不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様0社 -
2023/10/16
※2023/10/16 更新
マルウェア感染させると考えられるURLを検知（2023/10/16）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxp://107[.]173[.]4[.]18/200/sihost[.]exe hxxp://193[.]42[.]33[.]91/zz[.]txt hxxp://lakuiksong[.]known[.]co[.]ke/netTimer[.]exe hxxp://107[.]173[.]4[.]18/220/audiodgse[.]exe hxxp://185[.]28[.]39[.]18:7777/185[.]28[.]39[.]18/humblezx[.]exe hxxp://103[.]30[.]11[.]15/9y9/sihost[.]exe hxxp://107[.]173[.]4[.]18/230/audiodgse[.]exe hxxp://185[.]28[.]39[.]18:7777/185[.]28[.]39[.]18/pablozx[.]exe hxxp://89[.]47[.]1[.]10/eaipsa[.]php hxxp://89[.]47[.]1[.]10/bin/omegle[.]php hxxp://89[.]47[.]1[.]10/autdolorem[.]php hxxp://89[.]47[.]1[.]10/news[.]php |
Agent Tesla |
| URL | hxxp://193[.]142[.]59[.]12/myblog/posts/prfile[.]exe hxxp://77[.]91[.]97[.]162/g93kdwj3S/Plugins/clip64[.]dll hxxp://77[.]91[.]97[.]162/g93kdwj3S/Plugins/cred64[.]dll hxxp://77[.]91[.]97[.]162/g93kdwj3S/index[.]php hxxp://85[.]217[.]144[.]143/files/RBY2[.]exe hxxp://77[.]91[.]68[.]52/fuza/foto2552[.]exe hxxp://5[.]42[.]65[.]80/newrock[.]exe |
Amadey |
| URL | hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/nss3[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/sqlite3[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/softokn3[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/msvcp140[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/mozglue[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/vcruntime140[.]dll hxxp://94[.]130[.]186[.]149/8ae4f434d3902199/freebl3[.]dll hxxp://193[.]142[.]59[.]224/forum/img/file[.]exe hxxp://jackantonio[.]top/timeSync[.]exe hxxp://77[.]91[.]97[.]146/b5186114a247f330[.]php hxxps://cdn[.]discordapp[.]com/attachments/1080608481079459943/1162855665484713984/UrLccYj[.]exe?ex=653d74bb&is=652affbb&hm=c9630ee225427ae20a0120e62840f5490b11f847ef6142193bf89f16627d4c49& hxxp://217[.]196[.]96[.]16/155736047db03637[.]php hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/nss3[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/softokn3[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/mozglue[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/msvcp140[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/freebl3[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/vcruntime140[.]dll hxxp://217[.]196[.]96[.]16/521f2d75b9cd2a53/sqlite3[.]dll |
Stealc |
| URL | hxxp://liderdekorasyon[.]com/temp/clips[.]exe | Raccoon |
| URL | hxxp://kmsox815[.]xyz/777/skxZBA0[.]exe | SystemBC |
| URL | hxxps://qusbec[.]com/Financing hxxps://cdn[.]discordapp[.]com/attachments/1160916075505004578/1161636551952977950/CCleaner1[.]zFJyOkp |
Gozi |
| URL | hxxp://kmsox815[.]xyz/777/mtxGDiu[.]exe | Phobos |
| URL | hxxps://51[.]250[.]16[.]184/pixel[.]gif hxxp://47[.]99[.]79[.]203/g[.]pixel hxxps://34[.]150[.]32[.]61/j[.]ad hxxps://146[.]56[.]118[.]82/api/3 hxxps://144[.]34[.]167[.]87:2096/api/x hxxp://121[.]5[.]64[.]8:4448/ptj hxxps://121[.]135[.]44[.]49/IE9CompatViewList[.]xml hxxps://mycomeone[.]net/go/encryption/PUWULKVJ hxxps://45[.]82[.]79[.]204:3443/link/v3[.]22/4EN738VY hxxps://drententech[.]net/terminate/portfolio/0DSMVOSJ hxxp://47[.]94[.]137[.]101/en_US/all[.]js hxxps://54[.]185[.]234[.]103/pixel hxxps://www[.]xss[.]mba:10328/push hxxps://165[.]227[.]141[.]64:4433/updates[.]rss hxxp://20[.]107[.]244[.]135/g[.]pixel hxxp://165[.]227[.]141[.]64/updates[.]rss hxxps://20[.]107[.]244[.]135/en_US/all[.]js hxxp://119[.]91[.]26[.]244/search/ hxxp://124[.]221[.]76[.]197/__utm[.]gif hxxp://150[.]158[.]181[.]243:8011/cx hxxps://38[.]147[.]172[.]88/5eN1bjq8AAUYm2zgoY3K/ll_9354efa[.]js hxxps://119[.]91[.]26[.]244/search/ hxxps://114[.]132[.]76[.]158/pixel hxxps://124[.]223[.]91[.]53/IE9CompatViewList[.]xml hxxp://118[.]24[.]29[.]218/visit[.]js hxxps://119[.]29[.]209[.]234:8443/cx hxxps://cambiardinero[.]com/user/admin hxxp://1[.]117[.]176[.]254/en_US/all[.]js hxxp://121[.]4[.]50[.]245:8012/ca hxxp://92[.]63[.]196[.]45:82/updates[.]rss hxxp://152[.]136[.]35[.]240/g[.]pixel hxxp://92[.]63[.]196[.]45:81/g[.]pixel hxxp://101[.]43[.]161[.]148:7788/fwlink hxxps://8[.]130[.]125[.]172/ga[.]js hxxp://1[.]117[.]176[.]254/dot[.]gif hxxp://47[.]120[.]0[.]195:5555/load hxxp://121[.]135[.]44[.]49:808/push hxxps://47[.]94[.]137[.]101/ptj hxxp://38[.]147[.]172[.]88/5eN1bjq8AAUYm2zgoY3K/ll_9354efa[.]js hxxp://23[.]251[.]32[.]24/ca hxxps://petersenliner[.]com/select/v4[.]04/YBSGNK9H hxxps://cloudhoststatic[.]com/Consolidate/v9[.]44/UBXP14P3YA hxxp://159[.]89[.]194[.]250:8089/jquery-3[.]3[.]1[.]min[.]js hxxp://159[.]89[.]194[.]250:8089/jquery-3[.]3[.]2[.]slim[.]min[.]js hxxp://60[.]204[.]139[.]246/activity hxxp://150[.]158[.]137[.]72:10010/pixel hxxps://165[.]227[.]141[.]64:4433/cx