# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/ReBensk/status/1246378698296573953

f0piz.monster
telefonuguncellexx.b-cdn.net

# Reference: https://twitter.com/ReBensk/status/1254290984143224832
# Reference: https://twitter.com/bl4ckh0l3z/status/1280477627137101826
# Reference: https://www.virustotal.com/gui/ip-address/46.227.68.99/relations

4pokerrs.xyz
b0bl0.xyz
dontworryman.club
everybodygent.club
g0nz.xyz
hnoraip.world
kalyanshop.best
mydqy.xyz
placeoftomcat.club

# Reference: https://twitter.com/ReBensk/status/1298309715533889538

roopkivo.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1300471423056707588
# Reference: https://twitter.com/B0rys_Grishenko/status/1300472447171522564
# Reference: https://www.virustotal.com/gui/file/301ebcb7e1088854dcac5ec14d072fa81fe26ff64fb165641dc7839861483d1e/detection

interia-poczta.email
premiumdrops.xyz
truehomemoney.xyz
trustpoopin.xyz
trygotii.xyz
trytogoi.xyz

# Reference: https://twitter.com/ReBensk/status/1302931396609024003

epoczta-interia.com

# Reference: https://urlscan.io/result/860795c3-5e5b-463f-8b9b-42c36f54746c

webupdateadobe.best

# Reference: https://twitter.com/ReBensk/status/1313001660642463744
# Reference: https://twitter.com/ReBensk/status/1313038179520348160

fullhdvideoizlemesitesi8007.xyz
hducretsizvideoizle74345.xyz

# Reference: https://twitter.com/ReBensk/status/1314507421843251201

hducretsizvideoizle67715.xyz

# Reference: https://twitter.com/ReBensk/status/1315169622711132160

hducretsizvideoizle58452.xyz

# Reference: https://www.virustotal.com/gui/ip-address/178.132.78.155/relations
# Reference: https://www.virustotal.com/gui/ip-address/155.138.142.41/relations

account36653.xyz
ban7896.xyz
bracket86.xyz
breed5473.xyz
cap6896.xyz
collection9834.xyz
compromise5863.xyz
concede638.xyz
drama6532.xyz
embark8962.xyz
garage5473.xyz
handy63987.xyz
ignore4576.xyz
loose8365.xyz
musical7366.xyz
primary79836.xyz
prize4538654.xyz
progressive453453.xyz
sigh73865.xyz
vegetation389354.xyz

# Reference: https://twitter.com/DjoNn35/status/1314145636367900677

leave-alone.me

# Reference: https://www.virustotal.com/gui/domain/germany99.com.de/relations

germany99.com.de

# Reference: https://twitter.com/ReBensk/status/1316976610919284736

hdfullvideositelerii24709.xyz

# Reference: https://twitter.com/Cengiz86035319/status/1345104421659824130
# Reference: https://twitter.com/B0rys_Grishenko/status/1354174906020327430
# Reference: https://www.virustotal.com/gui/ip-address/80.82.76.26/relations
# Reference: https://www.virustotal.com/gui/file/1cc4ebe8988cf29b84057ff152841ff6c9e320926784e1eb392703121ae1fa6b/detection
# Reference: https://www.virustotal.com/gui/file/6d7d817a575a6599b9f40ad5c341a71227637beeb00670ce5ca9f5450e4a29e7/detection

accesstomygarage.xyz
amazingbrothersonthe.works
asasasasdada.xyz
bestmemsonline.xyz
colormixcomaback.info
donaldbigass.xyz
fusinopoo.xyz
givemejob.xyz
givemeyourpussy.xyz
keygeneertyuio.xyz
mobilsecurity.link
oldsk.monster
ototmootot.com
pepper0growing0dormitory.works
roopkivo.xyz
rotiuvosivc.xyz
trustdomainorg.xyz
trustpoopin.xyz
trygotii.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1337097822009692161

60dnipremium.cloud

# Reference: https://twitter.com/B0rys_Grishenko/status/1319368056884350976

http://102.130.116.13

# Reference: https://twitter.com/Cengiz86035319/status/1322958967509819392
# Reference: https://www.virustotal.com/gui/ip-address/45.32.144.211/relations

