不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様1社 -
2023/02/28
※2023/02/28 更新
マルウェア感染させると考えられるURLを検知（2023/02/28）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxp://104[.]168[.]45[.]119/vic[.]exe hxxp://198[.]46[.]174[.]170/1093/vbc[.]exe hxxp://23[.]94[.]148[.]10/1200/vbc[.]exe hxxp://23[.]94[.]96[.]9/2772/vbc[.]exe |
Agent Tesla |
| URL | hxxp://193[.]56[.]146[.]5/koh/narko[.]exe | Amadey |
| URL | hxxp://176[.]113[.]115[.]123/a[.]png | AsyncRAT |
| URL | hxxp://116[.]203[.]245[.]173/auth hxxp://157[.]90[.]239[.]70/auth hxxp://91[.]107[.]231[.]13/auth hxxp://94[.]142[.]138[.]144/auth |
Aurora Stealer |
| URL | hxxp://47[.]87[.]225[.]23/[I6] | Bashlite |
| URL | hxxp://84[.]38[.]130[.]165/Sakserweek[.]dsp | CloudEyE |
| URL | hxxp://8[.]130[.]24[.]199:443/cLbL hxxp://8[.]130[.]24[.]199:443/dpixel hxxp://1[.]13[.]168[.]66/cm hxxp://1[.]13[.]187[.]159/pixel hxxp://103[.]66[.]57[.]92:82/www/handle/doc hxxp://106[.]15[.]78[.]80/jquery-3[.]3[.]1[.]min[.]js hxxp://106[.]55[.]181[.]108:8098/pixel hxxp://124[.]222[.]129[.]148:1111/pixel[.]gif hxxp://124[.]222[.]30[.]121:5000/updates[.]rss hxxp://128[.]199[.]80[.]168:8848/fwlink hxxp://140[.]99[.]171[.]91/dot[.]gif hxxp://149[.]129[.]72[.]37:8888/dpixel hxxp://165[.]22[.]241[.]234/cm hxxp://179[.]43[.]156[.]134:9090/category/research-2/ hxxp://183[.]90[.]187[.]51:800/__utm[.]gif hxxp://185[.]194[.]148[.]106:19013/en_US/all[.]js hxxp://194[.]36[.]190[.]118:8081/pixel[.]gif hxxp://20[.]239[.]71[.]66:8441/__utm[.]gif hxxp://43[.]139[.]69[.]115/ptj hxxp://43[.]139[.]86[.]176:4646/__utm[.]gif hxxp://43[.]143[.]159[.]72:8086/visit[.]js hxxp://43[.]249[.]9[.]32:12345/match hxxp://45[.]76[.]79[.]8:8043/image/ hxxp://45[.]88[.]170[.]91:82/pixel[.]gif hxxp://49[.]232[.]128[.]4:1080/en_US/all[.]js hxxp://77[.]91[.]124[.]187/visit[.]js hxxp://79[.]141[.]169[.]220/ga[.]js hxxp://8[.]213[.]134[.]213:8080/image/ hxxp://92[.]222[.]172[.]39/__utm[.]gif hxxp://92[.]222[.]172[.]39/cx hxxps://106[.]55[.]181[.]108/cm hxxps://107[.]174[.]66[.]104/match hxxps://107[.]174[.]66[.]104:8443/dpixel hxxps://107[.]189[.]1[.]156:50050/j[.]ad hxxps://139[.]84[.]169[.]12:8081/match hxxps://175[.]178[.]219[.]118:6781/updates[.]rss hxxps://179[.]43[.]156[.]134:9443/discussion/ hxxps://185[.]194[.]148[.]106:50001/cm hxxps://42[.]192[.]222[.]92:4433/dpixel hxxps://45[.]207[.]58[.]57:2080/pixel hxxps://47[.]240[.]102[.]1:6781/__utm[.]gif hxxps://77[.]91[.]124[.]187/dpixel hxxps://8[.]130[.]24[.]199/fwlink hxxps://8[.]134[.]212[.]47:6666/load hxxps://81[.]69[.]221[.]247:8443/visit[.]js hxxps://85[.]206[.]172[.]155/__utm[.]gif hxxps://luo[.]dchu2u[.]com/jquery-3[.]3[.]1[.]min[.]js hxxps://real-stories-microsoft[.]com/microsoft/update hxxps://ressage[.]ca/pixel[.]gif |
Cobalt Strike |
| URL | hxxp://xjulqa12[.]top/gate[.]php | CryptBot |
| URL | hxxp://xxhdftgjftgkjfgk[.]site/7Externalvm1/23pipetraffic/3Poll/Videoexternal/7better6/Track/4/BaseServerbaseProton/20Downloadshxxp/imageApiProtect/Line3defaultCentral/Voiddb3/Multi/python/2pythonApi/0Generator/ProcessBigload5/longpollApimultidefaultWp[.]php | DCRat |
| URL | hxxps://df607[.]shrubs[.]emptyisland[.]pics/subscribeEvent | FAKEUPDATES |
| URL | hxxps://allinclusiveresorts[.]xyz/QG-52042761[.]exe hxxps://homecomingdresses[.]xyz/IJ-35121816[.]exe hxxps://homecomingdresses[.]xyz/WI-98570509[.]exe hxxps://rheumatoidarthritis[.]xyz/JZ-27361220[.]exe hxxps://thingstodoinlondon[.]xyz/QG-45295641[.]exe |
IcedID |
| URL | hxxp://23[.]254[.]128[.]166/Panel/five/fre[.]php | LokiBot |
| URL | hxxp://176[.]113[.]115[.]123/o[.]html | ModernLoader |
| URL | hxxp://175[.]107[.]0[.]250:44125/Mozi[.]m | Mozi |
| URL | hxxp://jimmyxyz[.]com/002/gate[.]php | Pony |
| URL | hxxp://ashishpolymers[.]com/AT[.]php hxxp://bmss-la[.]com/QF[.]php hxxp://data-plas[.]com/CSN[.]php hxxp://decoryaran[.]com/ESIT[.]php hxxp://dynamictech[.]com[.]ng/ITT[.]php hxxp://frontrubber[.]com[.]br/EI[.]php hxxp://kailvimobilemembership[.]com/UIEM[.]php hxxp://longservemedia[.]com/TMAT[.]php hxxp://ndttrainingcoimbatore[.]com/XODM[.]php hxxp://oppguru[.]com/TAUE[.]php hxxp://paymeo[.]com[.]au/LA[.]php hxxp://polymersanaat[.]com/POU[.]php hxxp://redtruchs[.]com/SO[.]php hxxp://ryfsseguridad[.]com/UEAT[.]php hxxp://semcobina[.]com[.]my/VDIO[.]php hxxp://splashstorefronts[.]com/UTTU[.]php hxxp://sustanix[.]com/MPET[.]php hxxp://techvsystems[.]com/SIC[.]php hxxps://1lesikmedya[.]com/ADE[.]php hxxps://2ssolar[.]com/OI[.]php hxxps://365ecs[.]com/LA[.]php hxxps://365lifemedia[.]com/AUB[.]php hxxps://3jm-mediatec[.]com[.]pe/NC[.]php hxxps://4alphaconsultants[.]com/CRP[.]php hxxps://4scart[.]com/NIC[.]php hxxps://4square[.]com[.]pk/NATU[.]php hxxps://599connect[.]com/ATE[.]php hxxps://9jagigs[.]com/EN[.]php hxxps://9jamonie[.]com/RAB[.]php hxxps://aacreativetech[.]com/FU[.]php hxxps://aaqibatheefautorepair[.]com/ETS[.]php hxxps://aaziban[.]com/VRI[.]php hxxps://ab8s2muchtalkdata[.]com/VVLE[.]php hxxps://abdullah[.]com[.]au/IL[.]php hxxps://abralqarratcars[.]com/UEA[.]php hxxps://abstractlabels[.]com/NIE[.]php hxxps://abydosstone[.]com/EEIT[.]php hxxps://academiabrains[.]com/VUL[.]php hxxps://acbbd[.]com/LOU[.]php hxxps://accompusystem[.]com/TNIO[.]php hxxps://ach-portal[.]com/CAI[.]php hxxps://actioncontabil[.]com[.]br/TO[.]php hxxps://activeaupair[.]com/IUD[.]php hxxps://adaqatar[.]com/QA[.]php hxxps://adminfactura[.]com[.]mx/QETA[.]php hxxps://aerocone[.]com/TF[.]php hxxps://affectnet[.]com[.]br/END[.]php hxxps://agmnutricao[.]com/EDES[.]php hxxps://ahkamassociates[.]com/OS[.]php hxxps://ahsangreenfarm[.]com/ISII[.]php hxxps://ainalnoortech[.]com/LEPU[.]php hxxps://airekart[.]com/UIRU[.]php hxxps://ajimuddin[.]com/DD[.]php hxxps://akbamakina[.]com[.]tr/II[.]php hxxps://akscorpme[.]com/IS[.]php hxxps://alat-wanci[.]com/SDI[.]php hxxps://al-brq[.]com/ND[.]php hxxps://alertpakistan[.]com/RU[.]php hxxps://alfatyreprotector[.]com/RT[.]php hxxps://alhathal[.]com[.]sa/UAQI[.]php hxxps://al-khashab[.]com/EAVP[.]php hxxps://allamericancharger[.]com/NEIA[.]php