc4m/status/1313805772992765953

purebodyrecovery.com/rhk/

# Reference: https://twitter.com/theDark3d/status/1313834137992794112

hydreol.com/gc9/

# Reference: https://www.virustotal.com/gui/file/2914b28edc11e8032a43789a1fd6a897cad41494ea0657ce15933b5825e922f0/detection

amaee.art/bti/
get-s14.com/bti/
roket.store/bti/
hotelsyd.com/bti/
pressd4you.com/bti/
intimkyliya.club/bti/
theobsidianlounge.com/bti/
bestcostaricacars.com/bti/
orthodonticoffices.com/bti/
genericpharmacyshop.com/bti/
asheville-pestcontrol.com/bti/
pureandtotalrelaxation.com/bti/
brmstatpack.com/bti/
mygametour.com/bti/

# Reference: https://www.virustotal.com/gui/file/55b4c44664dbfe9d51bd386d7b88779555b8c7681147a0dc8b049a252a093b61/detection

beulig.com/mi8/
quorahr.com/mi8/
tensedu.com/mi8/
bolly4me.xyz/mi8/
beaverhat.com/mi8/
dacho-pri.com/mi8/
khanhthieu.com/mi8/
mperrinauthor.com/mi8/
honeyandpapaya.com/mi8/
lonelyleadership.com/mi8/
partialdeveloper.com/mi8/
mariagrossbaumart.com/mi8/
courrierhautrichelieu.com/mi8/

# Reference: https://app.any.run/tasks/f76cb393-c9b7-4965-b69e-19c8b9b85c2e/

chikachinwe.com/fs8/
gabipareras.net/fs8/
hpg.computer/fs8/
kumcal.com/fs8/
mohinisystem.com/fs8/
muellervieh.net/fs8/
setsomegoals.com/fs8/
shestakova.info/fs8/
thelincolntondentist.net/fs8/

# Reference: https://app.any.run/tasks/49d6e478-698c-4afb-8a2d-b217e9e85a70/

chollotiza.com
elevatehour.com
en-bmwbasvuru.com
justiceforproject.com
lojapetsz.com
thenursingstudysystem.com
xn--vf4b17jiew40b.com
zgxjgw.com

# Reference: https://app.any.run/tasks/f171064f-893c-4957-b3ce-8b3fac487eee/

bitechanalytics.com/3iw/
creditoefectivo.info/3iw/
fairpayva.com/3iw/
regulars6.com/3iw/
thelifewaykefir.com/3iw/
valodokan.com/3iw/

# Reference: https://www.virustotal.com/gui/file/980b25031efc6ab322f08a66a098f51a7e55ae8926eeed299b8ae0176a7c71a5/detection

abishadesigners.com/ec14/
acikonline.com/ec14/
akulelaki.com/ec14/
apqtkj.men/ec14/
atecommarkk.com/ec14/
bellaboutiquetime.com/ec14/
boobl.net/ec14/
catalystbizconsulting.com/ec14/
contactista.com/ec14/
dundeeplanninglawyer.com/ec14/
fooorest.com/ec14/
gardhome.com/ec14/
gzfeidengxian.com/ec14/
harbourridge.info/ec14/
ishop121.com/ec14/
ivalens.com/ec14/
jetcat.studio/ec14/
luxdermatology.net/ec14/
mingjianjiankang.com/ec14/
myhjzl.com/ec14/
perrogenial.com/ec14/
qhdrzblg.com/ec14/
radinkauto.com/ec14/
unitetoken.com/ec14/
violence.ltd/ec14/
yeserenkalem.site/ec14/

# Reference: https://www.virustotal.com/gui/file/70ec010c74c2d3f440eee4a882f842f1b04d3c1ac11ae54817e2985497cbf737/detection

bastblossoz.info/uc/
goodpva.com/uc/
hampshiremotorgroup.com/uc/
highlandsdayschool.net/uc/
kmpqeaqap.download/uc/
lillyvalley.info/uc/
mandarin-cazinod2.com/uc/
okxaw.com/uc/
smeemail.com/uc/
yuppieshome.com/uc/

# Reference: https://www.virustotal.com/gui/file/70f0bd1b2a180d7aa965bc907c3367b1a34445bdb1a3882be040e22f04c1e300/detection

governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu

# Reference: https://www.virustotal.com/gui/file/96f40ff0c9306eff1e9321d47fd97a7a62a737815b6964109b335b8e3d48bce2/detection

344bifa.com
lodipytu.com

# Reference: https://www.virustotal.com/gui/file/d45a4b45fce191e47e64aeb48cbba1477b58ad991bb1e4409d97f29de86c69d6/detection

2637426264.duckdns.org
aksesblog.com/sl7/
antskipper.com
sarah-pinhancos.com
theflawlessstore.com
totalitymedicine.net

# Reference: https://www.virustotal.com/gui/file/6950ffcd5d6cf9bd7338614623baf23baa58236e7603e74f2360ea60add802b0/detection

10wsdyanaekppyinitalymedicalconsultafr.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org/detection

368zbp75wgtxym2v8556m215i0e7u12dqsm4i2c3.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c76eefb96b1a6360727130cc86aa039d19b1f6eb7ec2e49d40989bcb3a820f5c/detection

31kungcommunicationtaristdysupliermgjky.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org/detection

240ul94ecq8410z088b6q74wtvr21xh3gkuf8f5l.duckdns.org

# Reference: https://twitter.com/InQuest/status/1321030052709126147

fsdfjkhiuwehxcyvuiyiuwefocshsduihfnabhsghfghewfjpiouyiyuixcvxuv.ydns.eu

# Reference: https://twitter.com/InQuest/status/1321339394335428608

tsdyprivatecloudshareandfileprotectsyta.ydns.eu

# Reference: https://twitter.com/Marco_Ramilli/status/1322075988851859457

greenthdykegheedahatakankeadeshnaathfgh.ydns.eu

# Reference: https://www.virustotal.com/gui/file/e44aed73ae9a363d854c16f430af1e93f58409d2f4bbf3ae90e2164cb60cdb81/detection

30atgkmss2m0fc3rjc926qag09d60tz44zwi0kv6.duckdns.org
deliverynotificationmessagesuccessfullys.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0920951a2739c975661a70c9a7532d65a0abe3d8cee5d476af53b2b60cb63bd3/detection
# Reference: https://www.virustotal.com/gui/file/899f6e35cd5d54ccc7c6dadd6fa35a719a1ec6a1a19a6df0e49b252491d03fd6/detection

abiodunanimashaun.com/gcvp/
angelofcfashion.com/gcvp/
applespanyc.com/gcvp/
digestspot.net/gcvp/
habibistech.com/gcvp/
herbandflorealty.com/gcvp/
missouricitymagazine.com/gcvp/
murder2is.com/gcvp/
osusume-erodouga.com/gcvp/
rayznrosez.com/gcvp/
registrosbonouniversal.xyz
sabaifund.com/gcvp/
solarlightsuk.com/gcvp/
southpacificconglomerate.com/gcvp/
stevebana.xyz
surgecrete.com/gcvp/
syshxg.com/gcvp/
tars.network/gcvp/
tjtftc.com/gcvp/
wlc958.com/gcvp/
worldbeyondfaith.com/gcvp/
youriptv.online/gcvp/
zjxdw.com/gcvp/

# Reference: https://www.virustotal.com/gui/file/15e93e945f92f31af20aa93a04a4b437e2e77799b045c31f36ef24c0d8b962b2/detection

calebdavidsmith.com/sg03/
foodie-jp.com/sg03/
jiralabs.com/sg03/
lynnsbeautylab.com/sg03/
topambebi.com/sg03/
xietuwen.com/sg03/

# Reference: https://gist.github.com/silence-is-best/0aa844b003c62c6ce491e91e168ac662

aarthiramamurthy.com
atmebenessere.com
auctionpros.club/glt/
baddietraphour.com
brighteclass.com/nko/
brologan.com/pna/
comeongetreal.com/nko/
emythaccelerators.com/ga4/
everychildnisanartist.com/glt/
eyepointph.com
foodrenewal.com/ga4/
gfltransports.com/nm8/
locallygrownmedia.com/pna/
merhomeimprovement.com
mingchi168.com/ga4/
qihuo119.com/ga4/
sarahkim.world/cmd/
shisang.xyz/k8b/
st883.com/ga4/
straightaheadflixgroup.com/glt/
terrycareerconsulting.com/pna/
theloveofliving.com/ga4/
tonainy.com/cmd/
traumaremedies.com/cmd/
trendycollectionz.com
vestingfacts.com/ga4/

# Reference: https://twitter.com/Racco42/status/1323404190962618371
# Reference: https://app.any.run/tasks/7d9de5ff-9695-47c2-8108-6b6a3bcdb1c9/

3907allendale.com/nt8e/
brandonprattdrums.com/nt8e/
donotwasteyourvote.com/nt8e/
eneralysis.com/nt8e/
feeneylaminate.com/nt8e/
gomashio-taste.com/nt8e/
highfashionexchange.com/nt8e/
jobheap.com/nt8e/
lostintraveland.com/nt8e/
mohdnaved.com/nt8e/
mostposh.com/nt8e/
radiosteel.com/nt8e/
rescuedpetsarewonderful.com/nt8e/
simplicty-in-life.com/nt8e/
whereistheherb.store/nt8e/

# Reference: https://www.virustotal.com/gui/file/867250c0cf9bf77af6af0886d701bb1ce4045a49a1e8be964b8e5f00de241c20/detection

animalcare.today/unx5/
best-three.com/unx5/
britishchildrenslottery.com/unx5/
horizon-hydraulics.com/unx5/
indumaqservicios.com/unx5/
liquancai.com/unx5/
porncamslivechat.com/unx5/
ronspizzapalace.com/unx5/
site-oficial.tech/unx5/
stevebana.xyz/unx5/
thewriteux.com/unx5/
tkor.city/unx5/
waaaghstore.com/unx5/

# Reference: https://app.any.run/tasks/4fe61081-2e84-4544-a275-0665bea7b2cc/

grg679.xyz
5855a.com/9d1o/
aceditors.com/9d1o/
dekoratuvida.xyz/9d1o/
emergingtrendify.com/9d1o/
entepeedia.com/9d1o/
eventoslafete.com/9d1o/
gmleetkd.com/9d1o/
goldenoilproducts.com/9d1o/
mw88slot.net/9d1o/
smartcontracttraders.com/9d1o/
solucionescbi.com/9d1o/
unusualdag.com/9d1o/
unusualdawg.com/9d1o/

# Reference: https://twitter.com/58_158_177_102/status/1326293293878059009
# Reference: https://tria.ge/201110-az5cp1fxde/behavioral1

ozsmarthomes.com
screaminyourcarday.com
nbhindustriesptyltd.com
ntgmfublb.icu
bombayracks.com
phoenixlights.net
rachelamosphotography.com
leapforwards.net
sendai-salt.com
shabbychicflipsbyangelina.com
core-ol.com
canalysis.net
tybeeprohibitiontour.com
influencedarts.com
italivpn.com
newborn.today
garagedoorroundrocktx.com
participi.com
thegoddessnow.com
invesito.com
surfingnaked.com
sunsetsalesforce.com
revolution4kids.net
kingbookvn.com
realsteelpocatello.com
ubitem.com
forretningsfilm.com
liberationcreation.com
jfaudiovisual.com
fashinnovation.institute
4628ridgemont.info
advocatenunie.com
sheilaalvarado.com
gun-barons.com
muyupin.com
nolanshotsauce.com
chile-commerce.com
alekhyasarees.com
digitalcollectionservices.com
rhwlc.com
dondeestanlospacientes.com
haxb33.xyz
sageolegoats.com
strongpowerlive.com
allianceofamericanlawyers.com
applywithrand.com
wwdyson.com
rivertigerresources.com
njbjjt.com
lemarcel.online
unetgallery.com
zajedyne.com
aodiq3.com
profitcart.xyz
mrnord.com
melisaweb.com
picskicks.com
ubiquiti.lat
long0321.com
mediherz-shop.com
digitizersfriend.com
ford17tv.com
seawalker.art
serum.mobi
weblst.com