3vam4nd3s.xyz
accent48.xyz
admission7689.xyz
agile45743.xyz
ally23762.xyz
ann4s4wai.xyz
anniversary63.xyz
ant48.xyz
appear324234.xyz
area4535.xyz
assignment54789.xyz
aware325.xyz
basis23456.xyz
benefit5478.xyz
bleed678954.xyz
bow25.xyz
boy241.xyz
br1xt0nr0l3s.xyz
break3241.xyz
buffet1235.xyz
carriage458.xyz
cellar6759.xyz
chapter1535.xyz
chest426.xyz
chimpanzee235235.xyz
chin235423.xyz
citizen543.xyz
coincide436.xyz
coma48.xyz
comfortable486.xyz
competence4453.xyz
conservative34567.xyz
constellation365.xyz
continuation45786.xyz
convert34576.xyz
convict6234.xyz
correspond580738.xyz
countryside5789.xyz
courtesy457.xyz
dawn97853.xyz
demonstration345342.xyz
die9978.xyz
dimposivess12.xyz
direction43567.xyz
disappear787863.xyz
domination5437.xyz
ear235.xyz
economy4664.xyz
election3252.xyz
electronics38.xyz
ethics234537.xyz
exceed46334.xyz
expose235235.xyz
fastidious346.xyz
fet0r34i.xyz
find152654.xyz
firefighter77856.xyz
flour3256.xyz
foundation4864.xyz
gallery5732.xyz
garage34734.xyz
glass47485.xyz
grudge547.xyz
guard6586.xyz
hasonek4rbl4ck.xyz
health264.xyz
highway468.xyz
hobby347.xyz
horizon547.xyz
horn5956.xyz
hostile3256.xyz
hurl22541.xyz
hypothesis25437.xyz
impulse234.xyz
inn358.xyz
insurance354756.xyz
iron325.xyz
j0hnc3n4.xyz
kill3467.xyz
koran3663.xyz
loan4568.xyz
loyalty34.xyz
machinery325.xyz
make90.xyz
mixture34.xyz
mold54.xyz
mountain5427.xyz
movement2345.xyz
negligence7785.xyz
nose4523.xyz
operational43632.xyz
palm38.xyz
parachute35445.xyz
patent856.xyz
patrol48.xyz
pedestrian54763.xyz
pile234.xyz
platform25.xyz
poor9873.xyz
portion115876.xyz
preach687786.xyz
quote32423423.xyz
reach457.xyz
read34677.xyz
relationship3474.xyz
reliable14213.xyz
rhetoric32543.xyz
rhetoric547.xyz
road436.xyz
scrap12364.xyz
scream879.xyz
section235.xyz
smash6767.xyz
sow21413.xyz
speculate5736.xyz
stamp98763.xyz
stimulation2554.xyz
switch347.xyz
talk23432.xyz
temporary325321.xyz
theater685.xyz
therapist4536.xyz
thinker452.xyz
ticket6585.xyz
tip3457.xyz
tiptoe32543.xyz
tired43556.xyz
trainer3245.xyz
turn35223.xyz
turn457.xyz
umbrella55463.xyz
uncle243.xyz
union436.xyz
way5653563.xyz
wheel359585.xyz

# Reference: https://twitter.com/ReBensk/status/1328897070237937664
# Reference: https://www.virustotal.com/gui/ip-address/165.227.192.68/relations

hdvideoplayerfullizleme7745.xyz
accent48.xyz
admire112.xyz
advantage4336.xyz
almalehonest44.xyz
antdrym5.xyz
anutw47.xyz
at345.xyz
attachment85.xyz
audience223.xyz
avant-garde64.xyz
azyhome64.xyz
baby081.xyz
bad2251.xyz
banquet231.xyz
barbarou325.xyz
beef85.xyz
belong34.xyz
bigextreme22.xyz
bind56.xyz
birthday3467.xyz
bite346.xyz
bomb234.xyz
border86.xyz
bow25.xyz
brainstorm9657.xyz
broccoli135.xyz
bush447.xyz
by334.xyz
calquickl6.xyz
cancer566.xyz
carriage458.xyz
carve842.xyz
cast73.xyz
chemistry667.xyz
chickene543.xyz
ckenunarme3.xyz
club556.xyz
coat457.xyz
coma48.xyz
complication2356.xyz
congress553.xyz
consideration221.xyz
correspond580738.xyz
creep3425.xyz
crude4578.xyz
csplendidbu453.xyz
dashing4.xyz
depression31.xyz
descent1563.xyz
dgetevery43.xyz
dilemma935.xyz
dirty83.xyz
dismiss16.xyz
distort99.xyz
doubledisti3525.xyz
dpanickyblus23.xyz
drainedsolidab55.xyz
dribble586.xyz
easantdif75.xyz
edge568.xyz
electronics38.xyz
erati543.xyz
exclusive324.xyz
explode221.xyz
expression2357.xyz
extinct26.xyz
exualap4.xyz
fate325.xyz
fee437.xyz
ferentthankf35.xyz
first325.xyz
fisherman623.xyz
follow364.xyz
follow413.xyz
foundation4864.xyz
fraction748.xyz
free33412.xyz
frozen112.xyz
gallon5631.xyz
glass25.xyz
gun255.xyz
haunt3.xyz
health264.xyz
highway468.xyz
hingelderlyrigh4.xyz
hlovelyos75.xyz
humor335.xyz
hypothesis334.xyz
identification112.xyz
ignite123.xyz
ignite8563.xyz
implication324.xyz
incapable214.xyz
inflation658.xyz
inn358.xyz
insist569.xyz
integration6325.xyz
ivebeginninga12.xyz
kitchen123.xyz
lake436.xyz
lebackground12.xyz
lectroni7354.xyz
legislature84.xyz
lepublicka543.xyz
loan4568.xyz
long655.xyz
madgi4.xyz
mark5368.xyz
matr1xrel03ed.xyz
mbentdr587.xyz
mechanical258.xyz
meelectri78.xyz
ministry579.xyz
mmylivepl99.xyz
move453.xyz
musical5638.xyz
name33.xyz
nctsoftvarious213.xyz
ndesirab786.xyz
necklace442.xyz
necklace467.xyz
no856.xyz
noise774.xyz
nominate34.xyz
nose3478.xyz
omplexm45.xyz
option678.xyz
or3865.xyz
ostitchy21.xyz
outline1532.xyz
overwhelm612.xyz
palace35425.xyz
pallingchi4.xyz
palm38.xyz
password4325.xyz
patrol48.xyz
perception124.xyz
physical756.xyz
pioneer377.xyz
polish223.xyz
prey225.xyz
prince457.xyz
producer446.xyz
profession4758.xyz
professional685.xyz
project124.xyz
promise789.xyz
puterectdis78.xyz
quote1245.xyz
reality4451.xyz
reason3131.xyz
reckless255.xyz
reduce1234.xyz
reduction341.xyz
refuse685.xyz
relaxation6332.xyz
reliance673.xyz
remain114.xyz
repetition547.xyz
report436.xyz
reputation552.xyz
revenge37.xyz
revolution334.xyz
routinecoop453.xyz
scaredcla1.xyz
settlement55.xyz
sifiedlea54.xyz
sin3568.xyz
sjealous345.xyz
skeleton12.xyz
smaximu758.xyz
smile234.xyz
snap6589.xyz
spend4366.xyz
sport0014.xyz
spot4411.xyz
stalemuc5.xyz
steep54.xyz
storage6799.xyz
structure455.xyz
surgeon56.xyz
systematic335.xyz
table6532.xyz
tanc354.xyz
tap331.xyz
teacher6302.xyz
tear3856.xyz
tfulcivilcombat4.xyz
theorist34.xyz
thersupre54.xyz
threaten8635.xyz
tooth1256.xyz
tract768.xyz
transaction344.xyz
traughtgross453.xyz
treatment1926.xyz
twist246.xyz
uldressvisu2.xyz
uncle134.xyz
unktight5.xyz
use7354537.xyz
valley13.xyz
veil658.xyz
vejazzyu534.xyz
video3468.xyz
visible48.xyz
vision441.xyz
warning432.xyz
weigh346436.xyz
which5.xyz
witness3865.xyz
youth664.xyz
ysteriou54.xyz