hxxps://allarticlewriting[.]com/SOES[.]php hxxps://allsimpackages[.]com/ELER[.]php hxxps://almadar-news[.]com/PA[.]php hxxps://almassamovers[.]com/USIA[.]php hxxps://almuwafaqainvestment[.]com/MRE[.]php hxxps://alnimaa-sdb[.]com/NS[.]php hxxps://alraziqinternational[.]com/UT[.]php hxxps://alrowaili[.]com/CTTU[.]php hxxps://altayelektrik[.]com/DAUR[.]php hxxps://alucom[.]com[.]sv/MQER[.]php hxxps://alwakeelonline[.]com/OLLU[.]php hxxps://al-wseet[.]com/US[.]php hxxps://amaroodfashion[.]com/RTS[.]php hxxps://amartam[.]com/IOTS[.]php hxxps://amasijosdecolombia[.]com/UNUE[.]php hxxps://amaxtravel[.]com/UCN[.]php hxxps://amazingelectricbikes[.]com/RS[.]php hxxps://amazontradecar[.]com[.]br/AQUU[.]php hxxps://amazouar[.]com/ESO[.]php hxxps://americanbod[.]com/EAE[.]php hxxps://amityrechargeco[.]com/DL[.]php hxxps://ampedgadget[.]com/RGO[.]php hxxps://ampereestimating[.]com/BESN[.]php hxxps://anbnews24[.]com/SO[.]php hxxps://andaliph[.]com/TU[.]php hxxps://anhbongda[.]com/RUT[.]php hxxps://anilkhattri[.]com[.]np/MU[.]php hxxps://annagoldstein[.]com/EU[.]php hxxps://anongulam[.]com/DOI[.]php hxxps://anton-bachmeier[.]com/GTIF[.]php hxxps://antonwilder[.]com/NUAA[.]php hxxps://appunik[.]com/EEE[.]php hxxps://ardecosac[.]com/MET[.]php hxxps://arenapcgames[.]com/TI[.]php hxxps://argusmanagementltd[.]com/BR[.]php hxxps://arogyamantra[.]com/BOLM[.]php hxxps://arrowlinkshub[.]com/ES[.]php hxxps://artsconnectinc[.]com[.]au/UILV[.]php hxxps://asa-myanmar[.]com/TV[.]php hxxps://asbsolution[.]com/UU[.]php hxxps://ascendententerprisesllc[.]com/PMTA[.]php hxxps://aseeldj[.]com/IU[.]php hxxps://asertivalab[.]com/IUEA[.]php hxxps://ataramotors[.]com/URA[.]php hxxps://athlecult[.]com/TT[.]php hxxps://atlanticlineshipping26[.]com/LA[.]php hxxps://atlantic-ridgefinance[.]com/VPMT[.]php hxxps://atlanticshipcargo[.]com/EO[.]php hxxps://atwicsgroup[.]com/IA[.]php hxxps://atyurs[.]com/LMEI[.]php hxxps://aurora[.]com[.]gt/UUI[.]php hxxps://authoritydatasub[.]com/EET[.]php hxxps://avenharbor[.]com/NULT[.]php hxxps://avetradeas[.]com/DNT[.]php hxxps://awancodex[.]com/UTL[.]php hxxps://axi-ind[.]com/STIN[.]php hxxps://aztecug[.]com/TORR[.]php hxxps://babecteatar[.]com/IADN[.]php hxxps://backofficee[.]com/IE[.]php hxxps://badalmore[.]com/APUR[.]php hxxps://bafasprojectshub[.]com/TS[.]php hxxps://baikalpikkhabar[.]com/PDU[.]php hxxps://bajwasahib[.]com/OUD[.]php hxxps://balgocburada[.]com/TD[.]php hxxps://baliweddingbutler[.]com/QQ[.]php hxxps://banaadirpost[.]com/MET[.]php hxxps://banjirjp[.]com/ORA[.]php hxxps://bardegeon[.]com/SMIE[.]php hxxps://barinong[.]com/ALBU[.]php hxxps://barkotel[.]com/IUIR[.]php hxxps://basiccropcare[.]com/LC[.]php hxxps://bathandbodycoupon[.]com/ERII[.]php hxxps://bayiopel[.]com/AME[.]php hxxps://bcp-tipusultan[.]com/STR[.]php hxxps://bearobonaut[.]com/ANA[.]php hxxps://bedouinnl[.]com/AAS[.]php hxxps://benchmarkinsure[.]com/RM[.]php hxxps://benedettisaic[.]com[.]ar/NM[.]php hxxps://bengalexchanger[.]com/IPTN[.]php hxxps://beninfootball[.]com/TE[.]php hxxps://bestathere[.]com/PR[.]php hxxps://bigbazaarbd[.]com/PI[.]php hxxps://bihdrantech[.]com/TEP[.]php hxxps://binayakpoudel[.]com[.]np/TISE[.]php hxxps://biodecodagelb[.]com/SN[.]php hxxps://birthary[.]com[.]au/INS[.]php hxxps://bitkiselgida[.]com/EAIU[.]php hxxps://bitlanceinvest[.]com/ISA[.]php hxxps://blackelephantdigital[.]com/UEI[.]php hxxps://blakeslee-equipment[.]com/ITUA[.]php hxxps://blessingekowho[.]com[.]ng/MA[.]php hxxps://bluee-jay[.]com/LLU[.]php hxxps://blueshells[.]com/TOA[.]php hxxps://bombfitbody[.]com/MEO[.]php hxxps://bombfitnezz[.]com/OOTP[.]php hxxps://booleantechnologiesbd[.]com/MU[.]php hxxps://boreshcity[.]com/TAI[.]php hxxps://borismosso[.]com/SES[.]php hxxps://bossmusicmanagement[.]com/EXUR[.]php hxxps://boulevardbenin[.]com/DTO[.]php hxxps://bpttbd[.]com/LASM[.]php hxxps://brainak[.]com/VI[.]php hxxps://brikscorp[.]com/SE[.]php hxxps://broichconstruction[.]com/SAIM[.]php hxxps://bsab[.]com[.]au/TILU[.]php hxxps://bsofte[.]com/INTU[.]php hxxps://bspacemx[.]com/NIN[.]php hxxps://btcgroupqatar[.]com/SAAI[.]php hxxps://b-techinc[.]com/TAE[.]php hxxps://buildingsandmoreltd[.]com/REIA[.]php hxxps://bukitbintangsexservice[.]com/UIME[.]php hxxps://bumdeskita[.]com/ETET[.]php hxxps://buraqmall[.]com/AMUI[.]php hxxps://businessthemen[.]com/OTSI[.]php hxxps://buyigshop[.]com/QU[.]php hxxps://buyurldomain[.]com/NML[.]php hxxps://cafedeviande[.]com/MUQ[.]php hxxps://cannavitamexico[.]com/SSSI[.]php hxxps://caribeagencia[.]com/ERI[.]php hxxps://carlospaseando[.]com/QN[.]php hxxps://carmes-credit[.]com/NUTC[.]php hxxps://carogadx[.]com/EA[.]php hxxps://carolexclusive[.]com/ER[.]php hxxps://carpartspakistan[.]com/IM[.]php hxxps://ccelmoro[.]com[.]ar/INTC[.]php hxxps://ccwalkergroup[.]com/NRS[.]php hxxps://cdcsgroup[.]com/ISI[.]php hxxps://centcellstore[.]com/DMR[.]php hxxps://centroepoje[.]com/UEP[.]php hxxps://centrorenovo[.]com[.]br/EU[.]php hxxps://ceyloncampus[.]com/IE[.]php hxxps://chakraeline[.]com/OU[.]php hxxps://changanautoparts[.]com/NX[.]php hxxps://chargewirenow[.]com/AN[.]php hxxps://charlestoncondosales[.]com/RAEQ[.]php hxxps://cheapdatahub[.]com/PI[.]php hxxps://chenandches[.]com/TAMN[.]php hxxps://chiboys[.]com[.]ng/AAM[.]php hxxps://ciftcialir[.]com/SOEF[.]php hxxps://cimory[.]com/AMU[.]php hxxps://cipro-abc[.]com/ITD[.]php hxxps://citizenprowler[.]com/UI[.]php hxxps://clabe[.]com[.]co/TO[.]php hxxps://clasificadosen[.]com/CI[.]php hxxps://classified[.]com[.]au/ENIQ[.]php hxxps://cleanfor[.]com[.]br/SU[.]php hxxps://cleanimper[.]com[.]br/MA[.]php hxxps://clinicasilviarocha[.]com[.]br/POE[.]php hxxps://clipullsit[.]com/TARS[.]php hxxps://cloudsolutions[.]com[.]ec/ELOI[.]php hxxps://clubedoclipnatv[.]com[.]br/OSNM[.]php hxxps://cmasterperu[.]com/NIUI[.]php hxxps://cmdcacampomagro[.]com[.]br/ESME[.]php hxxps://cockpitcorp[.]com/UTOV[.]php hxxps://cocukklinigi[.]com/ESAC[.]php hxxps://codetones[.]com/LDS[.]php hxxps://columbiahhc[.]com/UM[.]php hxxps://comercialdealpa[.]com/TI[.]php