hxxp://92[.]63[.]196[.]45:82/g[.]pixel hxxp://8[.]134[.]71[.]235/push hxxps://nitronclub[.]com/Level/ebay/YSL03QXGGO hxxps://americanlogix[.]com/Fashion/v3[.]94/6F3LHRG8510 hxxps://startupsystemte[.]net/register/101/6XZY7OX91 hxxps://146[.]190[.]136[.]83/safebrowsing/rd/CltOb12nLW1IbHehcmUtd2hUdmFzEBAY7-0KIOkUDC7h2 hxxps://milkforhome[.]com/restore/ingres/0WWJ48JAC6AW hxxps://safetylawtax[.]com/Reactivate/v10[.]53/MMYD2RII5H hxxp://163[.]123[.]143[.]122/owa/ hxxp://domline[.]online/owa/ hxxps://163[.]123[.]143[.]122/owa/ hxxps://domline[.]online/owa/ hxxp://47[.]94[.]137[.]101/cm hxxps://115[.]159[.]115[.]41/ca hxxp://43[.]134[.]228[.]170/match hxxp://47[.]103[.]106[.]214/cm hxxps://47[.]100[.]180[.]123:3004/wp06/wp-includes/po[.]php hxxp://47[.]103[.]106[.]214:8899/ga[.]js hxxps://114[.]132[.]76[.]158/ca hxxps://103[.]176[.]91[.]148/pixel[.]gif hxxp://84[.]32[.]188[.]6/design/query/9X5M3SOE0F hxxps://121[.]40[.]66[.]171/pixel hxxps://165[.]227[.]141[.]64:4433/cm hxxps://120[.]24[.]38[.]217:4433/dot[.]gif hxxp://92[.]63[.]196[.]46:8092/IE9CompatViewList[.]xml hxxp://119[.]91[.]207[.]9:8089/cm hxxps://43[.]135[.]22[.]17:4443/dot[.]gif hxxp://165[.]227[.]141[.]64/pixel hxxp://139[.]9[.]135[.]250:20002/en_US/all[.]js hxxp://1[.]12[.]231[.]99/en_US/all[.]js hxxp://bismillahsolutions[.]com/__utm[.]gif hxxp://198[.]211[.]5[.]240:8087/ptj hxxp://47[.]107[.]67[.]137:81/j[.]ad hxxps://comeonlogistics[.]com/Def/reklama/X6ALR835BBLB hxxp://175[.]178[.]247[.]232/pixel[.]gif hxxp://8[.]130[.]64[.]49/__utm[.]gif hxxp://132[.]145[.]126[.]111/updates[.]rss hxxps://52[.]66[.]17[.]82:9443/jquery-3[.]3[.]1[.]min[.]js hxxp://101[.]43[.]142[.]116:8087/ptj hxxp://43[.]139[.]79[.]52:7777/activity hxxp://193[.]37[.]69[.]48/_/scs/mail-static/_/js/ hxxps://39[.]100[.]83[.]53/api/x hxxps://193[.]37[.]69[.]48/_/scs/mail-static/_/js/ hxxp://175[.]178[.]99[.]133:5555/visit[.]js hxxp://139[.]224[.]188[.]139/activity hxxp://www[.]edittns[.]com/jquery-3[.]3[.]1[.]min[.]js hxxp://43[.]136[.]14[.]250:8080/IE9CompatViewList[.]xml hxxps://downsexv[.]com:8443/api/3 hxxp://47[.]94[.]221[.]227/dpixel hxxp://43[.]139[.]107[.]237:10001/ga[.]js hxxp://114[.]116[.]49[.]242/en_US/all[.]js hxxp://118[.]24[.]128[.]43:8888/api/x hxxps://www[.]iii-service[.]com/jquery-3[.]3[.]1[.]min[.]js hxxp://101[.]42[.]22[.]120/dpixel hxxp://114[.]132[.]56[.]147/introduction/edr hxxps://www[.]micorsoft[.]pro:8443/fd/ls/lsp[.]aspx hxxps://124[.]70[.]82[.]142/cm hxxp://124[.]70[.]82[.]142/ptj hxxps://62[.]234[.]53[.]167/jquery-3[.]3[.]1[.]min[.]js hxxps://cins[.]hin7lostvas[.]pro:2083/boxes[.]css hxxp://43[.]138[.]215[.]2:8081/visit[.]js hxxps://85[.]175[.]101[.]203/cm hxxp://165[.]227[.]141[.]64/dot[.]gif hxxps://8[.]134[.]85[.]39/load hxxp://92[.]63[.]196[.]46:8092/pixel hxxps://47[.]103[.]106[.]214/cm hxxps://47[.]93[.]34[.]203/j[.]ad hxxps://golds-touch[.]com/show/redirect/VVGPLUTB6I hxxps://8[.]140[.]245[.]246/load hxxps://208[.]64[.]224[.]190/en_US/all[.]js |
Cobalt Strike |
| URL | hxxp://kambuchaorjireji[.]website/api hxxp://gachimychi[.]fun/api hxxp://discussiowardder[.]website/api hxxp://85[.]217[.]144[.]143/files/source2[.]exe hxxp://osesuppor[.]fun/api hxxp://moneywel[.]fun/api hxxp://lemoney[.]fun/api hxxp://funnyorgos[.]site/api hxxp://membaers[.]fun/api hxxp://willywilk[.]fun/api |
Lumma Stealer |
| URL | hxxp://103[.]30[.]11[.]15/8y8/sihost[.]exe hxxps://sempersim[.]su/a18/fre[.]php hxxp://sempersim[.]su/a18/fre[.]php |
LokiBot |
| URL | hxxps://api[.]telegram[.]org/bot6380706838:AAHeNJQXD2oljrKM46U8G-Zyq3GHA5SyN3c/sendMessage?chat_id=5262627523 | Snake Keylogger |
| URL | hxxps://nkb[.]layout[.]oystergardens[.]us/editContent hxxps://chromiumlink[.]site/get[.]html hxxps://agas[.]layout[.]oystergardens[.]us/editContent hxxps://cht[.]layout[.]oystergardens[.]us/editContent hxxps://mhlb[.]layout[.]oystergardens[.]us/editContent |
FAKEUPDATES |
| URL | hxxps://myguitarcenter[.]ir/ertp/?U=7832606 hxxps://thekingsocial[.]com[.]ng/tt/?g=2926832 hxxps://thuanthienshop[.]online/ias/?G=7743568 hxxps://thcsphuongmai[.]edu[.]vn/te/?xx=7750164 hxxps://tfciltd[.]com/msmi/?VF=2632885 hxxps://thebabysense[.]ca/pni/?t=3128121 hxxps://trimacinstallations[.]com[.]au/vp/?JS=3451298 hxxps://trimonsa[.]mx/cu/?z=5823639 hxxps://topone[.]al/qsnm/?88532131 hxxps://trinityuniversity[.]edu[.]ng/plr/?qa=9866634 hxxps://top360digitalmedia[.]com/ust/?G=4301645 hxxps://triton[.]mn/dil/?93353131 hxxps://twafcreative[.]com/st/?91822131 hxxps://worldwidecollection[.]net/uihl/?t=3502740 hxxps://universalsantiveri[.]com/tlat/?93522131 hxxps://uddoktasoftware[.]com/et/?wf=2159483 hxxps://tyabji[.]net/qequ/?p=8731470 hxxps://uscellularco[.]com/st/?Fv=5847469 