# Reference: https://www.virustotal.com/gui/file/e85cd3a474569037c377db6e25dbbdd8fd0a87b6c496a0b0bb0b4e434a56300e/detection
# Reference: https://www.virustotal.com/gui/ip-address/172.104.225.253/relations
# Reference: https://twitter.com/ReBensk/status/1334808068916269056

ability52.xyz
abolish58.xyz
abscised33.xyz
accept1121.xyz
acknowledge35.xyz
acquire785.xyz
add436.xyz
adventure65.xyz
age658.xyz
airport48512.xyz
alcades38.xyz
allow89.xyz
allyl93.xyz
ambiguous548.xyz
announce34534.xyz
answer361.xyz
aphidian72.xyz
apparatus3432.xyz
arbors8.xyz
area47.xyz
armours1.xyz
art23546.xyz
art67.xyz
asmongolds112air.xyz
aspect278.xyz
assaultt45.xyz
astrona23.xyz
attic658.xyz
authentic56.xyz
avoid635.xyz
bang83.xyz
barleduc89.xyz
base453.xyz
beeping5.xyz
believe43676.xyz
bent3457.xyz
bird234.xyz
bloodshed58635.xyz
blue56.xyz
blush122.xyz
bobble8.xyz
bonehead7.xyz
boorish123.xyz
born44.xyz
borrow547.xyz
boutiq543.xyz
boy95.xyz
bozro62.xyz
brag7.xyz
brashy45.xyz
break58.xyz
brilliance83.xyz
bronze457.xyz
bucket49.xyz
bulletin23.xyz
buyer5452.xyz
cable23.xyz
cachepot76.xyz
candidate18.xyz
canister7.xyz
carnivalaa32.xyz
carpenter562.xyz
carvi22h1goldstone.xyz
carvin45goldstone1indian.xyz
carvin4oldston42019.xyz
caserne3.xyz
catch121.xyz
cattle1634.xyz
cause222.xyz
cavemen33.xyz
celery16.xyz
cell7825.xyz
certain75.xyz
chest53.xyz
child97.xyz
church72.xyz
cicale23.xyz
claim346.xyz
coincide807.xyz
college7354.xyz
color83.xyz
comatose54.xyz
come34657.xyz
comma347.xyz
committee22.xyz
concept728.xyz
condemned346.xyz
consider46.xyz
consideration56.xyz
constraint568.xyz
country263.xyz
coveters8787.xyz
crabbily786.xyz
crabmeat66.xyz
creases13.xyz
creative21.xyz
crevice73.xyz
currency3754.xyz
database786.xyz
davi74e1goldstein.xyz
dealer24.xyz
decisive422.xyz
declared786.xyz
deep235.xyz
deer547.xyz
defeat44.xyz
delay68.xyz
delivery52479.xyz
deserted235.xyz
deserve44.xyz
design512.xyz
detail235.xyz
dimension465.xyz
dinner54.xyz
disgrace32.xyz
divaroty4.xyz
dominant324.xyz
dosses938.xyz
double3573.xyz
drink22.xyz
dryness78.xyz
eavesdrop58.xyz
echidnas64.xyz
economics73.xyz
economist11.xyz
eddie4hall4olds.xyz
efflux23.xyz
embarras4sment4.xyz
emerge3643.xyz
enlaced938.xyz
equation351.xyz
ery542.xyz
exacter32.xyz
excusing3.xyz
execution367.xyz
explore55.xyz
failure782.xyz
fall47.xyz
fan235.xyz
feedback556.xyz
fetch5897.xyz
firm352621.xyz
fisherman547.xyz
fix568.xyz
flower76.xyz
fluenti235.xyz
fog456.xyz
found214.xyz
fox787.xyz
fraction267.xyz
front55.xyz
fund325.xyz
genuine346.xyz
goals1in.xyz
god2231.xyz
gods33menu1reaction.xyz
gods6of6egypt.xyz
godsmenu323.xyz
godsplan12.xyz
gold22knight.xyz
gold26film.xyz
gold26live.xyz
gold2digger.xyz
gold2hunter4.xyz
gold324.xyz
gold35gym6jordan.xyz
gold41ust.xyz
gold4dance.xyz
gold5boy.xyz
gold6hunter.xyz
gold7chain.xyz
goldberg6.xyz
goldgym436india.xyz
goldha23.xyz
goldhand61.xyz
goldhile6.xyz
goldhofer2.xyz
goldhofer32trailer.xyz
goldhood267.xyz
goldhouse29.xyz
golds11in2hey3mouth.xyz
golds11kitchen.xyz
golds1bes6team.xyz
golds1cabrona.xyz
golds1catcher.xyz
golds1fool.xyz
golds26bar2.xyz
golds26life.xyz
golds2channel.xyz
golds2clever.xyz
golds2fit.xyz
golds33ki4.xyz
golds34dogs.xyz
golds3cheating.xyz
golds3fish.xyz
golds3yg.xyz
golds44demon.xyz
golds4barton.xyz
golds4birthday7.xyz
golds4fragile.xyz
golds4intro2.xyz
golds4ym4egypt.xyz
golds56juice.xyz
golds5country.xyz
golds5gym7elliptical.xyz
golds6diary.xyz
golds6face.xyz
golds7car.xyz
goldsamyt3216.xyz
goldsan11.xyz
goldsandsmusic24.xyz
goldsattafree66.xyz
goldsattaking73.xyz
goldsboro3.xyz
goldsburn7.xyz
goldship15.xyz
goldsit124.xyz
goldson34.xyz
goldspec324.xyz
goldsrc23.xyz
goldsssgy22apan.xyz
goldstar265.xyz
goldstar2g10.xyz
goldstylet21.xyz
goldsun357.xyz
golf124.xyz