hxxps://competenttravelmate[.]com[.]ng/NITM[.]php hxxps://compu-bazar[.]com/RAL[.]php hxxps://comtanix[.]com/DITO[.]php hxxps://concretemeasure[.]com[.]pk/TR[.]php hxxps://confeccionesarelis[.]com/DMR[.]php hxxps://consolidated[.]com[.]ng/TMD[.]php hxxps://copbankingonline[.]com/UITE[.]php hxxps://copevirtual[.]com/MQU[.]php hxxps://corechargers[.]com/ETSE[.]php hxxps://corefitdiet[.]com/EII[.]php hxxps://corefitnessdietpro[.]com/ANDN[.]php hxxps://coregadgetpro[.]com/FU[.]php hxxps://coremealpro[.]com/OIL[.]php hxxps://corporacionaroni[.]com/EERI[.]php hxxps://corverconcrete[.]com/BAID[.]php hxxps://cosmicyacht[.]com/UU[.]php hxxps://covidlabbilling[.]com/TE[.]php hxxps://craze69[.]com/LSO[.]php hxxps://creditworldsg[.]com/QSM[.]php hxxps://cryptotradertrust[.]com/ONEM[.]php hxxps://crystalpackagingusa[.]com/MTAU[.]php hxxps://cslechallenge[.]com/TUAV[.]php hxxps://customboxesocean[.]com/TNT[.]php hxxps://cybermeteors[.]com/CAT[.]php hxxps://dacarsa[.]com/NEMT[.]php hxxps://daddyelectro[.]com/ROQI[.]php hxxps://daintreescientific[.]com[.]au/SIU[.]php hxxps://damirexdata[.]com/IR[.]php hxxps://dammg[.]com/MTES[.]php hxxps://daribellacosmetic[.]com/ROV[.]php hxxps://dashboard[.]com[.]ng/UET[.]php hxxps://dastavez-ecm[.]com/NL[.]php hxxps://databasepnc[.]com/IU[.]php hxxps://dataplugone[.]com/ED[.]php hxxps://dataspacevtu[.]com/ST[.]php hxxps://davehunterphoto[.]com/STE[.]php hxxps://davtower[.]com/EA[.]php hxxps://daymarkea[.]com/MUEF[.]php hxxps://dealsinmycart[.]com/MI[.]php hxxps://decoryaran[.]com/ESIT[.]php hxxps://deelancer[.]com/TPR[.]php hxxps://deepestcontrol[.]com/OOI[.]php hxxps://delrioyachts[.]com/OSOI[.]php hxxps://deltatrustmb[.]com/IA[.]php hxxps://dennisdatahubs[.]com[.]ng/DA[.]php hxxps://dertech[.]com[.]tr/PTL[.]php hxxps://desertsafaridxbpro[.]com/EAE[.]php hxxps://desfanatics[.]com/OCUQ[.]php hxxps://designagencypro[.]com/TETE[.]php hxxps://despachovergara[.]com/NI[.]php hxxps://dexep[.]com[.]tr/PAAS[.]php hxxps://dfwsocialmediaservices[.]com/OPE[.]php hxxps://dfybookkeeper[.]com/SSE[.]php hxxps://dhanamfoundationindia[.]com/VEU[.]php hxxps://diakrino[.]com/ATLT[.]php hxxps://dietbybot[.]com/RSVE[.]php hxxps://digi-kick[.]com/MAV[.]php hxxps://digisync[.]com[.]au/UUA[.]php hxxps://digitalcustomersondemand[.]com/TCNU[.]php hxxps://digitalnurse[.]com[.]ng/OQ[.]php hxxps://dinovici[.]com/TEP[.]php hxxps://directindiacapital[.]com/UETV[.]php hxxps://discovery-bureau[.]com/QEAM[.]php hxxps://disewood[.]com/ISS[.]php hxxps://ditranserva[.]com[.]pe/ITI[.]php hxxps://divigsa[.]com/FIT[.]php hxxps://djanta-bio[.]com/DPSE[.]php hxxps://dmppvtltd[.]com/LEII[.]php hxxps://dmsonartori[.]com/EEI[.]php hxxps://dnbtci[.]com/UL[.]php hxxps://dns-linkone[.]com/PO[.]php hxxps://doctorsoftland[.]com/LBMU[.]php hxxps://domyessayassignment[.]com/STT[.]php hxxps://dotmusicofficial[.]com/ETET[.]php hxxps://dramacoolclub[.]com/LUO[.]php hxxps://drcjpuravida[.]com/CRO[.]php hxxps://dreamtouchit[.]com/MUPA[.]php hxxps://drfixed[.]com/TUIR[.]php hxxps://drivindia[.]com/ASQ[.]php hxxps://drogueriasf[.]com[.]ar/UIT[.]php hxxps://dromosphera[.]com/TDO[.]php hxxps://drrdatacomm[.]com/TR[.]php hxxps://drssurat9[.]com/ELOU[.]php hxxps://drugocean[.]com/LN[.]php hxxps://dscrgroups[.]com/ADO[.]php hxxps://dsquareelectronics[.]com/TVU[.]php hxxps://dteklogistics[.]com/DAAU[.]php hxxps://dubaifreezervans[.]com/ARDP[.]php hxxps://dupontcapital[.]com[.]ng/NMA[.]php hxxps://dybconsultores[.]com/LUM[.]php hxxps://easychatdata[.]com/RORE[.]php hxxps://easyclickdelivery[.]com/SUEO[.]php hxxps://eazyhiregroup[.]com/UATT[.]php hxxps://ecokil[.]com[.]ar/TU[.]php hxxps://econetz[.]com/IE[.]php hxxps://economad24[.]com/ORM[.]php hxxps://ecourseimplementers[.]com/SLEI[.]php hxxps://eddivlinks[.]com/FA[.]php hxxps://edgepodcastnetwork[.]com/ITQU[.]php hxxps://editslook[.]com/AUUH[.]php hxxps://eduardofurlani[.]com[.]br/MUQ[.]php hxxps://eduinfo[.]com[.]ng/OE[.]php hxxps://egwcy[.]com/TE[.]php hxxps://egyconnects[.]com/LE[.]php hxxps://egy-fly[.]com/PU[.]php hxxps://elementalng[.]com/EIF[.]php hxxps://elidebio[.]com/EMPR[.]php hxxps://eliptv[.]com/TTU[.]php hxxps://elitedesignsbpohub[.]com/IONA[.]php hxxps://elitedreammakers[.]com/OUSA[.]php hxxps://elithink[.]com/UNS[.]php hxxps://elithinkconsulting[.]com/IRO[.]php hxxps://emiliasdailynuggets[.]com/XETE[.]php hxxps://eminentacademy[.]com[.]np/PEOL[.]php hxxps://eminents[.]com[.]ng/SD[.]php hxxps://emosairueoutreachfoundation[.]com/IE[.]php hxxps://emprevenecu[.]com/SQS[.]php hxxps://encryptecsolutions[.]com/SQ[.]php hxxps://envisagecounseling[.]com/OI[.]php hxxps://epagarmoney[.]com/OV[.]php hxxps://epicmpls[.]com/TC[.]php hxxps://equifaxtradings[.]com/HI[.]php hxxps://ergunhali[.]com/IPC[.]php hxxps://especialidadesgema[.]com/UO[.]php hxxps://essencechemicals[.]com/IU[.]php hxxps://etcanaengineering[.]com/EN[.]php hxxps://etincelantemag[.]com/OUIL[.]php hxxps://euroinstruments[.]com[.]ec/CM[.]php hxxps://evalcon[.]com[.]co/SBR[.]php hxxps://evcardz[.]com/GENM[.]php hxxps://evolutgamer[.]com[.]br/TNRA[.]php hxxps://evonetworkit[.]com/UQMO[.]php hxxps://ewixta[.]com/TNIE[.]php hxxps://excelsiorfashion[.]com/EII[.]php hxxps://exgdata[.]com[.]ng/IHT[.]php hxxps://exmouthcarwash[.]com[.]au/OE[.]php hxxps://expocartonsaudi[.]com/OSPT[.]php hxxps://expresscreditbrokers[.]com/CDS[.]php hxxps://expressogourmetrestaurante[.]com[.]br/AONN[.]php hxxps://extilsaperu[.]com[.]pe/OTTE[.]php hxxps://extraincomenaija[.]com[.]ng/US[.]php hxxps://eyecrwn[.]com/OT[.]php hxxps://ezreltabiowo[.]com/SSC[.]php hxxps://ezzatstudents[.]com/TEA[.]php hxxps://fabuloushandsdesign[.]com/ECIO[.]php hxxps://fairdealsstoreinc[.]com/NNTE[.]php hxxps://fairfreight[.]com/OPTV[.]php hxxps://falcomexpress[.]com/SDIE[.]php hxxps://famdataconnect[.]com/MASI[.]php hxxps://fantasticdatavtu[.]com/USIQ[.]php hxxps://fareisaac[.]com/NUON[.]php hxxps://fashiontive[.]com/VPT[.]php hxxps://fashtechsub[.]com/ISA[.]php hxxps://fastbuyng[.]com/UUL[.]php hxxps://fastcleanpc[.]com/TIEM[.]php