hxxps://uddoktasoftware[.]com/et/?m=3461250 hxxps://vennuttoimoveis[.]com[.]br/ih/?M4=2800781 hxxps://usaproductsforsale[.]shop/sto/?kv=6481536 hxxps://usasupplements[.]online/dt/?90922131 hxxps://wingstime[.]com[.]mx/rmse/?S=9244766 hxxps://viewhome[.]com[.]vn/xa/?z=6017323 hxxps://vkm[.]co[.]za/oibs/?pk=6581646 hxxps://woodxestofados[.]com[.]br/qqu/?97453131 hxxps://wenawenkosi[.]co[.]za/ti/?f=8263363 hxxps://vtdigital[.]net/umr/?nV=8920560 hxxps://wizfairvoyage[.]com/ol/?89722131 hxxps://wenlantrading[.]com/ae/?H=2138759 hxxps://vennuttoimoveis[.]com[.]br/ih/?og=9219844 hxxps://vsms[.]com[.]my/amqt/?mO=9127682 hxxps://weblomag[.]com/ts/?fw=302562 hxxps://wagonslearning[.]net/ot/?70222131 hxxps://videfi[.]org/iu/?x=1783253 hxxps://yournewwebsite[.]info/tl/?99422131 hxxps://yacht-rentalm[.]com/em/?56522131 hxxps://worldwidecollection[.]net/og/?71622131 hxxps://yunaxtech[.]com/em/?XL=1828854 hxxps://xenon[.]com[.]bd/tn/?u=5063133 hxxps://zahra-nejati[.]ir/uqdm/?97453131 hxxps://zonakaptenjp[.]online/in/?98553131 hxxps://zeepaard[.]com/ii/?tv=3360073 hxxps://bombaycasuals[.]com/tmpr/?Do=564501 hxxps://keramatfarm[.]net/tdei/?y=955220 hxxps://axioworldwide[.]com/umu/?rZ=2420343 hxxps://pakistan1[.]tv/sui/?GN=506887 hxxps://alpscoating[.]com/oarm/?PR=9496014 hxxps://infocuankerajaan[.]co/qu/?dG=8013992 hxxps://agriformexico[.]com/puae/?B=980168 hxxps://clautedomex[.]mx/iis/?4=7828753 hxxps://solarplan[.]com[.]au/us/?99453131 hxxps://solarplan[.]com[.]au/olr/?37822131 hxxps://sorkarshop[.]com/noi/?eK=6248115 hxxps://somoyerdarpon[.]com/mts/?r=6882553 hxxps://sorvss[.]org[.]rs/vot/?wf=2273491 hxxps://sondoscamisas[.]com/lere/?U=4794061 hxxps://sorvss[.]org[.]rs/uter/?H=6615299 hxxps://suad[.]group/hi/?gE=8696628 hxxps://sqacommunitybd[.]org/vl/?95053131 hxxps://supporttrust[.]org[.]nz/patu/?96553131 hxxps://sstrade[.]mk/ent/?o=5937037 hxxps://splusassociates[.]com/ua/?95353131 hxxps://suppliededucation[.]co[.]uk/uoic//?redir=1696886507 hxxps://stringlightscuracao[.]com/uerr/?99153131 hxxps://splusassociates[.]com/auu/?9J=4647277 hxxps://techxtreme[.]co[.]nz/eta/?91232131 hxxps://tdata[.]lt/gito/?bR=6916317 hxxps://taskdoners[.]uk/sauq/?h=4288560 hxxps://tawba[.]store/emi/?78322131 hxxps://swca[.]mx/eqi/?y=7378931 hxxps://tennislifemag[.]com/taua/?tt=2798980 hxxps://tbridge[.]co[.]tz/unsu/?u2=3498059 hxxps://synagoguetv[.]org/spov/?L=1170188 hxxps://techgreeds[.]com/ec/?8I=5410969 hxxps://talhaislam[.]com/saes/?89922131 hxxps://tastequery[.]com/cpeo/?R=1402823 hxxps://tesscastleman[.]com/nqi/?m=6069294 hxxps://texttospeechconverter[.]com/ttit/?iP=5037058 hxxps://oppal[.]co[.]id/bqn/?nQ=1686091 hxxps://oppal[.]co[.]id/bqn/?J=635744 hxxps://onlygist[.]com[.]ng/mdqu/?A=5082040 hxxps://opentrade[.]com[.]bo/is/?62742131 hxxps://oohna[.]on[.]ca/sa/?84132131 hxxps://orchidarchitect[.]com/uccs/?98253131 hxxps://omalworldwide[.]net/os/?97553131 hxxps://onlinequranforkids[.]com/qou/?94432131 hxxps://oqily[.]com/emss/?c=9791241 hxxps://oniplast[.]com[.]br/sl/?pM=4123632 hxxps://organicmaster[.]in/aq/?15132131 hxxps://orchidarchitect[.]com/opc/?ub=8467392 hxxps://outletbelleza[.]cl/mu/?v=3261008 hxxps://patientscare[.]online/tb/?94453131 hxxps://patientscare[.]online/nula/?fp=2331732 hxxps://papagayoadventures[.]com/xcm/?n=4795502 hxxps://patrialand[.]com/qeuu/?k=6612405 hxxps://ourlunchclub[.]com/mei/?ew=9014966 hxxps://pakistan1[.]tv/sui/?69522131 hxxps://parasempreflores[.]store/vu/?92822131 hxxps://organicmaster[.]in/uil/?96553131 hxxps://protag[.]com[.]my/rup/?97353131 hxxps://pcnonline[.]ng/iu/?U6=6022512 hxxps://pearl-medic[.]com/cnae/?yJ=5115685 hxxps://pearl-medic[.]com/cnae/?03622131 hxxps://posbook[.]top/uni/?Il=2525348 hxxps://pinoybundles[.]com/im/?ph=8847972 hxxps://plasteritelfe[.]com/tina/?aW=6438797 hxxps://probashgomon[.]com/ipuq/?79822131 hxxps://policytv[.]tv/es/?lS=596592 hxxps://prnts[.]cc/met/?OJ=3335760 hxxps://productupdate[.]net/va/?n=9620003 hxxps://pedimosjusticia[.]com/qa/?u=4417716 hxxps://petittool[.]com/niet/?pr=4877899 hxxps://pedimosjusticia[.]com/uaa/?97153131 hxxps://powertexmw[.]com/si/?g=8127794 hxxps://purevitamina[.]com/afai/?yG=113898 hxxps://rajshahihabhit[.]edu[.]bd/ot/?e=8702949 hxxps://rahatbaytak[.]com/imob/?J=5788887 hxxps://ptbolaterbaik[.]com/ed/?e=6260635 hxxps://ranifood[.]com[.]bd/iumo/?o=7405359 hxxps://rallydeinnovacion[.]org/meqa/?c=3865733 hxxps://railroaddb[.]info/eb/?xP=4753307 hxxps://prottasabd[.]com/neqa/?q=3547646 hxxps://quickie[.]com[.]do/uim/?m=541629 hxxps://pteacademic79plus[.]com/lem/?Ti=7001992 hxxps://radiocristorey[.]org/tbi/?kH=8829649 hxxps://recomendado-oficial[.]com/uuic/?99353131 hxxps://revanth[.]com/uadm/?89353131 hxxps://riser360[.]com[.]mx/enii/?k=1913918 