government782.xyz
gradient32612.xyz
grandmother236.xyz
grimace37412.xyz
groggy3.xyz
guerrilla453.xyz
gules876.xyz
half324.xyz
hand436.xyz
hate326.xyz
have8912.xyz
heat17.xyz
heavy325.xyz
hehs236.xyz
helic3opter1.xyz
help2144.xyz
hierarchy412.xyz
high723.xyz
hmoist45.xyz
homework78.xyz
horseas32.xyz
hour142.xyz
husky683.xyz
illustrate688.xyz
impartial1236.xyz
income33.xyz
increase45.xyz
inculcate333.xyz
incur2332.xyz
independence78.xyz
induce16.xyz
induct22.xyz
industrious463754.xyz
inflate235.xyz
innate21.xyz
inquisitive212.xyz
interrupt3.xyz
j22goldsmith.xyz
james11f22goldstein.xyz
jobless56.xyz
jstn12v22golds.xyz
just215golds.xyz
kebob1.xyz
khej33.xyz
kif37.xyz
kmjs26golds.xyz
kodak21black36golds.xyz
komvu43.xyz
kooky387.xyz
labarums6.xyz
lancesaa33.xyz
landogolds532.xyz
language884.xyz
lapkol322.xyz
lawine37.xyz
learn74.xyz
length73.xyz
lineage8.xyz
literacy536.xyz
living124.xyz
localize33.xyz
lose45.xyz
loss352.xyz
loss57.xyz
lower67.xyz
lunch938.xyz
lungwort51.xyz
magnificent365.xyz
maintain9865.xyz
mammas7.xyz
manager78.xyz
mark432.xyz
massive346.xyz
meal5556.xyz
meaning377.xyz
meat87.xyz
mellow457.xyz
menisci34.xyz
minister22.xyz
momentum53.xyz
monopoly273.xyz
mother149.xyz
motion325.xyz
mouth457.xyz
naive347.xyz
name24325.xyz
narcissi4.xyz
narrow547.xyz
native256.xyz
nature36.xyz
navasaa44.xyz
needle63.xyz
neuritis33.xyz
niceties7.xyz
nizzahti23.xyz
nkflaw12.xyz
nuance215.xyz
occludes398.xyz
occur436.xyz
offramps78.xyz
oral423.xyz
oralist38.xyz
organize341.xyz
origanum69.xyz
outline21.xyz
outsworn5.xyz
oxzam345.xyz
pandits837.xyz
paper326.xyz
pardon658.xyz
part223.xyz
pear1234.xyz
pen65321.xyz
pigeon123.xyz
pilau87.xyz
pimped87.xyz
piquant364.xyz
place548.xyz
plaintiff453.xyz
plan123454.xyz
planular1.xyz
plead364.xyz
point780.xyz
possessive72.xyz
post656.xyz
pour89.xyz
practical33.xyz
preemie97.xyz
preflame65.xyz
pressure34.xyz
process235.xyz
proclaim25.xyz
product977.xyz
professor787.xyz
promise47.xyz
proof386.xyz
proofed5.xyz
prove43.xyz
quaverer5.xyz
quicksand435.xyz
rain5542.xyz
rake47.xyz
raspy347.xyz
realize765.xyz
recording125.xyz
recover15.xyz
regret44.xyz
relationship53.xyz
release780.xyz
reliance44.xyz
relicts4.xyz
remain535.xyz
rems76.xyz
repair246.xyz
replace457.xyz
repot27.xyz
resolve586.xyz
restaurant577.xyz
retinas6.xyz
rich24.xyz
ride67.xyz
saacaste3d.xyz
sack05.xyz
sail69.xyz
sail98.xyz
sample55.xyz
scoters398.xyz
sea32743.xyz
sea35.xyz
sedate2343.xyz
seed54745.xyz
series236.xyz
shifters437.xyz
show9952.xyz
shower332.xyz
sibilant23.xyz
signature235.xyz
silent3256.xyz
single66762.xyz
sink2.xyz
sink457.xyz
sit568.xyz
sleep354.xyz
slide436.xyz
slip636.xyz
slippery3253.xyz
slunk423.xyz
so3462.xyz
software2523.xyz
spare125.xyz
spare235.xyz
sparkle375dfv.xyz
sparkle41.xyz
split4365.xyz
spot36.xyz
spread708.xyz
staff754.xyz
stay648.xyz
stitch35.xyz
stop53.xyz
strap325.xyz
stress4845.xyz
stretch2634.xyz
strumpet4.xyz
studio78.xyz
suck1356.xyz
suggest352.xyz
summary4581.xyz
supreme12344.xyz
survival32.xyz
swallow325.xyz
sweep325.xyz
swing32.xyz
table9876.xyz
taboret1.xyz
tale787.xyz
talk235.xyz
test442.xyz
theory123.xyz
thing65.xyz
throat221.xyz
tiger447.xyz
tiger735.xyz
till364.xyz
tilters6.xyz
time47.xyz
tmik345.xyz
ton752.xyz
tower16.xyz
tragedy2.xyz
traipse8.xyz
transform780.xyz
trunk46.xyz
truth432.xyz
trysting3.xyz
tuck56.xyz
twist4365.xyz
uelott45.xyz
undertake346.xyz
unequaled3467.xyz
union122.xyz
union3.xyz
unperson38.xyz
utobeyroug64.xyz
vanillisaa134.xyz
vegetable547.xyz
vehicle31.xyz
vexillum23.xyz
visual568.xyz
volutin8.xyz
waist578.xyz
watch253.xyz
weary53.xyz
week155.xyz
weigh486.xyz
whip362.xyz
wife72.xyz
wise3256.xyz
woebegone775.xyz
worker782.xyz
world34.xyz
yards2.xyz
yummy34678.xyz
zuzal468.xyz
zygosis55.xyz