hxxps://fastdataplug[.]com/DETR[.]php hxxps://fastexportservice[.]com/ME[.]php hxxps://fastponechargers[.]com/IQSQ[.]php hxxps://feltlogic[.]com/UA[.]php hxxps://ferretonbolivia[.]com/NEDT[.]php hxxps://fesol-rdc[.]com/TEAM[.]php hxxps://festasdacidade[.]com/IAPU[.]php hxxps://ffwp-sys[.]com/TA[.]php hxxps://filesfog[.]com/MSI[.]php hxxps://findferb[.]com/NIA[.]php hxxps://fintech[.]com[.]bd/UTRM[.]php hxxps://firefabricsdirect[.]com/MDE[.]php hxxps://firstclassdataservice[.]com/ROEM[.]php hxxps://firstfitnesspass[.]com/PAI[.]php hxxps://fitbybot[.]com/MT[.]php hxxps://fitmillionschools[.]com/IOM[.]php hxxps://flashdata[.]com[.]ng/DDN[.]php hxxps://flashnewsbensedira[.]com/NRED[.]php hxxps://flawlesslinks[.]com/LRT[.]php hxxps://flexportcontainer[.]com/ASQ[.]php hxxps://flexxapps[.]com/TAEU[.]php hxxps://flomil[.]com[.]bo/NET[.]php hxxps://flooringuae[.]com/OANM[.]php hxxps://floridagrassfedgroup[.]com/MT[.]php hxxps://focuscont[.]com[.]br/SOI[.]php hxxps://follamhotel[.]com/US[.]php hxxps://foodculturefiji[.]com/EN[.]php hxxps://foodheed[.]com/USA[.]php hxxps://forgoodmusic[.]com[.]tw/NMI[.]php hxxps://fortunatesub[.]com/EMU[.]php hxxps://fortune-tours[.]com/ST[.]php hxxps://fpolreg[.]com/MIE[.]php hxxps://fraganciasdiamante[.]com/CU[.]php hxxps://frajor[.]com[.]co/CEU[.]php hxxps://frenchmediator[.]com/ATM[.]php hxxps://freshdata[.]com[.]ng/SU[.]php hxxps://freshfood[.]com[.]bd/MI[.]php hxxps://fullconexion[.]com/CATN[.]php hxxps://futureadmart[.]com/EVSE[.]php hxxps://fwgc93[.]com/ALI[.]php hxxps://fxtcmarket[.]com/RET[.]php hxxps://fynamicsind[.]com/EED[.]php hxxps://g9luxurylivinginc[.]com/OPNS[.]php hxxps://gajipro[.]com/LV[.]php hxxps://gannahhospital[.]com/TIP[.]php hxxps://gargashokca[.]com/QBMS[.]php hxxps://geekazoidtech[.]com/TXIT[.]php hxxps://geminidorado[.]com/USN[.]php hxxps://genericketo[.]com/EIO[.]php hxxps://get-delivered[.]com/DEIT[.]php hxxps://getphotoboothed[.]com[.]au/TUDA[.]php hxxps://gfordassociate[.]com/IDP[.]php hxxps://ghisolo[.]com[.]ng/TEII[.]php hxxps://gicegy[.]com/CT[.]php hxxps://gicreartesocial[.]com[.]co/TPI[.]php hxxps://gideonolanrewaju[.]com/EA[.]php hxxps://gimsgadgets[.]com/IAO[.]php hxxps://globalpercels[.]com/TTNT[.]php hxxps://globuscertifications[.]com/QDUI[.]php hxxps://gloria-suites[.]com/RPET[.]php hxxps://goghawelfare[.]com/IEE[.]php hxxps://goldenprintingpress[.]com/CI[.]php hxxps://gopagos[.]com[.]br/TL[.]php hxxps://goplus[.]com[.]co/TUSN[.]php hxxps://gordons-lodge[.]com/ONLS[.]php hxxps://gosaaslabs[.]com/IPEE[.]php hxxps://govinacademy[.]com/OEE[.]php hxxps://graceythewriter[.]com/ARS[.]php hxxps://grandbassam-academiegolf[.]com/INP[.]php hxxps://grannussolutions[.]com/UUA[.]php hxxps://graystonecapitals[.]com/IN[.]php hxxps://great36data[.]com/LETI[.]php hxxps://greenlab[.]com[.]mx/ATUT[.]php hxxps://greenstarbldg[.]com/QD[.]php hxxps://gritspring[.]com/IIM[.]php hxxps://groundleveldistribution[.]com/SI[.]php hxxps://grupocadore[.]com/FA[.]php hxxps://grupoelliot[.]com/IE[.]php hxxps://grupofibrafil[.]com/MI[.]php hxxps://grupogoe[.]com/RIHN[.]php hxxps://gsbsira[.]com/TLU[.]php hxxps://g-sondataservice[.]com/TU[.]php hxxps://guallaesthetics[.]com/OSE[.]php hxxps://guldbergoptimum[.]com/ALUE[.]php hxxps://gulfprofessionalcf[.]com/ML[.]php hxxps://gymsportszone[.]com/DEE[.]php hxxps://habercinizim[.]com/PLUO[.]php hxxps://haberekrani[.]com/BST[.]php hxxps://habib-invest[.]com/REUI[.]php hxxps://haitinoula[.]com/EPE[.]php hxxps://halalict[.]com/ITME[.]php hxxps://happykidsworkshops[.]com[.]au/VSE[.]php hxxps://harmonynigeriaitsolutions[.]com/BSA[.]php hxxps://hatunpanakainka[.]com/IT[.]php hxxps://healthandwellnessforyourlives[.]com/AEF[.]php hxxps://hellofazle[.]com/AC[.]php hxxps://hellomadatechnologies[.]com/ELMD[.]php hxxps://helptimize[.]com/TFU[.]php hxxps://hemenelemanbul[.]com/TR[.]php hxxps://hermann-madinger[.]com/TOLI[.]php hxxps://hidefdashcam[.]com/UTTR[.]php hxxps://hilinksapps[.]com/EN[.]php hxxps://hindimecom[.]com/EUTU[.]php hxxps://hiphopstreets[.]com/PMAE[.]php hxxps://hitechdigitalmedia[.]com/OI[.]php hxxps://hivoltbpo[.]com/EUMQ[.]php hxxps://hkconsultingbt[.]com/UCG[.]php hxxps://hmq[.]com[.]pe/SMQ[.]php hxxps://hmrmachinery[.]com/OEMA[.]php hxxps://hoaphatdry[.]com/TU[.]php hxxps://hobmarket[.]com/STI[.]php hxxps://holyfitbody[.]com/ALET[.]php hxxps://homecareassistancerichardson[.]com/LOMR[.]php hxxps://homeisbeauty[.]com/NMND[.]php hxxps://homelth[.]com/TEP[.]php hxxps://homeservicesntx[.]com/UML[.]php hxxps://honesttriker[.]com/MOE[.]php hxxps://honestycenter[.]com/QM[.]php hxxps://horadanet[.]com/EE[.]php hxxps://hospitalmairipora[.]com[.]br/SIQU[.]php hxxps://hotelarame[.]com/PT[.]php hxxps://hotelbillabong[.]com[.]np/OSDT[.]php hxxps://hotelrosebud[.]com/TIEE[.]php hxxps://hotelsadan[.]com/MO[.]php hxxps://house-of-bonds[.]com/DU[.]php hxxps://howrides[.]com/TQU[.]php hxxps://hsrlabel[.]com/EUAT[.]php hxxps://htmlcodeplay[.]com/EQRN[.]php hxxps://hueandchem[.]com/ERRS[.]php hxxps://humbleheartz[.]com/IET[.]php hxxps://hydrogenenergyforum[.]com/AE[.]php hxxps://hypemembers[.]com/PUAU[.]php hxxps://hyundai-islamabad[.]com/TS[.]php hxxps://ichargefast[.]com/NGCI[.]php hxxps://ichargernow[.]com/MUE[.]php hxxps://icirclexpo[.]com/ODIT[.]php hxxps://idealcoolgifts[.]com/PT[.]php hxxps://iderconsulting[.]com/QA[.]php hxxps://idietforfitness[.]com/LLIL[.]php hxxps://idigibod[.]com/RADQ[.]php hxxps://idigideals[.]com/AMME[.]php hxxps://idsexpo[.]com/ILRE[.]php hxxps://iearpods[.]com/TEEN[.]php hxxps://ifithealthy[.]com/OS[.]php hxxps://ihaengineeringsolution[.]com/ISU[.]php hxxps://iintus[.]com/TV[.]php hxxps://iis-algerie[.]com/SBT[.]php hxxps://ilianarvelo[.]com/REU[.]php hxxps://imgltda[.]com/AMQO[.]php hxxps://immensebd[.]com/TES[.]php hxxps://imperialenergyservices[.]com/SL[.]php hxxps://infinitytasker[.]com/ELQ[.]php hxxps://infoinsect[.]com/SDG[.]php hxxps://infokorna[.]com/OI[.]php hxxps://infycard[.]com/UMA[.]php hxxps://inkyquill[.]com[.]np/LFC[.]php