# Reference: https://otx.alienvault.com/pulse/5fabd3703c6e86ab3329c124

myrqh.com
superbbeautysecrets.com
techyde.com
knt60345blog.com
cryptocurrency.wiki
kumcal.com

# Reference: https://www.virustotal.com/gui/file/63c7a80a5750e4f804f26a4252aa8a6efb959e1e6f6f763451e18703594fa51a/detection

ghsinternationalconferencewithinternationalfilesecureserviceglo.ydns.eu

# Reference: https://www.virustotal.com/gui/file/e3def2d5d83257eb416a4b3f5a89afd85dbedb1d68d95e871d804c9bfb225ec3/detection

igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu

# Reference: https://www.virustotal.com/gui/file/725f65d305b7295680484b3c813ebcbc8cd2ed273943ce439fa658ac5e265db5/detection

vegaconferencegloballywihtinternatioanlwellwareteamwordglobalin.ydns.eu

# Reference: https://www.virustotal.com/gui/file/918b404d124504e3f5a654b0839f9c002831bba6eff56e870f4f20ab11fd2cca/detection

hoodsboysuccessmanwizzsonbrightdayblesng.ydns.eu

# Reference: https://www.virustotal.com/gui/file/64bf2f00c276d63d79f1fc5a1140ecd77a0bc2e3106d4298bddb6d149fcfef82/detection

wsdyshgshgnationalobjindustrialatwsgqp.ydns.eu

# Reference: https://www.virustotal.com/gui/file/96d593ee0b035af385bf74f834c980c44389f00560b31f8825b8b7b796fe2e45/detection

neverwsdywalkachinese2loneinlifekwsfdw.ydns.eu
8khutpn8g3x9iy.net
depoarkasi.com
rakutenlle.xyz
segredosdocopywriting.com

# Reference: https://www.virustotal.com/gui/file/0e31eca3da35e95b666df1705113d75bc81936a879b55fdf1bc2c6150df296c4/detection

bsskillwsdyemmulatorsdevelovercommwsdpg.ydns.eu

# Reference: https://www.virustotal.com/gui/file/13a9ba492c2a5ee332477af324aee8b2bc7d74847b1330308cf04ad8f9b0a6ec/detection

telecomoperatinggoodnewserverfortransfersecurefileinternatioanl.ydns.eu

# Reference: https://www.virustotal.com/gui/domain/ydns.eu/relations

actionforfiletransferthroughcloudbusinessinternationalglobalsys.ydns.eu
antivirtualmachinecleanserctigifateforthisfilewithgoodsecurityp.ydns.eu
antoinesauvagesqcomcomantoinesauvagesqcomcom.ydns.eu
asdfghjklzxcvbnmmnbvcxzlkjhgfdsapoiuytre.ydns.eu
bhngvfcdswqwertyuiopasdfghjkllkjhgfdsapo.ydns.eu
brinallgoodjobandworkintoseehowblessings.ydns.eu
bsskillstdyemmulatorsdevelovercommsthaw.ydns.eu
domniforworkinsidegoodohmarcywitmeohjah.ydns.eu
easygoldwithgoldenindustryinternationalinternationalfiletransfe.ydns.eu
eewssghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu
endsarsendpolicebrutalityendsarsendpolic.ydns.eu
ertyuioplkjhgfdsazxcvbnmmnbvcxzasdfghjkl.ydns.eu
fghjklmnbvcxzasdewqrtyuioplkjhgfdsazxcvb.ydns.eu
firewallsecurityscandocumenttransferwithonlinesharingtransfergb.ydns.eu
fsfhuiohwenljiofnnfnlasdlkjflkjioxcoivjndfnkljflsdjlfjwjejsdflk.ydns.eu
gbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2ygbisz44qi75kw2y.ydns.eu
ghkiwuydmklopjdbcyuavxbnmsheyrhdgcvbzgyu.ydns.eu
governorromrunworkbyvbsubmitworrkddayforlong.ydns.eu
greenstdykegheedahatakankeadeshnaastxqm.ydns.eu
greentsdykegheedahatakankeadeshnaatshah.ydns.eu
gyeuiojndhbvmaoiwnnchauwo28vnj8mjmvnwhk.ydns.eu
lkjhgfdsaopoiuytrewqmnbvcxzasdfghjklqwer.ydns.eu
microsoftsecurityverificationscannerrunningforsecurefiletransfe.ydns.eu
mknjbhvgcfxdzsallpkojihugyftdrseawqzaxsc.ydns.eu
mndyneverwalkachinese2loneinlifemnkngr.ydns.eu
plugwsdytransportationalexpertsywsfmq.ydns.eu
privatestdycloudshareandfileprotecstlka.ydns.eu
privatetsdycloudshareandfileprotectsgas.ydns.eu
qwertghjklmnbvcxzaqwerfdsghjklmnbvcxzasd.ydns.eu
qwertyuiopmnbvcxzasdghuytrewqasdcvbnmlkj.ydns.eu
shgshgstdynationalobjindustrialatstqmd.ydns.eu
shgshgtsdynationalobjindustrialattsgpx.ydns.eu
softsystemworkforgoodthingstotransferwordfileinternationallywih.ydns.eu
stdybsskillemmulatorsdevelovercommstdlp.ydns.eu
stdygreenkegheedahatakankeadeshnaastfaw.ydns.eu
stdyplugtransportationalexpertsystywq.ydns.eu
systemscantheipwithadvancefirewalltechnologyandinternaitonaldns.ydns.eu
systemsecuritycheckingwithallprotectionofinternetwithfirewallpr.ydns.eu
thdyprivatecloudshareandfileprotecthfqm.ydns.eu
thdyworkfinesanotherrainbowlomoyentthflx.ydns.eu
theverifiedclouddatatransfersystemforsecurefirewallprotocolente.ydns.eu
trijgrscviomnbvdewacvioplmjytrewwqazxcvty.ydns.eu
truesystemadvicetotransferwordfileinternatioanllywithsecurechan.ydns.eu
tsdybsskillemmulatorsdevelovercommtshrc.ydns.eu
twitterlevelsecuritycheckingforwordfiletransferthroughfirewalls.ydns.eu
tyuioplkjhgfdsaqwertyuiopmnbvcxzasdfghjk.ydns.eu
unitedfrstdykesokoriorimistreetsmstjsm.ydns.eu
unitedfrtsdykesokoriorimistreetsmtsfma.ydns.eu
wejsdjfhjwehjhjdbdfghieidsjdfhgjhjfdhgjhjhasjhfjdfjhjhdjshjshdj.ydns.eu
whythereasonbitcointransactionisveryhighwithanothercountryloook.ydns.eu
workfinestdysanotherrainbowlomoyentstlsw.ydns.eu
workfinetsdysanotherrainbowlomoyenttsghq.ydns.eu
wsdyprivatecloudshareandfileprotecwsfkl.ydns.eu
wsdyunitedfrkesokoriorimistreetsmwsgqp.ydns.eu
wsdyworkfinesanotherrainbowlomoyentwsgqm.ydns.eu
yerertpiytrrtrtyiuyuioiiouyuiuiopoipufresaaasdtyyyiiuyrterwrtrt.ydns.eu
yhrbgnderfsacdewpojgtredcvbnmkiolphgfdsq.ydns.eu
zoominfoisagoodmnetworkoftheallinternationalcompaniesforfilesha.ydns.eu

# Reference: https://www.virustotal.com/gui/file/20b0c29fcdbe79a78d0fd5303369b1057653195d537bd2f25bafb79dbffdde88/detection

66pct.xyz
bestdealu.com
frankscustomdraperies.com
iamkerala.com
ihandreg.com
individualanalysis.com
kadoshfinancial.com
kykyryky.art
quoteforthebest.com
richboxer.com
shnyty.com
skinxbaron.club
stainlesshydraulic.com
tadbirsanat.com
xxxindian.info

# Reference: https://www.virustotal.com/gui/file/51deb79da8be65d5b393887e933cfcf693ce38c2b34cba2749d84bed130d3dfd/detection

brushforbetter2020.com
crystuneshop.com
daylow.site
dlacf.com
fenhedaqujiuchang.com
flandersmd.com
floridalicorice.com
freencertsolution.com
lzzrcg.com
marcohoffman.com
ourhavenco.com
outbondgoapindul.com
paypalchanger.com
sunnyhomecleaning.com

# Reference: https://twitter.com/jstrosch/status/1329100921469546497

ghost00710.ddns.net
w91pk.com/ggh/

# Reference: https://twitter.com/Racco42/status/1329525723829309440
# Reference: https://app.any.run/tasks/1817b308-7c96-46a9-89cb-31aba1fde41d/

1020waterviewdrive.com/fs8/
5927399.com/fs8/
70skinstore.com/fs8/
gabipareras.net/fs8/
highlandcelticart.com/fs8/
hobbyhousekennels.com/fs8/
hpg.computer/fs8/
kumcal.com/fs8/
lashvash.com/fs8/
setsomegoals.com/fs8/
skillsme.school/fs8/
thelincolntondentist.net/fs8/

# Reference: https://www.virustotal.com/gui/file/640e2fcfe7efdf8edb2780afb1fdc2954bc3c8fdec183fc768eca0eee14d6f19/detection
# Reference: https://www.virustotal.com/gui/file/ee562a08154b7e12f3133019ad584e533e9162176e03b243854f67cb34c04eb9/detection

brejoin.com/yx/
farmeragro.com/yx/
first-class-travel.com/yx/
foxannewigs.com/yx/
hoterswimming.com/yx/
informatin-frid.com/yx/
ironcloudpublishing.com/yx/
joanne.email/yx/
jperraultpaintings.com/yx/
littlefiggies.com/yx/
musicsp.com/yx/
nurtureground.com/yx/
original-ginjer.com/yx/
ruprogressive.com/yx/
samperd.com/yx/
topdecortips.com/yx/

# Reference: https://www.virustotal.com/gui/file/8328ae28430dbd148eabb432ccc424329da00fead9404102c59559fc02e2ec11/detection

bestmixer.pro/pth/
capture-boutique.com/pth/
higwayharry.com/pth/
jbgsmith5g.com/pth/
lfmh888.com/pth/
nerdtoysuk.info/pth/
newboxmall.com/pth/
pros2311.com/pth/
queguayperu.com/pth/
recoveratsolidrockranch.com/pth/
rosaouroo.com/pth/
sing-easy.com/pth/
suppoortingvictory.net/pth/
teealiens.com/pth/
websitenomor.com/pth/