hxxps://rocknetwork[.]org/npet/?m=8219419 hxxps://reetpret[.]com/aetv/?99453131 hxxps://roraimastudios[.]com/du/?q=2440434 hxxps://rubiomoveis[.]com[.]br/qnai/?KH=1071158 hxxps://rsvpthedate[.]com/iui/?30822131 hxxps://rtpslotdewi[.]com/easr/?99232131 hxxps://rubria[.]net/luv/?V=397505 hxxps://seguridaduls[.]cl/seao/?y9=9491460 hxxps://safha[.]co/atrg/?95232131 hxxps://rwugt[.]com/niio/?L=6713162 hxxps://satsacademy[.]in/rtxe/?fC=2337916 hxxps://sailslimited[.]com/bloa/?X=2863317 hxxps://samacademia[.]com/id/?xg=6856791 hxxps://sia[.]dz/quof/?w=2280807 hxxps://sempresophia[.]com/dme/?o=8043301 hxxps://shivsofts[.]in/da/?c=819538 hxxps://senmedia-events[.]co[.]ke/otu/?w=4919183 hxxps://senticorpsale[.]com/ssa/?76222131 hxxps://slmc[.]gov[.]lk/nuot/?83722131 hxxps://skyalarabia[.]com/rtac/?l=5665839 hxxps://smisconsulting[.]com/slm/?rZ=475949 hxxps://silkylearning[.]com/sem/?y3=7449598 hxxps://silpsicologia[.]com[.]br/ld/?17753131 hxxps://sightvape[.]com/nt/?xZ=7615915 hxxps://sightvape[.]com/nt/?t=2641740 hxxps://havinsk[.]com[.]br/atc/?09032131 hxxps://gruphost[.]es/iut/?17757511 hxxps://gtopakistan[.]org/suih/?98353131 hxxps://hadfs[.]com/pter/?21032131 hxxps://groupersgame[.]com/tmu/?w=1482804 hxxps://innovatorsprofit[.]online/osto/?Bn=6372848 hxxps://highlandofpeace[.]com/bert/?t=1811113 hxxps://inavco[.]com/ml/?r=1819204 hxxps://herebestpriceoftheday[.]com/sed/?b=3542590 hxxps://hemseducation[.]com/uilo/?99553131 hxxps://hfd[.]com[.]tr/oond/?jt=9397543 hxxps://hosps[.]co[.]za/ern/?61422131 hxxps://itechmindz[.]co[.]in/sm/?21722131 hxxps://innomecanica[.]cl/ta/?R=2769798 hxxps://infoplaceti[.]com[.]br/pt/?nW=6528516 hxxps://inmano[.]com[.]br/hc/?p=4729334 hxxps://idealschoolburhanpur[.]edu[.]in/si/?n=9312773 hxxps://infocuankerajaan[.]co/lt//?redir=1696886527 hxxps://innocence[.]co[.]in/rm/?YM=9332060 hxxps://institutonuevapompeya[.]com/ettu/?50232131 hxxps://infocuankerajaan[.]co/qu/?qE=3906412 hxxps://impeccableafricatour[.]com/op/?H=4633668 hxxps://htechcreations[.]com/equx/?52532131 hxxps://hotelkiwi[.]gr/uc/?24522131 hxxps://inspiringwomen[.]co[.]za/terd/?kg=9003597 hxxps://imforx[.]com/eeta/?98253131 hxxps://jaire[.]ng/mn/?9=4266413 hxxps://jaire[.]ng/mn/?rB=2135455 hxxps://jaire[.]ng/mn/?X=8245254 hxxps://k-sharq[.]com/sive/?06132131 hxxps://jekinformatica[.]com[.]br/urts/?33722131 hxxps://ipminc[.]ca/ei/?F=4490227 hxxps://josemiguelescribano[.]com/uea/?qOmokqHCjbl hxxps://k-sharq[.]com/sive/?83622131 hxxps://khanz[.]co[.]nz/abue/?85432131 hxxps://keramatfarm[.]net/tdei/?u1=8200416 hxxps://kaliro[.]ac[.]ug/lnel/?wr=5590968 hxxps://isoowac[.]com/gfie/?4z=7312980 hxxps://katsuyugen[.]online/ci/?w=9015310 hxxps://ipaedia[.]org/omaa/?00232131 hxxps://jpbenterprise[.]com/oqs/?58032131 hxxps://jahf[.]com[.]ar/udiq/?90222131 hxxps://institutonuevapompeya[.]com/ettu/?R=2064391 hxxps://katsusienna[.]online/mau/?U5=3918619 hxxps://landmarkgroup[.]com[.]pk/si/?y=2433255 hxxps://lakerestaurant[.]co[.]za/mxt/?83353131 hxxps://khanz[.]co[.]nz/ee/?19653131 hxxps://lucrativia[.]com[.]br/md/?wx=8919366 hxxps://loginguide[.]pro/it/?y=5848991 hxxps://lascams[.]com/et/?62422131 hxxps://lvcsac[.]com[.]pe/taal/?vx=6469294 hxxps://leadmachineexperts[.]com/lde/?jF=4075004 hxxps://kitabsuperjp[.]site/en/?y=8197462 hxxps://lider[.]fm/aq/?E=200067 hxxps://kingdhella[.]com[.]ng/uo/?qV=2113029 hxxps://krimpex[.]us/tl/?90922131 hxxps://linvite[.]life/qun/?M=1270574 hxxps://krurns[.]com/eaa/?fz=6087316 hxxps://lumafacturacion[.]com/telp/?72722131 hxxps://loanbtc[.]org/sto/?d=4286398 hxxps://lacasayelcampoinmobiliaria[.]com/orip//?redir=1696886597 hxxps://medicalsoft[.]ec/srt/?R7=1392395 hxxps://madeinbots[.]com/ulin/?lp=6053430 hxxps://medicalsoft[.]cl/mni/?01532131 hxxps://melinternationalschool[.]co[.]za/ueue/?l=244993 hxxps://medadlawfirm[.]com/stul/?f=6229905 hxxps://marvelworks[.]ltd/aeu/?SH=8222857 hxxps://medicaltoolsbd[.]com/erbi/?QC=807931 hxxps://malikironstore[.]com/rae/?w=7892750 hxxps://m2play[.]ro/rcos/?o2=732707 hxxps://maxsave[.]cfd/mlu/?z=8748423 hxxps://marlonvisual[.]com[.]br/atet/?93522131 hxxps://medheightsltd[.]com/aoea/?cv=6733957 hxxps://mechanical-valley[.]com/tq/?ut=5050948 hxxps://mentoriamaia[.]com/moav/?d=8260563 hxxps://memphisthrive[.]com/luei/?ai=4815490 hxxps://maxixeatelier[.]com/qm/?X=9383880 hxxps://menu[.]web[.]id/vm/?q=5185691 hxxps://methodistchurchkenya[.]org/ism/?q=6974164 hxxps://meritodigital[.]com/aeee/?uu=2240479 hxxps://metodolmn[.]com[.]br/ootr/?j=1243127 hxxps://miami-breeze[.]com/is/?in=8908195 hxxps://microtrimsltd[.]com[.]bd/aue/?78522131 hxxps://milanoboutique-gruppo[.]com/riqu/?76822131 hxxps://mhideals[.]com/ladn/?02622131 hxxps://mindit[.]in/le/?m=9197095 