hxxps://innerbeautychgo[.]com/US[.]php hxxps://innovatedbusinessmarketing[.]com/OMIT[.]php hxxps://intellectxsoft[.]com/EAD[.]php hxxps://intellisensetech[.]com/APU[.]php hxxps://intranetcolegiosperu[.]com/LURE[.]php hxxps://inversionesernesto[.]com/TB[.]php hxxps://invoengsolutions[.]com/TMT[.]php hxxps://ipas[.]com[.]ng/MR[.]php hxxps://iptvevents[.]com/ISR[.]php hxxps://iptvoffice[.]com/IT[.]php hxxps://iptvzoo[.]com/TR[.]php hxxps://iracemacl[.]com[.]br/AM[.]php hxxps://irembo[.]com/UTAN[.]php hxxps://isabelguarch[.]com/EIFM[.]php hxxps://ismart-mail[.]com/AP[.]php hxxps://isoatte[.]com/FGTE[.]php hxxps://ispacecorp[.]com/ASDR[.]php hxxps://israrmarblegranite[.]com/ES[.]php hxxps://itqancapital[.]com/AUQ[.]php hxxps://jabalalryan[.]com/SIA[.]php hxxps://jahidul-islam[.]com/QEO[.]php hxxps://jaibharatgas[.]com/IQSQ[.]php hxxps://jam-muliaty[.]com/OI[.]php hxxps://janbaker[.]com[.]au/IU[.]php hxxps://jangidmotors[.]com/TRO[.]php hxxps://jaroslavkuchar[.]com/EDET[.]php hxxps://jbsacademy[.]com/SETI[.]php hxxps://jcinstalacao[.]com[.]br/AEIX[.]php hxxps://jefferysmotel[.]com[.]au/CUUA[.]php hxxps://jesambeauty[.]com/PU[.]php hxxps://jiloji[.]com/OUIQ[.]php hxxps://jkconsultores[.]com/ITA[.]php hxxps://joeychamp[.]com/ITN[.]php hxxps://johndata[.]com[.]ng/EPO[.]php hxxps://johnsalud[.]com/UI[.]php hxxps://johnsaversengineering[.]com/IUA[.]php hxxps://jollyengg[.]com/PTOD[.]php hxxps://jomsaham[.]com/CTU[.]php hxxps://jornaloespeto[.]com[.]br/OROC[.]php hxxps://journalofmultidisciplinary[.]com/MACI[.]php hxxps://jupitercanvas[.]com/QDC[.]php hxxps://jusoortraining[.]com/QMU[.]php hxxps://justaky[.]com/VEP[.]php hxxps://k16luxury[.]com/NEI[.]php hxxps://k2kmedical[.]com/ALI[.]php hxxps://kabsfarm[.]com/REET[.]php hxxps://kagomadb[.]com/OUT[.]php hxxps://kahanjewelrycorp[.]com/LTU[.]php hxxps://karamci[.]com/APUO[.]php hxxps://karldata[.]com/NEU[.]php hxxps://katharosengineering[.]com/PRA[.]php hxxps://kellysdataservice[.]com/OTLA[.]php hxxps://kemilaumarmer[.]com/TIS[.]php hxxps://ketopromaxreviews[.]com/NPR[.]php hxxps://khalis365[.]com/IPA[.]php hxxps://khanusedelectronic[.]com/RU[.]php hxxps://kimpa-group[.]com/IR[.]php hxxps://kisaanforum[.]com/AIDA[.]php hxxps://kmkaccounting[.]com/TPLE[.]php hxxps://knowledgeandvalue[.]com/CQRE[.]php hxxps://koksoftec[.]com/MAS[.]php hxxps://kpastrologytraining[.]com/PID[.]php hxxps://ksamclassictelecom[.]com/NN[.]php hxxps://kubicekballoons[.]com[.]au/AT[.]php hxxps://l2onyx[.]com/UNA[.]php hxxps://lakeshoreautoclinic[.]com/EUTU[.]php hxxps://lamango[.]com[.]ng/EM[.]php hxxps://lamerenfrancais[.]com/MD[.]php hxxps://lapetitemontessori[.]com/RIA[.]php hxxps://lasarteslima[.]com/ST[.]php hxxps://laslas[.]com[.]ng/PTUL[.]php hxxps://lastwavetechnology[.]com/UD[.]php hxxps://lasvisas[.]com/EP[.]php hxxps://laticiniosbomjardim[.]com[.]br/SS[.]php hxxps://latinofficecorp[.]com/NOA[.]php hxxps://learnathomes[.]com/UDA[.]php hxxps://learnforexlivesignals[.]com/EMFR[.]php hxxps://learnovia[.]com/TS[.]php hxxps://lecerf-shop[.]com/ENST[.]php hxxps://lemieldesrois[.]com/UMTP[.]php hxxps://lepetiteleveur[.]com/LPEL[.]php hxxps://libertydatas[.]com/TON[.]php hxxps://lifendoscopy[.]com/ERTP[.]php hxxps://lifesaverconsult[.]com/IT[.]php hxxps://limpezaarretada[.]com[.]br/EM[.]php hxxps://limpiotucompu[.]com/VLS[.]php hxxps://littleplayz[.]com/UTUG[.]php hxxps://livetvm[.]com/ORO[.]php hxxps://livewatchev[.]com/RSEI[.]php hxxps://loftnaturehealth[.]com/IERI[.]php hxxps://loggiaflorida[.]com/DSQU[.]php hxxps://logoigrica[.]com/INOS[.]php hxxps://losbemoles[.]com[.]ar/MN[.]php hxxps://loudearbudz[.]com/LADQ[.]php hxxps://lovethiyonawan[.]com/NETT[.]php hxxps://loveworldbuddy[.]com/NSNU[.]php hxxps://lucaincorvaia[.]com/TI[.]php hxxps://lugwig-kiegler[.]com/ADN[.]php hxxps://luminaholistichealing[.]com/UT[.]php hxxps://lunaent[.]com[.]au/SEI[.]php hxxps://luxentage[.]com/NU[.]php hxxps://mabiofashop[.]com/TTL[.]php hxxps://macksconseils[.]com/DAR[.]php hxxps://madhavdevelopers[.]com/UTN[.]php hxxps://madridconstructores[.]com/EG[.]php hxxps://maimaorganics[.]com/QA[.]php hxxps://majdoleen-jewellery[.]com/EDI[.]php hxxps://majeedkhanindopak[.]com/RLEI[.]php hxxps://mandfinteriors[.]com/QEA[.]php hxxps://marah-mohamad[.]com/NQS[.]php hxxps://marginsdubai[.]com/MO[.]php hxxps://markasti[.]com/DCUS[.]php hxxps://marketessentls[.]com/IDO[.]php hxxps://marketingboss[.]com[.]ng/IMS[.]php hxxps://marketingsolutionbd[.]com/UL[.]php hxxps://marshalfashion[.]com/NI[.]php hxxps://marupaexpeditions[.]com/IPLE[.]php hxxps://marylouretton[.]com/NSQ[.]php hxxps://marzinternational[.]com[.]au/SN[.]php hxxps://masjid[.]com[.]au/UAS[.]php hxxps://master-bucks[.]com/QN[.]php hxxps://matazudata[.]com/ACQA[.]php hxxps://maximumpest[.]com/QET[.]php hxxps://mcsregistrars[.]com/POI[.]php hxxps://mdhntest[.]com/QU[.]php hxxps://medeqmandiri[.]com/TAP[.]php hxxps://medicalbrasil[.]com[.]br/EL[.]php hxxps://medicalwellbeinggroup[.]com/RRT[.]php hxxps://meetthescriptwriters[.]com/PE[.]php hxxps://megavesting[.]com/NLUS[.]php hxxps://meilleurs-articles[.]com/ETN[.]php hxxps://merabmall[.]com[.]ng/IEI[.]php hxxps://merapathshala[.]com/TCNU[.]php hxxps://mercadeomunkel[.]com/AIRU[.]php hxxps://metro-liquidators[.]com/ULPI[.]php hxxps://metuli[.]com/MOPT[.]php hxxps://mexden[.]com/UE[.]php hxxps://mg-kglobal[.]com/ASDL[.]php hxxps://miatrain[.]com/OU[.]php hxxps://michaelwarship[.]com/EO[.]php hxxps://minecraftcoinsgenerator[.]com/LUU[.]php hxxps://miparley[.]com/IRPE[.]php hxxps://misco-group[.]com/IMLE[.]php hxxps://mishra-enterprises[.]com/LUN[.]php hxxps://mismariachis[.]com[.]mx/MEI[.]php hxxps://mist22[.]com/EV[.]php hxxps://mitsly[.]com/MT[.]php hxxps://mjgoc[.]com/ENIG[.]php hxxps://mldonovan[.]com/EOID[.]php hxxps://mmtalks[.]com/PCI[.]php hxxps://mnsholdings[.]com/ID[.]php hxxps://mobileareana[.]com/UTR[.]php hxxps://mockupint[.]com/CCQU[.]php hxxps://modacitty[.]com/EAAR[.]php hxxps://modernvision[.]com[.]sa/PAP[.]php hxxps://mohanent[.]com/OVE[.]php hxxps://monitorgps[.]com[.]mx/QN[.]php