# Reference: https://twitter.com/wwp96/status/1335674912539897858
# Reference: https://app.any.run/tasks/136812b9-9106-49ca-9c56-9eeb756159e6/

dl-aikenuo.com
festivalbd-ambierle.com

# Reference: https://tria.ge/201207-jsgz9hl5ex

168199151.com/p2he/
7as.money/p2he/
aide-vacances.com/p2he/
alphajagd.com/p2he/
amionyoutube.com/p2he/
asianpathfinders.com/p2he/
betterbeautymemphis.com/p2he/
bgl.ink/p2he/
blackcatsgk.com/p2he/
blogluster.com/p2he/
bohokim.com/p2he/
brookingsjet.com/p2he/
carwrapsorlando.com/p2he/
chaisalsa.com/p2he/
cookies-x.info/p2he/
drkilat.com/p2he/
elevateathleticcenter.com/p2he/
esseninnovation.net/p2he/
event-moscow.com/p2he/
fd4747.com/p2he/
flagpolesforourfallenheroes.net/p2he/
fuckbitchesgetlaid.com/p2he/
getvonline.com/p2he/
goldandbrown-pizza.com/p2he/
heretangier.com/p2he/
hicotxselfstorage.com/p2he/
homebounties.com/p2he/
humbleangel.com/p2he/
internetempresaschile.com/p2he/
interxioneurope.com/p2he/
itvillagetvm.com/p2he/
jytyhlw.com/p2he/
lentiacontattoeshop.com/p2he/
linuxquebec.net/p2he/
lottoplays.com/p2he/
lzjmqx.com/p2he/
mdmbijouterie.com/p2he/
metallobaza-tlt.site/p2he/
miniaturearmsdealers.com/p2he/
modelplanepartseff.xyz/p2he/
motherdaughter.club/p2he/
outdoordiningtents.com/p2he/
outdoors4junkies.com/p2he/
parasailer.com/p2he/
peruvianautoauction.com/p2he/
phaniesart.com/p2he/
phoenixandthetardigrade.com/p2he/
plugandplaylab.com/p2he/
proudseas.com/p2he/
pugbonnets.com/p2he/
randomua.host/p2he/
residencialcasalinda.net/p2he/
roomforabear.com/p2he/
sharmilawifestories.com/p2he/
sirisombut.com/p2he/
solangerichard.com/p2he/
stranger-partner.net/p2he/
thomasreany.com/p2he/
tsm-m.tech/p2he/
turismoelite.com/p2he/
unk-page.com/p2he/
web-panda.com/p2he/
wegwerphandschoenen.online/p2he/
ykteknik.com/p2he/

# Reference: https://tria.ge/201214-kc1ck6vg7x

fundamentaliemef.com
gallerybrows.com
leadeligey.com
octoberx2.online
climaxnovels.com
gdsjgf.com
curateherstories.com
blacksailus.com
yjpps.com
gmobilet.com
fcoins.club
foreverlive2027.com
healthyfifties.com
wmarquezy.com
housebulb.com
thebabyfriendly.com
primajayaintiperkasa.com
learnplaychess.com
chrisbubser.digital
xn--avenr-wsa.com
exlineinsurance.com
thrivezi.com
tuvandadayvitos24h.online
illfingers.com
usmedicarenow.com
pandabutik.com
engageautism.info
magnabeautystyle.com
texasdryroof.com
woodlandpizzahartford.com
dameadamea.com
sedaskincare.com
ruaysatu99.com
mybestaide.com
nikolaichan.com
mrcabinetkitchenandbath.com
ondemandbarbering.com
activagebenefits.net
srcsvcs.com
cbrealvitalize.com
ismaelworks.com
medkomp.online
ninasangtani.com
h2oturkiye.com
kolamart.com
acdfr.com
twistedtailgatesweeps1.com
ramjamdee.com
thedancehalo.com
joeisono.com
glasshouseroadtrip.com
okcpp.com
riggsfarmfenceservices.com
mgg360.com
xn--oi2b190cymc.com
ctfocbdwholesale.com
openspiers.com
rumblingrambles.com
thepoetrictedstudio.com
magiclabs.media
wellnesssensation.com
lakegastonautoparts.com
dealsonwheeeles.com
semenboostplus.com

# Reference: https://www.virustotal.com/gui/file/24721ddd6082f6418d5b22a1b9703bc3e38c8b5725798b62110a170b41eac6ce/detection

1429callealtura.com
bytyt.com
flickfaced.com
forenvid.com
sanangelostory.com
ssgsaia.com
strawberrystreet.net
westpalmbeachvacationhomes.com
wilsonelitecleaning.com
wwwwg2020.net
xyft595.com
yrxcorrecf.xyz

# Reference: https://www.virustotal.com/gui/file/e59d9d9ca9e0c7dddea9a94f0dab0ae137b6a762999bade26db35b1ca35e1f72/detection

alltrendsbrands.com
camsplaces.com
helpmeiminmytwenties.com
icknw.com
kart-im.com
mokrie-pizdi.site
mstaffingagency.com
neothecode.com
nutritionlives.com
point1properties.com
prospervine.net
sexmomsonsister.cloud
thefeelgoodsisters.com
veteranmadecontent.com
wineenthusiasms.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1341997180664557568

deuxus.com/t052/

# Reference: https://www.virustotal.com/gui/file/31777f81a8d806fcb50d954f3ac48c8aca7f340929f8cf784d740a079892a587/detection

ampsports.digital
craftsman.sucks
dabrownzone.com
grromedandgrand.com
harriettubmanu.com
kapatoken.com
mamentos.info
maximizefit.net
nanfangguniang.show
northernfloorco.com
plotrunner.com
radicalisland.com
tarotit.site
theawfulliar.com
xn--mdecinemotionnelle-bwbg.com

# Reference: https://www.virustotal.com/gui/file/f535ff7416a31c3f067b61aea08aab08006eaf2dd790dcfc89c05a1f6343f17b/community

stdychnesqudusisabst.dns.navy

# Reference: https://twitter.com/reecdeep/status/1351444312672923648

chfourmndyanotherwak.dns.navy
learnhour.net

# Reference: https://www.virustotal.com/gui/file/ad03ca16b05c593894d3cf90ea6ebe56f3ce6dc94dc0675234f357893f3aadfa/detection

anillanyaralo.com/e3eb/
bimtracks.com/e3eb/
eastindiaclub.media/e3eb/
exm-droneops.one/e3eb/
keystonemedicalwellness.com/e3eb/
made-in-wonderland.com/e3eb/
manconnectr.services/e3eb/
maquettree.com/e3eb/
medijobsonline.com/e3eb/
milkafrias.com/e3eb/
offencebzo.space/e3eb/
overdoza.com/e3eb/
racevx.xyz/e3eb/
stocktonweeddelivery.com/e3eb/
tmtbikes.com/e3eb/
winnicapolska.com/e3eb/

# Reference: https://twitter.com/VirITeXplorer/status/1353992650148503552
# Reference: https://tria.ge/210126-vgsyrq49hs

11sxsx.com/jqc/
5hnjy.com/jqc/
asacal.com/jqc/
avia-sales.xyz/jqc/
baculatechie.online/jqc/
bebywye.site/jqc/
brotherhoodoffathers.com/jqc/
cositasdepachecos.com/jqc/
definity.finance/jqc/
dgdoughnuts.net/jqc/
dividupe.com/jqc/
dl888.net/jqc/
droriginals.com/jqc/
eaglesnestpropheticministry.com/jqc/
ecandkllc.com/jqc/
fitdramas.com/jqc/
gabriellagullberg.com/jqc/
hareland.info/jqc/
hongreng.xyz/jqc/
hotvidzhub.download/jqc/
incomecontent.com/jqc/
internetmarkaching.com/jqc/
ip-freight.com/jqc/
kathymusic.com/jqc/
kenniscourtureconsignments.com/jqc/
kimberlygoedhart.net/jqc/
kornteengoods.com/jqc/
lhc965.com/jqc/
lokalised.com/jqc/
ludisenofloral.com/jqc/
luxusgrotte.com/jqc/
mad54.art/jqc/
margosbest.com/jqc/
miamiwaterworld.com/jqc/
mybestme.store/jqc/
mywillandmylife.com/jqc/
neosolutionsllc.com/jqc/
novergi.com/jqc/
quintred.com/jqc/
ravenlewis.com/jqc/
screwtaped.com/jqc/
shakahats.com/jqc/
simplification.business/jqc/
singledynamics.com/jqc/
sistertravelalliance.com/jqc/
solidconstruct.site/jqc/
soterppe.com/jqc/
sqatzx.com/jqc/
st-reet.com/jqc/
sterlworldshop.com/jqc/
strahlenschutz.digital/jqc/
systemedalarmebe.com/jqc/
szyulics.com/jqc/
the343radio.com/jqc/
theorangepearl.com/jqc/
tiendazoom.com/jqc/
topheadlinetowitness-today.info/jqc/
toweroflifeinc.com/jqc/
vigilantdis.com/jqc/
vivethk.com/jqc/
weddingmustgoon.com/jqc/
wlw-hnlt.com/jqc/
xaustock.com/jqc/
zoommedicaremeetings.com/jqc/

# Reference: https://www.virustotal.com/gui/file/ec8b3d104a7fc416aab07329a5f0ecab1b7fd181ffbd2d7ac31af51e532add07/detection

88779599.com/09rb/
airfast-express.com/09rb/
aizimov.com/09rb/
alessandrabortolussi.net/09rb/
artois-plomberie-ambar.com/09rb/
edgehairandbeauty.com/09rb/
efoh27.com/09rb/
emuprising.com/09rb/
expandtherapy.com/09rb/
iregentos.info/09rb/
legendtrailcommunity.com/09rb/
myraklereleafcannaclinic.com/09rb/
nesilyilmaz.com/09rb/
prendimiconcept.com/09rb/
unitedbythebucket.com/09rb/
watereminder.com/09rb/

# Reference: https://www.virustotal.com/gui/file/629c7e301816de498d8a784935bd1a4aa21331a1520275c48b30c0ac4aa18285/detection

abstract-elearning.com/gqx2/
bonus189.space/gqx2/
dbsadv.com/gqx2/
enlightenedsoil.com/gqx2/
housvest.com/gqx2/
inreachpt.com/gqx2/
libraspeed.com/gqx2/
microwgreens.net/gqx2/
podborauto.pro/gqx2/
scionoflewisville.com/gqx2/
shaffglowing.com/gqx2/
tu4343.com/gqx2/

# Reference: https://www.virustotal.com/gui/file/841ce55c5a583e5674e1fcde05347c3ad07dec6e0f38298bb4fc2566ca5aa746/detection
# Reference: https://www.virustotal.com/gui/file/d27174550c627e2ae425db9dc83ed7cb1856034184c6ce333efcf383506abd88/detection

acdfr.com/bw82/
activagebenefits.net/bw82/
cbrealvitalize.com/bw82/
ctfocbdwholesale.com/bw82/
dealsonwheeeles.com/bw82/
engageautism.info/bw82/
exlineinsurance.com/bw82/
gallerybrows.com/bw82/
gdsjgf.com/bw82/
glasshouseroadtrip.com/bw82/
h2oturkiye.com/bw82/
housebulb.com/bw82/
illfingers.com/bw82/
ismaelworks.com/bw82/
learnplaychess.com/bw82/
magiclabs.media/bw82/
magnabeautystyle.com/bw82/
mgg360.com/bw82/
mybestaide.com/bw82/
ninasangtani.com/bw82/
okcpp.com/bw82/
pandabutik.com/bw82/
primajayaintiperkasa.com/bw82/
ramjamdee.com/bw82/
rizrvd.com/bw82/
ruaysatu99.com/bw82/
thepoetrictedstudio.com/bw82/
tuvandadayvitos24h.online/bw82/
twistedtailgatesweeps1.com/bw82/
usmedicarenow.com/bw82/
xn--avenr-wsa.com/bw82/

# Reference: https://app.any.run/tasks/07819c4b-dffc-4c56-8f83-eee38a01b188/

littlefreecherokeelibrary.com/xle/
localeastbay.com/xle/
loyaloneconstruction.com/xle/
prestiticadalanu.com/xle/
ricardoinman.com/xle/
theatomicshots.com/xle/
tknbr.com/xle/
www7456.com/xle/