hxxps://moradadapraia-bombinhas[.]com[.]br/ppl/?pf=8619146 hxxps://mktrading[.]co[.]za/sl/?90453131 hxxps://miraflores[.]com[.]br/uqt/?93453131 hxxps://mochilaeasas[.]com/lads/?jP=4857253 hxxps://misterbbqgalati[.]ro/tlum/?cr=187173 hxxps://mso[.]af/rn/?cU=5378342 hxxps://myguitarcenter[.]ir/ertp/?y=5900742 hxxps://mymedfile[.]us/ore/?tb=6542938 hxxps://newversion[.]com[.]af/ut/?pA=136181 hxxps://negmtalkhalhg[.]com/sp/?v=4332355 hxxps://nativesfilmworks[.]com/ni/?z1=7573978 hxxps://ncedcloud[.]online/uuie/?u=510515 hxxps://nazifafashion[.]com/nnm/?PX=9815476 hxxps://mymusclemagic[.]com/su/?lj=9014121 hxxps://naturessupplementsusa[.]com/touo/?Bm=2996993 hxxps://neednoneedles[.]com/pt/?z=5124035 hxxps://newcastle[.]ae/tn/?iV=5829695 hxxps://nasa2000[.]com[.]mx/usnt/?bX=2457654 hxxps://nguyenducduy[.]com/pl/?85132131 hxxps://nozul[.]app/iag/?h9=781727 hxxps://nopaltepec[.]gob[.]mx/um/?92553131 hxxps://oencantadordecaes[.]pt/qa/?iO=2380846 hxxps://nupectogo[.]com/isa/?gD=3984638 hxxps://niveen[.]net/ib/?p=3016451 hxxps://odreports[.]com/lia/?m=1831773 hxxp://sempresophia[.]com/dme/ hxxp://safha[.]co/atrg/ hxxp://ranifood[.]com[.]bd/iumo/ hxxp://rocknetwork[.]org/npet/ hxxp://pearl-medic[.]com/cnae/ hxxp://samacademia[.]com/id/ hxxp://policytv[.]tv/es/ hxxps://feedar[.]net/ro/ hxxp://recomendado-oficial[.]com/uuic/ hxxps://metodolmn[.]com[.]br/ootr/ hxxps://greenserenity[.]ca/be/ hxxp://pedimosjusticia[.]com/qa/ hxxp://satsacademy[.]in/rtxe/ hxxp://rtpslotdewi[.]com/easr/ hxxp://purienterprise[.]com/ro/ hxxp://pedimosjusticia[.]com/uaa/ hxxp://railroaddb[.]info/eb/ hxxp://rajshahihabhit[.]edu[.]bd/ot/ hxxp://rallydeinnovacion[.]org/meqa/ hxxp://reetpret[.]com/aetv/ hxxp://rsvpthedate[.]com/iui/ hxxp://ptbolaterbaik[.]com/ed/ hxxp://radiocristorey[.]org/tbi/ hxxp://probashgomon[.]com/ipuq/ hxxp://menu[.]web[.]id/vm/ hxxp://microtrimsltd[.]com[.]bd/aue/ hxxp://flashnewsbensedira[.]com/el/ hxxp://htechcreations[.]com/equx/ hxxp://k-sharq[.]com/sive/ hxxp://pakistan1[.]tv/sui/ hxxp://lascams[.]com/et/ hxxp://ipaedia[.]org/omaa/ hxxp://mktrading[.]co[.]za/sl/ hxxp://founders[.]net[.]au/ritp/ hxxp://itechmindz[.]co[.]in/sm/ hxxp://lucrativia[.]com[.]br/md/ hxxp://inavco[.]com/ml/ hxxps://aandlorganics[.]com/tm/ hxxp://hemseducation[.]com/uilo/ hxxp://goldenyieldfarms[.]com/emta/ hxxp://papagayoadventures[.]com/xcm/ hxxp://mymedfile[.]us/ore/ hxxp://nativesfilmworks[.]com/ni/ hxxp://hadfs[.]com/pter/ hxxp://moradadapraia-bombinhas[.]com[.]br/ppl/ hxxp://havinsk[.]com[.]br/atc/ hxxp://forexareba[.]com/is/ hxxp://parafusacos[.]com[.]br/enue/ hxxp://miraflores[.]com[.]br/atpl/ hxxp://organicmaster[.]in/uil/ hxxp://patientscare[.]online/nula/ hxxp://oencantadordecaes[.]pt/qa/ hxxp://eshraqa[.]co/tosi/ hxxp://miami-breeze[.]com/is/ hxxp://myguitarcenter[.]ir/ertp/ hxxp://nopaltepec[.]gob[.]mx/um/ hxxp://medicaltoolsbd[.]com/erbi/ hxxp://lakerestaurant[.]co[.]za/mxt/ hxxp://innomecanica[.]cl/ta/ hxxp://parasempreflores[.]store/vu/ hxxp://imforx[.]com/eeta/ hxxp://frenosa[.]com[.]pe/pofm/ hxxp://mymusclemagic[.]com/su/ hxxp://golamsoroar[.]com/isr/ hxxps://aandlorganics[.]com/iamp/ hxxp://organicmaster[.]in/aq/ hxxp://marvelworks[.]ltd/aeu/ hxxp://patientscare[.]online/tb/ hxxp://fetyma[.]com/doen/ hxxp://oohna[.]on[.]ca/sa/ hxxp://medicalsoft[.]cl/mni/ hxxp://krimpex[.]us/tl/ hxxp://oniplast[.]com[.]br/sl/ hxxps://bologna[.]epu[.]edu[.]iq/uuqa/ hxxp://m2play[.]ro/rcos/ hxxp://jahf[.]com[.]ar/udiq/ hxxp://fresadodeasfalto[.]com/na/ hxxp://medheightsltd[.]com/aoea/ hxxp://marlonvisual[.]com[.]br/atet/ hxxp://miraflores[.]com[.]br/uqt/ hxxp://inoutproducoes[.]com[.]br/itae/ hxxp://nguyenducduy[.]com/pl/ hxxp://jekinformatica[.]com[.]br/urts/ hxxp://orchidarchitect[.]com/uccs/ hxxp://landmarkgroup[.]com[.]pk/si/ hxxp://pcnonline[.]ng/iu/ hxxp://exsef[.]com/id/ hxxp://ncedcloud[.]online/uuie/ hxxp://homeimprovementadvices[.]us/ette/ hxxp://jaire[.]ng/mn/ hxxp://erkainterindo[.]com/bnm/ hxxp://jpbenterprise[.]com/oqs/ hxxp://orchidarchitect[.]com/opc/ hxxp://maxixeatelier[.]com/qm/ hxxp://nasa2000[.]com[.]mx/usnt/ hxxp://leadmachineexperts[.]com/lde/ hxxp://mso[.]af/rn/ hxxp://khanz[.]co[.]nz/abue/ hxxp://onlinequranforkids[.]com/qou/ hxxp://greenglobalbenefittrade[.]com/iasq/ hxxp://groupersgame[.]com/tmu/ hxxps://somoyerdarpon[.]com/mts/ hxxp://deadprawn[.]com/rpoq/ hxxp://careersit[.]co[.]za/fse/ hxxp://africatrendtrading[.]com/ebnd/ hxxp://bakewell-eg[.]com/ro/ hxxp://aehealthcare[.]co[.]za/dquq/ hxxp://atefehataollahi[.]com/sa/ hxxp://equippedbeings[.]com/ouea/ hxxp://brandandbusiness[.]com[.]co/ea/ hxxps://techxtreme[.]co[.]nz/eta/ hxxp://devpassion[.]com[.]mx/oab/ hxxp://clonhadas[.]com[.]co/uau/ hxxp://clautedomex[.]mx/iis/ hxxp://alkazem[.]com/mseq/ hxxp://alcatrazsecurity[.]co[.]za/nb/ hxxp://aquila-services[.]bg/tcer/ hxxp://al7irak[.]com/taa/ hxxp://elsantotomesino[.]com[.]ar/aiu/ hxxp://arquivaae[.]com[.]br/ine/ hxxp://compreakieali[.]com/qiet/ hxxp://e-deshltd[.]com/as/ hxxp://biosolutions[.]com[.]co/dcnt/ hxxp://atipakistan[.]org/pi/ hxxp://bikroygadget[.]xyz/ooel/ hxxp://althqafi[.]edu[.]sa/nih/ hxxp://colectar[.]ro/odu/ hxxp://aonenetwork[.]com[.]np/is/ hxxp://bangladeshmulticarehospital[.]com/deoo/ hxxp://adfilms[.]lk/ml/ hxxp://elegantstudio[.]com[.]ng/mlto/ hxxp://datasystembolivia[.]com/csit/ hxxp://cartesrl[.]it/lt/ hxxp://cetmar18[.]edu[.]mx/ura/ hxxp://alltuning[.]com[.]br/iee/ hxxp://ecit-dev[.]com/eiue/ hxxp://ejlalacademy[.]com/de/ hxxp://celema[.]co/nlh/ hxxp://businessmarkets[.]us/esd/ hxxp://cottoncrumbs[.]com/dboe/ hxxp://ajpglobalshopping[.]com/tmme/ hxxp://ca2solution[.]it/te/ hxxp://alexboatsrental[.]com/sa/ hxxp://bluechipfx[.]com/rep/ hxxp://bakertilly[.]com[.]ec/eqsu/ hxxp://aussieshutters[.]com/meil/ hxxp://elsantotomesino[.]com[.]ar/ulr/ hxxp://dgcomputer[.]com[.]br/su/ hxxp://adshine[.]io/cet/ hxxp://artinicrash[.]com[.]au/uit/ hxxp://31180[.]website/ers/ hxxp://btdavidclinic[.]rw/trre/ hxxp://cerodamed[.]com/ini/ hxxp://cetmar18[.]edu[.]mx/eda/ hxxp://axioworldwide[.]com/umu/ hxxp://dgcomputer[.]com[.]br/vsco/ hxxp://alltuning[.]com[.]br/st/ hxxp://affaires[.]co[.]in/nm/ hxxp://emadparibahan[.]com[.]bd/oiua/ hxxp://cloudk[.]click/gsn/ hxxp://adashopita[.]co/aumq/ hxxp://compunetplc[.]com/ld/ hxxp://bookabudhabitrips[.]com/re/ hxxp://elsafeer[.]travel/eq/ hxxp://dubai-watertanker[.]com/po/ hxxp://bigkuma[.]com/mi/ hxxp://ctimeresources[.]com/aa/ hxxp://closebit[.]co[.]uk/si/ hxxp://bluedotbd[.]online/usqm/ hxxp://cityquality[.]net/teq/ hxxp://dma24[.]com/as/ hxxp://bellazami[.]com/etsa/ hxxp://candyads[.]pro/siei/ hxxp://bguest[.]net/eeu/ hxxp://crystalshippings[.]online/uqso/ hxxp://elsafeer[.]travel/este/ hxxp://arquivaae[.]com/mrrl/ hxxp://agriformexico[.]com/puae/ hxxp://aranhaconstrutora[.]com[.]br/eec/ hxxp://tesscastleman[.]com/nqi/ hxxp://triton[.]mn/dil/ hxxp://trinityuniversity[.]edu[.]ng/plr/ hxxp://sia[.]dz/quof/ hxxp://thekingsocial[.]com[.]ng/tt/ hxxp://solarplan[.]com[.]au/us/ hxxp://trimacinstallations[.]com[.]au/vp/ hxxp://thuanthienshop[.]online/ias/ hxxp://suad[.]group/hi/ hxxp://thewhitespace[.]qa/umq/ hxxp://solarplan[.]com[.]au/olr/ hxxp://shivsofts[.]in/da/ hxxp://splusassociates[.]com/auu/ hxxp://tyabji[.]net/qequ/ hxxp://silpsicologia[.]com[.]br/iet/ hxxp://sightvape[.]com/nt/ hxxp://twafcreative[.]com/st/ hxxp://senmedia-events[.]co[.]ke/otu/ hxxp://talhaislam[.]com/saes/ hxxp://slmc[.]gov[.]lk/nuot/ hxxp://thcsphuongmai[.]edu[.]vn/te/ hxxp://tfciltd[.]com/msmi/ hxxp://trimonsa[.]mx/cu/ hxxp://uddoktasoftware[.]com/et/ hxxp://swca[.]mx/eqi/ hxxp://taskdoners[.]uk/sauq/ hxxp://stringlightscuracao[.]com/uerr/ hxxp://tissuelab[.]farm/seoi/ hxxp://supporttrust[.]org[.]nz/patu/ hxxp://topone[.]al/qsnm/ hxxp://tawba[.]store/emi/ hxxp://zeepaard[.]com/ii/ hxxp://wizfairvoyage[.]com/ol/ hxxp://vennuttoimoveis[.]com[.]br/ih/ hxxp://vkm[.]co[.]za/oibs/ hxxp://usaproductsforsale[.]shop/sto/ hxxp://videfi[.]org/iu/ hxxp://universalsantiveri[.]com/arit/ hxxp://yournewwebsite[.]info/tl/ hxxp://www[.]attsuppliers[.]com/TC/?20231013 hxxp://woodxestofados[.]com[.]br/qqu/ hxxp://universalsantiveri[.]com/tlat/ hxxp://vsms[.]com[.]my/amqt/ hxxp://yacht-rentalm[.]com/em/ hxxp://worldwidecollection[.]net/og/ hxxp://www[.]opsol[.]com/product-files/deltoken[.]zip hxxp://zahra-nejati[.]ir/uqdm/ hxxp://usasupplements[.]online/dt/ hxxps://31180[.]website/ers/?uI=8261544 hxxps://aandlorganics[.]com/iamp/?95353131 hxxps://ahorroexpress[.]cl/ceu/?y=8462575 hxxps://africatrendtrading[.]com/ebnd/?54032131 hxxps://aandlorganics[.]com/tm/?P=3349134 hxxps://africatrendtrading[.]com/pc/?v=9130795 hxxps://agriformexico[.]com/puae/?q=1179478 hxxps://adamantium[.]network/erm/?wp=9148543 hxxps://adashopita[.]co/aumq/?tc=7133032 hxxps://adfilms[.]lk/ml/?Y=9029328 hxxps://aehealthcare[.]co[.]za/dquq/?w=7844128 hxxps://adshine[.]io/cet/?LS=9119177 hxxps://adashopita[.]co/na/?42453131 hxxps://affaires[.]co[.]in/nm/?w=7274569 hxxps://ajpglobalshopping[.]com/tmme/?V3=131190 hxxps://ahmetaltinok[.]av[.]tr/dta/?19022131 hxxps://ada2u[.]com/es/?sl=8099884 hxxps://aceresidence[.]com[.]ng/en/?qp=5900318 hxxps://alcatrazsecurity[.]co[.]za/nb/?n=3567740 hxxps://alexboatsrental[.]com/sa/?PR=6432296 hxxps://alasar[.]com[.]pk/ei/?x=8788937 hxxps://al7irak[.]com/taa/?RE=3642055 hxxps://alpscoating[.]com/oarm/?Y9=7573889 hxxps://alkazem[.]com/mseq/?C=2217750 hxxps://althqafi[.]edu[.]sa/nih/?s=8701993 hxxps://amanafunville[.]com/sue/?vp=8892437 