不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様1社 -
2026/01/05
※2026/01/05 更新
マルウェア感染させると考えられるURLを検知（2026/01/05）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxps://farnuq[.]go1ogun0ow[.]ru/1votizwc hxxps://pixdro[.]ru5t1eview[.]ru/wey8usxm hxxps://hovlen[.]ru5t1eview[.]ru/5gilr18b hxxps://ramqit[.]ru5t1eview[.]ru/14r9a876 hxxps://zulpex[.]ru5t1eview[.]ru/19urpujz hxxps://ker9ip[.]act0rpie7ce[.]ru/cqn8skw0 hxxps://wuzhel[.]act0rpie7ce[.]ru/czn78t70 hxxps://mabfin[.]act0rpie7ce[.]ru/bekvvkl7 hxxps://jorxel[.]act0rpie7ce[.]ru/hn4yonh9 hxxps://bal7ux[.]s1aughttre5s[.]ru/yi4nnlac hxxps://werniq[.]s1aughttre5s[.]ru/64d0a2w1 hxxps://gosped[.]s1aughttre5s[.]ru/oot7js9o hxxps://tramvi[.]s1aughttre5s[.]ru/w22ezp21 hxxps://qestiv[.]go1ogun0ow[.]ru/9va0mx27 hxxps://vul3en[.]go1ogun0ow[.]ru/cj108qlk hxxps://mizpar[.]go1ogun0ow[.]ru/hqzmg7cl hxxps://joltex[.]go1ogun0ow[.]ru/3vw4w725 hxxps://jibkar[.]che6u7therm[.]ru/7nz1tov8 hxxps://selvot[.]che6u7therm[.]ru/uy30f393 hxxps://mup3al[.]che6u7therm[.]ru/wzmg7yhj hxxps://varqin[.]che6u7therm[.]ru/d8tlxjq6 hxxps://dexhul[.]che6u7therm[.]ru/wa7lk5nm hxxps://clymor[.]s1aughttre5s[.]ru/6wwzqmcl hxxps://figmet[.]re5cuestup1d[.]ru/mcwvw8ey hxxps://zankor[.]re5cuestup1d[.]ru/j73zz4gn hxxps://pelrud[.]be2vesati5t[.]ru/lkeuexnr hxxps://hov3il[.]be2vesati5t[.]ru/u483ksdo hxxps://tarmex[.]be2vesati5t[.]ru/3vnz17rd hxxps://qivsan[.]be2vesati5t[.]ru/vb2771yn hxxps://nulfer[.]be2vesati5t[.]ru/oydkyuko hxxps://sivhun[.]sa5imw2ter[.]ru/66gaykjs hxxps://bel3oq[.]sa5imw2ter[.]ru/onrd9kvo hxxps://tursaq[.]sa5imw2ter[.]ru/sfj1glb4 hxxps://moprin[.]sa5imw2ter[.]ru/pk438a6y hxxps://kalvex[.]sa5imw2ter[.]ru/cg61mb6r hxxps://jem7iq[.]re5cuestup1d[.]ru/jufuxu4s hxxps://wosdal[.]re5cuestup1d[.]ru/d7k1oq3c hxxps://druvin[.]re5cuestup1d[.]ru/6lh7hz7m hxxps://mur7es[.]di5pl2yleft[.]ru/wdbn04zd hxxps://pizlaq[.]di5pl2yleft[.]ru/tbwlw8d0 hxxps://jelvon[.]di5pl2yleft[.]ru/xqw1ew5t hxxps://cormiq[.]di5pl2yleft[.]ru/1v72s9mt hxxps://wom3er[.]den1mp7imad[.]ru/w6xlja7i hxxps://tiblad[.]den1mp7imad[.]ru/x96w08az hxxps://fespov[.]den1mp7imad[.]ru/70cedz0w hxxps://nulqen[.]den1mp7imad[.]ru/23wh1bjg hxxps://garxit[.]den1mp7imad[.]ru/q8rt39is hxxps://don9uix5car[.]ru/mj91n4gd hxxps://tubren[.]l0ckmu7derer[.]ru/fl2v45r5 hxxps://zim3up[.]l0ckmu7derer[.]ru/s2cobchq hxxps://holvas[.]l0ckmu7derer[.]ru/jxwwad7b hxxps://daxlin[.]l0ckmu7derer[.]ru/9pyxxo06 hxxps://valdek[.]di5pl2yleft[.]ru/0oet5e10 hxxps://33zvn57u[.]c0nfectgod5on[.]ru/?apikey=NtnSaVNULhMrnXCE&activityId=96ba1112-2c92-4270-910c-0db0a302d741&ocid hxxps://erspnnas[.]5purbu7y[.]ru/?apikey=ycgZMAnhxEVsPSlQ&activityId=037d4ed6-0a85-4be9-a354-ef39018af3d6&ocid hxxps://7mqyam5a[.]h0wevpro5eca[.]ru/?apikey=hyzyLGJnUkunPSId&activityId=21f5e86f-3d97-4f64-9345-b9444624e87f&ocid hxxps://9h54jr6k[.]get2b0ut[.]ru/?apikey=SarfwdrJvnFjHeZU&activityId=0ee3f2f5-cfab-4d99-a3c9-4094f27d94d9&ocid hxxps://1usljhth[.]1nterject0il[.]ru/?apikey=XUylANtSrjSRklzF&activityId=a8225d0d-5f2f-40db-977c-dc779cf437ba&ocid hxxps://j7f3fm89[.]repe2t5tuffy[.]ru/?apikey=cmNiEMNJbkZkGSNp&activityId=3b42ed4e-fb8b-4881-8904-ba234d913112&ocid hxxps://tgophp9p[.]ai7uninit1at[.]ru/?apikey=MBJIrqAVbsmEjKMy&activityId=5c97071c-13f9-4e29-8b05-cb0101a1085f&ocid hxxps://tybt39bz[.]fabu1ou5down[.]ru/?apikey=wcVIlELUOEExWKNb&activityId=597c1b8d-0ba5-4110-9849-74342383128a&ocid hxxps://qm3y81ja[.]crypt5t2te[.]ru/?apikey=cJnKEInWZpHvkHCu&activityId=ada79ecf-dcb5-4b66-ac33-ae28cc4aa4d7&ocid hxxps://b12mtww0[.]cerem0nyiwas1[.]ru/?apikey=OeBPCrzKxDkdvouQ&activityId=7f749bc1-aaaf-4357-834f-a4e148a451ee&ocid hxxps://rq44wt3c[.]a9uedmu5eum[.]ru/?apikey=XiOdoJxxHwnMgdTo&activityId=7e6232af-4f77-4ff2-9e80-3ab21e512b05&ocid hxxps://p9xz8kwz[.]b2dmintonper5[.]ru/?apikey=gfZuvpAmlQNKdlDN&activityId=cf794c6e-a9b2-46b5-bd87-2400c3638a66&ocid hxxps://d44vdnpu[.]dealblitz[.]qpon/?apikey=yRxIlDxMqqrEWZQb&activityId=cd67b67a-3ac8-4ac6-8ac9-145e9e6cff80&ocid hxxps://w2q9lxtj[.]redf1ee7[.]ru/?apikey=eqoADhGePvFpwQVP&activityId=15572e7c-fb63-4ff3-9325-6a472dd9a418&ocid hxxps://k2xyv9zj[.]s0ci0ltendency[.]ru/?apikey=ywTMjHrfQPLetrTb&activityId=01eedd53-1e13-44fd-b797-9d15daf0c6bc&ocid hxxps://7ylfs86u[.]perkmeister[.]qpon/?apikey=TsvNrzljIcjvnRgZ&activityId=4110ed96-b71f-447f-8159-6a0d0dc29f22&ocid hxxps://zylxz5wp[.]sparmarkt[.]qpon/?apikey=UmZlUazVItlWytVj&activityId=d62c47bc-cc60-4327-abb7-3612e0f33ba5&ocid hxxps://fi8vr6q1[.]rabattkiste[.]qpon/?apikey=hEIVvMbAQQKbkroi&activityId=a557123a-823a-4092-a847-b8ecd9c9a308&ocid hxxps://9pbhrc3o[.]bargainbucht[.]qpon/?apikey=oJejmcyTCndNFkMO&activityId=a7f8b376-22a8-4b07-998f-fbd9d01d6d79&ocid hxxps://6g3xqw6s[.]bonusquelle[.]qpon/?apikey=oZbRFJmVcojESfMR&activityId=38778c77-5d98-4ff1-b5ea-167209672284&ocid hxxps://ispg4tzl[.]couponforge[.]qpon/?apikey=mtNjOJUMiEefvnQW&activityId=dbbca896-dcd3-425f-b8df-91522174aa7c&ocid hxxps://hhgyqyai[.]savefalke[.]qpon/?apikey=YLiYtLSHPXsCOFsz&activityId=6c59b3b3-6d29-4918-bb2c-430a739d9e6b&ocid hxxps://z724fxb3[.]dealzauber[.]qpon/?apikey=qupwEdBnZzBLKpcr&activityId=65af928e-00af-4f1f-9fec-018a814e1a65&ocid hxxps://p31dr0bs[.]dealzauber[.]qpon/?apikey=FXjGSomYNewSKFUW&activityId=66306e1a-91e8-45c6-ba6e-7bfe883e0355&ocid hxxps://qjrkh8m1[.]savefalke[.]qpon/?apikey=oGKjfyHRlNHslLCO&activityId=465ae01c-b468-4527-abed-42087806237c&ocid hxxps://2sv9bgxa[.]redf1ee7[.]ru/?apikey=GCVPLAiClkPlxWdD&activityId=c2389f1e-d4df-493b-81c6-f339a55c4562&ocid hxxps://inhibyln[.]redf1ee7[.]ru/?apikey=AclKGIqEvITbiBdh&activityId=c63ab975-aab2-4629-aba3-3e88c620eb37&ocid hxxps://6warimna[.]preisdrop[.]qpon/?apikey=IWQbzCEPgWguJjLK&activityId=9605026a-40e2-4f63-91d2-c0b013e228f0&ocid hxxps://tf72zgyh[.]preisdrop[.]qpon/?apikey=zOdOAygJXcJPFRxn&activityId=dd86e4c1-5437-4793-8fc0-be7717d19ac7&ocid hxxps://xaesdb97[.]c2bba8etip[.]ru/?apikey=XQHNLvwWqNkDmNXp&activityId=c7e3878a-61fe-4912-82e6-b845d20ded4a&ocid hxxps://zfbbu8bs[.]c2bba8etip[.]ru/?apikey=LDFkhruuKFQkOuDF&activityId=4cea7b58-b5a1-47b5-b2bf-9eea631a4095&ocid hxxps://5cw7rw2b[.]compres5text0l[.]ru/?apikey=aeLCpBJHrJQNklBe&activityId=ff8afcb0-891e-4511-83ab-86f0028b8457&ocid hxxps://8ouero1r[.]compres5text0l[.]ru/?apikey=KTAUCwbTsxkGscaf&activityId=f3aaf260-6a60-46ed-9487-5a4c6217950f&ocid hxxps://ai2uuwqw[.]ecumen1sm0ff[.]ru/?apikey=CTueyxvwgZGZyehe&activityId=6517c2b0-1528-4e89-b487-eef362f5ed99&ocid hxxps://f94vb8l0[.]ecumen1sm0ff[.]ru/?apikey=GtbUJUbcVLoFmsWr&activityId=186e880f-00e2-4a00-80d7-8f2cbb1fbe42&ocid hxxps://yk7vp5q0[.]arm2turege7m[.]ru/?apikey=yLeOoKldpxAGyGzJ&activityId=ec5c9b7c-ff67-4e91-bac4-3e98ebfb6b63&ocid hxxps://ru38kvwa[.]arm2turege7m[.]ru/?apikey=AuOsqjKjZRsnvSei&activityId=77bc4cae-1b45-435d-8832-d51c2ffb2b68&ocid hxxps://d64zcw85[.]harr0wp2i[.]ru/?apikey=wdvVBrUSOlxlXnVu&activityId=b1ca1e1f-28ec-44e0-81a5-d0d03fb9ed56&ocid hxxps://3a4srpk1[.]harr0wp2i[.]ru/?apikey=mDKaFWCchgKEbKQG&activityId=43fdd45c-d6fb-44d8-aa48-3f9d034172ea&ocid hxxps://3ei6h1fz[.]udmu7tsw2rp[.]ru/?apikey=gaAHBvdFAIhxjNtY&activityId=21e226b2-4203-4be7-83e3-5a44ec6b88ae&ocid