# Reference: https://tria.ge/210203-nhqf45a196

1317efoxchasedrive.info/kio8/
56ohdc2016.com/kio8/
73gardinerdrive.com/kio8/
airpromaskaccessories.com/kio8/
allinoncrypto.site/kio8/
angermgmtathome.com/kio8/
asosbira.com/kio8/
audiencetrust.sucks/kio8/
awesome-veganism.com/kio8/
bingent.info/kio8/
cbluedotlivewdmall.com/kio8/
chinhphucphaidep.online/kio8/
domentemenegi20.com/kio8/
dream-case.com/kio8/
drizzerstr.com/kio8/
dubojx.com/kio8/
envirocare-ss.com/kio8/
erniesimms.com/kio8/
estedindustries.com/kio8/
facestaj.com/kio8/
fantasticsgelato.com/kio8/
ffhcompany.com/kio8/
fireworkstycoons.com/kio8/
fixedpriceelectrician.com/kio8/
ghar.pro/kio8/
ghorowaseba.com/kio8/
globalcrime24.com/kio8/
greeaircondition.com/kio8/
gropedais.club/kio8/
heightsplace.com/kio8/
helmihendrahasilbumi.com/kio8/
hnqym888.com/kio8/
jennaloren.com/kio8/
jtkqmz.com/kio8/
lauratoots.com/kio8/
legamedary.com/kio8/
magmaplant.net/kio8/
masdimensiones.com/kio8/
melolandia.com/kio8/
newyorkcityhemorrhoidclinic.com/kio8/
noimagreece.com/kio8/
nutbullet.com/kio8/
ocleanwholesaler.com/kio8/
opera-historica.com/kio8/
pastormariorondon.com/kio8/
perteprampram01.net/kio8/
pizzaterry.com/kio8/
plantationrevival.com/kio8/
porntvh.com/kio8/
sanrenzong.com/kio8/
stjudetroop623.com/kio8/
systizen.com/kio8/
tf-iot.com/kio8/
thaibizgermany.com/kio8/
the-aviate.com/kio8/
thedesigneryshop.com/kio8/
thespiritualabolitionist.com/kio8/
thewilmingtonguide.com/kio8/
tsunrp.net/kio8/
utopicvibes.net/kio8/
velactun.com/kio8/
wolfetailors.com/kio8/
yogabizhelp.com/kio8/
youremsys.com/kio8/

# Reference: https://tria.ge/210205-vge381amz2

4vrlwi.site/dyt/
admoney.info/dyt/
ajreality.com/dyt/
alejandrobrand.com/dyt/
bakldx.com/dyt/
bkdn.xyz/dyt/
blushinglips.wine/dyt/
bradfordsahm.com/dyt/
caprichodigital20.com/dyt/
casinobigbank.com/dyt/
cezede.com/dyt/
codedlock.com/dyt/
connecting4fun.com/dyt/
contenttoincome.com/dyt/
coolartgallery.com/dyt/
designed4youevents.com/dyt/
dijitak.com/dyt/
dongzhenwl.com/dyt/
dopefuse.com/dyt/
drsineadbeirne.com/dyt/
eacvea.com/dyt/
enecaa.com/dyt/
eseskalierteh.com/dyt/
evokealpha.com/dyt/
fessucesesee.com/dyt/
fhehsjeh.com/dyt/
greyboxautomations.com/dyt/
hoslergroup.com/dyt/
humanitera.international/dyt/
innocentandnaive.com/dyt/
jasminesecretshop.com/dyt/
keller-bec.com/dyt/
lesavonbyannvictoria.com/dyt/
longwoodlife.com/dyt/
luckyvertical.com/dyt/
manifester.guru/dyt/
marvitrans.net/dyt/
mediclyft.com/dyt/
mosella.online/dyt/
naturally-toned.com/dyt/
njcfpnetwork.com/dyt/
nomadroams.com/dyt/
norsk-medisin.com/dyt/
pinkopalboutique.com/dyt/
plus1joinersandbuilders.com/dyt/
quatormi.site/dyt/
reianswers.net/dyt/
royalpetcanvas.com/dyt/
scattershotgames.com/dyt/
sensvia25.com/dyt/
shreeshyamexporters.com/dyt/
so0551.com/dyt/
socksofcolors.com/dyt/
spleafpro.com/dyt/
sportscircleindy.com/dyt/
sptrading.company/dyt/
sulukozukremi.com/dyt/
summerlively.com/dyt/
surkentkuruyemis.com/dyt/
susanenglert.net/dyt/
tg0913.com/dyt/
theholinesshousewife.com/dyt/
thepreventivemedicine.net/dyt/
zhongwu.tech/dyt/

# Reference: https://twitter.com/reecdeep/status/1359854987623464969
# Reference: https://tria.ge/210211-ynsg9khthj
# Reference: https://app.any.run/tasks/0e97831e-b9b3-455b-b688-05a38d4fd8f5/

360afs.com/sfd8/
accountablereagent.com/sfd8/
anaisandmichaelwedding.com/sfd8/
battlecreekenquirer.sucks/sfd8/
behintejaratpourasa.com/sfd8/
blockchaininfo.online/sfd8/
bottom.golf/sfd8/
bringbackbeer.com/sfd8/
brothersarmy.com/sfd8/
cafeconstantino.com/sfd8/
caregiveronestopshop.com/sfd8/
colombeboncenne.net/sfd8/
csc-traffic.city/sfd8/
domentemenegi17.net/sfd8/
duoyiboard.com/sfd8/
ecofarmtr.com/sfd8/
frequence-movies.com/sfd8/
haxb33.xyz/sfd8/
houstoncoupleswhocycle.com/sfd8/
howongbrewing.com/sfd8/
ianac.info/sfd8/
immunologi.world/sfd8/
intuitionkeys.com/sfd8/
joekurtz.com/sfd8/
lingring.party/sfd8/
lon-dox.com/sfd8/
menteinformativo.com/sfd8/
miapetito.com/sfd8/
mompreneurista.com/sfd8/
mrrecordinc.info/sfd8/
myworkingportfolio.network/sfd8/
njprestructures.com/sfd8/
northstarpmg.com/sfd8/
pamelathomas2020.com/sfd8/
paulsplumbingllc.com/sfd8/
pazzionteez.com/sfd8/
pinoyko.com/sfd8/
plantenaturelle.com/sfd8/
plumbfinders.net/sfd8/
pmanigeria.com/sfd8/
purelycoastal.com/sfd8/
roovepages.com/sfd8/
royalcradle.com/sfd8/
sachinlog.com/sfd8/
schmuckhof.com/sfd8/
secondnatur3.com/sfd8/
silmarinternational.com/sfd8/
splashleadsdigital.com/sfd8/
strilok.com/sfd8/
subastaelectronics.com/sfd8/
sunwavescreative.com/sfd8/
superhumanworkout.com/sfd8/
swapbanks.info/sfd8/
thaipasal.com/sfd8/
theambivnce.com/sfd8/
themowerdoc.com/sfd8/
turnerswindowstylings.com/sfd8/
uasaerialsolutions.com/sfd8/
vyloanshop.club/sfd8/
wellnessbamboo.com/sfd8/
xn--hef-1la.com/sfd8/
young-oldtimer.com/sfd8/
yxw897.com/sfd8/
zeravern.com/sfd8/

# Reference: https://www.virustotal.com/gui/file/a9d7dbb160330978fb1b5cbd40a4bf2c0aede509905de5d792e45aa5ca876095/detection

blackownedtea.net/yce/
domvy.xyz/yce/
erchomesellers.com/yce/
extreamx.space/yce/
fiaincomeforlife.com/yce/
fjtweb.com/yce/
myconqering.com/yce/
readydesignz.com/yce/
shaamfilm.com/yce/
sitesuperapido.com/yce/
technnatural.com/yce/
thebuttonfriends.com/yce/
yyewdq.com/yce/

# Reference: https://urlhaus.abuse.ch/url/987827/
# Reference: https://www.virustotal.com/gui/file/2d311b197e07b4149d8eb422ac2b5aa5c24b10cc8131e53df65ca32986b1556a/behavior
# Reference: https://www.virustotal.com/gui/ip-address/103.147.184.10/relations

rmtcntlthdyenverthdb.dns.army
stdyrmtcntlenverstgv.dns.army
stdyrmtcntlenverstoq.dns.army
rmtcntlwsdyenverwsbt.dns.army
mndyrmtcntlenverstpo.dns.army
hangtv3xyz.myddns.me
hangthai3z.myddns.me
hanglady3xyz.myddns.me

# Reference: https://twitter.com/reecdeep/status/1364129913511510018

kungsb2stdygotchtsty.dns.army

# Reference: https://twitter.com/reecdeep/status/1367101184289492999

necght.xyz

# Reference: # Reference: https://twitter.com/reecdeep/status/1367445802096984064

tws-rr.xyz

# Reference: https://twitter.com/pmmkowalczyk/status/1367503173200543747
# Reference: https://www.virustotal.com/gui/file/92f656d44d38fbc5e7964e36634bf95d18e157228624d1b38ea933633579ddc4/detection

disciplinemonkey.com/njo/
rnlasermedspasolutions.com/njo/

# Reference: https://twitter.com/reecdeep/status/1367089557884272649

merifalls.com

# Reference: https://twitter.com/reecdeep/status/1369191905880379394

joomlas123.info

# Reference: https://twitter.com/sS55752750/status/1369792848816660483

olenfex.com/mdi/

# Reference: https://twitter.com/pmmkowalczyk/status/1369746549593538574

fessuseyyesseee.com/mdi/

# Reference: https://twitter.com/pmmkowalczyk/status/1369748045097820162
# Reference: https://twitter.com/sS55752750/status/1369791347029327882

rizrvd.com
octoberx2.online

# Reference: https://otx.alienvault.com/pulse/604b58f6a54ab9919d92768f

41230793.net
capricorn1967.com
rbfxi.com
ziruixu.com

# Reference: https://www.virustotal.com/gui/file/474cef321f60037058b0180b83d4db805792822762f071d3bdebc3fb8dd66c33/detection

digi-plates.com
oogilab.com
atrocity.xyz
400city.com
yummicrabva.com
vivaceactivewear.com/grv/
supinapp.com
ycmath.com
lindustrieetleca.com
xn--k1abtc6be.xn--p1acf
bessgarments.com
hengetelt.com
vz473.com

# Reference: https://twitter.com/reecdeep/status/1371403258200211458
# Reference: https://app.any.run/tasks/3c55db66-435a-4a40-a2d8-08db5c6aa891/
# Reference: https://www.virustotal.com/gui/file/6da50c6b31b4125631987f40d7bd3dacab22c961ca9ba60dfdfa45120d5ec17a/detection

commagx4.info
stdykungsb2gotmenlop.dns.army
555lucky.net/g832/
rentmy.place/g832/
manorblue.com/g832/
swifter.tech/g832/
layoutsbox.com/g832/
greatstape.com/g832/
rayhanrony.com/g832/
taxicabairports.com/g832/
aispokenhere.com/g832/
roomrain.com/g832/
layoutsbox.com/g832/
mi-tipofthemitt.com/g832/
mima-tech.com/g832/
personaljie.tech/g832/
skxrxxf7j87.com/g832/
manorblue.com/g832/
taxicabairports.com/g832/
hkyda-uk.com/g832/
ghjkl456.com/g832/
mlpsdigital.com/g832/
beiser-sa.com/g832/
layoutsbox.com/g832/