# Reference: https://www.virustotal.com/gui/ip-address/8.208.16.59/relations

kakekelapeq.xyz
papoperelef.xyz
kekekanka1.xyz
norpedf.xyz
hlelew3.xyz
markalandiniz.xyz
juppeterrac.xyz
yuerepere.xyz
sennesinbeeee.xyz
burcakblack.xyz
brosdalses14.xyz
volio22liboli2312.xyz
volioliboli2312.xyz

# Reference: https://twitter.com/ReBensk/status/1335784219029671938

fullvideohdizle12.icu

# Reference: https://twitter.com/ReBensk/status/1336560919095046144

fullvideohdizle34.icu

# Reference: https://twitter.com/ReBensk/status/1337616433308553218

fullhdvideoizlepremium442.icu

# Reference: https://twitter.com/ReBensk/status/1338346030073462785

fullhdvideoizlepremium872.icu

# Reference: https://pastebin.com/tpCXf6B1

satellite124.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1336960110225190913

http://51.75.246.67

# Reference: https://twitter.com/malwrhunterteam/status/1337056171593764864
# Reference: https://www.virustotal.com/gui/file/5801c89c2990347b29e0d98ab9e3caa3c6924dafe5e0993c1339aa48c219145a/detection

http://160.119.253.194

# Reference: https://twitter.com/malwrhunterteam/status/1343643222317391877
# Reference: https://www.virustotal.com/gui/file/20b02605a5271b72648d97a7aa687672992256d78b74fece81812a090c62c5c1/detection