hxxps://xy53k61z[.]udmu7tsw2rp[.]ru/?apikey=sWzMJOqAAtumPgQF&activityId=5564a5f3-332c-4711-bf10-2590ca5b2700&ocid hxxps://52r1hjg1[.]ch2ntro1ley[.]ru/?apikey=DJHCQfdlLhnHpswI&activityId=c6720680-557f-4ae1-a38f-f5db317fe971&ocid hxxps://9nkc9lsf[.]ch2ntro1ley[.]ru/?apikey=QcUEcDcRbXckZtlH&activityId=bb5c1e52-9925-486c-901c-2d9f8ac47e60&ocid hxxps://s7gnorm4[.]f0ursme1ting[.]ru/?apikey=ouucPDnSwlhIxdmN&activityId=32a5d9b1-6d68-416b-a0b6-c075512bff40&ocid hxxps://301tnw8t[.]f0ursme1ting[.]ru/?apikey=xLCIyGeaXFsdXcWB&activityId=69a41989-ac3e-4211-b439-c5ca7bc7c673&ocid hxxps://y5i3tc1t[.]stormc1oud[.]ru/?apikey=RHJLEQLnLftVwFNO&activityId=0e47fa17-7604-45e3-b755-90565b1aa4a1&ocid hxxps://lkgapm4v[.]stormc1oud[.]ru/?apikey=CwEIMubFFnkvcFoh&activityId=c70ce6fc-e4c0-48e7-b61d-0672608d045f&ocid hxxps://a85k99xb[.]mistysh1eld[.]ru/?apikey=VJUjWYklMnyNzcZn&activityId=779d1629-59f1-4b0f-bdb2-fc30c2db9b28&ocid hxxps://15eitnbq[.]mistysh1eld[.]ru/?apikey=EakHjGfxtbXsKBBx&activityId=d7fad27e-3ff7-4a42-bd0c-4dc33a1e1a48&ocid hxxps://tyr2to6g[.]cl0udpath[.]ru/?apikey=HHhofYFxEpFGRFEM&activityId=f4f6b02b-9818-4745-9745-9dd491c6bb31&ocid hxxps://3ttsi6qg[.]cl0udpath[.]ru/?apikey=pHbSrZDGpKHUrCUM&activityId=93d025f5-0c40-465a-be84-bab1e8c14389&ocid hxxps://pzskci29[.]shadowf1ow[.]ru/?apikey=osIlSHbvUyoPDtHO&activityId=6e27c4fb-c2fc-4279-8622-b9d17f85dad2&ocid hxxps://zxa96eaf[.]shadowf1ow[.]ru/?apikey=TblsNmNQBGJDTXCP&activityId=fc7cb219-bcc0-4402-bfe3-aa0880cede57&ocid hxxps://2ah4j4gq[.]stormh1ll[.]ru/?apikey=sUqvdRMAuFzaalns&activityId=6624034c-f25d-44c1-80af-6f430cf80392&ocid hxxps://fp57ddz7[.]stormh1ll[.]ru/?apikey=VcAJTTYNrBqXnRZx&activityId=b0dc64b4-3178-413b-a02d-3ad8da189df3&ocid hxxps://9pm93zo8[.]br1ghtf0rm[.]ru/?apikey=aiBAZoBGORauSzEF&activityId=7474daef-79e1-40c5-9091-96a4605db9c2&ocid hxxps://x5v04q4u[.]br1ghtf0rm[.]ru/?apikey=RGyvTZrXxYWomkBq&activityId=de67f72c-3a64-437c-b5f9-3525c2d07ae9&ocid hxxps://zn3foc66[.]skyc0rest[.]ru/?apikey=rAJFHBvFjkiaJKUp&activityId=4ae5b69f-cd3b-46d4-a624-3fb0f62ac240&ocid hxxps://vhe65fgx[.]skyc0rest[.]ru/?apikey=UBzwzujeIFOcdrWw&activityId=37225c23-9c14-410b-83fa-e3360fb6b688&ocid hxxps://ixwuvljz[.]windb1rd[.]ru/?apikey=dxpBdJrVbjlBARuC&activityId=6c6cd4ed-ccc5-49d6-b650-a52a11ee201a&ocid hxxps://xndpt67e[.]windb1rd[.]ru/?apikey=VTLjQgxMJQrAgqQt&activityId=2c317f4e-0f5e-4263-be8c-dae19c8543ca&ocid hxxps://ervy2cgl[.]deepc0ve[.]ru/?apikey=BAGtRXIaHMZvSVcN&activityId=f9a4278c-b19f-462a-82bb-c70cd72e8858&ocid hxxps://uy8h00ja[.]deepc0ve[.]ru/?apikey=NscXFgdBGKzFJhLu&activityId=7672b4e2-02f9-47f6-b15c-8f5d66c7d937&ocid hxxps://y9eygjch[.]skym0ti0n[.]ru/?apikey=wnBAHbRnCvJWuzkH&activityId=5acf74aa-c7a8-4e14-a873-66c9569742a9&ocid hxxps://ej7lqmwt[.]skym0ti0n[.]ru/?apikey=xRCMnwWFGZvCsmqv&activityId=a1e1f5e1-7dbf-495f-a640-e7502bcde28c&ocid hxxps://jprglro7[.]frostm1nd[.]ru/?apikey=GwMGqIKgIfVByFnU&activityId=74a62cd9-00ad-4e63-8c84-8ca28515ecdc&ocid hxxps://pxe51lm9[.]frostm1nd[.]ru/?apikey=upPHmSxZulnCgFaA&activityId=788b3606-debd-400f-9ef0-4481575c262b&ocid hxxps://utxqly52[.]fr0stline[.]ru/?apikey=XitdBpIlcaICPLrp&activityId=1b160c5d-78ab-4452-9da6-875b7d5adfa6&ocid hxxps://gz8jlk0r[.]fr0stline[.]ru/?apikey=ynjvxhBwDGFrKFzD&activityId=1f8a19d7-1e7d-4c78-9fa3-8d068f6f0400&ocid hxxps://qj6bkgrv[.]n1ghtcre5t[.]ru/?apikey=xfWVsgzpiwFPLGEj&activityId=ed871b57-fe78-4593-9784-3acafa3248f8&ocid hxxps://v2s1fwxr[.]n1ghtcre5t[.]ru/?apikey=OuksaRzzQDKENIqG&activityId=c12ca870-cc04-473f-b953-72eb77a0854e&ocid hxxps://d45m6uxw[.]n1ghtcre5t[.]ru/?apikey=sgVqkWvVfhQoAqgO&activityId=77998e68-a8cd-4661-9ea1-30fa4bc99463&ocid hxxps://a5cciv20[.]rainshield[.]ru/?apikey=DFghavcFZQqRixuC&activityId=64984cd5-0a4d-4d0b-8d88-5c9cd5f938a7&ocid hxxps://2h5ydzqo[.]rainshield[.]ru/?apikey=EsfikJXCSKFILcbe&activityId=7c13ec50-12b2-4116-a870-86d9705c078c&ocid hxxps://vermclta[.]deepmi5t[.]ru/?apikey=ScOruKcEFBeFChEN&activityId=9e4a17a1-723e-43ae-9550-d6f83f6291a3&ocid hxxps://4kgnpztl[.]deepmi5t[.]ru/?apikey=HvQZKgfUiSIsBQCV&activityId=25c57428-f9ca-4a6c-b4b2-017d185914ea&ocid hxxps://tqi7q7rf[.]deepmi5t[.]ru/?apikey=cLtKoGdPSdNBWaTN&activityId=e61358e5-f254-4eed-ba88-804a8998ae89&ocid hxxps://u6mf1131[.]fr0stw1ng[.]ru/?apikey=PujHbvCbJXMxiYsp&activityId=f0b75a9e-d4a0-43d7-bfc9-40384e4381f6&ocid hxxps://g4q5p73e[.]fr0stw1ng[.]ru/?apikey=KiyDzqROwfshbquw&activityId=c3052d78-1ad1-4347-a556-a8bfb7c135db&ocid hxxps://umnj5g1g[.]skyf1ow[.]ru/?apikey=LOmosvjrSBUJGoim&activityId=16d3964e-e88e-4333-b91f-829cb931779d&ocid hxxps://84hjxo5f[.]skyf1ow[.]ru/?apikey=RkNYxNDYvpsIQvCt&activityId=792175c7-1602-4a81-b5e0-65cf9961e503&ocid hxxps://ly7p6r10[.]w1ndshift[.]ru/?apikey=mCOviMDdADvDrNCM&activityId=208c40a2-26cc-4cfe-9729-89a9a38c245b&ocid hxxps://8i60caub[.]w1ndshift[.]ru/?apikey=CtNERGridMBQtJII&activityId=fc97365b-fd3b-465b-9e9a-1a5dfaea8de9&ocid hxxps://hsvltty0[.]darkc0a5t[.]ru/?apikey=fCYvTIBUZLOEgtkL&activityId=392f9781-d851-40b5-b760-4ca4ceb133a4&ocid hxxps://0do79h4s[.]blueh1ll[.]ru/?apikey=jymRAEZzZMOdwYom&activityId=ae4b2d48-b321-4888-ae95-942ff630e58c&ocid hxxps://522bmwhj[.]cl0udr1dge[.]ru/?apikey=ujOiYXMwoWFVXGpw&activityId=23b1ef35-c5eb-4a8d-bada-6c8265918cda&ocid hxxps://dftc360y[.]r2nkteh2[.]ru/?apikey=FUxtXOoWOsdGOjHN&activityId=df4adb30-9502-4282-8456-d8cfdc4e47ce&ocid hxxps://f36h8hcw[.]p2ciftamp0n[.]ru/?apikey=NfmAEVUQenDOCwqx&activityId=572fb302-b7e5-4ea4-887b-d9a727f6be55&ocid hxxps://p2ov4cfd[.]bi8otz1on[.]ru/?apikey=SgfqqZmrTnXrOETU&activityId=3a67616a-e647-43ed-b2ba-0f1687794c71&ocid hxxps://k6ug314m[.]a5hsuper1or[.]ru/?apikey=KKMfLSiZXvFXoVfh&activityId=202b6b1d-d387-46f0-ab82-9bc034372027&ocid hxxps://ymr7m49r[.]a5hsuper1or[.]ru/?apikey=bKfcuxawLApaRELe&activityId=5960d2e0-1067-4b8c-b444-dc38c6fea290&ocid hxxps://v4oof0fy[.]dep2rtmen0va[.]ru/?apikey=upqIZiVxsunQIWid&activityId=488a89b1-049b-4d5a-84c8-e99dd7c2b43f&ocid hxxps://5p21lmj4[.]dep2rtmen0va[.]ru/?apikey=GPwJGegDZOBoYxPF&activityId=8d8b3df0-b8e5-4427-8f5c-84e91c679471&ocid hxxps://lbjkxct4[.]heh0vli8ht[.]ru/?apikey=mRBaxcjULkWDGQdu&activityId=69574556-a613-4257-a767-4714bba8935e&ocid hxxps://2wz05npa[.]heh0vli8ht[.]ru/?apikey=fNiSoHgWkUnxTZVu&activityId=4843830b-4eea-4a07-ab66-38741c1b076c&ocid hxxps://o7rlcblf[.]bohem1apred0m[.]ru/?apikey=dCZmNvDQPbBofqTG&activityId=65329c4f-0721-4440-97d8-8f96caeed52c&ocid hxxps://6hcht7x5[.]bohem1apred0m[.]ru/?apikey=DCYaGuBGOdcvQFQY&activityId=44defe6f-8ac9-4569-9e13-79cfed32cfca&ocid hxxps://o0m22pyf[.]pu7eer0d[.]ru/?apikey=lHkvEgIuHLBztdhz&activityId=f0874a09-439b-4b23-8aa5-90680c5a0ed1&ocid hxxps://nrx6vae6[.]pu7eer0d[.]ru/?apikey=pZoshLAgACQnWvpX&activityId=731c256e-1277-4e0a-b218-6c6c5f8fb5ad&ocid hxxps://nkomvdvv[.]r2nkteh2[.]ru/?apikey=pmwpOaxMXFmZpyla&activityId=d0383ec9-b30b-4d4e-bcea-2d5b8437cb30&ocid hxxps://vxkap1bk[.]impercepm0no8[.]ru/?apikey=taohCOWihOTmnVtW&activityId=de35c234-d51c-496c-afc1-529eed9d6c98&ocid hxxps://zjr11tft[.]impercepm0no8[.]ru/?apikey=AyROhgwXLAqNhPJd&activityId=1fb3c4dc-f9b7-4f84-bf42-00ea177713b5&ocid