hxxps://montrealshawarma[.]com/MUH[.]php hxxps://moretressessalon[.]com/RDN[.]php hxxps://movie2freemax[.]com/RRUC[.]php hxxps://movie-vip[.]com/TIE[.]php hxxps://msorgdevelopers[.]com/ABL[.]php hxxps://msplug[.]com/IPNU[.]php hxxps://mt4partner[.]com/UEM[.]php hxxps://mtblgroupinter[.]com/BIO[.]php hxxps://multiplestreamsonline[.]com/RU[.]php hxxps://multiteknindo[.]com/ILEI[.]php hxxps://mundhumstar[.]com/SQ[.]php hxxps://munirosaspata[.]com/VT[.]php hxxps://muslim-lives-matter[.]com/OM[.]php hxxps://mutqun[.]com/ETSI[.]php hxxps://mvpforce[.]com/PSS[.]php hxxps://myboardingpasscard[.]com/RO[.]php hxxps://mydpisecurity[.]com/ON[.]php hxxps://mygotgame[.]com/OALU[.]php hxxps://mypayconnect[.]com/UT[.]php hxxps://myprosupports[.]com/AME[.]php hxxps://mysammdedicated[.]com/NTQS[.]php hxxps://mythailottery[.]com/AE[.]php hxxps://mytravelschoice[.]com/VEEL[.]php hxxps://myuniversaltravels[.]com/MNOI[.]php hxxps://myvdp-f[.]com/IA[.]php hxxps://nacosfunaab[.]com[.]ng/OXIU[.]php hxxps://nacozinhadahelo[.]com[.]br/STU[.]php hxxps://nalubaalefreightlog[.]com/UNE[.]php hxxps://naranjaex-press[.]com/ETO[.]php hxxps://nasmtech[.]com/IARD[.]php hxxps://netlinepk[.]com/CI[.]php hxxps://newagedigitalzk[.]com/NG[.]php hxxps://newbombayhospital[.]com/MGC[.]php hxxps://newyorkscholaship[.]com/PRRI[.]php hxxps://ngmarketsquare[.]com/TIIN[.]php hxxps://nhisblr[.]com/EUIV[.]php hxxps://niceonicebartending[.]com/EOPI[.]php hxxps://nigerianscope[.]com/TQI[.]php hxxps://nile[.]com[.]jo/TDES[.]php hxxps://niletechna[.]com/QUA[.]php hxxps://nipunhospital[.]com/IMOO[.]php hxxps://nohung[.]com/QD[.]php hxxps://nonmaterialculture[.]com/IS[.]php hxxps://noragric[.]com/GT[.]php hxxps://nos3stech[.]com/EE[.]php hxxps://nowyoudietright[.]com/MAUA[.]php hxxps://nsar-acacia[.]com/UE[.]php hxxps://nstechdemo[.]com/QR[.]php hxxps://nugruvsocial[.]com/ITSU[.]php hxxps://nwbsbank[.]com/IDU[.]php hxxps://nyfemdata[.]com/MPR[.]php hxxps://obdigitizers[.]com/PVO[.]php hxxps://oceangolfandvillarentals[.]com/REE[.]php hxxps://octacryptovault[.]com/AM[.]php hxxps://octagona[.]com/AMR[.]php hxxps://odimbanma[.]com/IOE[.]php hxxps://offervx[.]com/OCI[.]php hxxps://offshorediesels[.]com/ER[.]php hxxps://oficinastemporarias[.]com/IA[.]php hxxps://oladata[.]com[.]ng/MAC[.]php hxxps://olgaprojects[.]com/NE[.]php hxxps://olumimi[.]com[.]ng/UH[.]php hxxps://omeshan[.]com/ASRE[.]php hxxps://on-cleaning[.]com/OMVM[.]php hxxps://onlineboostdiet[.]com/TBEA[.]php hxxps://onlinecrmservices[.]com/TA[.]php hxxps://onlinequranacadmy[.]com/EDS[.]php hxxps://onlinetradingtutors[.]com/LIES[.]php hxxps://opovodazl[.]com[.]br/IPT[.]php hxxps://opticomfinance[.]com/IIDE[.]php hxxps://oranet[.]com[.]pk/OPO[.]php hxxps://orhanconsultancy[.]com/NRAU[.]php hxxps://orisaz[.]com/TQCI[.]php hxxps://outletmodafirmata[.]com/AUMU[.]php hxxps://ozelmimarsinanmtal[.]com/UDI[.]php hxxps://oziplanet[.]com/TCSI[.]php hxxps://ozonmedclinic[.]com/UNR[.]php hxxps://pacego[.]com/EI[.]php hxxps://pakhyoils[.]com/SE[.]php hxxps://panama888s[.]com/TA[.]php hxxps://paragonvogue[.]com/SOT[.]php hxxps://parkzameentown[.]com/ID[.]php hxxps://passeword[.]com/NUO[.]php hxxps://pay-for-research-papers[.]com/DAE[.]php hxxps://paysapk[.]com/DPN[.]php hxxps://pbozsub[.]com/RTMN[.]php hxxps://pearlnigeria[.]com/LE[.]php hxxps://peebeejays[.]com/UEOM[.]php hxxps://pelaezmasonry[.]com/ROB[.]php hxxps://pemixcels[.]com/UEA[.]php hxxps://perfomicslabs[.]com/ESI[.]php hxxps://perseye[.]com/IOTA[.]php hxxps://peruviansourcing[.]com/LTNM[.]php hxxps://phiaesthetics[.]com[.]mx/EIMQ[.]php hxxps://phvtech[.]com/CUM[.]php hxxps://piairdrop[.]com/EAA[.]php hxxps://pia-metrologie[.]com/SMO[.]php hxxps://pianoplaymusic[.]com/STL[.]php hxxps://pimpleontongue[.]com/TIA[.]php hxxps://pinjamsini[.]com/EIUS[.]php hxxps://pioneerhomearch[.]com/MR[.]php hxxps://pipe-cable[.]com/BRML[.]php hxxps://pipsschool[.]com/AE[.]php hxxps://pkbmsadina[.]com/RE[.]php hxxps://plasticsurgerydubaiuae[.]com/ITUS[.]php hxxps://pleiades-erp[.]com/UIND[.]php hxxps://pmlm-lb[.]com/TPEE[.]php hxxps://pocburlesque[.]com/QBII[.]php hxxps://pologroundsmusic[.]com/TCDT[.]php hxxps://poolcleanerchoice[.]com/URQD[.]php hxxps://portaldiferente[.]com[.]br/NMEI[.]php hxxps://portofaliaga[.]com/SUU[.]php hxxps://poshcutz[.]com/ES[.]php hxxps://ppcadsmedia[.]com/ILR[.]php hxxps://ppcearn[.]com/ASEU[.]php hxxps://preciousgatetech[.]com/OT[.]php hxxps://premiworkouts[.]com/UETT[.]php hxxps://prep-uathletics[.]com/LM[.]php hxxps://pricelala[.]com/AU[.]php hxxps://primefinanceoi[.]com/LE[.]php hxxps://privilegeclassicengg[.]com/ETDB[.]php hxxps://prmpharmaceuticals[.]com/IGNI[.]php hxxps://procapitalglobe[.]com/AMP[.]php hxxps://prodesignsstudio[.]com/UEOI[.]php hxxps://profitjumpstarter[.]com/QM[.]php hxxps://promensil[.]com[.]ng/LI[.]php hxxps://proplastllc[.]com/LO[.]php hxxps://prosamlightintl[.]com/TEE[.]php hxxps://prosekarchitects[.]com/OE[.]php hxxps://protechnofy[.]com/TV[.]php hxxps://protopweb[.]com[.]br/QT[.]php hxxps://psit[.]com[.]sa/TE[.]php hxxps://public-voice24[.]com/URD[.]php hxxps://publi-entrega[.]com[.]mx/AIE[.]php hxxps://pumega[.]com[.]br/TAU[.]php hxxps://pupipets[.]com/MT[.]php hxxps://puredietbot[.]com/SCI[.]php hxxps://purewavetravels[.]com/MUE[.]php hxxps://purple9ja[.]com/MIE[.]php hxxps://qaco[.]com[.]pk/SOUM[.]php hxxps://qameg[.]com/RI[.]php hxxps://qimmat-alarrab[.]com/MTI[.]php hxxps://qtechsubsea[.]com/AQOE[.]php hxxps://quadbikenepal[.]com/BUAL[.]php hxxps://quadradois[.]com[.]br/API[.]php hxxps://quara[.]com[.]ng/GNIM[.]php hxxps://questmso[.]com/BOE[.]php hxxps://quickprecisionhead[.]com/NQSO[.]php hxxps://quilmesaparthotel[.]com[.]ar/LU[.]php hxxps://rahamatdataservice[.]com/LUOL[.]php hxxps://railrackscontainers[.]com/LT[.]php hxxps://ramirezperezabogados[.]com/AI[.]php hxxps://ranorg[.]com/MR[.]php hxxps://rasa-system[.]com/ETUO[.]php hxxps://rashlinks[.]com[.]ng/UI[.]php hxxps://rawdietwow[.]com/UTAE[.]php hxxps://rawmealsusa[.]com/PU[.]php hxxps://razbuy[.]com/TUTE[.]php