http://209.141.40.93

# Reference: https://twitter.com/ReBensk/status/1348474436437954560

hdvideopleyer42.xyz

# Reference: https://twitter.com/alamutepesi/status/1349391207554813953

hdvideopleyer46.xyz

# Reference: https://twitter.com/ReBensk/status/1350319225898819584

hdvideopleyer72.xyz
hdvideopleyer76.xyz
hdvideopleyer81.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1356349168252542979
# Reference: https://twitter.com/B0rys_Grishenko/status/1356350973204189188
# Reference: https://www.virustotal.com/gui/file/258a060d22637d8ea1817d4d7f1d0b24e8cc436018fd979c61ee111e6b68d829/detection

http://192.236.154.170

# Reference: https://www.virustotal.com/gui/ip-address/161.35.101.18/relations

acoustics4527.xyz
advertisemen5t7569.xyz
anderson4375.xyz
angelellis243.xyz
angelomoran596.xyz
annejoseph643.xyz
attracti547.xyz
bailey7646.xyz
ban457.xyz
bashful56.xyz
bed547.xyz
behave375.xyz
bethcohen874.xyz
blue-eyed4326.xyz
bore569.xyz
business472.xyz
buzz4375.xyz
calderon12.xyz
caldwell543.xyz
carmenanderson556.xyz
carpenter365.xyz
cherries46.xyz
christiansanders48.xyz
clammy547.xyz
coat156.xyz
concern25.xyz
coordinated123.xyz
cow37.xyz
cream547.xyz
crowd3456.xyz
cummings60.xyz
curvy2.xyz
damonrose456.xyz
danaevans124.xyz
darrylgordon473.xyz
dawson325.xyz
day12366.xyz
defiant85.xyz
direful245.xyz
dominichampton59.xyz
donniegarrett347.xyz
doraphillips221.xyz
drawer6547.xyz
driving32.xyz
drunk437.xyz
drunk70.xyz
duanesmith1243.xyz
earnestlopez324.xyz
edithwalker324.xyz
edwinharrington54.xyz
endurable417.xyz
equal635.xyz
ericosborne5679.xyz
erikareese347.xyz
everettholland76.xyz
exchang4.xyz
exotic5437.xyz
faithroberson435.xyz
fall6358.xyz
farmer436.xyz
ferguson356.xyz
fields987.xyz
filthy4236.xyz
fireman234.xyz
flag41.xyz
flimsy42.xyz
fog15.xyz
food235.xyz
form253.xyz
frankiechristensen487.xyz
fraser337.xyz
fredrickpowers214.xyz
fuel321.xyz
george221.xyz
geraldinedawson347.xyz
giant65.xyz
gibbs37.xyz
glove352.xyz
gordon4375.xyz
grant374.xyz
grate435.xyz
grieving3245.xyz
guitar124.xyz
hammond74.xyz
harrington346.xyz
hectoraguilar234.xyz
highfalutin347.xyz
homeless436.xyz
hopelamb221.xyz
howardingram658.xyz
hubbard234.xyz
humdrum12347.xyz
ink659.xyz
isaachubbard45.xyz
jagged534.xyz
jakeparsons76.xyz
jantyler95.xyz
jonathonluna345.xyz
kennethnorman776.xyz
kill236.xyz
kittens95.xyz
launch45723.xyz
lee347.xyz
leon79.xyz
license23.xyz
lindawolfe32.xyz
liquid54.xyz
lonely37.xyz
lorettawarner4875.xyz
loud2135.xyz
love3475.xyz
lyons3465634.xyz
mackcollier1123.xyz
mason325.xyz
mercedessandoval774.xyz
merciful236.xyz
mills867.xyz
minor471.xyz
miriammoreno124.xyz
morgan346.xyz
mouth447.xyz
nappy568.xyz
nichols437.xyz
nickward45.xyz
noisy456823.xyz
oliver235.xyz
padilla324.xyz
party346.xyz
patterson5765.xyz
perryhicks567.xyz
phillips679.xyz
phobic568.xyz
plastic637.xyz
political22.xyz
porter652.xyz
punch2346.xyz
purring23.xyz
quartz23.xyz
questionable2345.xyz
ratty236.xyz
reading33.xyz
receptive347.xyz
record1346.xyz
return342.xyz
rich357.xyz
richards23.xyz
richardson452.xyz
rickywise457.xyz
robinboone547.xyz
roll153.xyz
rotten436.xyz
rudyhunter54.xyz
salvatorepark435.xyz
schultz453.xyz
scott254.xyz
sense568.xyz
sheet346.xyz
sheldonhoffman67.xyz
sick547.xyz
slap1432.xyz
smart869.xyz
snyder234.xyz
solis73.xyz
special4375.xyz
spoon748.xyz
stacymckinney768.xyz
statuesque2.xyz
stevens347.xyz
stone234.xyz
stuart468.xyz
stuart976.xyz
substantial548.xyz
tacit597.xyz
tease25.xyz
tonifernandez54.xyz
tow432.xyz
tranquil25.xyz
typical5468.xyz
uncle24.xyz
undress5386.xyz
vaughn527.xyz
vickilawson345.xyz
virginiagriffin14.xyz
voraciou333.xyz
voyage36.xyz
wait2r3.xyz
walker11.xyz
waltersimon124.xyz
wandaflores69.xyz
wander5471.xyz
webster543.xyz
weston73473.xyz
whine638.xyz
wilkerson235.xyz
woods234.xyz
work579.xyz
yvonneday5465.xyz
zimmerman867.xyz
zoom5682.xyz