hxxps://8viqlh72[.]c2nd1esubject[.]ru/?apikey=HYxkKjwfeoJORjiD&activityId=a24e6b4c-2553-4617-9dcc-c18ebd65703c&ocid hxxps://l0hkzeg7[.]c2nd1esubject[.]ru/?apikey=cudQXrfXTodGMSrC&activityId=0abacaad-1076-4b89-9c1d-aa18cffede65&ocid hxxps://t7sk4ia4[.]f0refraterni5[.]ru/?apikey=TmMvESdiDllpcNRu&activityId=50b79145-0b59-405d-8396-4c0f9b90f5fd&ocid hxxps://vghecu28[.]f0refraterni5[.]ru/?apikey=iaOQXPDtLCKqUxmJ&activityId=b6097516-a156-424c-860a-45132a622e38&ocid hxxps://6r7t5g36[.]n1ghtsh0re[.]ru/?apikey=mbNRuLjqUhbqlwDh&activityId=ac2236d9-2deb-4018-b8b8-fb5729b4f149&ocid hxxps://2wwhaoq1[.]n1ghtsh0re[.]ru/?apikey=QpTLQThCVtnGoTCy&activityId=5b6dada0-88c2-4d15-8e79-e7a8b6d6888a&ocid hxxps://onj3pw7c[.]windf1eld[.]ru/?apikey=blfosBcjGXhZzhVr&activityId=4c0da29d-e590-407b-9fb8-52c64be096ad&ocid hxxps://tu6eo4za[.]windf1eld[.]ru/?apikey=nujqSuKhzVfEcAwt&activityId=1b54f8dd-17a8-4edd-a41b-092f161123e7&ocid hxxps://h650evc4[.]cl0ud5tream[.]ru/?apikey=mflziVHCYvuaEZcM&activityId=6f7166e7-3621-4b69-9ad3-30b187dfae62&ocid hxxps://gxcgn6lf[.]cl0ud5tream[.]ru/?apikey=gqyNvqeoZRtisonY&activityId=24a53ec6-fec3-41da-8cda-874d2f6e2432&ocid hxxps://cvgekgnf[.]b0utontran5fer[.]ru/?apikey=gOJtDNltwQfbmMeC&activityId=ec5b4c9e-1894-4315-97f0-b7d74d506b73&ocid hxxps://qyjqlxrj[.]b0utontran5fer[.]ru/?apikey=OHIKRXnRGyxRCeGT&activityId=da6e3c8f-de7e-4759-8063-a9788d1297eb&ocid hxxps://5vjkehxx[.]fr0stmirr0r[.]ru/?apikey=vbIspeFphxrryeoV&activityId=d4a468d9-b9b8-4865-a841-31909431fe80&ocid hxxps://ekei2n7i[.]sun5tone[.]ru/?apikey=OQDmbIbWPsNmdVzO&activityId=d0c2a316-93b8-48d4-b0d7-74a4c2b5eee8&ocid hxxps://of03juqh[.]sun5tone[.]ru/?apikey=suzGkDYImSwxUaqI&activityId=9f5e8fc2-da0b-4bd2-a5c2-eba1ff46a763&ocid hxxps://50oxk787[.]rainfail[.]ru/?apikey=qdhthCUOjkRqXrun&activityId=07b8c63f-bb8f-4e46-b05a-d80ea7f9bc1d&ocid hxxps://3uyvehbx[.]rainfail[.]ru/?apikey=owMsTPxiBNgvHkeW&activityId=e0379d44-e065-40e3-8120-92c05cc04ed2&ocid hxxps://lyciemyh[.]mi5tpath[.]ru/?apikey=rohbAeTSSWIcNDkw&activityId=f23b04fa-95ea-417b-b787-cb49f9c18b81&ocid hxxps://f7nm8f7u[.]mi5tpath[.]ru/?apikey=SGIevhoHozpMUMtb&activityId=96a274a4-1490-44fa-89b3-759ae1c3668b&ocid hxxps://171f42aj[.]5kylight[.]ru/?apikey=NtFhCEQRHqOjdMqo&activityId=8f6b59df-afbd-4fb4-b1e9-8bbe57749acd&ocid hxxps://10zseo44[.]5kylight[.]ru/?apikey=gEntuHSGjQqNnVij&activityId=aa66df82-fca4-44d9-bfd2-229a748dd476&ocid hxxps://qhwiamqd[.]darkf0rm[.]ru/?apikey=wvqRsUFzHYFQzxsB&activityId=4655c2a1-59aa-4a1f-ba83-1fd821a73530&ocid hxxps://tw7bcy6z[.]darkf0rm[.]ru/?apikey=IfbGHGiTwKESsWwX&activityId=d14e5bb9-6b4e-44f8-9205-4187dba1cdbf&ocid hxxps://5l6zy0pd[.]blu3c0ve[.]ru/?apikey=fQheBNmSwlNiYGKf&activityId=57bea4e3-bcaa-48dd-a663-db639ddbe6e1&ocid hxxps://85a24fyd[.]blu3c0ve[.]ru/?apikey=GRtFUlfBTGzFArrH&activityId=e92c39fa-b6b6-455b-99c9-5520735b211e&ocid hxxps://jnk9otsf[.]fr0stmirr0r[.]ru/?apikey=SVuCyKUHdPuwhnsb&activityId=6efa8f8e-6e53-4abb-a0ae-13eb7a205f1d&ocid hxxps://s638zqw3[.]5t0rmr1dge[.]ru/?apikey=ZluINxRmxUYtlRJc&activityId=9e0cbc02-9d18-47bf-a44a-924d11fcd9fc&ocid hxxps://2i7bgqa2[.]bi8otz1on[.]ru/?apikey=JmltyEhIBVAbjDXt&activityId=bba02e68-b751-4405-a96a-0c0b199b9f7e&ocid hxxps://jt5d8kku[.]bi8otz1on[.]ru/?apikey=cPAkuwtZzzIqleLh&activityId=5e80e256-d44b-40b7-994f-42b4fb51225f&ocid hxxps://7yq9kkyk[.]5t0rmr1dge[.]ru/?apikey=NDQJLiWFGTsTNwvj&activityId=b65b2155-75f9-4264-a411-6b09ce6ab141&ocid hxxps://ubjqtmom[.]5t0rmr1dge[.]ru/?apikey=SZwiLmSmJlCHkgtC&activityId=484ad216-a2c5-4a91-9588-8d8c31d333e9&ocid hxxps://qrlkhxv2[.]5hadowfiow[.]ru/?apikey=LyyqSNCXEFhaxqAG&activityId=7c8bce1d-9164-4975-b1dc-a00aa9c4dcf1&ocid hxxps://mo1lzvar[.]5hadowfiow[.]ru/?apikey=jRJEctCzmMVSWWFu&activityId=b09d1db5-b1b1-4c77-ba20-225090514ec8&ocid hxxps://al93cs24[.]5hadowfiow[.]ru/?apikey=LqwYTBrEbrgAaXLf&activityId=01db0bca-f7a2-458f-805d-a1b5606bf6d7&ocid hxxps://2tfg15f1[.]blu3field[.]ru/?apikey=FHKltrnczZUTWSDA&activityId=a85968a7-2c15-45b4-a2f6-ed53513eff02&ocid hxxps://rq5aflxn[.]blu3field[.]ru/?apikey=PAVpsTiIVJLGPIYF&activityId=27a9b9cb-a578-4aad-9c80-20b252f4e4c5&ocid hxxps://3bvphmwg[.]wind5tone[.]ru/?apikey=moNsJEQTzweDlytU&activityId=2e000015-17a7-4c66-95ff-a00450f41076&ocid hxxps://1xucln9y[.]wind5tone[.]ru/?apikey=vAtdvyejngqOqGiK&activityId=dd68c311-1a53-45c3-897c-c1f883baf8d5&ocid hxxps://5o8vbjbm[.]cl0udv1sta[.]ru/?apikey=vZlEQugFbMwDDaxV&activityId=796a5fe8-f959-495e-b7c6-a888e4c71db1&ocid hxxps://zb5c8o44[.]cl0udv1sta[.]ru/?apikey=PEhAouQrXJDCliVt&activityId=9fd59687-7276-4afd-b4db-eb203e6d8f1c&ocid hxxps://ihfhrpxy[.]5t0rmr1dge[.]ru/?apikey=JmlvaqPdJFtVZWTi&activityId=522a0a14-116f-43f3-92b4-53d81516ee66&ocid hxxps://o9ekn7ff[.]bohem1apred0m[.]ru/?apikey=bMbHOlenuvYZTMgZ&activityId=68be5622-246e-4a2d-b98c-aeefc22d3bd5&ocid hxxps://g48hk2ii[.]bohem1apred0m[.]ru/?apikey=SxkTAHaiGVQdZWJf&activityId=165c95db-aad8-4a0a-aeab-79581520671a&ocid hxxps://15w9bglk[.]pu7eer0d[.]ru/?apikey=ykJbXmVSfdVmdbJM&activityId=ad0126ab-de3b-4afc-bc88-9b9dacbde09a&ocid hxxps://tdebwovt[.]pu7eer0d[.]ru/?apikey=LXKeSUdyuFlMHKgX&activityId=5dadb2c6-0a55-4e16-a3f7-8f82a0df00b3&ocid hxxps://q7hqh19r[.]r2nkteh2[.]ru/?apikey=CrMhphoFXTDDsnVA&activityId=aea65512-ade2-48f0-8f5e-d39fe043c9da&ocid hxxps://el5348ic[.]r2nkteh2[.]ru/?apikey=jqTWRUYzByqTGEkf&activityId=04165556-aa90-43de-b82e-b92e0527fdfd&ocid hxxps://srpwnrw8[.]p2ciftamp0n[.]ru/?apikey=exSYLovbjlpcZeer&activityId=c7f28aff-59b9-467f-8f3e-383ecb9028bd&ocid hxxps://je5mf64c[.]p2ciftamp0n[.]ru/?apikey=RbaCqvJOYJrOYuCt&activityId=24d40dea-fa1c-4ecb-a1bd-a4ff9628ea3e&ocid hxxps://yz3j4wu2[.]5t0rmfail[.]ru/?apikey=kNKkEuTVwKxqKOvH&activityId=26561233-9272-4f9d-b8cf-c60e0e1af08a&ocid hxxps://2fl4vwmp[.]5t0rmfail[.]ru/?apikey=lflXefBysEggGXbp&activityId=b455bb15-7c84-4f97-a7e9-647a0de1b620&ocid hxxps://50mfsn0s[.]crumplejet[.]ru/?apikey=oDPOSxNjzBiRuKEb&activityId=e7eaa7d0-fd97-471a-8d0c-a2e54dd4bd1f&ocid hxxps://qucwl9kb[.]crumplejet[.]ru/?apikey=xxlYuNAxXqYsCwvE&activityId=308a70bd-b2ad-445b-90d4-273a59d1e389&ocid hxxps://2cpyxxm5[.]a5hsuper1or[.]ru/?apikey=zWtaAfxsBvyLDxhK&activityId=39cb1603-8534-4e5d-8a03-8d1bae7e5c5c&ocid hxxps://a0coka3w[.]a5hsuper1or[.]ru/?apikey=kAOGyNAVwiAucmpt&activityId=6589a9cb-2abf-40f6-967e-5d38a2466c78&ocid hxxps://p3v5s4t5[.]a5hsuper1or[.]ru/?apikey=JZDqkrNAtfbdGFZH&activityId=3f56805d-6f45-4221-b10c-2e0e958a967b&ocid hxxps://d3vci1ep[.]dep2rtmen0va[.]ru/?apikey=lZDDcYACeDnyhlnD&activityId=db08b0b8-125b-4e56-8290-c2b235dbb44f&ocid hxxps://40k8qjo8[.]dep2rtmen0va[.]ru/?apikey=QaxKfNLdbRWIkVFB&activityId=071dd7e5-0adc-434f-afb2-8df3c9b6dee7&ocid hxxps://sc7nd8s4[.]heh0vli8ht[.]ru/?apikey=hpXJRVdkHjuGBFDI&activityId=737ad269-4a72-4755-b67f-5e4c96a0423e&ocid hxxps://y3ctp4x3[.]heh0vli8ht[.]ru/?apikey=ivBrWtbJvbaUGEdG&activityId=72018cda-11da-40d2-9f92-46bacdc0bdfe&ocid hxxps://pjma3tgi[.]bohem1apred0m[.]ru/?apikey=cgQAuXcacXUbhFHT&activityId=97b520c9-3e6c-41e2-b73e-7a966a721f11&ocid hxxps://phgbh6cb[.]quartz-sketch[.]ru/?apikey=mOeKHYSrQhHaYtOP&actmn=29dcf490-4cbe-404b-9789-90faa32e14dc&ocid