hxxps://anksearch[.]com/me/?uB=6340412 hxxps://aquila-services[.]bg/tcer/?HZ=4983732 hxxps://alzorahvipmassagespa[.]com/iu/?cH=5695148 hxxps://alltuning[.]com[.]br/st/?86622131 hxxps://alltuning[.]com[.]br/iee/?99553131 hxxps://aranhaconstrutora[.]com[.]br/eec/?vY=7030897 hxxps://aonenetwork[.]com[.]np/is/?83532131 hxxps://anrtimes[.]com/enq/?l=7553960 hxxps://aussieshutters[.]com/meil/?21522131 hxxps://autumnagedcare[.]com[.]au/tes/?dE=7430726 hxxps://autumnagedcare[.]com[.]au/tes/?03822131 hxxps://artinicrash[.]com[.]au/uit/?r=9932006 hxxps://arquivaae[.]com/mrrl/?02253131 hxxps://axioworldwide[.]com/umu/?84532131 hxxps://artsbygrace[.]com[.]br/ru/?f=4912826 hxxps://arquivaae[.]com[.]br/ine/?04222131 hxxps://assecap[.]com/qu/?y=798201 hxxps://bakewell-eg[.]com/ro/?e=5208454 hxxps://atipakistan[.]org/pi/?0=2685597 hxxps://benzomod[.]online/sd/?f=1039980 hxxps://bankpinar[.]com/tisn/?xR=8341440 hxxps://bangladeshmulticarehospital[.]com/deoo/?S=6006288 hxxps://atefehataollahi[.]com/sa/?16222131 hxxps://bguest[.]net/eeu/?p=7801160 hxxps://bellazami[.]com/etsa/?98132131 hxxps://bakertilly[.]com[.]ec/eqsu/?qq=1828307 hxxps://bertam[.]com[.]my/dusi/?c=1509540 hxxps://associatedpackers[.]com/ee/?eB=7949150 hxxps://bigkuma[.]com/mi/?98253131 hxxps://bikroygadget[.]xyz/ooel/?96153131 hxxps://blochaus[.]ng/quii/?67743131 hxxps://biosolutions[.]com[.]co/dcnt/?67722131 hxxps://planetsmailer[.]com/ilse//?redir=1697225800 hxxps://bookabudhabitrips[.]com/re/?98253131 hxxps://breederexports[.]com/nmo/?c=1985437 hxxps://bologna[.]epu[.]edu[.]iq/uuqa/?98232131 hxxps://bluechipfx[.]com/rep/?Lk=2975255 hxxps://bridgingtherapists[.]com/tou/?xZ=7916178 hxxps://btdavidclinic[.]rw/trre/?Xc=2998611 hxxps://brandandbusiness[.]com[.]co/ea/?q=4334109 hxxps://boacavaimoveis[.]com[.]br/uq/?xL=4716180 hxxps://boosterjp[.]co/mmu/?ap=4881676 hxxps://bluedotbd[.]online/usqm/?91222131 hxxps://bombaycasuals[.]com/tmpr/?vd=2288115 hxxps://careersit[.]co[.]za/fse/?sG=8597246 hxxps://cannamed[.]org[.]za/otas/?U=2776062 hxxps://canvasfisd[.]info/ma//?redir=1696886499 hxxps://cerodamed[.]com/ini/?ud=5305231 hxxps://casababadenopal[.]com/trod/?c=3416949 hxxps://ca2solution[.]it/te/?z=9634898 hxxps://celebranteclovisespinosa[.]com[.]br/iut/?QH=2888442 hxxps://candyads[.]pro/siei/?Vd=1551742 hxxps://cartesrl[.]it/lt/?81822131 hxxps://carvan[.]app/enun/?G=9469055 hxxps://celebtribune[.]com/in/?bV=9241048 hxxps://celema[.]co/nlh/?Ty=2278275 hxxps://businessmarkets[.]us/esd/?42332131 hxxps://cetmar18[.]edu[.]mx/eda/?x=4965404 hxxps://cetmar18[.]edu[.]mx/ura/?99153131 hxxps://chandanbala[.]com/isr/?98253131 hxxps://chasehomes[.]ae/rs/?xF=6969109 hxxps://cloudk[.]click/gsn/?97522131 hxxps://chfee[.]org/ias/?33089721 hxxps://coffesso[.]com/pmvl/?eV=5451795 hxxps://closebit[.]co[.]uk/si/?97353131 hxxps://chorleyeyecare[.]co[.]uk/nted/?90232131 hxxps://coforgemarketing[.]com/iose/?1T=4539577 hxxps://chfee[.]org/noii/?r=2195114 hxxps://clautedomex[.]mx/iis/?12922131 hxxps://clautedomex[.]mx/iis/?ru=361362 hxxps://chaleaframe[.]com[.]br/en/?xP=6875897 hxxps://clonhadas[.]com[.]co/uau/?zU=9716560 hxxps://cityquality[.]net/teq/?Zh=265074 hxxps://co-create2071[.]org/etou/?fR=7316376 hxxps://columbine[.]ir/uat/?x=2126055 hxxps://compunetplc[.]com/ld/?OJ=4575000 hxxps://collinescommunications[.]com/ais/?aE=3468262 hxxps://colectar[.]ro/odu/?gi=6747948 hxxps://coforgemarketing[.]com/iose/?OA=5745596 hxxps://compreakieali[.]com/qiet/?wC=6560546 hxxps://dulcettieolic[.]com[.]br/lo/?t=9909308 hxxps://cottoncrumbs[.]com/dboe/?an=4620460 hxxps://dgcomputer[.]com[.]br/su/?99153131 hxxps://compunetplc[.]com/ld/?w=4105174 hxxps://digithub[.]co[.]uk/uo/?52622131 hxxps://digithub[.]co[.]uk/seed/?bTaggXjFACMAAM hxxps://corporatelawsector[.]us/up/?W=9174954 hxxps://dma24[.]com/as/?ep=7597741 hxxps://drmanojaggarwal[.]com/ttn/?ff=7821082 hxxps://crg390[.]com/vue/?fz=3794248 hxxps://crystalshippings[.]online/uqso/?ca=9260383 hxxps://diyhomemadebeauty[.]com/eo/?u0=148104 hxxps://dgcomputer[.]com[.]br/vsco/?vT=4444393 hxxps://drmarcostavaresdeoliveira[.]com[.]br/rso/?vQ=4227427 hxxps://dubai-watertanker[.]com/po/?s=5636700 hxxps://drsalustidmd[.]com/pt/?s=3815826 hxxps://e-amwaj[.]com/ru/?y=220530 hxxps://detoyprojects[.]net/ntna/?1m=5368954 hxxps://devvaults[.]com/taxm/?15532131 hxxps://educonix[.]com/tuq//?redir=1696961602 hxxps://eatzapizza[.]in/vuta/?h=9945179 hxxps://ecit-dev[.]com/eiue/?58332131 hxxps://e-deshltd[.]com/as/?91922131 hxxps://devpassion[.]com[.]mx/oab/?0Q=9068505 hxxps://e-deshltd[.]com/as/?sk=5002814 hxxps://designcollections[.]pe/mor/?2=5466011 hxxps://easyfotovoltaico[.]it/tee/?Z=3244389 hxxps://eazywebsolution[.]com/isq/?vC=4762928 