# Reference: https://twitter.com/ReBensk/status/1359539415782019074

fullhdvideoplayerservisii25932.space

# Reference: https://twitter.com/ReBensk/status/1360450742486589446

fullvehdvideoplayerizlemesitesi57.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1362157689627938816
# Reference: https://www.virustotal.com/gui/ip-address/80.82.76.16/relations

anynewdomain.xyz
mastermayeriago.xyz

# Reference: https://twitter.com/ReBensk/status/1362447879260971014
# Reference: https://www.virustotal.com/gui/ip-address/161.35.101.18/detection
# Reference: https://www.virustotal.com/gui/file/332a355cc68f600b91bfd34cc7f83abeb2acae2df8eea49edbb40b06ae723979/detection

fullvehdvideoplayerizlemesitesi257.xyz

# Reference: https://twitter.com/ReBensk/status/1362972237041569792

fullvehdvideoplayerizlemesitesi7345.xyz

# Reference: https://twitter.com/ReBensk/status/1363816919577452549

fullvehdvideoplayerizlemesitesi658.xyz

# Reference: https://twitter.com/ReBensk/status/1365248389739253761

fullvehdvideoplayerizlemesitesi123.xyz

# Reference: https://twitter.com/ReBensk/status/1363827699995668484

fullvehdvideoplayerizlemesitesi214.xyz

# Reference: https://twitter.com/ReBensk/status/1364466427634221058

fullvehdvideoplayerizlemesitesi44.xyz

# Reference: https://twitter.com/ReBensk/status/1365247189631442944

fullvehdvideoplayerizlemesitesi46.xyz

# Reference: https://twitter.com/ReBensk/status/1365221912197033992
# Reference: https://www.virustotal.com/gui/file/e3a37f555b58820c60a4376588d09db15c77a2b7450f7fdc2889b98397c19ab3/detection

miinsalud-gov-cl-vacuna-cvid19.com
miinsaludgovcovacunacovid.com
shabukenkeinside.com

# Reference: https://twitter.com/500mk500/status/1365227725041135617
# Reference: https://www.virustotal.com/gui/file/7ea4d75755b93fe577bdef0fd5b1a68a5d44cc61f0acbe5bbdfe7f80ec4d1e88/detection
# Reference: https://www.virustotal.com/gui/ip-address/80.82.76.16/relations

androidupdate.cloud
supershopt-short.com

# Reference: https://twitter.com/ReBensk/status/1366078225089110019

fullvehdvideoplayerizlemesitesi346.xyz

# Reference: https://twitter.com/ReBensk/status/1366420079169077248

fullvehdvideoplayerizlemesitesi74.xyz

# Reference: https://twitter.com/ReBensk/status/1368817697706766338

fullvehdvideopleyer3753.xyz

# Reference: https://twitter.com/ReBensk/status/1369527280960032772

fullvehdvideopleyer8570.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1369790139967365120
# Reference: https://www.virustotal.com/gui/file/d77d8cb1477056b3d35797f639a0801f9c5b533fd0d50d79adbf7e9326d01816/detection

zonemasterdriftset.xyz

# Reference: https://www.virustotal.com/gui/file/7db4a1c5369422b691fea4a002a02e0704b6b2c2aa6c4c95f24baf39fdff50a7/detection

loaloveme.com

# Reference: https://www.virustotal.com/gui/file/956f0e61456d040e6e33aac3923eb1633f94017fe00edcc0d02f1f52dd7c328a/detection

qaytoridcd.page.link

# Reference: https://www.virustotal.com/gui/file/fe0a20fc68249d58ebfe3e6f12ce9b0f84ae5dbd230510b2d9be76ef32456f37/detection

fdh.page.link

# Reference: https://www.virustotal.com/gui/file/cb4c8ab57c29a6082c8c87684996f761669348032a3bf5d68ed044aa68833226/detection

uzidomains.page.link

# Reference: https://twitter.com/pmmkowalczyk/status/1382040599583461379
# Reference: https://www.virustotal.com/gui/file/fb6bb805997208794a7c860d74fb70d123d8ba41db177f6a87b1eaad7868c915/detection

et68tretyj.page.link

# Reference: https://www.virustotal.com/gui/file/f9839b87442910e25b9e8fd001858a817d4057bbce039e4f4bcda0e4aff682d4/detection

tt9.page.link

# Reference: https://www.virustotal.com/gui/file/a7c5eb66760639aabb00a5af4fd6206e17d736b8c0bdc7494a34478e3bac526b/detection

tocdyffhg.page.link

# Reference: https://www.virustotal.com/gui/file/29259026916a6875f7e63a5e0deff0c3c2f1cbe7b037f97f4648fa6e26b7e56c/detection