hxxps://flrlrdl1[.]quartz-sketch[.]ru/?apikey=UbSZvejlSuHGctnh&actmn=a68886d6-a071-498b-9509-381bc03411ec&ocid hxxps://d9lwvqxy[.]quartz-sketch[.]ru/?apikey=KGjDdmXWQHeNjHAF&actmn=10821f05-3a7a-4a7f-95c0-9bdd9fc1eeba&ocid hxxps://zbb6it90[.]quartz-sketch[.]ru/?apikey=AMFamVwqzPAWtjWK&actmn=08df6306-ccc9-46d5-84d2-4df26905f9f5&ocid hxxps://s83sht55[.]amberflume[.]ru/?apikey=EGzyDbDxGsZUbeJa&actmn=cf41d155-ac79-4b4c-84a5-0070a8c6962a&ocid hxxps://9burdy0u[.]amberflume[.]ru/?apikey=NCdigIpwjqlvbIEI&actmn=1717ca58-4bdb-4a48-85bb-27dcafe5da35&ocid hxxps://1vvmu70s[.]amberflume[.]ru/?apikey=TfMdXIYCPmQNslsc&activityId=44353b1d-d89b-414a-b809-a0af130e2166&ocid hxxps://hsrq2bkz[.]sn1pburrow[.]ru/?apikey=mdtcRchFXLPjTxEW&activityId=849fe2bf-fdd3-40eb-b089-fa90fd25c393&ocid hxxps://xozpwh9b[.]sn1pburrow[.]ru/?apikey=GjdfKmhmyIcYLrDO&activityId=817de613-515d-465e-9e22-28533bfa6f39&ocid hxxps://5xp1e8eh[.]amber-flume[.]ru/?apikey=pRtofeCUBdhgUHSO&actmn=9ead90b7-e325-4616-9384-1c2d16ea48cc&ocid hxxps://2v5d82bf[.]quartzsketch[.]ru/?apikey=JYeHtzBiBiEjaYxm&actmn=3454c74f-c6fa-43b6-98be-77a699aff343&ocid hxxps://g9l8c7fk[.]quartzsketch[.]ru/?apikey=BUxRXcOdlQJsDPAC&actmn=546a4afd-b723-41da-89f6-120247793dab&ocid hxxps://awjrq1fn[.]crumple-jet[.]ru/?apikey=pebAUPBAvUiXavvQ&actmn=253ae1ba-2829-45a7-a241-8fa523ae6262&ocid hxxps://f3s0gpds[.]crumple-jet[.]ru/?apikey=tIiNAUrjJGUDsHAh&actmn=ee1b7e60-ea05-416d-9627-68e6fda5bd3b&ocid hxxps://gib9tyuu[.]v0xentwine[.]ru/?apikey=uHhbNtGcGtDmltQX&actmn=35c851ef-4a73-4333-b74f-99a922141c41&ocid hxxps://oeql6rvy[.]v0xentwine[.]ru/?apikey=cevBLtgAZaQVdIGE&actmn=635df791-4714-4d86-b8af-9509ece28079&ocid hxxps://ic3kv9je[.]j1ttercoil[.]ru/?apikey=delTFfVUQgbPSekl&actmn=8a75948e-d6f0-4006-a7b0-75a8269ba680&ocid hxxps://9fvaco8b[.]t0rchbasil[.]ru/?apikey=jwAkcIWRQSrLUPGu&actmn=c87ee801-e8df-4f43-8fef-7bd1c84406f2&ocid hxxps://sw223sm2[.]t0rchbasil[.]ru/?apikey=NjvFyRmPJOnxALkv&actmn=83b601ff-0a4a-4956-adfe-d8fcd6bd485c&ocid hxxps://a2vok2y8[.]t0rchbasil[.]ru/?apikey=AnXmEhYTxxiRYcJe&actmn=7ca919f3-97e1-4cf1-924b-1e3066fd9ec7&ocid hxxps://1phwsssa[.]t0rchbasil[.]ru/?apikey=YTbRFDdOqOPSkOSk&actmn=9ec16b68-7870-48cf-b839-7032d5425def&ocid hxxps://xh5k6k5j[.]fl1ckerpost[.]ru/?apikey=GnbZIEpQzGFVFfTU&actmn=2ef73f4e-461a-40ea-aadc-9dd5712df47f&ocid hxxps://98pt6jbo[.]fl1ckerpost[.]ru/?apikey=bndqpJEBwdVYaRbo&actmn=f8730938-f0df-4598-88b5-d5201e7ba23a&ocid hxxps://wbj431uy[.]amber-flume[.]ru/?apikey=zvrBeNdVwffZIGph&actmn=0e159ff2-642b-451e-b82c-14678ab8c5cb&ocid hxxps://fzjn4gee[.]hush-pancake[.]ru/?apikey=PvJxKdMjooiXJZYr&actmn=956af7dc-1f48-4e94-953a-deeb360bad1e&ocid hxxps://ttxacj2p[.]hushpancake[.]ru/?apikey=lTwWkLzDQmFxYPnQ&actmn=b216f2dc-dcff-4b3d-867d-06da04215be0&ocid hxxps://o0dy67t6[.]bracket-murmur[.]ru/?apikey=qEbcChUqQxpZtyIZ&actmn=da2849aa-4931-4fc4-a499-a29198f82e12&ocid hxxps://clzr2h4s[.]pr2gzigza8[.]ru/?=check&&actmn=toXdUtXuemFeZjyW hxxps://ugr6nb59[.]pr2gzigza8[.]ru/?=check&&actmn=bnpbVrRfhwJOxIqL hxxps://gi7uy1oe[.]seerin8w2tch[.]ru/?=check&&actmn=GNZsSHHkpfNUVwQh hxxps://u5kxesyk[.]seerin8w2tch[.]ru/?=check&&actmn=myptbsvVFjBHkQWF hxxps://by46beo2[.]bracketmurmur[.]ru/?=check&&actmn=ZLMMnouWLcrvnRgL hxxps://tvv7rf6l[.]bracketmurmur[.]ru/?=check&&actmn=DbOZXFVMttesIwMU hxxps://4wuwovza[.]hush-pancake[.]ru/?=check&&actmn=XSSUsSidVgPUeavA hxxps://prprrvoh[.]hush-pancake[.]ru/?=check&&actmn=hnYpulGQLuXcFRZI hxxps://cex9a8ef[.]hush-pancake[.]ru/?=check&&actmn=QOdBThCOcavJcgXJ hxxps://62fhvzqh[.]benefc2th0de[.]ru/?=check&&actmn=SteaWTJDouYMxuIA hxxps://lzo4wndi[.]benefc2th0de[.]ru/?=check&&actmn=zZzQJhstkYkWzPnL hxxps://4bl1n9f5[.]ar7aydia1ect[.]ru/?=check&&actmn=oPNPNvclnGtCUcji hxxps://2aopzocs[.]ar7aydia1ect[.]ru/?=check&&actmn=ntGmOLRHUHngFwSr hxxps://lyotbch4[.]ar7aydia1ect[.]ru/?=check&&actmn=RYcqjzhIPCinAolF hxxps://ee6dxuic[.]ment0rr2nsom[.]ru/?=check&&actmn=WBSCkEMCkHHhsFxS hxxps://oo44p295[.]ment0rr2nsom[.]ru/?=check&&actmn=hNxvexSwwSUKlozS hxxps://wefbkvjr[.]in2che1ncrem[.]ru/?=check&&actmn=ceYlvNXxGkBhSyRz hxxps://oknkywzi[.]in2che1ncrem[.]ru/?=check&&actmn=kEqWSBHAoDxSZTHY hxxps://d4yi75m0[.]brist1ynom2d[.]ru/?=check&&actmn=imbDcORxJMNtKGnN hxxps://q9v5lqkv[.]brist1ynom2d[.]ru/?=check&&actmn=mMfHioQqQysCYzHM hxxps://dvq02enh[.]five5kitt1es[.]ru/?=check&&actmn=yJkabPSyFHAGljEz hxxps://qj9v9qv3[.]five5kitt1es[.]ru/?=check&&actmn=QpyFkmHgfkIoroZF hxxps://bwpxjg5k[.]bi8tape5try[.]ru/?=check&&actmn=OWsJFHIYDWzXdmmG hxxps://w7k49x7q[.]bi8tape5try[.]ru/?=check&&actmn=GWYPRroeikclSfLV hxxps://8r1qnkm3[.]rabk0r5pech[.]ru/?=check&&actmn=IUNNbOqNSxymRgTq hxxps://oonpfyma[.]rabk0r5pech[.]ru/?=check&&actmn=NOGXBKljaDKfgEBj hxxps://yy62g3e1[.]fa1ditmim2ns[.]ru/?=check&&actmn=ginCQZgbozpjHLLt hxxps://v5pxe3tg[.]fa1ditmim2ns[.]ru/?=check&&actmn=bvOOZvPVvDeXDzor hxxps://iyiqs094[.]fa1ditmim2ns[.]ru/?=check&&actmn=RRIXEOwuDpBKlNwl hxxps://d8kbeizm[.]bun8topch2n[.]ru/?=check&&actmn=xRDtBDnZneddtrCV hxxps://pzmiqand[.]bun8topch2n[.]ru/?=check&&actmn=jtSMhoumXwcejPcm hxxps://28l94n0x[.]astra1r0pac[.]ru/?=check&&actmn=TXuPrJmAcaMsXnAt hxxps://j2borkqf[.]astra1r0pac[.]ru/?=check&&actmn=mcdpEopbXJKmycUK hxxps://ksgwkcii[.]ku6chni8ht[.]ru/?=check&&actmn=NmttqznhRkHkwVpa hxxps://r1v6tqom[.]ku6chni8ht[.]ru/?=check&&actmn=FOaGjmggwWFcwWYK hxxps://v8q5m4s5[.]hi8hdukev1a[.]ru/?=check&&actmn=DOHqcUnBkKcmVHMI hxxps://w1b2ofrw[.]hi8hdukev1a[.]ru/?=check&&actmn=vFDwzUOgwSyEWZrI hxxps://m2r2vsbg[.]rend5win8[.]ru/?=check&&actmn=yMlZkIDbfbQziQvT hxxps://jiibusmr[.]rend5win8[.]ru/?=check&&actmn=qgfgnHblyciINOap hxxps://qighklwi[.]b2sil5kirdor[.]ru/?=check&&actmn=yLEPanPYyaLYvWCn hxxps://q0qwfwsf[.]b2sil5kirdor[.]ru/?=check&&actmn=QhTMgWXQdRkOuOck hxxps://bxiwtept[.]dr2nudmu7t[.]ru/?=check&&actmn=MfbWmOjaxKxPPkUm hxxps://c1tcodwo[.]dr2nudmu7t[.]ru/?=check&&actmn=akznjAkeOvlgPisG hxxps://3e8w8can[.]pr0peltano1s[.]ru/?=check&&actmn=yBVjtafXyYCVQWcC hxxps://1swvw1lt[.]pr0peltano1s[.]ru/?=check&&actmn=MmhluLsbgrhesKyA hxxps://rmqe76k0[.]adju5tc2b[.]ru/?=check&&actmn=sdUKzmDIYhgTqkdA hxxps://bis2ijbb[.]adju5tc2b[.]ru/?=check&&actmn=saKkrzQFOexwNQdM hxxps://2ts4xbdl[.]inimit9adin2[.]ru/?=check&&actmn=VTZPLpMNspWmyLXl hxxps://frboe5t2[.]inimit9adin2[.]ru/?=check&&actmn=tNkPhhvUJrNpQkfl hxxps://npqxzvny[.]m2p5uck[.]ru/?=check&&actmn=cecqMFPiEHnthsvE hxxps://881d04q9[.]m2p5uck[.]ru/?=check&&actmn=kSSnZrRxyFtejngM hxxps://ukocpmma[.]offe7sawmi1[.]ru/?=check&&actmn=KRqtumBfBKTBnAOG hxxps://ibn00ky3[.]offe7sawmi1[.]ru/?=check&&actmn=VduWajDfwWxGVGkc hxxps://2w5pvupy[.]c2rv5uating[.]ru/?=check&&actmn=rBdGanJESMJbTESM hxxps://fxccubi6[.]c2rv5uating[.]ru/?=check&&actmn=BMDiIZVgBnrSeCHk hxxps://7xupsxdd[.]m0tionpo7t[.]ru/?=check&&actmn=LxQUpHNROAsINkTg hxxps://2en04iv0[.]m0tionpo7t[.]ru/?=check&&actmn=dALNkeMfUsXwURsn hxxps://a6mgkosi[.]c0mediandu7[.]ru/?=check&&actmn=COUInscjQiDeLjIf hxxps://w8v9ulxk[.]c0mediandu7[.]ru/?=check&&actmn=HRKKJRCnoQlBPNAR hxxps://kktz6llc[.]u9putvirolo8[.]ru/?=check&&actmn=emXqHeYKcDXkUKwj hxxps://e8jla7wl[.]u9putvirolo8[.]ru/?=check&&actmn=IowIkDcISVQxJigN hxxps://w5ukqj3l[.]maidalensesalvy[.]ru/?