hxxps://reaaya-maysara[.]com/NUQM[.]php hxxps://realdubaicarpenter[.]com/SEUR[.]php hxxps://realtakglobal[.]com/ESU[.]php hxxps://realvestors[.]com/SAUI[.]php hxxps://recyclebasket[.]com/ATV[.]php hxxps://redcapinforma[.]com/ACT[.]php hxxps://regaliarings[.]com/DQ[.]php hxxps://relfa[.]com/UM[.]php hxxps://religionobserver[.]com/EPR[.]php hxxps://reneedata[.]com/ETET[.]php hxxps://renklietiketyazici[.]com/IENA[.]php hxxps://renkreklam[.]com/NAM[.]php hxxps://rentacarinlahore[.]com[.]pk/TL[.]php hxxps://reservaspremier[.]com/ALR[.]php hxxps://restauracioncurico[.]com/CEA[.]php hxxps://resto-pos[.]com/EL[.]php hxxps://returnbeez[.]com/UCI[.]php hxxps://reviewsfog[.]com/SIUL[.]php hxxps://rgbofficial[.]com/MCU[.]php hxxps://riftpreviews[.]com/FC[.]php hxxps://riverrocind[.]com/LLI[.]php hxxps://rjvemedia[.]com/EU[.]php hxxps://robertpattinsonbrasil[.]com/ATTV[.]php hxxps://robinadataco[.]com/OC[.]php hxxps://rockcaller[.]com/TIPD[.]php hxxps://rogocapitalpartners[.]com/TSS[.]php hxxps://royalfilmings[.]com/MIT[.]php hxxps://rtpbolamas88[.]com/AE[.]php hxxps://rtppurnama4d[.]com/NEMO[.]php hxxps://rtpstadium4d[.]com/TU[.]php hxxps://rusal[.]com[.]mx/IDQ[.]php hxxps://ryanreynoldsworkout[.]com/CCMS[.]php hxxps://safeerullahkhan[.]com/MAHU[.]php hxxps://safencrpo[.]com/EA[.]php hxxps://safes-endocrine[.]com/QA[.]php hxxps://safewayintltransfer[.]com/VS[.]php hxxps://sahwalaws[.]com/UMO[.]php hxxps://saictinstitute[.]com/MUT[.]php hxxps://salemacademyng[.]com/AEPT[.]php hxxps://sallydataservice[.]com/NI[.]php hxxps://samajbadinuwakot[.]com/MMIM[.]php hxxps://sameerhossain[.]com/EER[.]php hxxps://samuelogordesignz[.]com/PAL[.]php hxxps://samwealthdatahub[.]com/UEIM[.]php hxxps://sandushilpadatta[.]com/MTE[.]php hxxps://sanjfin[.]com/SDEE[.]php hxxps://sasbtopup[.]com/VEML[.]php hxxps://sashaarts[.]com/EAI[.]php hxxps://satropschools[.]com/QM[.]php hxxps://sattakking[.]com/SO[.]php hxxps://saviiwealth[.]com/INE[.]php hxxps://savvytours[.]com[.]ng/TN[.]php hxxps://sawa-dt[.]com/SEA[.]php hxxps://scargologistic[.]com/VLNO[.]php hxxps://schoutenkartoplan[.]com/TPI[.]php hxxps://secretformulameals[.]com/NU[.]php hxxps://segurosdeoccidente[.]com/DUAS[.]php hxxps://sekiziletisim[.]com/UO[.]php hxxps://selfcaresolution[.]com[.]ng/EMLV[.]php hxxps://selfmadecomputers[.]com/UT[.]php hxxps://semanggiempat[.]com/APIE[.]php hxxps://seniorsafehomes[.]com/SM[.]php hxxps://seoholism[.]com/EET[.]php hxxps://sernoticia[.]com[.]do/ER[.]php hxxps://servicomputo[.]com[.]co/TQS[.]php hxxps://sgameup[.]com/ORS[.]php hxxps://sgfgroups[.]com/AR[.]php hxxps://shaglni[.]com/LA[.]php hxxps://shampaintsindustries[.]com/SN[.]php hxxps://sharkledtv[.]com/ABM[.]php hxxps://sheltechbrokerage[.]com/DUN[.]php hxxps://shenandoah-baptist[.]com/AATN[.]php hxxps://shikshapati[.]com/ETE[.]php hxxps://shipwithcis[.]com/PSU[.]php hxxps://shivshakticaterers[.]com/EV[.]php hxxps://shopandsmiles[.]com[.]ng/UAAE[.]php hxxps://shopexinn[.]com/ES[.]php hxxps://shopgnepal[.]com/RRP[.]php hxxps://shopkykeon[.]com/AD[.]php hxxps://shopping-bay[.]com/ITTN[.]php hxxps://shoppingplearn[.]com/IQ[.]php hxxps://shreekunjbiharijigroup[.]com/SO[.]php hxxps://shreevishwasparshayurved[.]com/LM[.]php hxxps://sickfishmixnft[.]com/TE[.]php hxxps://sicrama[.]com/NIA[.]php hxxps://signholidays[.]com/OT[.]php hxxps://silversolve[.]com/AM[.]php hxxps://simplyfabdress[.]com/ELO[.]php hxxps://simplysmartertechnology[.]com/TEAM[.]php hxxps://simplysmartertv[.]com/RP[.]php hxxps://sinaltintas[.]com[.]br/QUUB[.]php hxxps://sinopsisdata[.]com/LH[.]php hxxps://sitesht[.]com/EIET[.]php hxxps://siupk[.]com/OTBD[.]php hxxps://sjdownload[.]com/SALA[.]php hxxps://skelevators[.]com/PITU[.]php hxxps://smartdigics[.]com/IS[.]php hxxps://smartway-me[.]com/ETIN[.]php hxxps://smmarketing-eg[.]com/OMN[.]php hxxps://smpmutual[.]com/GRNA[.]php hxxps://snowpearsgame[.]com/STP[.]php hxxps://snpro[.]com[.]br/NB[.]php hxxps://sobiaelrahmany[.]com/DNUL[.]php hxxps://socioscreativos[.]com/UA[.]php hxxps://sofafilmes[.]com[.]br/QU[.]php hxxps://sohojschool[.]com/OSSS[.]php hxxps://solidebody[.]com/IUQA[.]php hxxps://solutionzhere[.]com/ME[.]php hxxps://solverassist[.]com/OO[.]php hxxps://sometimeswhite[.]com/DMRU[.]php hxxps://songpropertyllc[.]com/UAT[.]php hxxps://soybasura[.]com/TEOQ[.]php hxxps://spanishbyyuranylo[.]com/UO[.]php hxxps://spartaxshield[.]com/UE[.]php hxxps://sportkhodro[.]com/TO[.]php hxxps://srilankanvirtual[.]com/ITIP[.]php hxxps://sskfashionbd[.]com/UMU[.]php hxxps://staquinas[.]com/PII[.]php hxxps://starbez[.]com/SI[.]php hxxps://starchearn[.]com/AI[.]php hxxps://staykings[.]com/RAV[.]php hxxps://stefan-schellberg[.]com/TLP[.]php hxxps://sterwrap[.]com/TTAM[.]php hxxps://stopandshop[.]com[.]tr/NRD[.]php hxxps://studiomastalli[.]com/LAPO[.]php hxxps://sudaksha[.]com/ALI[.]php hxxps://sugarcatalog[.]com/UQ[.]php hxxps://sumeetgroup[.]com/TU[.]php hxxps://superplayer[.]company/ESTI[.]php hxxps://supplygabba[.]com/MUDE[.]php hxxps://swansengineers[.]com/PET[.]php hxxps://swapandearn[.]com/QA[.]php hxxps://swappyme[.]com/GIN[.]php hxxps://sweetmedinatraders[.]com/OIMC[.]php hxxps://swisspage[.]com/OS[.]php hxxps://swyftload[.]com/QMUQ[.]php hxxps://synergyearthsys[.]com/IRS[.]php hxxps://sysglobales[.]com/OO[.]php hxxps://systemcage[.]com/RE[.]php hxxps://systemscares[.]com/STS[.]php hxxps://systemtech-ng[.]com/AU[.]php hxxps://tacosepisos[.]com[.]br/ED[.]php hxxps://taktolat[.]com/OEST[.]php hxxps://tameemnihar[.]com/SL[.]php hxxps://taninfurniture[.]com/SOI[.]php hxxps://tanjilascollection[.]com/PTS[.]php hxxps://tantrarestaurants[.]com/MI[.]php hxxps://tareqmelfi[.]com/CFUA[.]php hxxps://tcurrencyexchange[.]com/SE[.]php hxxps://techmag24[.]com/IPU[.]php hxxps://techmansystems[.]com/TUTA[.]php hxxps://techsapk[.]com/IIAO[.]php hxxps://teclam-usa[.]com/TVIX[.]php hxxps://tecnologias-exic[.]com/UR[.]php hxxps://telehealth-lyon[.]com/QU[.]php hxxps://telezoneshop[.]com/NIL[.]php hxxps://temperigonoar[.]com[.]br/REDO[.]php