hxxps://currylounge[.]ca/uaic/?B=1288316 hxxps://cubezllc[.]com/es/?4=142784 hxxps://ctimeresources[.]com/aa/?pb=1087738 hxxps://cswr[.]com[.]au/cl/?13232131 hxxps://dalaibeauty[.]com/bret/?B=401290 hxxps://damaviola[.]it/sil/?97922131 hxxps://deadprawn[.]com/datr/?03253131 hxxps://datasystembolivia[.]com/csit/?21522131 hxxps://ctrloans[.]com/eds/?y=9204358 hxxps://egyfarm-eg[.]com/dit/?e=3949240 hxxps://ejlalacademy[.]com/de/?68422131 hxxps://elevapark[.]com[.]mx/na/?Au=5775429 hxxps://eecl[.]africa/ptri/?t=5054278 hxxps://elsafeer[.]travel/eq/?jx=7780245 hxxps://eliteparentschool[.]rw/nnoa/?wd=8024339 hxxps://elsafeer[.]travel/este/?94453131 hxxps://emadparibahan[.]com[.]bd/oiua/?R=2902609 hxxps://erkainterindo[.]com/bnm/?70722131 hxxps://equippedbeings[.]com/ouea/?k=1126527 hxxps://elsantotomesino[.]com[.]ar/ulr/?99253131 hxxps://ennystonschool[.]org[.]ng/mig/?NE=910584 hxxps://eshraqa[.]co/tosi/?94332131 hxxps://eysar[.]com/ere/?w=1506653 hxxps://essayspanel[.]org/exe/?nh=3470088 hxxps://esteraviation[.]com/se/?vR=1821954 hxxps://eysar[.]com/lit/?10153131 hxxps://exsef[.]com/id/?93222131 hxxps://exsef[.]com/id/?G=7655384 hxxps://fermrock[.]com/tnig/?9=5508210 hxxps://founders[.]net[.]au/ritp/?hA=4295005 hxxps://flaviopavim[.]com[.]br/io/?i8=3774434 hxxps://flashnewsbensedira[.]com/el/?87732131 hxxps://feedax[.]net/ille/?d=9070661 hxxps://feedax[.]net/dds/?25753131 hxxps://fazalengineering[.]com/ut/?ve=9968128 hxxps://faregadget[.]com/let/?Pu=5329413 hxxps://freelancercorner[.]com/tii/?V=3136875 hxxps://fixcellpc[.]com/to/?JQ=3168869 hxxps://fbgestate[.]com/ps/?K=9461419 hxxps://first7starhotelsrilanka[.]com/un/?s=5445349 hxxps://fetyma[.]com/doen/?97432131 hxxps://forexareba[.]com/is/?86522131 hxxps://feedar[.]net/ro/?Fk=3702740 hxxps://getesolutions[.]com/au/?u2=4144160 hxxps://fresadodeasfalto[.]com/na/?o=7222725 hxxps://goldleaf-revenup[.]com/stie/?z=4737937 hxxps://frenosa[.]com[.]pe/pofm/?84522131 hxxps://giftcollection[.]pk/em/?vS=8911764 hxxps://goldenyieldfarms[.]com/emta/?fC=2100249 hxxps://gelsynergysolutions[.]com/frts/?iH=1409867 hxxps://golamsoroar[.]com/isr/?k=9849047 hxxps://geniuserc[.]com/ld/?y=8119962 hxxps://greenfieldschool[.]edu[.]pk/uu/?92653131 hxxps://greenserenity[.]ca/be/?h=6662978 hxxps://gravitycolombo[.]com/mer/?h=178718 hxxps://greenglobalbenefittrade[.]com/iasq/?t=6764103 hxxps://ironreward[.]com/etm/?f=664573 hxxps://rubria[.]net/luv/ |
DarkGate |
| URL | hxxp://5[.]42[.]67[.]10/ratherplan[.]exe | Rhadamanthys |
| URL | hxxp://91[.]107[.]120[.]136/eternal4uploads/externalwordpress7proton/Php9DownloadsWordpress/temp/14Track/4universal/1gameUpdateMulti/DefaultMariadbcdn/AuthMariadb1/sql/AuthProtect8default/Video/GamemultiTesttrack[.]php hxxp://188[.]120[.]242[.]207/TestTrack/jsGeoDefaulttestUniversalpubliccdn[.]php |
DCRat |
| URL | hxxp://mail[.]treeoflifeadventures[.]com/wp-content/plugins/70d5e28f51c1438d94e3e6dc84b95311/xt/mmd/shell/windviewcikon2[.]1[.]exe | Formbook |
| URL | hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]ppc hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]arm5 hxxp://5[.]253[.]247[.]56/bestone/[.]5r3fqt67ew531has4231[.]arm7 hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]sh4 hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]spc hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]arm hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]x86 hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]arm7 hxxp://5[.]253[.]247[.]56/bestone/[.]nekoisdaddy[.]mpsl hxxp://193[.]42[.]33[.]112/rebirth[.]ppc hxxp://193[.]42[.]33[.]112/rebirth[.]m68 hxxp://193[.]42[.]33[.]112/rebirth[.]arm7 hxxp://193[.]42[.]33[.]112/rebirth[.]arm4t hxxp://193[.]42[.]33[.]112/rebirth[.]i686 hxxp://193[.]42[.]33[.]112/rebirth[.]mips hxxp://193[.]42[.]33[.]112/rebirth[.]arm4 hxxp://193[.]42[.]33[.]112/rebirth[.]spc hxxp://193[.]42[.]33[.]112/rebirth[.]x86 hxxp://193[.]42[.]33[.]112/rebirth[.]mpsl hxxp://193[.]42[.]33[.]112/rebirth[.]arm5 hxxp://193[.]42[.]33[.]112/rebirth[.]arm6 hxxp://193[.]42[.]33[.]112/rebirth[.]sh4 |
Bashlite |
| URL | hxxp://kenesrakishev[.]net/logi/wp-load[.]php hxxps://kenesrakishev[.]net/wp-cron[.]php hxxps://kenesrakishev[.]net/ok[.]php?logs-true hxxp://kenesrakishev[.]net/ok[.]php?logs-true |
Mars Stealer |
| URL | hxxps://obioraokaforandassociates[.]org/wp-download/gate4[.]exe | PrivateLoader |
| URL | hxxp://guboh2p[.]top/build[.]exe | Arkei Stealer |
| URL | hxxp://clearmu[.]top/blacknet/receive[.]php hxxp://clearmu[.]top/blacknet |
BlackNET RAT |
| URL | hxxp://hwthurmann[.]de/wp/chromium/LauncherChromium[.]zip hxxp://95[.]181[.]173[.]155/Blhgsnycn[.]wav hxxp://95[.]181[.]173[.]155/educationdeveloperpro[.]zip |
RedLine Stealer |