=check&&actmn=AOFQUOhMEQqCKIrg hxxps://lj1a3x3o[.]maidalensesalvy[.]ru/?=check&&actmn=WPCnmEjrtfPeWryE hxxps://avg6wjm4[.]joggedyankedtetrao[.]ru/?=check&&actmn=sKlILRqxXfQhYJQL hxxps://1ohxr29l[.]joggedyankedtetrao[.]ru/?=check&&actmn=hXypJDLuWatsMvRF hxxps://s0u8vtfv[.]camaslepleypixel[.]ru/?=check&&actmn=ljAiPoyWMiTZPTls hxxps://hr8aedru[.]camaslepleypixel[.]ru/?=check&&actmn=vxCzTFArzAXccWmm hxxps://uolu3j41[.]love5w0rd[.]ru/?=check&&actmn=xuQSkEDgEvfLuzLb hxxps://bt7klphp[.]love5w0rd[.]ru/?=check&&actmn=DigLZYaYukrgEKzk hxxps://0dmtxln9[.]afriteblurbcepes[.]ru/?=check&&actmn=rbRApZRClmgXOpvh hxxps://lmklwnfv[.]afriteblurbcepes[.]ru/?=check&&actmn=nyVspfbHfONDNuqi hxxps://ushvnei2[.]rufousquet[.]ru/?=check&&actmn=GSfYOXZVwiyRbCLr hxxps://7mqkvitp[.]rockyhigra[.]ru/?=check&&actmn=RJThpHuyvKYmxWKU hxxps://epsbaram[.]rockyhigra[.]ru/?=check&&actmn=HJCAQcDIdweqHQnH hxxps://0m0923vi[.]ngotln[.]ru/?=check&&actmn=UNNFtygpXRTBZcFT hxxps://lukf5b1i[.]ngotln[.]ru/?=check&&actmn=hUCrVNTDvEEeFSZo hxxps://xclur56f[.]neumechawl[.]ru/?=check&&actmn=XcxakQFTzWZyUPqz hxxps://48e3kq3j[.]neumechawl[.]ru/?=check&&actmn=cQcxAIbSLSdGiHPW hxxps://jasm72mf[.]vagusbra[.]ru/?=check&&actmn=JUcCPFvIbFKlgLPV hxxps://qzf73dvm[.]vagusbra[.]ru/?=check&&actmn=qZZgJwDaitxXomjU hxxps://g9zj25k4[.]spikeslavage[.]ru/?=check&&actmn=vhKNhgLpenYRGsuC hxxps://gp0k9bqe[.]spikeslavage[.]ru/?=check&&actmn=jbbyGGZqGjmEgcvH hxxps://tki8tul2[.]rufousquet[.]ru/?=check&&actmn=UkBxfuRzynPqMcYQ hxxps://m5yvac5o[.]gr2vityta1k[.]ru/?=check&&actmn=BtDcIRJZjIJgPOlQ hxxps://gp0nuv6i[.]expe7iencfu9[.]ru/?=check&&actmn=gyeFeQzrkLZkZebs hxxps://gim0hpzu[.]ce1lsfeste7[.]ru/?=check&&actmn=NnrNgfSmVJxxOKXh hxxps://ag9sdh7p[.]expre5ssme4d[.]ru/?=check&&actmn=ZetsNQumfFeloeSK hxxps://hywk36mt[.]gr2vityta1k[.]ru/?=check&&actmn=JfiGsfHwhXWntqUv hxxps://l1e26ikw[.]5t0rmhiil[.]ru/?=check&&actmn=cmvzEGPVGmncnNQm hxxps://z9bdth4n[.]blu3cioud[.]ru/?=check&&actmn=FvGtxDayZoYcjkIf hxxps://b76ctsj1[.]5kyline[.]ru/?=check&&actmn=wXqQaLCNSaYFpIHi hxxps://7i2b9swt[.]expe7iencfu9[.]ru/?=check&&actmn=RMKdTpkXGlgxWDhR hxxps://ol01a5t4[.]expe7iencfu9[.]ru/?=check&&actmn=QjNgOxfrZCHQspCo hxxps://929j5tsa[.]rainriver[.]ru/?=check&&actmn=RYgrtqQGUakcQqks hxxps://3gr8e6lu[.]n1ghtfaise[.]ru/?=check&&actmn=bJpVJSjpCbsHgHpX hxxps://489hkp0t[.]sunfiare[.]ru/?=check&&actmn=eLEDcHNyyXIxvXxn hxxps://m1dr52xc[.]windbioom[.]ru/?=check&&actmn=yonVXGbGBRioDSkM hxxps://w6lcjzd6[.]ei8hthyp0[.]ru/?=check&&actmn=QufECeMOHtijLxeV hxxps://11mo4fsx[.]ho1idayt2rn[.]ru/?=check&&actmn=GJGAChJJqJDphpiv hxxps://v65hz4cb[.]b1ondepi8s[.]ru/?=check&&actmn=tGJRbhSgyvPWRITp hxxps://0ouow35c[.]con8ratken2r[.]ru/?=check&&actmn=uKKHgJteDhrzfrWi hxxps://nzrhwm99[.]d0tte1ran[.]ru/?=check&&actmn=hfbCUJvYulLAqBqB hxxps://ynr4ubkn[.]b1tterb0tt[.]ru/?=check&&actmn=CdznblPoqNYaYAAa hxxps://b4g475eq[.]atte4dh2ve[.]ru/?=check&&actmn=pLDLBszFpfloeGim hxxps://92bh4ebq[.]m0ri5ompump[.]ru/?=check&&actmn=buiImLuFwSgImduq hxxps://41xyhih6[.]sunb2zealou5[.]ru/?=check&&actmn=hvLcxNDNWbCVkBxi hxxps://1ulufjyr[.]dive9uoht2[.]ru/?=check&&actmn=hTOogXSmYVwzkdIX hxxps://u9bygw3d[.]liner5ag0[.]ru/?=check&&actmn=XDzIBFcmCgLACkBE |
ClearFake |
| URL | hxxp://carkalashop[.]ir/aaa | BlackNET RAT |
| URL | hxxp://130[.]12[.]180[.]43/files/7557427348/Akfqk2s[.]exe hxxp://130[.]12[.]180[.]43/files/380743829/affa9En[.]exe hxxp://130[.]12[.]180[.]43/files/6608710704/IkuVjrI[.]exe hxxp://178[.]16[.]55[.]189/files/6608710704/IkuVjrI[.]exe hxxp://130[.]12[.]180[.]43/files/380743829/BeSlzQL[.]exe hxxp://130[.]12[.]180[.]43/files/380743829/T20LNOR[.]exe hxxp://130[.]12[.]180[.]43/files/7776205823/8AbWCs6[.]exe hxxp://130[.]12[.]180[.]43/files/5900855435/eNLe4nm[.]exe hxxp://130[.]12[.]180[.]43/files/7453936223/5GFpJxh[.]exe |
Vidar |
| URL | hxxp://130[.]12[.]180[.]20:59989/mips hxxp://130[.]12[.]180[.]48/mipsel hxxp://41[.]216[.]189[.]149/HOME/Mark90c80[.]sh4 hxxp://130[.]12[.]180[.]20:36695/mips hxxp://185[.]221[.]199[.]34/s-h[.]4-[.]Sakura hxxp://185[.]221[.]199[.]34/i-5[.]8-6[.]Sakura hxxp://185[.]221[.]199[.]34/x-3[.]2-[.]Sakura hxxp://185[.]221[.]199[.]34/a-r[.]m-5[.]Sakura hxxp://185[.]221[.]199[.]34/a-r[.]m-7[.]Sakura hxxp://185[.]221[.]199[.]159/m-p[.]s-l[.]Sakura hxxp://185[.]221[.]199[.]34/x-8[.]6-[.]Sakura hxxp://185[.]221[.]199[.]159/a-r[.]m-5[.]Sakura hxxp://185[.]221[.]199[.]159/a-r[.]m-7[.]Sakura hxxp://185[.]221[.]199[.]159/i-5[.]8-6[.]Sakura hxxp://185[.]221[.]199[.]159/a-r[.]m-6[.]Sakura hxxp://185[.]221[.]199[.]159/x-3[.]2-[.]Sakura hxxp://185[.]221[.]199[.]159/m-6[.]8-k[.]Sakura hxxp://185[.]221[.]199[.]159/s-h[.]4-[.]Sakura hxxp://185[.]221[.]199[.]34/p-p[.]c-[.]Sakura hxxp://185[.]221[.]199[.]34/a-r[.]m-6[.]Sakura hxxp://185[.]221[.]199[.]159/p-p[.]c-[.]Sakura hxxp://185[.]221[.]199[.]34/m-p[.]s-l[.]Sakura hxxp://185[.]221[.]199[.]34/m-6[.]8-k[.]Sakura hxxp://185[.]221[.]199[.]34/m-i[.]p-s[.]Sakura hxxp://185[.]221[.]199[.]159/x-8[.]6-[.]Sakura hxxp://185[.]221[.]199[.]34/a-r[.]m-4[.]Sakura hxxp://185[.]221[.]199[.]159/a-r[.]m-4[.]Sakura |
Bashlite |
| URL | hxxp://84[.]201[.]25[.]198/d038a0451b0e491c[.]php hxxp://62[.]164[.]177[.]35/be1577246a994a10[.]php hxxp://62[.]60[.]226[.]159/2[.]exe hxxp://62[.]60[.]226[.]159/winhost[.]exe hxxp://193[.]233[.]198[.]199/ca181e88d271449b[.]php hxxp://176[.]65[.]132[.]92/59d721647e414836[.]php hxxp://77[.]110[.]119[.]94/ce369e7324834845[.]php hxxp://130[.]12[.]180[.]43/files/unique1/random[.]exe hxxps://orederpush[.]cfd/4a1b933c03e9461a[.]php hxxp://62[.]60[.]226[.]159/aiopbu[.]exe hxxp://130[.]12[.]180[.]43/files/2085577942/UCkDmUH[.]exe |
Stealc |
| URL | hxxp://202[.]162[.]99[.]237/02[.]08[.]2022[.]exe hxxp://103[.]241[.]72[.]221/02[.]08[.]2022[.]exe hxxp://165[.]22[.]48[.]119:4444/02[.]08[.]2022[.]exe hxxp://188[.]166[.]178[.]198/02[.]08[.]2022[.]exe hxxp://84[.]241[.]22[.]227:9090/02[.]08[.]2022[.]exe hxxp://45[.]249[.]208[.]252:3334/02[.]08[.]2022[.]exe hxxp://107[.]172[.]217[.]220/02[.]08[.]2022[.]exe hxxp://107[.]175[.]242[.]93/02[.]08[.]2022[.]exe hxxp://111[.]228[.]24[.]38:4444/02[.]08[.]2022[.]exe hxxp://47[.]105[.]55[.]111:8888/02[.]08[.]2022[.]exe hxxp://1[.]94[.]108[.]127:8081/02[.]08[.]2022[.]exe hxxp://101[.]42[.]138[.]122/02[.]08[.]2022[.]exe hxxp://1[.]12[.]231[.]30:8080/02[.]08[.]2022[.]exe hxxp://202[.]56[.]160[.]190/02[.]08[.]2022[.]exe hxxp://217[.]60[.]6[.]187/02[.]08[.]2022[.]exe hxxp://209[.]145[.]52[.]163:4444/02[.]08[.]2022[.]exe hxxp://209[.]145[.]52[.]163:443/02[.]08[.]2022[.]exe hxxp://108[.]165[.]147[.]72:5008/02[.]08[.]2022[.]exe hxxp://47[.]105[.]37[.]162:12345/02[.]08[.]2022[.]exe hxxp://118[.]89[.]88[.]183:56781/02[.]08[.]2022[.]exe hxxp://165[.]154[.]226[.]142:9999/02[.]08[.]2022[.]exe hxxp://144[.]172[.]112[.]247:8001/02[.]08[.]2022[.]exe hxxp://38[.]147[.]172[.]196/02[.]08[.]2022[.]exe hxxp://165[.]154[.]226[.]142:10080/02[.]08[.]2022[.]exe hxxp://108[.]61[.]162[.]218/02[.]08[.]2022[.]exe hxxp://139[.]162[.]39[.]84:9090/02[.]08[.]2022[.]exe hxxp://107[.]174[.]95[.]25/02[.]08[.]2022[.]exe hxxp://101[.]126[.]25[.]11/02[.]08[.]2022[.]exe hxxp://101[.]126[.]75[.]125/02[.]08[.]2022[.]exe hxxp://151[.]243[.]95[.]252:8088/02[.]08[.]2022[.]exe hxxp://154[.]94[.]235[.]58/02[.]08[.]2022[.]exe hxxp://198[.]12[.]85[.]86/02[.]08[.]2022[.]exe hxxp://47[.]109[.]61[.]156:5678/02[.]08[.]2022[.]exe hxxp://139[.]224[.]209[.]108:8888/02[.]08[.]2022[.]exe hxxp://38[.]148[.]203[.]82/02[.]08[.]2022[.]exe hxxp://8[.]138[.]28[.]12/02[.]08[.]2022[.]exe hxxp://103[.]43[.]8[.]166:8000/02[.]08[.]2022[.]exe hxxp://45[.]145[.]229[.]72:8088/02[.]08[.]2022[.]exe |