# Reference: https://www.virustotal.com/gui/file/2cb8983bbf7860e8861f601dc1c9fd36a21aecca6a81831e74f9b2c098635f50/detection

americanwoodgrain.com
bigmikecon.com
lidandocomsuaansiedade.com
mysticparka.com
nnllnn.com
odromex.net
optimizedperson.com
originalsportsas.com
poppykuroki.com
skyrocketyoursuccesstoday.com
solarcellefficiency.com
stadtaugsburg.com
vip72.club
vturalcycles.com
yinaosw.com

# Reference: https://app.any.run/tasks/decdf523-61a8-487f-94db-7be2eec7cba4/
# Reference: https://www.virustotal.com/gui/file/f8196e6009ed055bd7e2021a629cb903a530650ed36505b296c177fab320180e/detection

4676sabalkey.com
5bo5j.com
856380692.xyz
babyhopeful.com
bkhlep.xyz
bukaino.net
caresring.com
creationsbyjamie.com
dccheavydutydiv.net
explorerthecity.com
icepolo.com
jyxxfy.com
mauriciozarate.com
maurobenetti.com
myfeezinc.com
oryanomer.com
polling.asia
robertbeauford.net
siyezim.com
thefamilyorchard.net
thevistadrinksco.com
usopencoverage.com
wholesalerbargains.com
worldsourcecloud.com

# Reference: https://twitter.com/MBThreatIntel/status/1372965574666375174

4africa.cloud
alaleste.com
bannerberries.com
beyondtheweeds.net
bilozir.agency
bradfordbarbell.com
ecoconsciousart.com
gabrieleanajulia.com
insightccnw.com
lashnetix.com
leelegantflower.com
littlegreekgrocery.com
manconnectr.services
mintmobikeplus.com
njzycj.com
novergi.com
partyoftres.com
veriezy.com
your-masterclass.online
yxjks.com
zubaobei.net

# Reference: https://www.virustotal.com/gui/file/8fb2a899e6622a2ddc7989121174bea2b7756f3f56f64f42dc6ef875d19ce919/detection

3cheer.com/p2io/
adultpeace.com/p2io/
brunoecatarina.com/p2io/
carmelodesign.com/p2io/
cleanxcare.com/p2io/
hazard-protection.com/p2io/
hiddenwholesale.com/p2io/
liminaltechnology.com/p2io/
magetu.info/p2io/
painhut.com/p2io/
shopihy.com/p2io/
thriveglucose.com/p2io/
trendbold.com/p2io/

# Reference: https://tria.ge/210408-9h7wsybb7e

7985699.com
acernoxsas.com
americanscreentest.com
az-pcp.com
blackmantech.fitness
bongwater.life
buyeverythingforbaby.com
clonegrandma.com
cwcellar.com
domentemenegi47.com
dream-e-mail.com
ekolucky.com
elpis-catering.com
elticrecruit.com
finalexam-thegame.com
fjsibao.com
foodates.com
gatewaygaurdians.com
goldenvalueable.com
gujaratmba.com
gyanankuram.com
hcr.services
ikoyisland.net
israeldigitalblog.net
krphp.com
l2zmamzoin.xyz
lawsoftwareteam.com
likehowto.com
mex33.info
my-weight-loss-blog.net
nevertraveled.com
nevomo.group
papofabri.com
partapprintercare.com
phillydroneservices.com
pjsgsc.com
privateselights.com
quehaydecenarhoy.com
raison-sociale.com
ranguanglian.club
regalparkllc.com
samanthataylordesigns.com
sinisviaggi.com
sorelaxedmassage.com
suns-brothers.com
syduit.com
taniakarina.com
thechilldrengang.com
topmejoresproductos.com
ueoxx.com
ufa2345.com
v6b9.com
valid8.network
vegrebel.com
verochfotografa.com
vinegret.com
vr-club.site
vt999app.net
winnijermaynezigmund.site
xn--80aaxkmix.xn--p1acf
xn--kck4cd0r.net
xn--v1bmo9dufsb.com
xpddwrfj.icu
yetbor.com

# Reference: https://tria.ge/210407-ywnnjr2vve

18082020.com
3559044.com
911salesrescue.com
anadelalastra.art
azure-vs-google.cloud
bardototonho.com
bricksli.com
camperlifeclub.com
carobbella.com
carritogastronomico.com
cenconsulting.com
charmdalat.com
clavunica.com
crosswhiteconsulting.com
dailyhyundaihanoi.net
decoviewer.com
ecomcourse.online
edwardjonescredticard.com
entohops.com
esl-materials.com
familymedicalurgentcare.com
fenuadiscovery.com
flcpyl.com
ggapp.run
godseyepiece.com
greenesgoodies.com
herbalbooze.com
heritagelcc.com
home-sou.com
huongdandidong.com
hvacservicecoldwater.com
inlandempiresublease.com
jimmysga.com
josiahtreatenglishportfolio.com
kaashir.com
karizcustomizeme.com
kellnetworks.com
launchtutor.com
legalhelp.black
lewishackney.com
lumpkinforless.com
luxel01.com
magenx2.info
marfrigs.com
merrypopinnannies.com
metort.com
miss-windy.com
muzhskoy-eskort.site
myboardinghome.com
mysfmp.com
ndrossignol.com
opusleaf.com
orchidandiris.com
runwithbe.com
seymor-law.com
shangbinjieneng.com
shopthen2.site
sniffai.com
socialunified.com
szameitat.net
thedorkweb.com
unityprawn.com
wegawk.com
zx765.com

# Reference: https://tria.ge/210407-wf3kcrqtj2

5667e.com
7030130.com
7667120.com
aelnetwork.pro
appalachianrepublic.com
assessoriaesmero.com
blackdisclaimer.com
calendarioslen2021.com
citestaccnt1598439710.com
com623036210300.com
congbaohiem.net
creditccu.com
curativestemcells.com
curiget.xyz
derasource.online
dexcci.com
drtprd.club
ennewine.com
findinghonor.com
floridasoapworks.com
fourcanal.com
fuhaisky.com
genesisdrumco.com
guideingword.com
gustobolivia.com
heatgemini.com
humanareachrewads.com
icygods.com
johnniemaepantry.com
k2132.com
kardiadance.com
kathyscrabhouse.com
kemermaxx.com
laurindogalante.com
lindaheart.com
loupcreation.net
lubbocksbdc.com
mathilde-et-vincent.com
moonboyspa.com
mototasima.com
mv857c3fqfppyd.xyz
myrightdoctor.info
neuroeka.digital
pupa.one
purecraftoils.com
rightgetup.com
sashahung.com
se009.icu
serv7-wells.com
shopcurbsideanddelivery.com
skorokvartira.online
sleepy-boy.com
sohadmorales.com
speaktoava.com
sundayframing.com
talons-hauts.com
teoslu.com
theinterviewtechnique.site
thoomkuzhy.net
townietreats.com
vandmc.com
webtourlive.com
xinke518.com
zamar.online

# Reference: https://www.virustotal.com/gui/file/0cec69e7857e687c0352812a4206e68f57008ea07d34b51bb9b1fc44ef042ff6/detection

adeleycar.com
bobwhiteknives.com
carbeloy.com
cash4homesutah.com
customkreation.com
fotosdepueblo.com
funbrushstrokes.com
ghoshtechno.com
goldstespresso.com
greenlightsmokables.com
latravesia.net
lukmanmalik.xyz
marymoorridgecondo.com
mymoxypets.com
new123movies.pro
officehoursonly.com
parkviee.com
shipu143.com
shopvibeup.com
sussage.com
talllensphotography.com
thedrata.com
theemperorbrand.com
yaanpay.com

# Reference: https://www.virustotal.com/gui/file/94235ec4fec92239bf53cbe18e6b698f30ca30d07602cc123dcf76d728bff41e/detection

abzarnovin.com
atlantadomain.com
curiget.xyz
currenibtc.com
homartist.net
koedk.com
paraiso.info
retro-e-scooter.com
riseses.com
tenxtimes.net
upliftgrp.com
xuji68.com
xyxrprt.com

# Reference: https://twitter.com/reecdeep/status/1380479709016948740
# Reference: https://app.any.run/tasks/121b953c-a8b9-4f68-98dc-8531a2a77fd7/

cndzysw.com
contactodirectoseguros.com
cotillionclubsmv.com
haarbal.com
hdsmyyz.com
hireblkcreatives.com
innovativeiclass.com
myriamward.com
netacradle.com
specnazshow.com
sumantrabasu.com

# Reference: https://www.virustotal.com/gui/file/190af94fad72bc8e19a07ab5dd60af939e5216565f8efd92aa1aa561a38281be/detection

0075544.info
349vsz.info
anamikapandey.com
dropin-frog.com
elmatech-impianti.com
milliemilliemillie.com
naprawalaptopow.services
smallbizhacklondon.com
sobolev.design
theoknoester.com

# Reference: https://www.virustotal.com/gui/file/43a2069e57baacb53de658addca8950b570ce19334cd6c617c4c1060f9296fb7/detection

abelprocess.com
allincursive.com
daghidelivery.com
doctors4change.net
hxc28.com
ichaugames.com
ienvoices.com
kingdavidtiferetshop.com
kuppers.info
mchglobe.com
puntopymeschile.com
quickshop.xyz
roleta.site
sagemenerji.com
siguelacorriente.com
stevenemily.com
trendyheld.com
verificationpays.com
worldofannabel.com

# Reference: https://tria.ge/210414-318g36c5xn

19come.com/goei/
247carkeyslondon.com
addthat.xyz
akindousa.com
armanrugservice.com
baldosasanjose.com
bet365o2.com
breathharbour.net
caross-china.com
casalomasymphonyorchestra.com
cluskmusk.com
covidtracksb.com
creativem2.com
csgo-roll.net
digitalmarketingmoves.com/goei/
distributorfocuson.com/goei/
epicfriend.club
evecrude.xyz
foodsystemsjusticeproject.com
fwgkdhg.icu
generalflix.com/goei/
gulf-landlord.info
her2mymeme.com
imbravura.com
italianrealestateagents.com
karyapertama.com
kelasipo.com
kevinrsamuels.network
lcjzjt.com
legendsalliance.net
leverhump.store
libreo.club
limonproduce.com
looneytunesrun.com
ltsbinge.com
lxpvccard.com
ly-iot.com
mapadequito.com
maquinaclub.com
mariebiernacki.com
massaponaxhighschool.com
mediaworkhouse.com
mex33.info
mindflexlab.com
niggeruprising.com
nolimitsynthetics.net
office-tourism-tirana.com
onlinecollegetherapy.com
ourmonaca.com
ourmunera.net
pimpmyrecipe.com
randalldavisauthor.com
reutbergcapital.com
ronwongart.com
rsw3313.com
seaworldminecraft.com
shopflyonline.com
sportwillwin.com
theexpatweightcoach.com
ushealthvisa.com
vbkulkarni.com
win-back.online
xn--ga-c9a.com
zanzan8.com

# Reference: https://www.virustotal.com/gui/file/0b2bfb69c51b7adaeedec010a02983eee856559b71ecbc4ecb61c7e929b1f165/detection

33ofbalranaldavenuelargsbay.com
bulbulators.com
cmsphotography.net
freshair--uk.com
hempexchange.biz
kfuos.info
mujereshoyonline.com
newsoc.com
nylonsilk.com
phillimore.mobi
pritap.net
rtve.online
skyroott.info
techforcefoundation.biz
theflightcalculator.com
xadserve.com

# Reference: https://www.virustotal.com/gui/file/5b19c5b2854cf7d4ed344ff7539b38caec397d6a3002a7219b2fbe0b7c73f455/detection