ygo6r.page.link

# Reference: https://www.virustotal.com/gui/file/70dcf4917dfcda7cbec8d3390224afc0004dd459890d39ffe4fb3cc8356b1b36/detection

ogg444aye.page.link

# Reference: https://twitter.com/Cengiz86035319/status/1383789506428477448
# Reference: https://twitter.com/Cengiz86035319/status/1385642912759918594
# Reference: https://www.virustotal.com/gui/ip-address/185.212.44.115/detection
# Reference: https://www.virustotal.com/gui/file/629a6012d745e0fce7b0b271fa8eef5b73d4872c2c183e572bf4b71d7248f82e/detection
# Reference: https://www.virustotal.com/gui/file/e4a4a278270f06424d22748cb29361309ea738af785659b0da9dbfa8e20dc9a1/detection

aarizdawe5455.xyz
abbyholland9476.xyz
abulmoore35243.xyz
akshayellis54635.xyz
amyking234.xyz
andreirice98.xyz
andrewdavidson3465.xyz
andrewwhite264.xyz
androidplayerupdateturkeyserver546357436.xyz
androidplayerupdateturkeyserver6437548.xyz
angelawright537.xyz
anilkramer63.xyz
anneyoung234536.xyz
arassouthern32546.xyz
avibarrett36.xyz
bevanstanley564.xyz
borisnewman21.xyz
brodycontreras37698658.xyz
caidenhewitt546357.xyz
carwynportillo97.xyz
cecilyarellano142.xyz
cericonnor12.xyz
colinwelch3457.xyz
craigparkinson79779.xyz
danicacalvert12657413.xyz
dariobenton78.xyz
darshmohamed8678.xyz
dextercarver8467.xyz
donovanyoder65879680.xyz
dorothyparsons4365.xyz
dylonappleton54.xyz
ebenomoore657.xyz
elsaclayton647.xyz
etiennesantos5463.xyz
gordonjohnston375.xyz
hallamgoodman56879.xyz
harichilds54543.xyz
harryogden435.xyz
hasanfoster56.xyz
jaioakley43254.xyz
jakedavies543654.xyz
janmclean367.xyz
janreid64385.xyz
janrutherford24.xyz
jarethhuff6578568.xyz
jayenglish536.xyz
jenniferjohnston357.xyz
jeremyhorn598.xyz
johnpeake4235.xyz
josephdavies2345.xyz
joshuamacdonald2345.xyz
kaseyvelasquez8657.xyz
kavanschroeder123.xyz
kiephilip7698865.xyz
kodigarza436.xyz
koreymichael576.xyz
laithmccray434.xyz
makenziepatel466.xyz
malcolmdavies35346.xyz
marcelinastokes94.xyz
marcosparra65526.xyz
mattsmith3546.xyz
melaniemacdonald224.xyz
mileslevy5246.xyz
nicholasdavidson3246.xyz
oliverpayne463.xyz
paulbuckland4635.xyz
paulsimpson4132546.xyz
piersavery5364.xyz
richardcameron232342.xyz
saadfinch65.xyz
sebastiancarr235436.xyz
sebastianslater5746.xyz
shaanyoung43254.xyz
silahall25.xyz
soniamacleod56875.xyz
stefanhatfield76657.xyz
stephanalcock5464.xyz
steveneaton798.xyz
szymonross53.xyz
t-jayharrison54.xyz
taibeck465.xyz
trinityhester6574.xyz
tuckerturner5697.xyz
tysonpatton363.xyz
underwoodvance965.xyz
vanessaknox3475.xyz
vaughanwalker965.xyz
victoriamarshall243.xyz
victorwarren3254.xyz
wallacewalsh59659.xyz
watsonwelch25.xyz
whitewilkins96.xyz
williamsa3324.xyz
wilsonwright34.xyz
xanderbowman34565.xyz
yahyalawrence47526.xyz
youngadrian326.xyz
zunairahjoseph12.xyz

# Reference: https://twitter.com/CSIRT_KNF/status/1387683951146319873
# Reference: https://www.virustotal.com/gui/ip-address/45.12.4.9/relations
# Reference: https://www.virustotal.com/gui/ip-address/66.70.218.52/relations
# Reference: https://www.virustotal.com/gui/file/fc7e0731e40e5653704e53e6720aed4f0059e5b370c1982b482723c720157c42/detection

moneyfastyyy.xyz
moneybagsnews.xyz

# Reference: https://www.virustotal.com/gui/ip-address/5.252.178.34/relations

daliaroach23.xyz
roselane8.xyz

# APK

/1login_WP.apk
/AllegroKredyty.apk
/Chrome_Bildirim.apk
/NowaPocztaInteria.apk
/o2_AntySpam.apk
/Poczta_o2.apk
/WP_Poczta.apk

# Generic

/api/v1/device/server-log
/bCK1device/
/bCK1payload
/eNh4device/
/eNh4payload
/jdF1/payload
/jdF1device/
/jdF1payload
/qbvQdevice/
/qbvQpayload
/qL6jdevice/
/qL6jpayload
/u9DCdevice/
/u9DCpayload
/XktSpayload
/XktSdevice/