Cobalt Strike |
| URL | hxxp://130[.]12[.]180[.]43/files/1660276343/7VqsdoK[.]exe hxxp://130[.]12[.]180[.]43/files/1660276343/wi6NLkw[.]exe |
Aura Stealer |
| URL | hxxps://moteorr[.]lol/noo/RSASAR[.]exe hxxps://ikvm[.]oldenvale[.]ru/build[.]exe hxxp://130[.]12[.]180[.]43/files/1318666823/iq7glAE[.]exe hxxps://raw[.]githubusercontent[.]com/weferver1-a11y/dfwdf/main/Service[.]exe hxxp://130[.]12[.]180[.]43/files/6881036104/sl7SqfI[.]exe hxxp://130[.]12[.]180[.]43/files/5750743047/2leTGv5[.]exe hxxp://130[.]12[.]180[.]43/files/7044575709/BM3TfTV[.]exe hxxp://130[.]12[.]180[.]43/files/5750743047/99zGTvx[.]exe hxxp://45[.]38[.]20[.]114/maybe[.]exe hxxp://65[.]87[.]7[.]44/update hxxp://130[.]12[.]180[.]43/files/5909640908/dVO3YBp[.]exe hxxp://130[.]12[.]180[.]43/files/7972805589/dVDwx0I[.]exe hxxp://130[.]12[.]180[.]43/files/7103746036/R0htEaS[.]exe hxxp://130[.]12[.]180[.]43/files/5750743047/kuryVOF[.]exe hxxp://46[.]151[.]182[.]233/update hxxp://46[.]151[.]182[.]238:6969/script |
SalatStealer |
| URL | hxxp://130[.]12[.]180[.]43/files/2047601333/OaRxT97[.]bat hxxps://2vbkb[.]com/win/omic[.]zip hxxps://2vbkb[.]com/win/sm[.]ps1 hxxps://2bknb[.]com/win/omic[.]zip hxxps://2bknb[.]com/win/sm[.]ps1 hxxps://vrfdns[.]com/win/ash[.]zip hxxps://vrfdns[.]com/win/sm[.]ps1 hxxps://security-teamz[.]com/ENCRYPTED[.]ps1 hxxp://130[.]12[.]180[.]43/files/7845402472/CJTOpuQ[.]exe hxxp://185[.]115[.]34[.]131/XClient[.]exe hxxp://130[.]12[.]180[.]43/files/7380423702/mzaYZgq[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/ryYw9LW[.]exe hxxps://api[.]telegram[.]org/bot8534826914:AAHzwOXmOwIyeU3obrztK7XS6fCk-O3vG0c/sendMessage hxxps://api[.]telegram[.]org/bot7113911764:AAFS0g2fV-R5A-tfBXrkYV5tN68Km_KSTR8/sendMessage hxxps://api[.]telegram[.]org/bot8122935411:AAHCxXQWLXYkdHTGxNIgVk-AbfvkhpTpQ4w/sendMessage hxxp://130[.]12[.]180[.]43/files/6350135267/4Q5e0Y0[.]exe |
AsyncRAT |
| URL | hxxp://130[.]12[.]180[.]43/files/946643047/HieBmHg[.]exe | PureLogs Stealer |
| URL | hxxps://tuvalul[.]cyou/api hxxps://sinitjq[.]cyou/api hxxps://phrupmv[.]su/vkd hxxps://soundtu[.]sbs/api hxxps://atalowh[.]sbs/api hxxp://130[.]12[.]180[.]43/files/6749237131/zF0xG5x[.]exe hxxp://fullridefinder[.]com/api hxxps://servachok[.]space/release/FewerAngola[.]exe hxxps://servachok[.]space/release/OrdinanceAfter[.]exe |
Lumma Stealer |
| URL | hxxp://130[.]12[.]180[.]43/files/1781548144/uDtrSYe[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/tLrkWF5[.]exe |
CyberGate |
| URL | hxxp://130[.]12[.]180[.]43/files/7044575709/ta2Hrne[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/947vw6c[.]exe hxxp://130[.]12[.]180[.]43/files/8191817615/kajT27I[.]exe hxxp://130[.]12[.]180[.]43/files/7044575709/G6Q6uMY[.]exe hxxp://130[.]12[.]180[.]43/files/6137477328/1BeXo57[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/QtyVd7F[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/RM9zrCG[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/mmXncrP[.]exe hxxp://130[.]12[.]180[.]43/files/7044575709/WDmzMjc[.]exe hxxp://130[.]12[.]180[.]43/files/7972786482/m8igQad[.]exe hxxp://130[.]12[.]180[.]43/files/7972786482/I9f5Ms5[.]exe |
Quasar RAT |
| URL | hxxp://130[.]12[.]180[.]43/files/454503574/wTWAYUx[.]exe | DarkTortilla |
| URL | hxxp://110[.]251[.]33[.]227:23/AV[.]scr hxxp://110[.]251[.]33[.]227:23/Photo[.]scr hxxp://110[.]251[.]33[.]227:23/1/Photo[.]scr hxxp://110[.]251[.]33[.]227:23/1/AV[.]scr hxxp://110[.]251[.]33[.]227:23/Video[.]scr hxxp://182[.]143[.]113[.]61:81/assets/forge/AV[.]scr hxxp://182[.]143[.]113[.]61:81/Photo[.]scr hxxp://182[.]143[.]113[.]61:81/AV[.]scr hxxp://182[.]143[.]113[.]61:81/images/AV[.]scr hxxp://182[.]143[.]113[.]61:81/assets/AV[.]scr hxxp://116[.]24[.]190[.]130:9980/Video[.]scr hxxp://116[.]24[.]190[.]130:9980/Photo[.]scr hxxp://182[.]143[.]113[.]61:81/assets/fonts/AV[.]scr hxxp://61[.]240[.]239[.]106:8081/info[.]zip hxxp://124[.]230[.]216[.]19:8081/info[.]zip hxxp://124[.]230[.]216[.]19:8081/Video[.]scr hxxp://111[.]59[.]254[.]165:8084/20210408/AV[.]scr hxxp://111[.]59[.]254[.]165:8084/20210408/Video[.]scr hxxp://182[.]143[.]113[.]61:81/assets/tesseract/AV[.]scr hxxp://130[.]12[.]180[.]43/files/1781548144/3Mn8w93[.]exe hxxp://130[.]12[.]180[.]43/files/8278288380/WsFbrLC[.]exe hxxp://130[.]12[.]180[.]43/files/8278288380/Fn9aleP[.]exe hxxps://onedwm[.]walmaru[.]com/zip[.]ps1 hxxp://130[.]12[.]180[.]43/files/8551657484/p3I4bY1[.]exe hxxp://130[.]12[.]180[.]43/files/8208834244/E7tgnwu[.]exe hxxp://45[.]86[.]86[.]221/config[.]json hxxp://154[.]23[.]172[.]120:666/xmrigCCall/ap[.]sh hxxp://182[.]143[.]113[.]61:81/Video[.]scr hxxp://58[.]182[.]146[.]104:8082/sda1/Photo[.]scr hxxp://58[.]182[.]146[.]104:8082/sda1/Video[.]scr hxxp://58[.]182[.]146[.]104:8082/sda1/AV[.]scr hxxps://94[.]166[.]178[.]112:8443/sda1/GOT/AV[.]scr hxxps://94[.]166[.]178[.]112:8443/sda1/GOT/Video[.]scr hxxps://94[.]166[.]178[.]112:8443/sda1/GOT/Photo[.]scr hxxp://93[.]103[.]89[.]76:8802/user/0/primary/Video[.]scr hxxp://93[.]103[.]89[.]76:8802/user/0/primary/Photo[.]scr hxxp://93[.]103[.]89[.]76:8802/user/0/primary/AV[.]scr hxxps://151[.]16[.]2[.]121:8443/sda1/Photo[.]scr hxxps://151[.]16[.]2[.]121:8443/sda1/AV[.]scr hxxps://151[.]16[.]2[.]121:8443/sda1/Video[.]scr hxxp://37[.]83[.]30[.]67/photo[.]scr hxxp://37[.]82[.]152[.]195/video[.]scr hxxp://37[.]82[.]88[.]185/photo[.]scr hxxp://37[.]80[.]216[.]199/video[.]scr hxxp://37[.]80[.]216[.]199/av[.]scr hxxp://37[.]82[.]10[.]129/photo[.]scr hxxp://189[.]157[.]143[.]224/av[.]scr hxxp://189[.]157[.]143[.]224/video[.]scr hxxp://189[.]157[.]143[.]224/photo[.]scr hxxp://149[.]210[.]64[.]82/video[.]scr hxxp://149[.]210[.]64[.]82/photo[.]scr hxxp://37[.]83[.]30[.]67/info[.]zip hxxp://37[.]82[.]152[.]195/photo[.]scr hxxp://37[.]82[.]152[.]195/info[.]zip hxxp://116[.]48[.]27[.]29:8080/video[.]scr hxxp://116[.]48[.]27[.]29:8080/av[.]scr hxxp://37[.]80[.]32[.]76/info[.]zip hxxp://189[.]157[.]143[.]224/info[.]zip hxxp://116[.]48[.]27[.]29:8080/photo[.]scr hxxp://110[.]251[.]33[.]227:23/1/Video[.]scr hxxp://179[.]89[.]221[.]120/photo[.]scr hxxp://202[.]68[.]234[.]213:5000/photo[.]scr hxxp://1[.]52[.]196[.]251/video[.]scr hxxp://177[.]212[.]252[.]109:41799/av[.]scr hxxp://187[.]59[.]99[.]143:9090/info[.]zip hxxp://117[.]24[.]153[.]17:9000/video[.]scr hxxp://1[.]52[.]196[.]251:8080/av[.]scr hxxp://218[.]64[.]147[.]12:81/info[.]zip hxxp://123[.]16[.]137[.]81:1000/photo[.]scr hxxp://187[.]213[.]1[.]222:8081/video[.]scr hxxp://202[.]68[.]234[.]213:5000/video[.]scr hxxp://179[.]89[.]221[.]120/info[.]zip