3cheer.com
adultpeace.com
aideliveryrobot.com
biztekno.com
carmelodesign.com
fuhaitongxin.com
hiddenwholesale.com
liminaltechnology.com
lucytime.com
m678.xyz
magetu.info
malcorinmobiliaria.com
mercuryaid.net
micheldrake.com
tricqr.com
untylservice.com

# Reference: https://www.virustotal.com/gui/file/70f35721eb13022a6ae320055bf74d8c3bf688d5cd04c3bea37f6c2e4886d1b3/detection

project99x.com
ruhuxue.com
shupaishuiban.com
top-endstrollers.com
xn--onegcio-o0a.com

# Reference: https://www.virustotal.com/gui/file/6cdd13858c80732f5bcae5a998b2cc4402ee5c549b7042594b0edec313671a6f/detection

allindiatrust.com
biyahetours.com
cinmax.xyz
count230.com
fakingslatino.com
hamrocity.com
landerauto.com
lodosmimarlik.com
marriedtwomusic.com
marshylime.com
mindtattooed.com
nundmshop.com
prosperedfreelancing.com
shopqls.com
thenicolehernandez.com
xn--caasymas-e3a.com

# Reference: https://tria.ge/210420-5hgfnhdfq2

20190606.com
2020uselectionresult.com
afasyah.com
amarak-uniform.com
apgfinancing.com
ballparksportscards.com
britishretailawards.com
centaurme.com
craftbrewllc.com
cruzealmeidaarquitetura.com
crystalwiththecrystalz.com
devarajantraders.com
dijcan.com
dineztheunique.com
esveb.com
fairerfinancehackathon.net
floryi.com
gadgetsdesi.com
ghallagherstudent.com
hidbatteries.com
idtiam.com
instantpeindia.com
interprediction.com
jocelynlopez.com
joyeveryminute.com
launcheffecthouston.com
localiser.site
lookupgeorgina.com
mamapacho.com
marolamusic.com
milehighcitygames.com
myfreezic.com
nmrconsultants.com
opolclothing.com
pawtyparcels.com
photograph-gallery.com
plataforyou.com
print12580.com
programme-zeste.com
raphacall.com
realmartagent.com
rednetmarketing.com
retailhutbd.net
rftjrsrv.net
ronerasanjuan.com
samytango.com
sewingtherose.com
shoprodeovegas.com
shuairui.net
singlelookin.com
siyuanshe.com
slicktechgadgets.com
sophieberiault.com
spyforu.com
styleket.com
syuan.xyz
thegoldenwork.com
thehmnshop.com
thesmartshareholder.com
topgradetutors.net
tpsmg.com
travellpod.com
wangrenkai.com
wellemade.com
wpcfences.com

# Reference: https://www.virustotal.com/gui/file/8ad095b5f3cbe5651719b70347c94f489a4a14d72a4535c68f9829fe8d0ec738/detection

aksessories.com
carolyngowercoaching.com
cavanvanrental.com
china-xinkai.com
greenbarmiami.com
jobs-preparation.com
maniakea.com
minksywinks.com
modernhub.info
nchuangyi.com
sonoraquwat.com
stepsaudio.com
therealnotary.com
trickvv.com
tyrkietspecialisten.com
xcusehrreje.com

# Reference: https://github.com/MBThreatIntel/malspam/blob/master/AgentTesla/AgentTesla_2021-04-27.txt

bornforbetterthings.com
crossfut.net
dajiangzhibo12.com
deltaeleveight.com
draftsofsilence.com
droplites.com
futebolfitness.com.br
highsiddityminks.com
profoundai.net
prulib.com
pwjol.com
saturnkorp.net
thehealthierdonut.com
unmanglement.com
vtz6whu5254xb1.xyz
weatherdekniagara.com

# Reference: https://www.virustotal.com/gui/file/1f108a10b866def65686fcb0e0c10612152288ea1f7a6158e5ada37f26d03265/detection

alignedenergetics.info
craftsman-vail.com
downloadhs.com
fortwayneduiattorney.com
gmworldservice.com
lowcarblovefnp.com
salahdinortho.com
sim201.com
twincitieshousingmarket.com
xiang-life.net

# Reference: https://tria.ge/210429-tmvpzvp3tj

12hourchallenge.com
890281.com
airfieldelectric.com
alleyesonegipt.com
amu2020.com
antalyasml.com
asudprr.com
berlins-cuban.com
burmester.email
businessfundingtodayscam.com
byteidolon.com
chiraaag.tech
coinbutter.com
commercestudy.online
contorig2.com
czech-lang.space
designlyticsuk.com
embarkjourney.party
formulasimracing.com
goldtraderassociates.com
greedysafely.com
gunsareworthmorethanlives.com
hiltonbomontieforeaspa.com
hzlingfa.com
jetsurf-versicherung.com
joshimaria.com
kevinton.com
kreuzbags.com
kungfuglobalfamily.com
loriinibrand.com
mcclearytrucking.com
medicareschoolcommunity.com
metalservicesn.com
ministernarf.com
miusc.com
nailsnhang.com
newhopeadultos.com
patrickleahydescendants.com
pceasyreview.com
pharmacistshoko.com
plumaroja.com
poseidonbeauty.com
poshspotaccessories.com
powersandprospects.net
prevenirelcoronavirus-co.com
rdifatra.com
reasonswhyletter.com
romicore.com
shangmai.plus
stelbertrose.com
swallow-express.com
tankmaniac.net
ticoverde.com
tiga-roda.com
tirmastermind.com
trselfstorage.com
uswanews.com
vbetcostarica.com
venturabankruptcyattorney.com
wdnanshan.com
wordsinprogressthegame.com
ww-homes.com
yanmq.com
yellushnesme.info
yipinsutui.com

# Reference: https://gist.github.com/silence-is-best/852a1c7c7dcf29fdc8d5df73433e7676

2739kingsroad.com
2k20-aide.com
5865145.com
abarroteslacanasta.com
active-label.com
adjustedhuman.com
alexander-hof.xyz
anclaseadfoodmarket.com
aperfectbrow.com
aperocart.com
areyssg.com
bawakamus.online
bono73clothing.com
buildingdigitalmind.com
campoyabolivia.com
clientcentre.net
cnhremandealerservice.com/maw9/
findinghonor.com
fotografialove.com
gofourd.com
ienvoices.com
import-union.com/uv34/
inajmer.com
jieliangcaifu.com
kenkelconsulting.com
kingdavidtiferetshop.com/edbs/
landbirdevehicals.com
lazyfears.com
mobcitylabs.com
newportbeachswim.com
onlytwod.xyz
paobuyingxiong.com
phillhutt.com
q8ah.net
rva80s.com
ssc018.com
symbolofsafety.com/uv34/
thecoolprojector.com
theswatidiaries.com
thetempustrader.com
wokeinteractive.com
wyshio.com
xsites-dev.xyz
yogina.life

# Reference: https://twitter.com/James_inthe_box/status/1389959476376006657

kayandbernard.com/8u3b/

# Reference: https://twitter.com/MBThreatIntel/status/1390022224497700867

wwwnptpool.com

# Reference: https://app.any.run/tasks/01f8e582-fc44-41a0-a6d3-c85ffd3f9311/

stepgentertainment.com

# Reference: https://www.virustotal.com/gui/domain/officewindowssecurityfirewallopen.duckdns.org/relations

officewindowssecurityfirewallopen.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c46f6d72a258354c5267436ea0db9cd3f12cc1595a0d9072d904b0b15731f092/detection

ayaksotocikmayedekparca.com
buypartagascigars.com
dieselfarm.wine
fone.info
gudengdc.com
interviewat.com
kandsaccounting.com
regulars7.info
thearcane.world
valleysprings1.com
withloveboutiques.com
xhtd531.com

# Reference: https://tria.ge/210511-ndh4plydgx

7brochasmagicas.com
albertsonsolutions.com
alphabrainbalancing.com
astrologicsolutions.com
axolc-upoc.xyz
bastiontools.net
beautiful.tours
beautyblvdca.com
bloodtypealpha.com
candidanddevout.com
chefbenhk.com
codeproper.com
constructionjadams.com
contorig2.com
customessayjojo.com
dgyzgs8.com
diurr.com
dogscanstay.com
dotgz.com
eastboundanddowntrucking.com
ebmulla.com
emotist.com
ethyi.com
everythingcornea.com
farrellforcouncil.com
foxparanormal.com
fsmxmc.com
graniterealestategroup.net
haichuanxin.com
healtybenenfitsplus.com
inov8digital.com
investmentfocused.com
jkskylights.com
kladki.com
labkitsforstudents.com
lifehakershagirl.online
magistv.info
medvows.com
melaniesalascosmetics.com
namastecarrier.com
online-securegov.com
onyxcomputing.com
organicwellnessfarm.com
paragoncraftevents.com
pensje.net
plgmap.com
qgi1.com
rafbar.com
reservesunbeds.com
revolutiontourselsalvador.com
sanacolitademarijuana.com
sensationalcleaningservices.net
shotsbynox.com
stacyleets.com
turkeyvisa-government.com
ultimatepoolwater.com
valuedmind.com
vavadadoa3.com
vissito.com
xn--6j1bs50berk.com
xn--demirelik-u3a.com
xn--z4qm188e645c.com
xtrator.com
yourstoryplace.com
zioninfosystems.net

# Reference: https://tria.ge/210511-xpz6qx1ffn

0055game.com
959tremont.com
ansel-homebakery.com
artinmemory.com
asapdecor.com
barkinlot.com
birzulova.com
bnctly.com
bullishsoftware.com
buyruon.com
chaytel.com
cosmicmtn.com
desyrnan.com
drunkpoetsociety.com
enpointe.online
essentiallygaia.com
ferienschweden.com
fps2020dkasphotoop.com
fptplaybox.website
fuerzaagavera.com
hostbison.com
houseofsisson.com
ixiangzu.com
joysupermarket.com
kerneis.net
kissanime.press
kkkc5.com
lacompagniadelfardello.com
lagrangewildliferemoval.com
ljd.xyz
makemyroom.design
mentalfreedom.guru
moderndatingcoach.com
mondaysmatters.com
mujahidservice.online
myaustraliarewards.com
northsytyle.com
nugeneraonline.com
omsamedic.com
onlinehoortoestel.online
outletyana.com
paulpoirier.com
peninsulamatchmakers.net
philreid4cc.com
poweringprogress.today
prestiged.net
privat-livecam.net
radioconexaoubermusic.com
redlightlegal.com
relocatingrealtor.com
rokitreach.com
royalpropertiesgurugram.com
rvvikings.com
sarasvati-yoga.com
sardarfarm.com
sectorulb.com
shitarpa.net
sopplugin.com
soukid.com
spiritsoundart.net
stylezbykay.com
theanimehat.com
umlausa.com
union-green.com

# Reference: https://www.joesandbox.com/analysis/415767/0/html

7brochasmagicas.com
albertsonsolutions.com
alphabrainbalancing.com
astrologicsolutions.com
axolc-upoc.xyz
bastiontools.net
beautiful.tours
beautyblvdca.com
bloodtypealpha.com
candidanddevout.com
chefbenhk.com
codeproper.com
constructionjadams.com
contorig2.com
customessayjojo.com
dgyzgs8.com
diurr.com
dogscanstay.com
dotgz.com
eastboundanddowntrucking.com
ebmulla.com
emotist.com
ethyi.com
everythingcornea.com
farrellforcouncil.com
foxparanormal.com
fsmxmc.com
graniterealestategroup.net
haichuanxin.com
healtybenenfitsplus.com
inov8digital.com
investmentfocused.com
jkskylights.com
kladki.com
labkitsforstudents.com
lifehakershagirl.online
magistv.info
medvows.com
melaniesalascosmetics.com
namastecarrier.com
online-securegov.com
onyxcomputing.com
organicwellnessfarm.com
paragoncraftevents.com
pensje.net
plgmap.com
qgi1.com
rafbar.com
reservesunbeds.com
revolutiontourselsalvador.com
sanacolitademarijuana.com
sensationalcleaningservices.net
shotsbynox.com
stacyleets.com
turkeyvisa-government.com
ultimatepoolwater.com
valuedmind.com
vavadadoa3.com
vissito.com
xn--6j1bs50berk.com
xn--demirelik-u3a.com
xn--z4qm188e645c.com
xtrator.com
yourstoryplace.com
zioninfosystems.net