hxxps://tenderbarta[.]com/AMTI[.]php hxxps://tennismauritius[.]com/NDGA[.]php hxxps://thedailyvendor[.]com/OOE[.]php hxxps://thedeliberateng[.]com/NCN[.]php hxxps://thedesertsafariadventures[.]com/EAON[.]php hxxps://thedigitalhuntress[.]com[.]ng/TAOI[.]php hxxps://thedigitalthoughts[.]com/OUDU[.]php hxxps://thedksingh[.]com/OA[.]php hxxps://thegolfersmagazine[.]com/SL[.]php hxxps://themayanprincess[.]com/NUT[.]php hxxps://themeslime[.]com/IEX[.]php hxxps://thepropertystock[.]com/BOSA[.]php hxxps://thequalitydata[.]com/TEBS[.]php hxxps://theresultspro[.]com/AQUO[.]php hxxps://theshoplace[.]com/CMF[.]php hxxps://thesolutionsimhs[.]com/LEMS[.]php hxxps://thesquarelife[.]com/CVR[.]php hxxps://thevillalobosgroup[.]com/SLOO[.]php hxxps://think-optimise[.]com/AME[.]php hxxps://tiktoksells[.]com/OOI[.]php hxxps://tireloadchart[.]com/EA[.]php hxxps://tirolerupdate[.]com/UEEI[.]php hxxps://todayallmatchprediction[.]com/UOEM[.]php hxxps://toddgunterrestoration[.]com/RO[.]php hxxps://toddjustice[.]com/ITNS[.]php hxxps://todoxkilosa[.]com[.]py/DB[.]php hxxps://tofreezeornottofreeze[.]com/EQUA[.]php hxxps://tomiloladada[.]com/AMPE[.]php hxxps://tommyelectro[.]com/TRSV[.]php hxxps://topcustomessayhelp[.]com/AEC[.]php hxxps://top-kuwait[.]com/OSA[.]php hxxps://trackmyloans[.]com/EM[.]php hxxps://tradulima[.]com/UQ[.]php hxxps://translog-albania[.]com/ESV[.]php hxxps://transportadoramiranda[.]com/EELP[.]php hxxps://transportneveu[.]com/EB[.]php hxxps://tranzshift[.]com/ENIX[.]php hxxps://trishaandiagnostic[.]com/TC[.]php hxxps://tronicsites[.]com/NTN[.]php hxxps://trucknow[.]com/OS[.]php hxxps://truscare[.]com[.]hk/CCTI[.]php hxxps://trustcomep[.]com/PLA[.]php hxxps://trymigo[.]com/TIAN[.]php hxxps://tryradfit[.]com/TA[.]php hxxps://tunnel-tek[.]com/AAC[.]php hxxps://turkulerindemi[.]com/TESE[.]php hxxps://tutorialsexperts[.]com/IM[.]php hxxps://tutorxz[.]com/ITMC[.]php hxxps://tweetswift[.]com/SNGC[.]php hxxps://uaepickuptruckrentals[.]com/IDM[.]php hxxps://ucanokgroup[.]com/TD[.]php hxxps://ucheokonya[.]com[.]ng/SD[.]php hxxps://uhfcomunicaciones[.]com/AEI[.]php hxxps://ultratec[.]com[.]pk/RL[.]php hxxps://unicoffshore[.]com/AIT[.]php hxxps://unrealshape[.]com/TEAA[.]php hxxps://untaintedarts[.]com/AL[.]php hxxps://up-plastic[.]com/SNP[.]php hxxps://urfitnessbot[.]com/RIM[.]php hxxps://urjalab[.]com/IAPR[.]php hxxps://urvanconcept[.]com/QOM[.]php hxxps://vatexengineering[.]com[.]ng/LNI[.]php hxxps://vcreatek[.]com/NQ[.]php hxxps://vecoso[.]com/LSQ[.]php hxxps://ver88official[.]com[.]vn/SAQU[.]php hxxps://verdureenergy[.]com/CU[.]php hxxps://verterracorp[.]com/MAIP[.]php hxxps://vibasoft[.]com[.]py/PETE[.]php hxxps://videoconverterfree[.]com/REO[.]php hxxps://vikasresidency[.]com/SOE[.]php hxxps://vipimjournal[.]com/NTC[.]php hxxps://vipradigital[.]com/NUU[.]php hxxps://visionsinvest[.]com/TVLI[.]php hxxps://vitanigoldtravelandtours[.]com/AOU[.]php hxxps://vocedigital[.]com[.]br/AI[.]php hxxps://vodstudio[.]com[.]au/RSNN[.]php hxxps://vposconsulting[.]com/ETTS[.]php hxxps://vtudropshipping[.]com/DCA[.]php hxxps://vtusolution[.]com/OCE[.]php hxxps://vunena[.]com/OIS[.]php hxxps://wabzaaf[.]com/EUDN[.]php hxxps://wahdah-group[.]com/IEI[.]php hxxps://warnmat[.]com/EO[.]php hxxps://waterpumprepairdubai[.]com/DM[.]php hxxps://wearegrounding[.]com/DSMS[.]php hxxps://webanddrivers[.]com/UONU[.]php hxxps://webprosaddisontx[.]com/COAC[.]php hxxps://website-eg[.]com/EO[.]php hxxps://webzray[.]com/TEN[.]php hxxps://wemanagegroup[.]com/PSUO[.]php hxxps://werdhiayu[.]com/OP[.]php hxxps://whitediamonddata[.]com/QEUI[.]php hxxps://whitelabeladvisor[.]com/UTQR[.]php hxxps://wholemealfix[.]com/SI[.]php hxxps://wickedfitnessdiet[.]com/UN[.]php hxxps://wickramaholdings[.]com/ETOT[.]php hxxps://wifaccess[.]com[.]ng/MSI[.]php hxxps://wikitechbn[.]com/TILO[.]php hxxps://wikitopup[.]com/IA[.]php hxxps://wingswormsandwonder[.]com/ENAQ[.]php hxxps://wiseflys[.]com/DE[.]php hxxps://wizmeek[.]com/IOCT[.]php hxxps://wizzybytesdata[.]com/RE[.]php hxxps://wmsinfo[.]com[.]br/DQLU[.]php hxxps://wochenreport[.]com/MUI[.]php hxxps://woodjunctions[.]com/ETU[.]php hxxps://woozwallet[.]com/TTUS[.]php hxxps://xingomana[.]com/CR[.]php hxxps://xpicemanagement[.]com/DPUQ[.]php hxxps://xragracini[.]com[.]ng/LNAI[.]php hxxps://xssmusic[.]com/AD[.]php hxxps://yama-es[.]com/NUC[.]php hxxps://yangstory[.]com/IBS[.]php hxxps://yarasales[.]com/UNRA[.]php hxxps://yaxoncare[.]com/TU[.]php hxxps://yesod[.]com[.]mx/QIU[.]php hxxps://yobombmeals[.]com/PMI[.]php hxxps://yourlittledreamers[.]com/PD[.]php hxxps://yuswindata[.]com/TTME[.]php hxxps://zacuta[.]com/GTI[.]php hxxps://zanziflowerstours[.]com/RO[.]php hxxps://zapateriasgiovanna[.]com/ASUN[.]php hxxps://zaragoldherbals[.]com/UTMV[.]php hxxps://zechap[.]com/TEET[.]php hxxps://zeeshraj[.]com/EMIU[.]php hxxps://zesheger[.]com/TUIT[.]php hxxps://zeusmerah[.]com/TU[.]php hxxps://zillancer[.]com/DSES[.]php hxxps://zimlight[.]com/TIAC[.]php hxxps://zlatna-lisica[.]com[.]hr/TA[.]php hxxps://zonaah[.]com/ORSI[.]php hxxps://zonaamarela[.]com[.]br/RTA[.]php hxxps://zonetennis[.]com[.]au/TNEU[.]php hxxps://zoraidadominicansalon[.]com/TAMO[.]php hxxps://z-physique[.]com/LL[.]php hxxps://zspacex[.]com/PEAT[.]php hxxps://zuericherblatt[.]com/ILTE[.]php hxxps://zuerichernachrichten[.]com/INMQ[.]php hxxps://zukodata[.]com[.]ng/UC[.]php |
QakBot |
| URL | hxxp://193[.]233[.]20[.]21/sokr/birma[.]exe hxxp://193[.]56[.]146[.]7/item600/nst0dum[.]exe |
RedLine Stealer |
| URL | hxxp://vispik[.]at/tmp/ hxxp://ekcentric[.]com/tmp/ hxxp://hbeat[.]ru/tmp/ hxxp://mordo[.]ru/tmp/ hxxp://192[.]3[.]27[.]140/non/Dkhium[.]png hxxp://213[.]170[.]133[.]222/images/Uaozjajlulf[.]bmp hxxp://23[.]94[.]148[.]10/1500/vbc[.]exe hxxps://aldawaa-alshafi[.]com/systems/index[.]php |
SmokeLoader |
| URL | hxxp://157[.]90[.]113[.]100/hera[.]zip hxxp://157[.]90[.]113[.]100/update[.]zip hxxp://167[.]235[.]226[.]106/hera[.]zip hxxp://65[.]109[.]9[.]93/hera[.]zip |
Vidar |
| URL | hxxp://66[.]154[.]102[.]135:9909/Vre | Vjw0rm |