hxxp://191[.]25[.]216[.]214/av[.]scr hxxp://149[.]210[.]64[.]82/av[.]scr hxxp://187[.]213[.]1[.]222:8081/photo[.]scr hxxp://110[.]81[.]113[.]254:9000/photo[.]scr hxxp://140[.]224[.]26[.]112:8088/av[.]scr hxxp://106[.]122[.]174[.]233:3389/info[.]zip hxxp://177[.]42[.]72[.]125:41799/av[.]scr hxxp://191[.]25[.]216[.]214/photo[.]lnk hxxp://187[.]213[.]1[.]222:8081/av[.]lnk hxxp://37[.]80[.]216[.]199/info[.]zip hxxp://218[.]85[.]229[.]198:81/video[.]scr hxxp://120[.]43[.]88[.]50:9000/av[.]scr hxxp://218[.]85[.]229[.]198:81/photo[.]scr hxxp://140[.]224[.]26[.]112:8088/info[.]zip hxxps://113[.]22[.]16[.]48/info[.]zip hxxp://218[.]85[.]229[.]198:81/av[.]scr hxxp://140[.]224[.]26[.]112:8088/photo[.]lnk hxxp://184[.]145[.]10[.]220/av[.]lnk hxxp://187[.]213[.]130[.]221/av[.]scr hxxp://110[.]81[.]113[.]254:9000/video[.]lnk hxxp://106[.]122[.]174[.]233:3389/video[.]lnk hxxp://187[.]213[.]1[.]222:8081/av[.]scr hxxp://177[.]212[.]252[.]109:41799/video[.]scr hxxp://14[.]32[.]106[.]206:8602/info[.]zip hxxp://187[.]213[.]130[.]221/video[.]lnk hxxp://218[.]85[.]229[.]198:81/av[.]lnk hxxp://218[.]64[.]147[.]12:81/photo[.]scr hxxp://1[.]52[.]196[.]251/photo[.]lnk hxxp://177[.]212[.]252[.]109:41799/info[.]zip hxxp://115[.]217[.]41[.]123:41798/video[.]lnk hxxp://118[.]71[.]110[.]163:8080/video[.]scr hxxp://140[.]224[.]26[.]112:8088/video[.]lnk hxxp://45[.]240[.]237[.]56/video[.]lnk hxxp://184[.]145[.]10[.]220/av[.]scr hxxp://123[.]16[.]137[.]81:1000/av[.]scr hxxp://110[.]81[.]113[.]254:9000/video[.]scr hxxp://177[.]42[.]72[.]125:41799/photo[.]scr hxxp://191[.]25[.]216[.]214/info[.]zip hxxp://177[.]212[.]252[.]109:41799/photo[.]lnk hxxp://189[.]157[.]143[.]224/photo[.]lnk hxxp://187[.]213[.]130[.]221/video[.]scr hxxp://202[.]68[.]234[.]213:5000/photo[.]lnk hxxp://1[.]52[.]196[.]251/video[.]lnk hxxp://179[.]89[.]221[.]120/av[.]scr hxxp://106[.]122[.]174[.]233:3389/av[.]scr hxxp://203[.]137[.]101[.]146/info[.]zip hxxp://184[.]145[.]10[.]220/video[.]scr hxxp://118[.]71[.]110[.]163:8080/info[.]zip hxxp://37[.]83[.]36[.]59/photo[.]scr hxxp://189[.]157[.]143[.]224/av[.]lnk hxxp://187[.]115[.]179[.]188/photo[.]lnk hxxp://45[.]240[.]237[.]56/av[.]scr hxxp://117[.]24[.]153[.]17:9000/photo[.]scr hxxp://110[.]81[.]113[.]254:9000/photo[.]lnk hxxp://177[.]42[.]72[.]125:41799/video[.]lnk hxxp://179[.]89[.]221[.]120/video[.]lnk hxxp://27[.]154[.]94[.]114:3389/photo[.]lnk hxxp://115[.]217[.]41[.]123:41798/av[.]scr hxxp://37[.]80[.]216[.]199/photo[.]scr hxxps://203[.]137[.]101[.]146/info[.]zip hxxp://117[.]24[.]153[.]17:9000/av[.]scr hxxp://187[.]59[.]99[.]143:9090/video[.]lnk hxxp://177[.]42[.]72[.]125:41799/photo[.]lnk hxxp://123[.]16[.]137[.]81:1000/video[.]scr hxxp://106[.]122[.]174[.]233:3389/photo[.]lnk hxxp://27[.]154[.]94[.]114:3389/photo[.]scr hxxp://218[.]85[.]229[.]198:81/photo[.]lnk hxxps://93[.]215[.]23[.]87/info[.]zip hxxp://27[.]154[.]94[.]114:3389/av[.]scr hxxp://45[.]240[.]237[.]56/photo[.]lnk hxxp://184[.]145[.]10[.]220/photo[.]lnk hxxp://37[.]81[.]7[.]177/av[.]lnk hxxp://106[.]122[.]174[.]233:3389/av[.]lnk hxxp://37[.]80[.]216[.]199/photo[.]lnk hxxp://149[.]210[.]64[.]82/video[.]lnk hxxp://120[.]43[.]88[.]50:9000/video[.]scr hxxp://187[.]59[.]99[.]143:9090/av[.]lnk hxxp://177[.]42[.]72[.]125:41799/info[.]zip hxxp://115[.]217[.]41[.]123:41798/photo[.]lnk hxxp://187[.]213[.]1[.]222:8081/info[.]zip hxxp://187[.]59[.]99[.]143:9090/photo[.]scr hxxp://110[.]81[.]113[.]254:9000/info[.]zip hxxp://202[.]68[.]234[.]213/photo[.]scr hxxp://218[.]64[.]147[.]12:81/photo[.]lnk hxxp://189[.]157[.]143[.]224/video[.]lnk hxxp://120[.]43[.]88[.]50:9000/video[.]lnk hxxp://37[.]83[.]36[.]59/info[.]zip hxxp://177[.]212[.]252[.]109:41799/av[.]lnk hxxp://37[.]80[.]216[.]199/video[.]lnk hxxp://138[.]188[.]36[.]139/video[.]lnk hxxp://45[.]240[.]237[.]56/video[.]scr hxxp://45[.]240[.]237[.]56/photo[.]scr hxxp://117[.]24[.]153[.]17:9000/info[.]zip hxxp://179[.]89[.]221[.]120/video[.]scr hxxp://116[.]48[.]27[.]29:8080/info[.]zip hxxp://138[.]188[.]44[.]55/video[.]lnk hxxp://218[.]64[.]147[.]12:81/video[.]lnk hxxp://115[.]217[.]41[.]123:41798/av[.]lnk hxxp://187[.]115[.]179[.]188/av[.]lnk hxxp://27[.]154[.]94[.]114:3389/av[.]lnk hxxp://27[.]154[.]94[.]114:3389/video[.]lnk hxxp://140[.]224[.]26[.]112:8088/video[.]scr hxxp://187[.]213[.]1[.]222:8081/photo[.]lnk hxxp://149[.]210[.]64[.]82/av[.]lnk hxxp://191[.]25[.]216[.]214/photo[.]scr hxxp://187[.]59[.]99[.]143:9090/video[.]scr hxxp://202[.]68[.]234[.]213:5000/av[.]scr hxxp://37[.]81[.]7[.]177/photo[.]lnk hxxp://121[.]166[.]27[.]211:8602/info[.]zip hxxp://202[.]68[.]234[.]213:5000/av[.]lnk hxxp://1[.]52[.]196[.]251/photo[.]scr hxxp://27[.]154[.]94[.]114:3389/info[.]zip hxxp://179[.]89[.]221[.]120/photo[.]lnk hxxp://1[.]52[.]196[.]251/av[.]scr hxxp://218[.]64[.]147[.]12:81/av[.]scr hxxp://1[.]52[.]196[.]251/info[.]zip hxxp://27[.]154[.]94[.]114:3389/video[.]scr hxxp://187[.]213[.]130[.]221/photo[.]lnk hxxp://177[.]42[.]72[.]125:41799/video[.]scr hxxp://117[.]24[.]153[.]17:9000/photo[.]lnk hxxp://191[.]25[.]216[.]214/video[.]lnk hxxp://218[.]85[.]229[.]198:81/video[.]lnk hxxp://123[.]16[.]137[.]81:1000/video[.]lnk hxxp://118[.]71[.]110[.]163:8080/photo[.]scr hxxp://106[.]122[.]174[.]233:3389/photo[.]scr hxxp://110[.]81[.]113[.]254:9000/av[.]scr hxxp://187[.]115[.]179[.]188/av[.]scr hxxp://118[.]71[.]110[.]163:8080/av[.]scr hxxp://115[.]217[.]41[.]123:41798/info[.]zip hxxp://1[.]52[.]196[.]251:8080/info[.]zip hxxp://187[.]59[.]99[.]143:9090/av[.]scr hxxp://191[.]25[.]216[.]214/av[.]lnk hxxp://218[.]64[.]147[.]12:81/video[.]scr hxxp://115[.]217[.]41[.]123:41798/video[.]scr hxxp://191[.]25[.]216[.]214/video[.]scr hxxp://187[.]115[.]179[.]188/video[.]scr hxxp://115[.]217[.]41[.]123:41798/photo[.]scr hxxp://1[.]52[.]196[.]251:8080/video[.]scr hxxp://106[.]122[.]174[.]233:3389/video[.]scr hxxp://149[.]210[.]64[.]82/photo[.]lnk hxxp://140[.]224[.]26[.]112:8088/photo[.]scr hxxp://120[.]43[.]88[.]50:9000/photo[.]scr hxxp://45[.]240[.]237[.]56/av[.]lnk hxxp://116[.]48[.]27[.]29:8080/av[.]lnk hxxp://184[.]145[.]10[.]220/video[.]lnk hxxp://123[.]16[.]137[.]81:1000/info[.]zip hxxp://218[.]85[.]229[.]198:81/info[.]zip hxxp://177[.]42[.]72[.]125:41799/av[.]lnk hxxp://138[.]188[.]44[.]55/av[.]lnk hxxp://187[.]213[.]130[.]221/photo[.]scr hxxp://118[.]71[.]110[.]163:8080/av[.]lnk hxxp://1[.]52[.]196[.]251/av[.]lnk hxxp://221[.]164[.]206[.]156:90/info[.]zip hxxp://14[.]33[.]14[.]160:8602/info[.]zip hxxp://120[.]43[.]88[.]50:9000/info[.]zip hxxp://184[.]145[.]10[.]220/info[.]zip hxxp://14[.]53[.]123[.]70:8602/info[.]zip hxxp://202[.]68[.]234[.]213:5000/video[.]lnk hxxp://187[.]213[.]130[.]221/info[.]zip hxxp://187[.]115[.]179[.]188/info[.]zip hxxp://45[.]240[.]237[.]56/info[.]zip hxxp://179[.]89[.]221[.]120/av[.]lnk hxxp://177[.]212[.]252[.]109:41799/video[.]lnk hxxp://140[.]224[.]26[.]112:8088/av[.]lnk hxxp://120[.]43[.]88[.]50:9000/av[.]lnk hxxp://123[.]16[.]137[.]81:1000/av[.]lnk hxxp://138[.]188[.]44[.]55/photo[.]lnk hxxp://93[.]215[.]23[.]87/info[.]zip hxxp://187[.]59[.]99[.]143:9090/photo[.]lnk