# Reference: https://tria.ge/210518-mahaj6148j

aadiventura.com
alexrabus.com
alibbv.com
artistssupportpledge.com
barnettmt5.com
businesspartner360.com
campustore.net
cdaboozecruise.com
dubai-tlv.com
education618.com
elisabethchin.com
essentials19.com
ethereumlp.com
fefffisce.info
financesdigital.com
fragrancecollector.com
freightlogins.com
getblackops2hack.com
gosanispire.com
hg62988.com
hymingfeng.com
iyogyl.com
jawwal.xyz
jphomedecor-01.com
kickitfashion.com
konbeca.com
laurartproductions.com
legalmktexas.net
linkitmexico.com
lovenfys.com
mack-soldenfx.com
madcord.net
moveincyprus.com
mytinyhometips.com
nelivo.com
nerdtoysuk.xyz
northernirelandcustoms.academy
oculensweb.com
opinetree.com
pigpigworld.com
prideglobalholdings.com
propointcleaning.com
psychedelicsnail.com
radicallymessy.church
retiredalsolovingit.com
rigwelllifetimeonline.com
rjroof.com
sacpanel.com
shaunmdurrantbooks.com
skip3-akjsdn.com
statiajewels.com
thejadedopal.com
tu-aviso.com
ufdzbhrxk.icu
ultraletefit.com
uncontenido.com
upthehilldogwalking.com
videoadprofits.com
wellness-sense.com
wellsleyarts.com
weretheshepards.com
wester.zone
wirebeevehicles.com
xywedding.com

# Reference: https://twitter.com/whitehoodie4/status/1395266325547819010
# Reference: https://pastebin.com/DBKKAdtE

astrokhushbooshokeen.com
buymobilia.com
gabrielaaa.com
talbotserver.com

# Reference: https://www.virustotal.com/gui/file/a47861eb94370a48bc6b4d99117b88c991fb199e300bd0cc24aa812c0ea2b3cb/detection

edlexacademy.com

# Reference: https://twitter.com/MBThreatIntel/status/1400533314696515586

artinmemory.com
birzulova.com
fptplaybox.website
ixiangzu.com
knighttechinca.com
lacompagniadelfardello.com
mentalfreedom.guru
northsytyle.com
peninsulamatchmakers.net
privat-livecam.net
relocatingrealtor.com
rokitreach.com
royalpropertiesgurugram.com
soukid.com
theanimehat.com

# Reference: https://www.virustotal.com/gui/file/c16b38ae42a9c32ba01ccd93bd90efceb4df05adb997b179758844e2d7d9b8c1/detection

doctor.hopto.org

# Reference: https://www.virustotal.com/gui/file/cf32bf794461f1286ddf604e1aa6022cd4eef1b05020c01efd2c682db865106e/detection

351215.com
finoblog.com
startersattorney.info
e-lohas.info
onixtours.com
alfenafootwear.com
misstenazas.com
lookupnanor.mbplc.xyz
kkkwhitepride.com
restondefencejobs.com
returpen.net
lvn.xyz
thedonationcard.com
neutralogics.com
dnhsxm.com
police-baton.com

# Reference: https://otx.alienvault.com/pulse/60bf5cefa96120d4cf00fa53

fullmoonrestlessco.com
wttfiber.com

# Reference: https://tria.ge/210609-d1n5l5g5kn

0755hk.site
7sportslive.com
856380295.xyz
91jpjob.net
9yyabewxz6ifs.net
abirepeh.com
acheiumabrecha.com
alencamera.store
alicekoller.com
alkawtherabudhabi.com
andresmiralles.com
askmikewatson.com
beyondhill.info
casadobeco.com
cfprcapital.com
clickoakland.com
cloudsecurity.pizza
devcosmetic.com
dmcvc.com
dufortridge.com
egh.xyz
esvastickers.com
gardentips.tips
green-bark.com
grupovalmik.com
hairandhairs.com
halalmessages.com
in-a-best-world.com
itxas.com
julianakarlagalettus.com
kafengunjuq.com
kounier.com
liveincareau.space
mardegrises.net
martobe.com
masterofrisk-rj.com
megadap.com
mightycaller.com
moatme.com
modasserjasim.com
onlinemovies.one
opsixpack.com
otelmesut.net
paydayloanr.com
pogiandi.com
pointbrite.com
prithe.club
racevx.xyz
ravstyle.com
roofers-hartford.com
ruyinoodlehousenv.com
saitamasocieties.net
saneplantlady.com
shanxibank.ltd
shinehindi.com
sistershantex.com
siteshapers.info
sm3ly.com
startersdentalimplants.info
thesoftmarketing.digital
thesophieashton.com
tranceoptic.com
twizitter.com
wisdomleatherworks.com
wwwbarefootrvresort.com

# Reference: https://tria.ge/210603-35ggm2vmxa

568215.com
67657780.com
691jxy.com
alizamcandrew.com
alwaysincerely.com
asahizushi.info
bermudefcrasettlement.com
cdpp.net
chrispricellc.com
copinginfula.trade
corporaterecruitertraining.com
cortopepperfest.com
cunerier.com
desertcamelhq.com
dinemuch.com
doratemizlikurunleri.com
electrumsystem.network
fsjcfrozenfood.com
fundwise.pro
germinatebio.com
gksfhzuhi.icu
gp4458.com
heartoflofall.com
highspnhxm.trade
hzzamy.com
ihsangazisiyez.com
jamaicanrestate.com
kalptarucentrino.com
kaqitoy.com
kieler-hof.com
koladintechnologies.com
laurabarstowart.com
lcpcap.com
leetranscreations.com
lessismorebeautiful.com
ligaeuropea.com
machinerycomfortable.com
macusix.com
merchasylum.net
mescopro.com
mymathstest.com
pbzb94.com
pheki.com
radansaisortagim.com
recreationanddevelopment.com
richelitesingles.com
sagesse-courtage-credit.com
sdyuancang.com
securenetflixapp.com
shipbuildersforgolden.com
stallionsilver.com
tennisopenit.com
texas956.com
themallvideo.com
theopendata.exchange
traditionalmehandi.com
weknownorthgower.com
whirlpool-repair.site
x-izm.net
xn--2z1bq6efxj2gp2o9xd.com
xn--anibalderedao-7eb3d.com
yangpaair.com
ycshop.net
yds-inc.com
zseasyfishin.com

# Reference: https://app.any.run/tasks/f06bb2ed-fede-4404-8291-2b744ebd1bce/

bf-swiss.com
cddcsw.com
cpzgzcw.com
findholmesinlaurelmaryland.com
kleinrugcleaning.com
mcluxuryrentals.com
mss52.com
ontarioboatcharters.com
priyadubai.com
skip1-dndasasd.com
suderstr.com
tfjxw.com
unmeasured-grace.com
updatesz.com
wierzewzwierze.com

# Reference: https://twitter.com/MBThreatIntel/status/1406973188828024837

magnoliamaycandleco.com
zhf2883.com
2811152641.com
jxsaigonanhvu.store
reciperoast.com
sallah-kw.com
tigerk2.com
sahnakz.com
xn--vkc6b6baa6ac1jbwc6l.com

# Reference: https://tria.ge/210624-gp1c67p5ra

592215.com
academicplumbing.com
alnooncars-kw.com
aztecnort.com
babbageacademy.com
bestveganbook.com
brussels-cafe.com
ca3construction.com
cursosaprovados.com
dbrulhart.com
debbiewilsondesigns.com
delta-wing.com
dkku88.com
dottproject.net
drainthe.com
floor-space.investments
forummondialdelamerbizerte.com
garnier.red
genotecinc.com
girlfriendsgarb.com
gon2580.com
homebrim.com
inclusiocg.com
infinitilamp.com
influenzerr.com
informationside.com
ip2c.net
jakesplacebarbers.com
jam-nins.com
keeponsports.com
kensyu-kan.com
leelegantflower.com
luckytwo.agency
mdwovzrrm.icu
ministry-of-barbers.com
msmenders.com
nazarickdeveloper.xyz
packapp.net
panache-rose.com
pjcavaliere.info
pursemore.com
rbcoq.com
scootgotti.com
sezyz11.com
smartswitchhomeloan.net
snakby.com
spacecoasthondaevent.com
stagingsolutionsgroup.com
sumaholesson.com
tempestchs.com
theapiarystudios.com
thebusinessfitclub.com
thehealthyimmunereset.com
theservantleader.com
tikhyper.com
trebdurham.com
trueblue2u.com
vidasustentavel.online
videohm.com
vipandeep.com
whachupichu.com
wholehearteddaughters.com
zhixintonghe.com
zpxinxi.com
zzful.com

# Reference: https://twitter.com/MBThreatIntel/status/1408090816229351426

bebek-store.com
jagrit.codes
platinumforsale.net
pornrog.com
sneakygear.com
thisislandonbraverman.com

# Reference: https://tria.ge/210625-faspqe4qyx

a2calf.com
aimuseums.com
andreatessler.com
angiepologie.com
bestivfcenterpune.com
bloodsweatnskills.com
bsankavl.com
chocolatejerky.com
classifoods.com
creaturescreate.com
currogpheasantshoot.com
cyberzenith.com
dwlrr.com
dynamicfitnesslife.store
edem-agency.com
efrainspura.xyz
emotionsmanifest.com
employeerelationships.com
extaseestreaming.com
festeringuncle.com
flirt-girls.icu
freetimecleaningservices.com
futureadb.com
gadgetwoods.com
icankid.net
innerpeaceactivist.com
izakayajun.com
knektr.online
kuromugi-blog.com
lilaccityacupuncture.com
lodgespringseniorliving.com
lopsenetwork.com
mafalda.cloud
melaninswagger.com
melissadishes.com
mkc.xyz
ohiocommunitynewsnetwork.com
onshore-energy.com
oohdough.com
oxbstwnm.icu
pemeroth.com
pennygailpottery.com
platinumortho.net
pyantx.us
quyetstar.site
resumes2impress.com
rulrr.info
shuji-ogawa.com
smacey.com
smartchoice.education
sofiaalva.com
southerncloseouts.com
stainedglasshockessinde.com
thankyouforthemoments.com
thefuntheboringtheinbetween.com
theindependentwings.com
tusinschoology.com
ulinzigear.com
uxlunexpectedlawyer.com
vinh-heritage.net
wefanthedead.com
womanwithacode.com
xn--tr-trkiye-t9a.com
ycxlst.com
zhaigoo.com