hxxp://116[.]48[.]27[.]29:8080/video[.]lnk hxxp://187[.]115[.]179[.]188/video[.]lnk hxxp://123[.]16[.]137[.]81:1000/photo[.]lnk hxxp://218[.]64[.]147[.]12:81/av[.]lnk hxxp://187[.]213[.]1[.]222:8081/video[.]lnk hxxp://116[.]44[.]185[.]140:8602/info[.]zip hxxp://187[.]213[.]130[.]221/av[.]lnk hxxp://118[.]71[.]110[.]163:8080/video[.]lnk hxxp://120[.]43[.]88[.]50:9000/photo[.]lnk hxxp://110[.]81[.]113[.]254:9000/av[.]lnk hxxp://117[.]24[.]153[.]17:9000/av[.]lnk hxxp://116[.]48[.]27[.]29:8080/photo[.]lnk hxxp://117[.]24[.]153[.]17:9000/video[.]lnk hxxp://138[.]188[.]36[.]139/av[.]lnk hxxp://138[.]188[.]36[.]139/photo[.]lnk hxxp://1[.]52[.]196[.]251:8080/av[.]lnk hxxp://1[.]52[.]196[.]251:8080/video[.]lnk hxxp://37[.]84[.]47[.]26/info[.]zip hxxp://37[.]84[.]47[.]26/photo[.]scr hxxp://184[.]145[.]10[.]220/Photo[.]scr hxxp://130[.]12[.]180[.]43/files/6749237131/1kQlGNR[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/yBs5ig1[.]exe hxxp://87[.]121[.]84[.]44/x hxxp://87[.]121[.]84[.]181/x hxxp://195[.]24[.]237[.]218/1[.]sh hxxp://130[.]12[.]180[.]43/files/1781548144/pAGaBiG[.]exe hxxp://130[.]12[.]180[.]43/files/raf/random[.]exe hxxp://130[.]12[.]180[.]43/files/2090623753/N4xTvHP[.]exe hxxp://130[.]12[.]180[.]43/files/1781548144/p0wCvws[.]exe |
Coinminer |
| URL | hxxps://alaskabrudka[.]xyz/cnrr[.]exe hxxp://xboxtelemetry-defender[.]cc/cvdfnaFJBmC2/index[.]php hxxp://microsoft-telemetry[.]cc/cvdfnaFJBmC1/index[.]php hxxp://93[.]152[.]230[.]9/h8jfdmdWS/index[.]php hxxp://93[.]152[.]230[.]9/h8jfdmdWS/Login[.]php |
Amadey |
| URL | hxxp://193[.]143[.]1[.]138/negxsh3dy1mdkqphuc hxxp://havebeprotredo[.]at/243uwuyki |
TrickMo |
| URL | hxxps://inkbookwriters[.]com/verify | HijackLoader |
| URL | hxxp://91[.]247[.]36[.]3/immunewait[.]msi | ACR Stealer |
| URL | hxxps://onedwm[.]walmaru[.]com/java[.]zip hxxps://onexri[.]apptaly[.]com/xmrig-6[.]22[.]3-msvc-win64[.]zip |
XMRig |
| URL | hxxp://130[.]12[.]180[.]43/files/5561582465/B926rqw[.]exe | DarkVision RAT |
| URL | hxxps://metavrze[.]com/5h5h[.]js hxxps://metavrze[.]com/js[.]php |
KongTuke |
| URL | hxxp://23[.]160[.]56[.]30/p[.]txt hxxp://barrel-horseracing[.]com/p[.]txt hxxp://23[.]160[.]56[.]117/p[.]txt |
XOR DDoS |
| URL | hxxps://freminfar[.]floresdelphinium[.]cfd/?40449584567613974 hxxps://brumol[.]floresflorchuvaouro[.]cfd/?40449584567613974 hxxps://globondinim4[.]floresflorestrela[.]cfd/?40449584567613974 hxxps://scrowinnal[.]floresflorestrela[.]cfd/?40449584567613974 hxxps://glejannonfil[.]floresflorcacto[.]cfd/?40449584567613974 hxxps://stanintenal33[.]florescrinum[.]cfd/?40449584567613974 hxxps://scrofil[.]floresclivia[.]cfd/?40449584567613974 hxxps://screzol[.]floresflorchuva[.]cfd/?40449584567613974 hxxps://planronpal2[.]floresixia[.]cfd/?40449584567613974 hxxps://grafar[.]floresagapanto[.]cfd/?40449584567613974 hxxps://prusul[.]floresflorcacto[.]cfd/?40449584567613974 hxxps://planmenpunval[.]floresixia[.]cfd/?40449584567613974 hxxps://drapunninsom[.]floresflorchuvaouro[.]cfd/?40449584567613974 hxxps://brusonfinmol[.]floresnigella[.]cfd/?40449584567613974 hxxps://drapunval[.]floresdelphinium[.]cfd/?40449584567613974 hxxps://crobel3[.]floresagapanto[.]cfd/?40449584567613974 hxxps://grammindiz[.]floresnigella[.]cfd/?40449584567613974 hxxps://presinfer[.]florescrinum[.]cfd/?40449584567613974 hxxps://grugoncinsom[.]floresclivia[.]cfd/?40449584567613974 hxxps://brucontal73[.]floresflorchuva[.]cfd/?40449584567613974 hxxps://grusul4[.]floresfloripomeiaverde[.]cfd/?3/ |
Astaroth |
| URL | hxxp://954591cm[.]nyashsens[.]top/externalImageVmJsProcesslongpollWindowsFlowerlocal[.]php hxxp://185[.]208[.]156[.]212/RECHNUNG_G0102[.]exe |
DCRat |
| URL | hxxp://206[.]119[.]174[.]15/cdf[.]zip | ValleyRAT |
| URL | hxxp://47[.]237[.]15[.]69:3389/OneDrive[.]exe hxxp://47[.]237[.]15[.]69:3389/z_App[.]exe hxxp://74[.]162[.]56[.]242:8080/tmgm[.]exe hxxp://47[.]237[.]15[.]69:3389/App[.]bin hxxp://43[.]199[.]34[.]191:8000/ep |
Sliver |
| URL | hxxp://186[.]169[.]56[.]67/Herramienta%20de%20eliminacion%20de%20malware[.]exe | Remcos |
| URL | hxxps://drive-security-cloud[.]io/Ilmarchens[.]exe | CloudEyE |
| URL | hxxps://3[.]239[.]60[.]114/DOC%20-HARLegal[.]hta | XWorm |
| URL | hxxp://69[.]5[.]189[.]129/y3[.]exe hxxp://69[.]5[.]189[.]129/y4[.]exe hxxp://69[.]5[.]189[.]129/i1[.]exe |
Parallax RAT |
| URL | hxxp://welchwrite[.]com/promise hxxp://welchwrite[.]com/cip hxxps://www[.]io[.]xonos[.]net/clients/puptown/ hxxp://www[.]bonapartehotel[.]com[.]br/site/ |
GootLoader |
| URL | hxxp://www[.]truyenthongviet[.]website/ioncube/ibro/index[.]php hxxp://185[.]79[.]156[.]18/dar4/index[.]php hxxp://91[.]243[.]80[.]226/a/api[.]php hxxp://loveyouneed[.]pw/needyougatefuckpolice2812121212n[.]php |
Azorult |
| URL | hxxp://110[.]42[.]39[.]182:999/buding/139Assicc[.]dll hxxp://114[.]66[.]51[.]223:85/buding/139Assicc[.]dll hxxp://114[.]66[.]51[.]223:66/buding/139Assicc[.]dll hxxp://58[.]87[.]92[.]169:88/buding/139Assicc[.]dll hxxp://119[.]163[.]232[.]127:83/buding1/dbghelp[.]dll hxxp://43[.]248[.]118[.]169:81/buding/dbghelp[.]dll hxxp://59[.]56[.]110[.]227:99/buding/dbghelp[.]dll hxxp://62[.]234[.]146[.]238:81/buding/dbghelp[.]dll hxxp://43[.]249[.]192[.]151:88/buding/dbghelp[.]dll hxxp://103[.]40[.]13[.]122:81/buding/dbghelp[.]dll hxxp://123[.]99[.]197[.]19:99/buding/dbghelp[.]dll hxxp://45[.]125[.]44[.]137:66/buding/dbghelp[.]dll hxxp://45[.]125[.]44[.]137:99/buding/dbghelp[.]dll hxxp://103[.]236[.]93[.]228:88/buding/dbghelp[.]dll hxxp://103[.]205[.]253[.]253:99/buding/dbghelp[.]dll hxxp://103[.]205[.]253[.]156:88/buding1/139Assicc[.]dll hxxp://58[.]87[.]92[.]169:88/buding1/139Assicc[.]dll |
KrBanker |
| URL | hxxp://89[.]140[.]171[.]60:81/payload[.]exe hxxp://46[.]243[.]3[.]117:8001/shell-x642[.]exe hxxp://46[.]243[.]3[.]117:8001/shell-x64[.]exe hxxp://46[.]243[.]3[.]117:8001/h/shell[.]exe hxxp://46[.]243[.]3[.]117:8000/shell[.]exe |
Meterpreter |
| URL | hxxp://185[.]243[.]99[.]154/kinsing hxxp://185[.]243[.]99[.]154/kinsing_aarch64 hxxp://185[.]243[.]99[.]154/d[.]sh |
Kinsing |
| URL | hxxp://thammyvienanthea[.]com/mmm/playbook/onelove/fre[.]php | LokiBot |
| URL | hxxp://45[.]135[.]232[.]33/d/roberto99223 hxxp://217[.]119[.]139[.]117/d/roberto32100 |
Odyssey Stealer |
| URL | hxxp://62[.]60[.]226[.]159/geter/sincyi[.]exe hxxp://62[.]60[.]226[.]159/485[.]exe hxxp://62[.]60[.]226[.]159/zp[.]exe hxxp://62[.]60[.]226[.]159/11[.]exe hxxp://62[.]60[.]226[.]159/fobxyv[.]exe hxxp://62[.]60[.]226[.]159/smk[.]exe hxxp://62[.]60[.]226[.]159/devsys[.]exe hxxp://196[.]251[.]107[.]104/zx[.]exe hxxp://196[.]251[.]107[.]104/2[.]exe |
SVCStealer |
| URL | hxxp://198[.]13[.]158[.]127:5506/dd[.]vbs hxxp://198[.]13[.]158[.]127:5506/OIVPGEXM[.]msi hxxps://royalindiancurryclub[.]com/files/plugins/sess1594985553/sessiontools/UVSODSAE[.]msi hxxps://trumpisperfect[.]com/GIYACTWB[.]msi hxxps://royalindiancurryclub[.]com/files/AUHAVKIQ[.]msi hxxp://95[.]164[.]53[.]115:5506/DVQQXUHT[.]msi hxxp://95[.]164[.]53[.]115:5506/do[.]vbs hxxps://www[.]acro-drive[.]com/a/1[.]exe |
DeerStealer |