# Reference: https://tria.ge/210624-wprc4elcza

4860p.com
abundando.com
airlinesfm.com
alpha-psych.com
aridham.com
azaza.store
boldae.com
borwoo-packaging.com
bringcovidhome.com
buyersmeetsellers.net
calfwag.com
crewe-tech.com
dmarc.press
dronerealestate.net
eagle-rock-real-estate.com
emmonsfororegon.com
excellencepi.com
farmacykauai.com
fbrblog.com
ffpgv.top
filledbasket.com
findmyiphone.services
glaseye.com
gwokath.com
handbagsbreeze.com
hoodhippy.com
hyperhostns.info
infomediosdigital.com
iopsms.xyz
laive.chat
leorisingcreative.com
leverj.exchange
loty-hd.com
manchesterflowerwalls.com
mayberrycommunities.com
natalieball.com
novitadelgiorno.com
paysamba.com
prophunting.com
purple.gifts
pussyfarts69.com
radiosta.com
registergamers.com
richmondpistolpermit.com
sans35studios.com
sarahhariri.com
scrippshealthprivacynotice.com
seekingyours.com
step1clean.com
teach.wine
templabels.com
testcomp8260.com
top10musicmarketing.com
toughershop.com
townsendcomics.net
utikejt.com
valengz.com
wildeliving.net
wyattwillgetbetter.com
xn--kipinpaja-z2a.com
xn--sllskapsdjur-gcb.com
yange03.com
yenisarkisi.com
yourgafflettings.com
zimmerkauf.com

# Reference: https://tria.ge/210615-5h25azl6tn

aapliweb.com
accordinera.com
alakhi.com
arie09.com
askfine.com
asserghorab.com
associationtechnologyblog.com
aurummobilestore.com
biologicaldeception.com
bonap56.com
bonus328.online
cbgmasters.com
cookingwithyourkid.com
coolsgames.com
copiaequipmentfinance.com
dspinsure.com
easypanservice.com
efiesonestifanos.com
elearchsearch.com
eveaquila.com
fireball15.com
firstlinkk.com
fuelofsmokenvape.com
gangelich.com
grand-dental.com
grassysigns.com
greatdomainsales.com
gslge.com
idealwindowmfg.com
irc-helper.space
jadepalance.com
kcdyhbv.icu
keys2successfulliving.net
kidsclothing.center
liveatrivernorth.com
lucky5tarstudios.com
macarthursflowers.com
motor-lamp.com
mounaquedecampan.com
mumbaibusinesscentre.com
napaluxurypicnic.com
nastybestinteriors.com
nataschabruder.com
nusantarataniagung.com
overthewaterfront.com
paradigmtechnicalsolutions.com
pub-g-free-uc.com
raphaellacroix.com
riseplc.com
sawsome.icu
sedlmeierbestattungen.com
selllasheswithtonya.com
studiopeer.com
taksykw.com
thebutterflylifers.com
thebutterflyme.com
thedigitalmarketerslounge.com
thelewalla.com
transferable-value.com
unbaluns.com
veracars.com
wordhospice.com
wpmaintenanceteam.com
wtxpfoundation.com
yourebridgeplan.com

# Reference: https://twitter.com/reecdeep/status/1409451122511814657

cunix88.com

# Reference: https://tria.ge/210630-qtfmtaaprn

29752ellendale.com
88q858.com
allpurposepaintingservices.com
allterdsmatter.com
angelademarco.com
awkwardpeachfitness.com
balancerestoreomaha.com
bestcoastwellness.com
bidatauction.net
blogafonte.com
cjcgraphics.info
cleaner-solar.com
cloudservices.technology
cnhy0769.com
connecteddots.digital
couia.com
covidcustomdesigns.com
e-srot.com
eaornti.com
eclorui.com
enrgsystems.com
fimco.net
flaxx.life
gezirapharma-sd.com
gmb-marketing.com
hardrock.site
holowide.com
hotelcastellgye.com
irondoorsnearme.net
jeilaslimefactory.com
jimeipifa.com
jukeboxjeffdj.com
kate.chat
kujtimet.com
lolly-bops.com
myzoomroomz.com
navyugitsolutions.com
notimpersonating.com
pantheoncases.com
parossunbed.com
pohanc.net
pontacols.com
putortifashions.com
rapidexpressshipping.com
ravexim3.com
red-studios.com
remoteandnice.com
renetyson.com
rhexlux.com
saltairbeer.com
savignies.com
schnarr-online.com
shlokus.info
simplysummerdawn.com
soulpowerlive.com
specialforcesofindia.com
sutransformacion.com
talsworldwide.com
taspate.com
thecode.community
thepassiveincomecreator.com
uluapokehouse.com
vascularsurgery.club
veristasolutions.com
wwwgraciescottage.com

# Reference: https://tria.ge/210630-yg8jjxplla

568215.com
67657780.com
691jxy.com
alizamcandrew.com
alwaysincerely.com
asahizushi.info
bermudefcrasettlement.com
cdpp.net
chrispricellc.com
copinginfula.trade
corporaterecruitertraining.com
cortopepperfest.com
cunerier.com
desertcamelhq.com
dinemuch.com
doratemizlikurunleri.com
electrumsystem.network
fsjcfrozenfood.com
fundwise.pro
germinatebio.com
gksfhzuhi.icu
gp4458.com
heartoflofall.com
highspnhxm.trade
hzzamy.com
ihsangazisiyez.com
jamaicanrestate.com
kalptarucentrino.com
kaqitoy.com
kieler-hof.com
koladintechnologies.com
laurabarstowart.com
lcpcap.com
leetranscreations.com
lessismorebeautiful.com
ligaeuropea.com
machinerycomfortable.com
macusix.com
merchasylum.net
mescopro.com
mymathstest.com
pbzb94.com
pheki.com
radansaisortagim.com
recreationanddevelopment.com
richelitesingles.com
sagesse-courtage-credit.com
sdyuancang.com
securenetflixapp.com
shipbuildersforgolden.com
stallionsilver.com
tennisopenit.com
texas956.com
themallvideo.com
theopendata.exchange
traditionalmehandi.com
weknownorthgower.com
whirlpool-repair.site
x-izm.net
xn--2z1bq6efxj2gp2o9xd.com
xn--anibalderedao-7eb3d.com
yangpaair.com
ycshop.net
yds-inc.com
zseasyfishin.com

# Reference: https://pastebin.com/njbLBACM
# Reference: https://app.any.run/tasks/94dda737-87d6-498b-bf3f-7f445abeea13

bhartiyabrand.com
dataxamarin.com
futeboplayhd.com
guktree.com
hondausedcarswestpalm.com
htwengenharia.com
mondaymindsets.com
nxwatson.com
politica.group
shoppinkksugar.com
sofiedeneef.com
yadouganggou.com

# Reference: https://otx.alienvault.com/pulse/60db0c73a92b92b79741d921

tvdajiang14.com

# Reference: https://blog.talosintelligence.com/2021/07/threat-roundup-0625-0702.html (# Win.Dropper.Formbook-9875089-1)

1e9sevenrainy.loan
actu-occitanie.com
aldareps.com
amigurumibyamanda.com
barkintheparkli.com
bikby.com
ebvdcxw.com
empireremgmt.com
jesusinme.net
juxiangjidian.com
keeenterprise.com
liveonthehill-festival.com
mansiobok2.info
matthewelliotties.com
mlyouxian.com
mmssgg.com
myshoppingchic.com
qualitycarpetcleaningcal.com
selectsb.com
theadventurecurators.com
tiangongqiaoduo.com
tntcityinc.com
vabomerewaste.info
wxfkyyw.com
xuse.info

# Generic trails

/config.php?account=
/09rb/?BL3=
/2cur/?p0D=
/3iw/?URfhe=
/3nop/?zt=
/3nop/?-Zd0qV80=
/3nop/?BBZ4xph=
/63j/?RHD8=
/66op/?8ptlzV=
/9d1o/?5j=
/9d1o/?jDKt_=
/a8c/?r6=
/ajr/?Jt78=
/ajr/?oj=
/ajr/?gzrP4xE=
/aofk/?yPMl=
/aofk/?XrxlCh=
/aofk/?ZvlpdD3X=
/aofk/?SfV=
/aofk/?VXVxArBH=
/aofk/?yp=
/b4d/?mrj030Qx=
/bg6/?Pds=
/boa/?GDHDW=
/boa/?CDH=
/boa/?Ozud=
/boa/?RDK0=
/bti/?CBLl4=
/bw82/?7nU0_4=
/bw82/?ixlp=
/bw82/?m2MpP03h=
/bwk/?phbxg4sP=
/bwk/?uRqHO=
/c22b/?GPFPs=
/cgc/?vR8XO=
/dum/?NjBDlp=
/dty/?Mv18=
/dy/?7nRL=
/e3eb/?3f5=
/e3eb/?PBZ0=
/ec14/?cdlpd=
/ec14/?JxotnDq=
/ei9s/?5jfHZlY=
/ei9s/?lnzH=
/ej/?3fvH1nq=
/ej/?5jxTV4Ux=
/ej/?AnB=
/ej/?d8FL=
/ej/?mL30v=
/evcy/?2dl=
/flc/?lhud=
/fs8/?0V=
/fs8/?AX1=
/g832/?OReXw=
/g832/?Vzut_2=
/gh/?9r=
/gh/?pdfX=
/gh/?wtzx=
/gnt/?Tzu=
/gnt/?zPah=
/gqx2/?UDK8jj=
/grv/?LZv8=
/fs8/?q6Q=
/h26/?9rfx9hDX=
/jjk/?1bn4ip=
/i19/?tzsDXFa=
/kfr/?0dnLRd=
/y8r/?kFQl7b=
/kdz/?axlP=
/kdz/?cf=
/kdz/?m2MpPNip=
/kdz/?nH9=
/kp1/?r6=
/kt0/?Lh54A=
/kvsz/?8peTw=
/kvsz/?ajL=
/kvsz/?an=
/kvsz/?cd=
/kvsz/?MvX4BN=
/kvsz/?NlI46pq=
/kvsz/?OlG=
/kvsz/?OL34=
/kvsz/?yzutZfsP=
/kvsz/?zv=
/lmh/?BN6=
/lmh/?MdItZ=
/lmh/?OJEtdtiH=
/lmh/?oPO4K6C=
/lmh/?tDK=
/mbx/?OL3D=
/mcn/?_nD434I
/mcn/?pL08=
/mjl/?M2MpdRT=
/mi8/?1bwhC=
/moc/?0TG=
/moc/?BL=
/moc/?OrD=
/moc/?_L30=
/nang/?YPxdA=
/njo/?KPO4XxjH=
/njo/?s2=
/nnmd/?erah=
/nsag/?6lop4xQ8=
/nt8e/?qNG=
/nu/?n4=
/nu/?8p=
/nu/?rvKdSp48=
/nu/?w2Kdbz9=
/nwc9/?NreTZ=
/nyk/?Gdj8=
/ogg/?3fk=
/ogg/?F2=
/oncs/?SL=
/p2he/?1bz0Vl=
/p2io/?1bUl=
/pth/?lL04m04=
/r690/?9rId4=
/r690/?aBZPMh=
/r690/?0l8=
/r690/?X6I8=
/rrc/?CBr=
/rrc/?MP=
/rrc/?Rfd8=
/rrc/?VZxTAfKP=
/rv7/?CBZXp=
/y88/?uZ-D=
/s0v/?cdH=
/s0v/?qR70f=
/s48/?Yn=
/s8y/?zXq4AN=
/sa/?HZaxUrJ=
/sbjq/?oZotnV_=
/sfd8/?jzuPNd=
/sg03/?iN6h3=
/sl7/?p0q=
/t2p/?Ezg47B=
/te/?9rmDEzj=
/tgqh/?dh=
/pjn/?yVcHTBN=
/hx227/
/hx321/
/w8t/
/tef/?Tj=
/x0h/?MfPxb=
/xczm/?ZVatuBj8=
/xczm/?NN=
/xle/?OrpDKZ=
